last executing test programs: 40.011697586s ago: executing program 4 (id=2612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'wlan1\x00', &(0x7f00000006c0)=@ethtool_rxnfc={0x30, 0x11, 0x80000001, {0x11, @ah_ip4_spec={@broadcast, @broadcast, 0x1ff, 0x1c}, {0x0, @remote, 0x1, 0x5, [0x30000, 0x7]}, @usr_ip6_spec={@private2, @mcast1, 0x80, 0x71, 0x9}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x0, 0x80, [0x13991c29, 0x3]}, 0x2, 0x10000}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x2, 0x3, 0x0, 0xf, 0x2, [{0x5, 0x1}, {0xf, 0x5}, {0x1, 0x2}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40, 0x0, 0x8, 0x2, 0x0, @void, @value}, 0x28) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0702000000000000000001000000040008802c00048005000300010000b8000000000000000005000300010000000500030000000000050003000200000008000100030000000800020001"], 0x54}}, 0x80) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x99, &(0x7f0000001200), 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, 0x8, &(0x7f0000001300)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000015c0)={0x1, 0xffffffffffffffff}, 0x4) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, 0x0, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) read(r8, &(0x7f0000000180)=""/119, 0x77) sendmsg$inet6(r9, &(0x7f00000004c0)={&(0x7f0000000200)={0xa, 0x4e20, 0x6, @remote, 0x6}, 0x1c, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000003c0)="c157a7398ca1ff1da763020bd6f154558d80156d1b9138af2d17720e369df2cccffaabffeebf1410755c1f42a5a5ed2117f34aa864d67ea38413a6c4f585a7eddfc0dd9cef08", 0x46}], 0x2, &(0x7f0000000440)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xd}}], 0x18}, 0x8800) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0) writev(r9, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x10, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b702"], 0x0, 0x5, 0xef, &(0x7f0000000fc0)=""/239, 0x41100, 0x34, '\x00', 0x0, @sk_msg, r5, 0x8, &(0x7f00000010c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001100)={0x3, 0xf, 0x3, 0x81}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000001680)=[0xffffffffffffffff, r7, 0xffffffffffffffff], &(0x7f00000016c0), 0x10, 0x400, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000011c0)={0x0, r4}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d00000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200e00000010c00028005000100000000000800074000000001440010800800024000000007080001"], 0xd0}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 39.889220569s ago: executing program 4 (id=2616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x7f, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x7f, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r0, 0x0) unshare(0x60600) (async) unshare(0x60600) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@getsa={0x10c, 0x12, 0x8, 0x70bd2b, 0x25dfdbfe, {@in=@loopback, 0x4d5, 0xa, 0xff}, [@sa={0xe4, 0x6, {{@in=@rand_addr=0x64010102, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x4e23, 0x5, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x3b}, {@in=@dev={0xac, 0x14, 0x14, 0xb}, 0x4d3, 0x32}, @in6=@local, {0x18b11b28, 0x7fffffff, 0x4a00000000000000, 0x7f, 0x7, 0x80, 0x0, 0x7fffffffffffffff}, {0x6d, 0xf, 0xe6db, 0x8000000000000001}, {0x1, 0xbdb, 0x6}, 0x70bd2a, 0x3505, 0x2, 0x4, 0x3, 0x52}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40040}, 0x5) recvmmsg$unix(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000480)=""/7, 0x7}, {&(0x7f00000001c0)=""/234, 0xea}], 0x2}}], 0x1, 0x2000, 0x0) (async) recvmmsg$unix(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000480)=""/7, 0x7}, {&(0x7f00000001c0)=""/234, 0xea}], 0x2}}], 0x1, 0x2000, 0x0) bind$bt_hci(r2, 0x0, 0x0) 39.654256039s ago: executing program 4 (id=2620): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) recvmmsg(r0, &(0x7f0000008840)=[{{&(0x7f00000007c0), 0x80, &(0x7f0000003bc0)=[{&(0x7f0000000840)=""/228, 0xe4}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000480)=""/23, 0x17}, {&(0x7f0000001940)=""/79, 0x4f}, {&(0x7f00000019c0)=""/94, 0x5e}, {&(0x7f0000002b00)=""/171, 0xab}, {&(0x7f0000001a40)=""/20, 0x14}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0xa}, 0x7}, {{&(0x7f0000003c80)=@nl, 0x80, &(0x7f0000003d40)=[{&(0x7f0000001a80)=""/16, 0x10}, {&(0x7f0000003d00)=""/52, 0x34}], 0x2, &(0x7f0000003d80)=""/40, 0x28}, 0xd6b}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000003dc0)=""/102, 0x66}, {&(0x7f0000003e40)=""/101, 0x65}, {&(0x7f0000003ec0)=""/48, 0x30}, {&(0x7f0000003f00)=""/240, 0xf0}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)}, {&(0x7f0000005040)=""/59, 0x3b}], 0x7, &(0x7f0000005100)=""/44, 0x2c}, 0x24}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005140)=""/87, 0x57}, {&(0x7f00000051c0)=""/204, 0xcc}], 0x2, &(0x7f0000005300)=""/122, 0x7a}, 0x7}, {{&(0x7f0000005380)=@alg, 0x80, &(0x7f0000005640)=[{&(0x7f0000005400)=""/35, 0x23}, {&(0x7f0000005440)=""/193, 0xc1}, {&(0x7f0000005540)=""/236, 0xec}], 0x3}, 0xf99a}, {{&(0x7f0000005680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005700)=""/9, 0x9}, {&(0x7f0000005740)=""/55, 0x37}, {&(0x7f0000005780)=""/157, 0x9d}, {&(0x7f0000005840)=""/118, 0x76}, {&(0x7f00000058c0)=""/108, 0x6c}, {&(0x7f0000005940)=""/197, 0xc5}, {&(0x7f0000005a40)=""/110, 0x6e}, {&(0x7f0000005ac0)=""/126, 0x7e}, {&(0x7f0000005b40)=""/58, 0x3a}], 0x9, &(0x7f0000005c40)=""/130, 0x82}, 0xc}, {{&(0x7f0000005d00)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d80)=""/173, 0xad}, {&(0x7f0000005e40)=""/4, 0x4}], 0x2, &(0x7f0000005ec0)}, 0xfffffffc}, {{&(0x7f0000005f00)=@ieee802154, 0x80, &(0x7f0000007340)=[{&(0x7f0000005f80)=""/236, 0xec}, {&(0x7f0000006080)=""/134, 0x86}, {&(0x7f0000006140)=""/171, 0xab}, {&(0x7f0000006200)}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000007240)=""/244, 0xf4}], 0x6}, 0x1}, {{&(0x7f0000007440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000074c0)=""/203, 0xcb}, {&(0x7f00000075c0)=""/181, 0xb5}, {&(0x7f0000007680)=""/193, 0xc1}, {&(0x7f0000007780)=""/4096, 0x1000}], 0x4, &(0x7f00000087c0)=""/67, 0x43}}], 0x9, 0x40002120, &(0x7f0000008a80)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0xf8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_REPLY={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xdc4, 0x1, 0x9, 0xba, 0x1]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x64094}, 0x84) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x6, 0x9, {{0x25, 0x4, 0x0, 0x9, 0x94, 0x64, 0x0, 0x3, 0x0, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0x93, 0x0, 0x1, [0x9]}, @generic={0x88, 0x5, "42d353"}, @timestamp_prespec={0x44, 0x34, 0x17, 0x3, 0x1, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x1b, 0xa, [@multicast1, @broadcast, @local, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x1f, 0xc4, [@empty, @remote, @private=0xa010100, @rand_addr=0x64010100, @remote, @broadcast, @rand_addr=0x64010101]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_newroute={0x2c, 0x18, 0x2, 0x70bd2d, 0x25dfdbff, {0x2, 0x80, 0x20, 0x8, 0x0, 0x3, 0xfe, 0x8, 0x400}, [@RTA_FLOW={0x8, 0xb, 0xcd8a}, @RTA_OIF={0x8, 0x4, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000006}, 0x20000015) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x4) connect$x25(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r8, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 39.403928227s ago: executing program 4 (id=2622): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x3a) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x2c, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000304fcffffff6d5f3fe1824000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000348028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 39.153368345s ago: executing program 4 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3e) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000200)="dc10190b17b4557ddd6e9b275a84ba8a852b518e1646267e3fe24124603ce399e1dd1fa1121a880185fcbac79fb94d1b757b720d7467b22bb444c34b3f2aba58c4534dae974b20b46fc371e8a30d685a1c169a0fa22d29682270368d11d5c01a8cd3b80abf80b11d76cf5ce642180aaca7301dddae088247870de75ee83abd290268b8e0e167a09152c5557cc9b2974ee5523f03eee3dac0a3338657ddafa906c89c911aa128bc1112018b") setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000eae3080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = socket(0x25, 0x1, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/47, 0x2f, 0x2000, &(0x7f0000000040)={0xa, 0x4e20, 0x7fff, @mcast2}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x3ff, @mcast2, 0x5428}}, 0x3, 0x1}, &(0x7f0000000400)=0x90) 31.537061539s ago: executing program 4 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3e) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000200)="dc10190b17b4557ddd6e9b275a84ba8a852b518e1646267e3fe24124603ce399e1dd1fa1121a880185fcbac79fb94d1b757b720d7467b22bb444c34b3f2aba58c4534dae974b20b46fc371e8a30d685a1c169a0fa22d29682270368d11d5c01a8cd3b80abf80b11d76cf5ce642180aaca7301dddae088247870de75ee83abd290268b8e0e167a09152c5557cc9b2974ee5523f03eee3dac0a3338657ddafa906c89c911aa128bc1112018b") setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000eae3080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = socket(0x25, 0x1, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/47, 0x2f, 0x2000, &(0x7f0000000040)={0xa, 0x4e20, 0x7fff, @mcast2}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x3ff, @mcast2, 0x5428}}, 0x3, 0x1}, &(0x7f0000000400)=0x90) 31.301047382s ago: executing program 32 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x3e) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000200)="dc10190b17b4557ddd6e9b275a84ba8a852b518e1646267e3fe24124603ce399e1dd1fa1121a880185fcbac79fb94d1b757b720d7467b22bb444c34b3f2aba58c4534dae974b20b46fc371e8a30d685a1c169a0fa22d29682270368d11d5c01a8cd3b80abf80b11d76cf5ce642180aaca7301dddae088247870de75ee83abd290268b8e0e167a09152c5557cc9b2974ee5523f03eee3dac0a3338657ddafa906c89c911aa128bc1112018b") setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000eae3080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) r4 = socket(0x25, 0x1, 0x0) recvfrom$packet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/47, 0x2f, 0x2000, &(0x7f0000000040)={0xa, 0x4e20, 0x7fff, @mcast2}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e23, 0x3ff, @mcast2, 0x5428}}, 0x3, 0x1}, &(0x7f0000000400)=0x90) 13.870013767s ago: executing program 2 (id=2908): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) pipe(&(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x8, 0x0, 0x8, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r8, &(0x7f0000000300), 0x0}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x2, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="8500000008000000620a00ff000000002e0000000000000095000000000000001810000075ad", @ANYRES32, @ANYBLOB="1000000000000025050000000000000000000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa5, &(0x7f0000000240)=""/165, 0x40f00, 0x8f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3a) (async) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r10, 0x0, 0x4044) 13.539934506s ago: executing program 2 (id=2911): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x3, 'wrr\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000611bf3926c46e40b0021fa8ce763892018d907a66ffeefaf9b9e6833f395d0c550f23f62a40d8b7da3f05f08a921197086dac2c2fc290008000000000000acb1f1a514c64a51a3b77cd84420d45199d84858c95908bdc1fcf1a30ffdee3f2286dd1cfa69a160ee8cb6f1355a9995a06ec54c2320fa561eba1b0eed6171166a71bd2a56d722476651fe51393ae2cedb54bd675b51c8483d6667c4e2ad90730d17e0bbd6f8591a113205f559d6a1f67ed9d852b5f75379fd", @ANYRES16=r7, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x4000084) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000200)=0x1aaa, 0x4) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000000)=0x412, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x1d, 0x1000, 0x4a}, 0x2c) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 11.842178436s ago: executing program 2 (id=2926): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01000000000000000000020202000900030073797a30000000000900010073797a30000000000900010073797a31000000000500040001000000"], 0x40}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r5, @ANYBLOB="bcef09000000000000000200", @ANYRES32=r6, @ANYBLOB="0500110001000000"], 0x48}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e21, 0x5c6, @private1, 0xfff}, 0x1c) getsockopt$netlink(r8, 0x10e, 0xb, 0x0, &(0x7f00000000c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1a, 0x5, 0xffff) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000020000000000280012800b0001006d61637365630000180002800c0004000000000000000000050003000d000000"], 0x48}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000014"], 0x34}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fcdbdf25020000000800020002000000380001800800a69e65f19d601c57d406006b86ffec08000300ac14143a14000400fe880000000000001300000000000001080006001000000008000300e0e5ff0008000200080000003000018008000700", @ANYRES32=0x0, @ANYBLOB="080006001000000014000400fe8000000000000000000000000000bb08000700", @ANYRES32=0x0, @ANYBLOB="0800020007000000080002000500000005000500000000000800020005000000"], 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000140)=0x18, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c00028005000100000000"], 0x88}}, 0x4008000) 11.452168127s ago: executing program 2 (id=2929): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}}, 0x4040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000088000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r4, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 11.164464355s ago: executing program 2 (id=2931): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x20050800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x6, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r1, 0x20, &(0x7f0000000640)={&(0x7f0000000580)=""/114, 0x72, 0x0, &(0x7f0000000600)=""/5, 0x5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) 10.955595402s ago: executing program 2 (id=2932): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0xfff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500001c000000000011907800000000000000000800000000000000"], 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 6.279611079s ago: executing program 0 (id=2962): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0xb6707000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000000600"/20, @ANYRES32=r2, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffff92, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100000000feffff0f00000000", @ANYRES32=r1, @ANYBLOB="012a17fee325066bc0"], 0x20}, 0x1, 0x0, 0x0, 0x4000090}, 0x8804) 5.623385457s ago: executing program 0 (id=2967): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfffb, 0x4}, {}, {0x1c, 0x19}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x50}}, 0x24000000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="bf", 0x1}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000400)={r6, r5}) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES8=r2], 0x50}}, 0x200c08ca) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) r8 = accept4$alg(r0, 0x0, 0x0, 0x800) r9 = socket(0xf, 0x5, 0x37f) getsockopt$nfc_llcp(r9, 0x3a, 0x1, 0x0, 0x20000000) read$alg(r8, &(0x7f0000000600)=""/208, 0xd0) bind$bt_l2cap(r7, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x52) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x440001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 4.707611857s ago: executing program 3 (id=2975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unshare(0x2c060000) unshare(0x2000000) unshare(0x24020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000005000000cc"], 0x42) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) unshare(0x2c060000) (async) unshare(0x2000000) (async) unshare(0x24020400) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000005000000cc"], 0x42) (async) 3.818815246s ago: executing program 5 (id=2977): socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000400)="13331e", 0x3}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}], 0x3, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 3.745991021s ago: executing program 5 (id=2978): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc99a}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @random="2d95f1050036"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x80, 0x7, 0x6, 0x8, {{0x8, 0x4, 0x1, 0x3e, 0x20, 0x67, 0x0, 0x6, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xfb, 0x3, 0x6, [{@multicast1, 0x81}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x400}, 0x400c000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40008c0) 1.891602632s ago: executing program 3 (id=2980): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000080)="f461", 0x2, 0x0, 0x0, 0x0) close(0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 1.836989252s ago: executing program 3 (id=2981): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r4, 0x0, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000380)={0x5bc, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d8}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x7, 0xd0, 0x7}, {0x639a, 0x5, 0x7, 0x3}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x8c010}, 0x4040000) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.511660893s ago: executing program 3 (id=2984): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)={0x1c, 0x15, 0xa, 0x903, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x600000a0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@multicast2}, {@private=0xa010100, 0xb00}, {@local}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4040840) 1.311777833s ago: executing program 0 (id=2986): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x890c, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) 1.31101518s ago: executing program 1 (id=2987): socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000400)="13331e", 0x3}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}], 0x3, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 1.192779387s ago: executing program 0 (id=2988): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x50, r3, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x50}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x4402}, 0x0) read(r6, &(0x7f0000000100)=""/98, 0x62) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000380)=0xc) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c80)={0x43c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x429, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r8}, @nested={0x33d, 0x64, 0x0, 0x1, [@nested={0x132, 0x121, 0x0, 0x1, [@generic="c2b45c1c72ea0f6ec741f650e5d8f1c76e5d6e6f78dffc221296c2686a3b0e577e85e26ac23ac2390f26129df506cd2916d69f08ab503be01a1611486f1c9310234c6d4402f7341ec95ea2e74934d19a3808e713223a28ba07c7f823ffbaafa80a9c989693fe89f555f9a4a8e6d8e79e2294a0e25886e58be036c92190bfe0bf2df8ceb377dcffff61d922e49342e4fc513d9d35a54c087325e1e553f501c7e27cadc882d434c3996a2b43c725f88fdaecfb965a70d5d742865cf2d959601d40e189da622d408e91", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x1d}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57b5f522ff05f1", @nested={0x19f, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64=0x92}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed234ea4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @generic="4c83f19d5a45a07390e78acddf035cc23faed1c049276fa75000d862910b2a64f55daeb4d74c588fb2302827997b1ce4ef7917aba96a0d0a4abc18b51e7ad2aad833dfb61b6531b0726c", @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x43c}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800dd8d0000000000000000020000000000000500000000060015000500000028001680240001000200000000000000000000000000000000000000000001000000000000000000"], 0x4c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0xa8, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x32}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0xa8}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1e003300c0000200084000000000000000000000505050500026000000"], 0x3c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3, 0x4, 0x7]}, {0xffffffffffffffff}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@cpu={{0x28}, {0x8397}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b], 0x0, 0x0, 0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 1.155549974s ago: executing program 1 (id=2989): syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="b800000019200100000000000000000000003f6a2a0000000000000001000000000000020120000000000000008031efda7dfb5168533c1bca75414100"/82, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000ff030000000000000100000000000000"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2}, 0x3, 0x0, 0x1}}, 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100100a77aff4afd0c255bcdf119f76e", @ANYRES32=0x0, @ANYBLOB="0000000800b401000c00127d09000100626f6e64000000000c000280050001000600000008000a007d60ace42076fdfe7afc95ad2a75f674e1587b20dc93a54fa9d70235d248865d57401172958123e208c6a707d0e5", @ANYRES32=r0], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.059651765s ago: executing program 5 (id=2990): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0xfffffffe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 986.11836ms ago: executing program 1 (id=2991): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r1, 0xe6905000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x9, [@ptr={0xb, 0x0, 0x0, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x2}}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @var={0xc, 0x0, 0x0, 0xe, 0x5}, @const={0xc, 0x0, 0x0, 0xa, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x91cb}}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x30, 0x0, 0x0]}}, &(0x7f0000000000)=""/64, 0x85, 0x40, 0x0, 0xfffffffd, 0x10000, @value=r1}, 0x28) close(r0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) 706.258207ms ago: executing program 1 (id=2992): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x34}}, 0x0) 704.898057ms ago: executing program 5 (id=2993): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r4, 0x0, 0x380}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000380)={0x5bc, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3d8}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x7, 0xd0, 0x7}, {0x639a, 0x5, 0x7, 0x3}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x8c010}, 0x4040000) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 518.041962ms ago: executing program 1 (id=2994): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20040) openat$cgroup_freezer_state(r1, &(0x7f0000000100), 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, 0x0, 0xc00c0) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r4) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="020400000e000000000000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000000000000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @private=0xa010102}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r5, 0x6}, 0x8) bind$ax25(0xffffffffffffffff, 0x0, 0x0) 473.638249ms ago: executing program 5 (id=2995): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x1e8, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1b8, 0x2, {{0x10, 0x3, 0x1, 0x8000, 0x400, 0x48}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x7, 0x0, 0x8, 0x8001}}, @NETEM_LOSS_GE={0x14, 0x2, {0x11, 0xfffffffc, 0x0, 0xbac}}, @NETEM_LOSS_GE={0x14, 0x2, {0xa, 0x1, 0x1, 0x8001}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x800, 0xc}}, @TCA_NETEM_DELAY_DIST={0x33, 0x2, "9f2b57f6fd6d293bfe5b6d9a96ed3dddee6b7e412e5f234d15c69e5d9c27c84e38c1aec4c41bc1aca5f6f367d423db"}, @TCA_NETEM_CORR={0x10, 0x1, {0x7, 0xd654, 0x101}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x0, 0xfffffffb, 0x7}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x201, 0x3, 0xf, 0x1}}]}, @TCA_NETEM_DELAY_DIST={0x5b, 0x2, "3c926845bef2777306c8ce8c9e7c870635d5063a53232e3f3126a9cd3087f541a50b088e7362039158e2fc77f611c0915192808abbd08dde0dc116b78164fa69b70291157cf17607d14c226735b4ee76cb739c4af72fcb"}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x4, 0x3, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0xea32, 0x769, 0xf5c, 0x10000, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x80, 0x1, 0xfe, 0x8}}, @NETEM_LOSS_GI={0x3, 0x1, {0x3, 0x7, 0x2, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x5, 0xf32, 0x1}}]}]}}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 276.262547ms ago: executing program 3 (id=2996): r0 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000ee96b583ab"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000001bc0), 0x0, 0x0, 0x0) 188.93168ms ago: executing program 5 (id=2997): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) recvmmsg(r0, &(0x7f0000000ac0), 0x0, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x890c, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) 99.691841ms ago: executing program 0 (id=2998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000940)=[{&(0x7f0000000400)="13331e", 0x3}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}], 0x3, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 99.238966ms ago: executing program 3 (id=2999): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) accept4(r0, 0x0, &(0x7f00000001c0), 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x0, @random='\x00\t\x00\fB\x00'}}, 0x1e) (async) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x0, @random='\x00\t\x00\fB\x00'}}, 0x1e) 60.648995ms ago: executing program 1 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000140)={@loopback, @multicast1}, &(0x7f00000001c0)=0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a090400000000000000000200000006000100000000000000000000020a0103000400000000000000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000640)={r7, @in6={{0xa, 0x4e23, 0x6, @empty, 0x800}}, 0x6}, 0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000340)={r7, 0x37, "1a3c274baf3caa2499d0227c0f3d3af3c758fe9d0da4e8e5aa4be154d1e77f3a771761b7e7342ee08305b0c425cf4cd39aa56fdf03d1aa"}, &(0x7f0000000380)=0x3f) r8 = socket$rds(0x15, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f3ffffff00000000000900001801150021786c25e0ffffffff1f20207b1af8ff000000c6fc881ad719762f3d949cf94dca1100c9a10000000000000701000078ffffffb702000008000000b703000000000000850000001000570005"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='console\x00', r9, 0x0, 0x85}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) close(0x3) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x0, 0x8d}}], 0x48}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$kcm(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 0s ago: executing program 0 (id=3001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000800000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280ea4f0e5"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfd90, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20080, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8005}, 0x4800) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x5c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8843}, 0x20048815) kernel console output (not intermixed with test programs): CALL_64_after_hwframe+0x77/0x7f [ 240.498831][T11823] RIP: 0033:0x7fd1e718d169 [ 240.498849][T11823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.498866][T11823] RSP: 002b:00007fd1e7faf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.498888][T11823] RAX: ffffffffffffffda RBX: 00007fd1e73a5fa0 RCX: 00007fd1e718d169 [ 240.498903][T11823] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 240.498915][T11823] RBP: 00007fd1e720e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 240.498927][T11823] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.498938][T11823] R13: 0000000000000000 R14: 00007fd1e73a5fa0 R15: 00007ffda4f85288 [ 240.498974][T11823] [ 240.782784][T11823] Mem-Info: [ 240.785940][T11823] active_anon:7975 inactive_anon:0 isolated_anon:0 [ 240.785940][T11823] active_file:1829 inactive_file:38365 isolated_file:0 [ 240.785940][T11823] unevictable:768 dirty:382 writeback:0 [ 240.785940][T11823] slab_reclaimable:10552 slab_unreclaimable:106353 [ 240.785940][T11823] mapped:29858 shmem:1475 pagetables:731 [ 240.785940][T11823] sec_pagetables:0 bounce:0 [ 240.785940][T11823] kernel_misc_reclaimable:0 [ 240.785940][T11823] free:1334429 free_pcp:275 free_cma:0 [ 240.831707][T11823] Node 0 active_anon:32000kB inactive_anon:0kB active_file:7316kB inactive_file:153384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119432kB dirty:1528kB writeback:0kB shmem:4364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12104kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no [ 240.864808][T11823] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 240.895631][T11823] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.923344][T11823] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 240.929167][T11823] Node 0 DMA32 free:1413228kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:31956kB inactive_anon:0kB active_file:7316kB inactive_file:153064kB unevictable:1536kB writepending:1528kB present:3129332kB managed:2549716kB mlocked:0kB bounce:0kB free_pcp:672kB local_pcp:532kB free_cma:0kB [ 240.959967][T11823] lowmem_reserve[]: 0 0 0 0 0 [ 240.968026][T11823] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.994852][T11832] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1749'. [ 240.999691][T11830] lo speed is unknown, defaulting to 1000 [ 241.004891][T11823] lowmem_reserve[]: 0 0 0 0 0 [ 241.015486][T11823] Node 1 Normal free:3909088kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 241.037593][T11830] wg1 speed is unknown, defaulting to 1000 [ 241.045265][T11823] lowmem_reserve[]: 0 0 0 0 0 [ 241.055679][T11823] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 241.069674][T11823] Node 0 DMA32: 383*4kB (UME) 238*8kB (UME) 193*16kB (UME) 77*32kB (UME) 255*64kB (UME) 167*128kB (UME) 89*256kB (UME) 50*512kB (UME) 34*1024kB (UME) 13*2048kB (UM) 307*4096kB (UM) = 1413980kB [ 241.097826][T11823] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.133950][T11823] Node 1 Normal: 198*4kB (UE) 47*8kB (UME) 41*16kB (UME) 184*32kB (UME) 87*64kB (UME) 24*128kB (UME) 18*256kB (UME) 12*512kB (UM) 5*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3909088kB [ 241.140019][T11832] netlink: 'syz.2.1749': attribute type 11 has an invalid length. [ 241.171142][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1749'. [ 241.186243][T11823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.224013][T11823] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.253242][T11823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.284275][T11823] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.347180][T11823] 42271 total pagecache pages [ 241.378591][T11823] 0 pages in swap cache [ 241.396660][T11823] Free swap = 124996kB [ 241.400869][T11823] Total swap = 124996kB [ 241.444369][T11823] 2097051 pages RAM [ 241.448242][T11823] 0 pages HighMem/MovableOnly [ 241.487990][T11823] 427900 pages reserved [ 241.506861][T11823] 0 pages cma reserved [ 241.982220][T11869] lo speed is unknown, defaulting to 1000 [ 241.994259][T11869] wg1 speed is unknown, defaulting to 1000 [ 242.155690][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1763'. [ 242.177023][T11887] xt_ecn: cannot match TCP bits for non-tcp packets [ 242.464261][T11893] lo speed is unknown, defaulting to 1000 [ 242.482020][T11893] wg1 speed is unknown, defaulting to 1000 [ 242.646215][T11906] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1773'. [ 242.667234][T11906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1773'. [ 242.942929][T11918] sctp: [Deprecated]: syz.1.1776 (pid 11918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.942929][T11918] Use struct sctp_sack_info instead [ 243.358487][T11931] netlink: 'syz.4.1783': attribute type 2 has an invalid length. [ 243.387530][T11931] netlink: 'syz.4.1783': attribute type 9 has an invalid length. [ 243.560341][T11936] __nla_validate_parse: 2 callbacks suppressed [ 243.560364][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1784'. [ 243.636321][T11936] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 243.679550][T11936] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 244.207125][T11971] netlink: 'syz.0.1796': attribute type 21 has an invalid length. [ 244.393772][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1797'. [ 244.438958][T11960] team0 (unregistering): Port device macvlan0 removed [ 244.481104][T11971] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1796'. [ 244.540250][T11985] xt_hashlimit: size too large, truncated to 1048576 [ 244.643443][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1798'. [ 244.671825][T11975] bond0: (slave bond_slave_0): Releasing backup interface [ 244.700421][T11982] veth1_macvtap: left promiscuous mode [ 245.100140][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 245.355467][T12019] netlink: 'syz.3.1809': attribute type 2 has an invalid length. [ 245.612023][T12033] netlink: 'syz.0.1813': attribute type 32 has an invalid length. [ 245.622016][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1813'. [ 245.636474][T12033] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 245.672740][T12035] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1814'. [ 245.679392][T12037] bridge6: entered promiscuous mode [ 245.686875][T12035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1814'. [ 245.687177][T12037] bridge6: entered allmulticast mode [ 245.696374][T12035] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1814'. [ 245.708741][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1815'. [ 245.745089][T12033] lo speed is unknown, defaulting to 1000 [ 245.752695][T12033] wg1 speed is unknown, defaulting to 1000 [ 247.387193][T12113] nbd: socks must be embedded in a SOCK_ITEM attr [ 248.067499][T12134] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 248.396635][T12150] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 249.159797][T12191] __nla_validate_parse: 6 callbacks suppressed [ 249.159817][T12191] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1862'. [ 249.318467][T12197] netlink: 'syz.1.1866': attribute type 4 has an invalid length. [ 249.417863][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1864'. [ 249.437752][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1864'. [ 249.584150][T12215] netlink: 'syz.2.1868': attribute type 2 has an invalid length. [ 249.594045][T12215] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1868'. [ 249.688128][T12218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1869'. [ 249.699509][T12220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1870'. [ 249.713818][T12220] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 249.856430][T12226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1872'. [ 250.149448][T12237] syz_tun: entered allmulticast mode [ 250.163033][T12237] netlink: 'syz.1.1876': attribute type 9 has an invalid length. [ 250.229563][T12244] x_tables: duplicate underflow at hook 2 [ 250.446318][T12236] syz_tun: left allmulticast mode [ 250.707169][T11442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.728603][T11442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.760035][T12273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1887'. [ 250.773438][T12270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.809488][T12270] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1886'. [ 250.826802][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1886'. [ 250.917793][T12279] FAULT_INJECTION: forcing a failure. [ 250.917793][T12279] name failslab, interval 1, probability 0, space 0, times 0 [ 250.931418][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.4.1891 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 250.931445][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.931458][T12279] Call Trace: [ 250.931466][T12279] [ 250.931474][T12279] dump_stack_lvl+0x241/0x360 [ 250.931507][T12279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.931531][T12279] ? __pfx__printk+0x10/0x10 [ 250.931555][T12279] ? __kmalloc_noprof+0xb5/0x4c0 [ 250.931586][T12279] ? __pfx___might_resched+0x10/0x10 [ 250.931620][T12279] should_fail_ex+0x40a/0x550 [ 250.931657][T12279] should_failslab+0xac/0x100 [ 250.931688][T12279] __kmalloc_noprof+0xdd/0x4c0 [ 250.931717][T12279] ? fib6_info_alloc+0x2e/0xf0 [ 250.931747][T12279] fib6_info_alloc+0x2e/0xf0 [ 250.931771][T12279] ip6_route_info_create+0x445/0x12b0 [ 250.931809][T12279] ? __lock_acquire+0x1397/0x2100 [ 250.931845][T12279] ip6_route_add+0x28/0x160 [ 250.931875][T12279] inet6_rtm_newroute+0x2a8/0x2100 [ 250.931924][T12279] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 250.931947][T12279] ? __mutex_trylock_common+0x183/0x2e0 [ 250.931971][T12279] ? __pfx___might_resched+0x10/0x10 [ 250.932003][T12279] ? __pfx___mutex_trylock_common+0x10/0x10 [ 250.932033][T12279] ? rcu_is_watching+0x15/0xb0 [ 250.932058][T12279] ? trace_contention_end+0x3c/0x120 [ 250.932083][T12279] ? __mutex_lock+0x397/0x1010 [ 250.932146][T12279] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 250.932173][T12279] rtnetlink_rcv_msg+0x73f/0xcf0 [ 250.932204][T12279] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 250.932241][T12279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.932280][T12279] ? ref_tracker_free+0x643/0x7e0 [ 250.932316][T12279] netlink_rcv_skb+0x206/0x480 [ 250.932350][T12279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.932397][T12279] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.932462][T12279] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.932495][T12279] netlink_unicast+0x7f6/0x990 [ 250.932528][T12279] ? __pfx_netlink_unicast+0x10/0x10 [ 250.932551][T12279] ? __virt_addr_valid+0x45f/0x530 [ 250.932571][T12279] ? __phys_addr_symbol+0x2f/0x70 [ 250.932588][T12279] ? __check_object_size+0x47a/0x730 [ 250.932618][T12279] netlink_sendmsg+0x8de/0xcb0 [ 250.932660][T12279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.932693][T12279] ? aa_sock_msg_perm+0x91/0x160 [ 250.932728][T12279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.932755][T12279] __sock_sendmsg+0x221/0x270 [ 250.932787][T12279] ____sys_sendmsg+0x53a/0x860 [ 250.932819][T12279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.932840][T12279] ? __fget_files+0x2a/0x410 [ 250.932872][T12279] ? __fget_files+0x2a/0x410 [ 250.932909][T12279] __sys_sendmsg+0x269/0x350 [ 250.932947][T12279] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.932980][T12279] ? do_sys_openat2+0x17a/0x1d0 [ 250.933031][T12279] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.933060][T12279] ? do_syscall_64+0x100/0x230 [ 250.933105][T12279] ? do_syscall_64+0xb6/0x230 [ 250.933132][T12279] do_syscall_64+0xf3/0x230 [ 250.933157][T12279] ? clear_bhb_loop+0x35/0x90 [ 250.933187][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.933213][T12279] RIP: 0033:0x7fd1e718d169 [ 250.933230][T12279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.933247][T12279] RSP: 002b:00007fd1e7faf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.933267][T12279] RAX: ffffffffffffffda RBX: 00007fd1e73a5fa0 RCX: 00007fd1e718d169 [ 250.933281][T12279] RDX: 0000000000000000 RSI: 0000400000000140 RDI: 0000000000000008 [ 250.933294][T12279] RBP: 00007fd1e7faf090 R08: 0000000000000000 R09: 0000000000000000 [ 250.933314][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.933325][T12279] R13: 0000000000000000 R14: 00007fd1e73a5fa0 R15: 00007ffda4f85288 [ 250.933355][T12279] [ 251.320745][ T5835] Bluetooth: hci4: command 0x0419 tx timeout [ 251.523695][T12291] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 251.694975][T12300] 8021q: VLANs not supported on sit0 [ 251.748611][T12302] netlink: 'syz.1.1899': attribute type 10 has an invalid length. [ 251.859480][T12306] FAULT_INJECTION: forcing a failure. [ 251.859480][T12306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.896271][T12306] CPU: 0 UID: 0 PID: 12306 Comm: syz.0.1901 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 251.896301][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.896314][T12306] Call Trace: [ 251.896322][T12306] [ 251.896330][T12306] dump_stack_lvl+0x241/0x360 [ 251.896361][T12306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.896384][T12306] ? __pfx__printk+0x10/0x10 [ 251.896405][T12306] ? tomoyo_path_number_perm+0x5dd/0x770 [ 251.896452][T12306] should_fail_ex+0x40a/0x550 [ 251.896488][T12306] _copy_from_user+0x2d/0xb0 [ 251.896518][T12306] get_user_ifreq+0xc3/0x200 [ 251.896549][T12306] sock_do_ioctl+0x1a5/0x460 [ 251.896582][T12306] ? __pfx_sock_do_ioctl+0x10/0x10 [ 251.896631][T12306] sock_ioctl+0x626/0x8e0 [ 251.896661][T12306] ? __pfx_sock_ioctl+0x10/0x10 [ 251.896689][T12306] ? __fget_files+0x2a/0x410 [ 251.896724][T12306] ? __fget_files+0x2a/0x410 [ 251.896758][T12306] ? __pfx_sock_ioctl+0x10/0x10 [ 251.896800][T12306] __se_sys_ioctl+0xf5/0x170 [ 251.896825][T12306] do_syscall_64+0xf3/0x230 [ 251.896851][T12306] ? clear_bhb_loop+0x35/0x90 [ 251.896883][T12306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.896910][T12306] RIP: 0033:0x7f4e8f78d169 [ 251.896927][T12306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.896944][T12306] RSP: 002b:00007f4e8d5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.896966][T12306] RAX: ffffffffffffffda RBX: 00007f4e8f9a5fa0 RCX: 00007f4e8f78d169 [ 251.896980][T12306] RDX: 00004000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 251.896993][T12306] RBP: 00007f4e8d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 251.897006][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.897017][T12306] R13: 0000000000000000 R14: 00007f4e8f9a5fa0 R15: 00007ffdcb191c58 [ 251.897046][T12306] [ 251.898888][T12308] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 252.205005][T12314] lo speed is unknown, defaulting to 1000 [ 252.223007][T12314] wg1 speed is unknown, defaulting to 1000 [ 252.491183][T12332] lo speed is unknown, defaulting to 1000 [ 252.498056][T12332] wg1 speed is unknown, defaulting to 1000 [ 252.766928][T12349] wireguard0: entered promiscuous mode [ 252.787156][T12349] wireguard0: entered allmulticast mode [ 252.852918][T12357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.804085][T12403] 1·: renamed from c0· (while UP) [ 253.826677][T12403] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 253.949584][T12409] FAULT_INJECTION: forcing a failure. [ 253.949584][T12409] name failslab, interval 1, probability 0, space 0, times 0 [ 253.968217][T12409] CPU: 1 UID: 0 PID: 12409 Comm: syz.2.1935 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 253.968250][T12409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.968263][T12409] Call Trace: [ 253.968270][T12409] [ 253.968279][T12409] dump_stack_lvl+0x241/0x360 [ 253.968311][T12409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.968335][T12409] ? __pfx__printk+0x10/0x10 [ 253.968359][T12409] ? __kmalloc_cache_noprof+0x48/0x390 [ 253.968391][T12409] ? __pfx___might_resched+0x10/0x10 [ 253.968425][T12409] should_fail_ex+0x40a/0x550 [ 253.968462][T12409] should_failslab+0xac/0x100 [ 253.968492][T12409] __kmalloc_cache_noprof+0x70/0x390 [ 253.968521][T12409] ? dev_ethtool+0x13d/0x1d70 [ 253.968548][T12409] dev_ethtool+0x13d/0x1d70 [ 253.968578][T12409] ? __pfx_lock_acquire+0x10/0x10 [ 253.968611][T12409] ? dev_load+0x21/0x1f0 [ 253.968642][T12409] ? __pfx_dev_ethtool+0x10/0x10 [ 253.968665][T12409] ? tomoyo_path_number_perm+0x5dd/0x770 [ 253.968710][T12409] ? dev_load+0x21/0x1f0 [ 253.968741][T12409] dev_ioctl+0x785/0x1340 [ 253.968775][T12409] sock_do_ioctl+0x240/0x460 [ 253.968810][T12409] ? __pfx_sock_do_ioctl+0x10/0x10 [ 253.968860][T12409] sock_ioctl+0x626/0x8e0 [ 253.968890][T12409] ? __pfx_sock_ioctl+0x10/0x10 [ 253.968919][T12409] ? __fget_files+0x2a/0x410 [ 253.968954][T12409] ? __fget_files+0x2a/0x410 [ 253.968989][T12409] ? __pfx_sock_ioctl+0x10/0x10 [ 253.969035][T12409] __se_sys_ioctl+0xf5/0x170 [ 253.969081][T12409] do_syscall_64+0xf3/0x230 [ 253.969110][T12409] ? clear_bhb_loop+0x35/0x90 [ 253.969143][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.969172][T12409] RIP: 0033:0x7f165398d169 [ 253.969192][T12409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.969210][T12409] RSP: 002b:00007f16548ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.969232][T12409] RAX: ffffffffffffffda RBX: 00007f1653ba5fa0 RCX: 00007f165398d169 [ 253.969248][T12409] RDX: 00004000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 253.969261][T12409] RBP: 00007f16548ba090 R08: 0000000000000000 R09: 0000000000000000 [ 253.969274][T12409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.969286][T12409] R13: 0000000000000000 R14: 00007f1653ba5fa0 R15: 00007fffc75f21e8 [ 253.969317][T12409] [ 254.349796][T12417] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 254.426893][T12417] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 254.485129][T11446] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 254.498137][T12417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.575698][T12417] veth3: entered promiscuous mode [ 254.580799][T12417] veth3: entered allmulticast mode [ 254.593991][T12417] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 254.632906][T11445] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 254.763869][T12442] sit1: entered promiscuous mode [ 254.824402][T12447] FAULT_INJECTION: forcing a failure. [ 254.824402][T12447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.842142][T12447] CPU: 1 UID: 0 PID: 12447 Comm: syz.3.1948 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 254.842171][T12447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.842184][T12447] Call Trace: [ 254.842191][T12447] [ 254.842200][T12447] dump_stack_lvl+0x241/0x360 [ 254.842232][T12447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.842263][T12447] ? __pfx__printk+0x10/0x10 [ 254.842287][T12447] ? __pfx_lock_release+0x10/0x10 [ 254.842330][T12447] should_fail_ex+0x40a/0x550 [ 254.842368][T12447] _copy_from_user+0x2d/0xb0 [ 254.842398][T12447] ethtool_set_channels+0x17b/0xaf0 [ 254.842427][T12447] ? aa_get_newest_label+0xff/0x6f0 [ 254.842458][T12447] ? __mutex_lock+0x602/0x1010 [ 254.842490][T12447] ? __pfx_aa_get_newest_label+0x10/0x10 [ 254.842523][T12447] ? __pfx_ethtool_set_channels+0x10/0x10 [ 254.842565][T12447] ? bpf_lsm_capable+0x9/0x10 [ 254.842595][T12447] ? security_capable+0x7e/0x2d0 [ 254.842635][T12447] dev_ethtool+0x1362/0x1d70 [ 254.842674][T12447] ? __pfx_dev_ethtool+0x10/0x10 [ 254.842697][T12447] ? tomoyo_path_number_perm+0x5dd/0x770 [ 254.842741][T12447] ? dev_load+0x21/0x1f0 [ 254.842773][T12447] dev_ioctl+0x785/0x1340 [ 254.842807][T12447] sock_do_ioctl+0x240/0x460 [ 254.842843][T12447] ? __pfx_sock_do_ioctl+0x10/0x10 [ 254.842893][T12447] sock_ioctl+0x626/0x8e0 [ 254.842924][T12447] ? __pfx_sock_ioctl+0x10/0x10 [ 254.842957][T12447] ? __fget_files+0x2a/0x410 [ 254.842992][T12447] ? __fget_files+0x2a/0x410 [ 254.843026][T12447] ? __pfx_sock_ioctl+0x10/0x10 [ 254.843056][T12447] __se_sys_ioctl+0xf5/0x170 [ 254.843083][T12447] do_syscall_64+0xf3/0x230 [ 254.843111][T12447] ? clear_bhb_loop+0x35/0x90 [ 254.843144][T12447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.843173][T12447] RIP: 0033:0x7fdf2d18d169 [ 254.843191][T12447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.843209][T12447] RSP: 002b:00007fdf2df39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.843231][T12447] RAX: ffffffffffffffda RBX: 00007fdf2d3a5fa0 RCX: 00007fdf2d18d169 [ 254.843252][T12447] RDX: 00004000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 254.843265][T12447] RBP: 00007fdf2df39090 R08: 0000000000000000 R09: 0000000000000000 [ 254.843278][T12447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.843290][T12447] R13: 0000000000000000 R14: 00007fdf2d3a5fa0 R15: 00007ffdd86da008 [ 254.843322][T12447] [ 255.184791][T12446] lo speed is unknown, defaulting to 1000 [ 255.206061][T12446] wg1 speed is unknown, defaulting to 1000 [ 255.510356][T12463] x_tables: duplicate underflow at hook 2 [ 255.832258][T12476] __nla_validate_parse: 11 callbacks suppressed [ 255.832311][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 255.896593][T12480] lo speed is unknown, defaulting to 1000 [ 255.912309][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1953'. [ 255.976381][T12480] wg1 speed is unknown, defaulting to 1000 [ 256.328089][T12498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1958'. [ 256.350682][T12500] tipc: Bearer : already 2 bearers with priority 10 [ 256.367304][T12500] tipc: Bearer : trying with adjusted priority [ 256.374983][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1959'. [ 256.385597][T12500] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 256.397182][T12500] tipc: Enabled bearer , priority 9 [ 256.405390][T12493] lo speed is unknown, defaulting to 1000 [ 256.430773][T12500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1959'. [ 256.456689][T12493] wg1 speed is unknown, defaulting to 1000 [ 256.628157][T12504] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1961'. [ 256.800473][T12519] netlink: 'syz.1.1964': attribute type 10 has an invalid length. [ 256.943370][T12527] netlink: 183452 bytes leftover after parsing attributes in process `syz.0.1967'. [ 256.983876][T12519] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 257.011507][T12519] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 257.032894][T12519] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 257.087628][T12532] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 257.437814][T12547] IPv6: NLM_F_REPLACE set, but no existing node found! [ 257.750197][T12567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1977'. [ 257.776118][T12567] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1977'. [ 257.791958][T12567] tipc: Invalid UDP bearer configuration [ 257.792132][T12567] tipc: Enabling of bearer rejected, failed to enable media [ 257.808016][T12566] netlink: 'syz.4.1981': attribute type 4 has an invalid length. [ 257.900465][T12564] lo speed is unknown, defaulting to 1000 [ 257.907962][T12564] wg1 speed is unknown, defaulting to 1000 [ 257.926341][T12572] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 257.936056][ T2973] bond0: (slave netdevsim0): interface is now down [ 257.992815][T12572] netlink: 'syz.1.1982': attribute type 1 has an invalid length. [ 258.103455][T12586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1985'. [ 258.170107][T12589] 0·: renamed from c1· [ 258.186569][T12589] 0·: entered allmulticast mode [ 258.193228][T12589] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 258.222975][T11442] bond0: (slave netdevsim0): interface is now down [ 258.491788][T11446] bond0: (slave netdevsim0): interface is now down [ 258.528167][T11446] bond0: now running without any active interface! [ 258.976813][T12620] netlink: 'syz.1.1997': attribute type 39 has an invalid length. [ 259.007635][T12623] FAULT_INJECTION: forcing a failure. [ 259.007635][T12623] name failslab, interval 1, probability 0, space 0, times 0 [ 259.041651][T12623] CPU: 1 UID: 0 PID: 12623 Comm: syz.3.1995 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 259.041682][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.041696][T12623] Call Trace: [ 259.041704][T12623] [ 259.041713][T12623] dump_stack_lvl+0x241/0x360 [ 259.041746][T12623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.041770][T12623] ? __pfx__printk+0x10/0x10 [ 259.041795][T12623] ? fs_reclaim_acquire+0x93/0x130 [ 259.041819][T12623] ? __pfx___might_resched+0x10/0x10 [ 259.041853][T12623] should_fail_ex+0x40a/0x550 [ 259.041890][T12623] should_failslab+0xac/0x100 [ 259.041922][T12623] __kmalloc_noprof+0xdd/0x4c0 [ 259.041958][T12623] ? tomoyo_encode+0x26f/0x540 [ 259.041985][T12623] tomoyo_encode+0x26f/0x540 [ 259.042014][T12623] tomoyo_realpath_from_path+0x59e/0x5e0 [ 259.042050][T12623] tomoyo_path_number_perm+0x239/0x770 [ 259.042080][T12623] ? __lock_acquire+0x1397/0x2100 [ 259.042116][T12623] ? tomoyo_path_number_perm+0x209/0x770 [ 259.042148][T12623] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 259.042224][T12623] ? __fget_files+0x2a/0x410 [ 259.042260][T12623] ? __fget_files+0x2a/0x410 [ 259.042297][T12623] security_file_ioctl+0xc6/0x2a0 [ 259.042328][T12623] __se_sys_ioctl+0x46/0x170 [ 259.042355][T12623] do_syscall_64+0xf3/0x230 [ 259.042395][T12623] ? clear_bhb_loop+0x35/0x90 [ 259.042428][T12623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.042455][T12623] RIP: 0033:0x7fdf2d18d169 [ 259.042473][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.042490][T12623] RSP: 002b:00007fdf2df18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 259.042512][T12623] RAX: ffffffffffffffda RBX: 00007fdf2d3a6080 RCX: 00007fdf2d18d169 [ 259.042527][T12623] RDX: 0000400000000080 RSI: 00000000401c5820 RDI: 0000000000000003 [ 259.042541][T12623] RBP: 00007fdf2df18090 R08: 0000000000000000 R09: 0000000000000000 [ 259.042553][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.042565][T12623] R13: 0000000000000001 R14: 00007fdf2d3a6080 R15: 00007ffdd86da008 [ 259.042596][T12623] [ 259.042614][T12623] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.514602][T12633] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 3, id = 0 [ 259.525297][T12631] IPVS: stopping backup sync thread 12633 ... [ 260.445943][T12679] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.542473][T12679] lo speed is unknown, defaulting to 1000 [ 260.618986][T12679] wg1 speed is unknown, defaulting to 1000 [ 261.172233][T12709] __nla_validate_parse: 12 callbacks suppressed [ 261.172255][T12709] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2020'. [ 261.250062][T12714] FAULT_INJECTION: forcing a failure. [ 261.250062][T12714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.282519][T12712] pimreg: left allmulticast mode [ 261.291203][T12714] CPU: 0 UID: 0 PID: 12714 Comm: syz.3.2021 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 261.291232][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.291245][T12714] Call Trace: [ 261.291253][T12714] [ 261.291261][T12714] dump_stack_lvl+0x241/0x360 [ 261.291294][T12714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.291317][T12714] ? __pfx__printk+0x10/0x10 [ 261.291345][T12714] ? snprintf+0xda/0x120 [ 261.291369][T12714] should_fail_ex+0x40a/0x550 [ 261.291407][T12714] _copy_to_user+0x31/0xb0 [ 261.291438][T12714] simple_read_from_buffer+0xca/0x150 [ 261.291471][T12714] proc_fail_nth_read+0x1e9/0x250 [ 261.291505][T12714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.291538][T12714] ? rw_verify_area+0x243/0x630 [ 261.291561][T12714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.291591][T12714] vfs_read+0x1f8/0xb40 [ 261.291615][T12714] ? fdget_pos+0x254/0x320 [ 261.291642][T12714] ? __pfx___mutex_lock+0x10/0x10 [ 261.291665][T12714] ? __pfx_vfs_read+0x10/0x10 [ 261.291682][T12714] ? do_sys_openat2+0x17a/0x1d0 [ 261.291710][T12714] ? __fget_files+0x2a/0x410 [ 261.291737][T12714] ? __fget_files+0x395/0x410 [ 261.291761][T12714] ? __fget_files+0x2a/0x410 [ 261.291795][T12714] ksys_read+0x18f/0x2b0 [ 261.291824][T12714] ? __pfx_ksys_read+0x10/0x10 [ 261.291844][T12714] ? do_syscall_64+0x100/0x230 [ 261.291870][T12714] ? do_syscall_64+0xb6/0x230 [ 261.291895][T12714] do_syscall_64+0xf3/0x230 [ 261.291918][T12714] ? clear_bhb_loop+0x35/0x90 [ 261.291945][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.291970][T12714] RIP: 0033:0x7fdf2d18bb7c [ 261.291985][T12714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 261.292000][T12714] RSP: 002b:00007fdf2df39030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.292020][T12714] RAX: ffffffffffffffda RBX: 00007fdf2d3a5fa0 RCX: 00007fdf2d18bb7c [ 261.292033][T12714] RDX: 000000000000000f RSI: 00007fdf2df390a0 RDI: 0000000000000004 [ 261.292044][T12714] RBP: 00007fdf2df39090 R08: 0000000000000000 R09: 0000000000000000 [ 261.292055][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.292065][T12714] R13: 0000000000000000 R14: 00007fdf2d3a5fa0 R15: 00007ffdd86da008 [ 261.292092][T12714] [ 261.798106][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2026'. [ 262.265991][T12753] IPv6: NLM_F_REPLACE set, but no existing node found! [ 262.388403][T12760] bond0: left allmulticast mode [ 262.407738][T12760] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 262.439972][T12760] vlan0: entered promiscuous mode [ 262.454397][T12760] vlan0: left allmulticast mode [ 262.637041][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'. [ 262.696392][T12771] lo speed is unknown, defaulting to 1000 [ 262.738062][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'. [ 262.743876][T12774] lo speed is unknown, defaulting to 1000 [ 262.747199][T12771] wg1 speed is unknown, defaulting to 1000 [ 262.785714][T12778] netlink: 'syz.1.2045': attribute type 21 has an invalid length. [ 262.812669][T12774] wg1 speed is unknown, defaulting to 1000 [ 262.932721][T12783] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (14) [ 263.004307][T12786] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2049'. [ 263.061241][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 263.309986][T12792] lo speed is unknown, defaulting to 1000 [ 263.359586][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2052'. [ 263.372302][T12792] wg1 speed is unknown, defaulting to 1000 [ 264.569607][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2063'. [ 264.752506][T12877] netlink: 'syz.4.2065': attribute type 1 has an invalid length. [ 264.761656][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2065'. [ 264.776909][T12877] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2065'. [ 265.307985][T12904] lo speed is unknown, defaulting to 1000 [ 265.383911][T12904] wg1 speed is unknown, defaulting to 1000 [ 266.210590][T12936] __nla_validate_parse: 4 callbacks suppressed [ 266.210611][T12936] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2084'. [ 266.242777][T12940] tun1: tun_chr_ioctl cmd 2147767521 [ 266.668371][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2090'. [ 266.695293][T12961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2090'. [ 266.698568][T12963] pim6reg: entered allmulticast mode [ 266.724515][T12961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2090'. [ 266.836585][T12963] pim6reg: left allmulticast mode [ 266.953942][T12977] syz_tun: entered promiscuous mode [ 266.960043][T12975] syz_tun: left promiscuous mode [ 266.975347][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2098'. [ 266.982020][T12980] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2099'. [ 267.035623][T12980] 0·: renamed from c1· (while UP) [ 267.164659][T12980] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 267.695300][T13012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2109'. [ 267.748302][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2109'. [ 267.757636][T13012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2109'. [ 267.983848][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2112'. [ 268.002782][T13025] netlink: 'syz.1.2112': attribute type 4 has an invalid length. [ 268.337254][T13047] team0: Device ipvlan2 failed to register rx_handler [ 268.391689][T13054] veth1_macvtap: left promiscuous mode [ 268.765432][T13071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.213336][T13106] lo speed is unknown, defaulting to 1000 [ 269.245759][T13106] wg1 speed is unknown, defaulting to 1000 [ 269.403067][T13117] 1·: renamed from c0· (while UP) [ 269.464004][T13117] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 270.027718][T13140] netlink: 'syz.1.2149': attribute type 3 has an invalid length. [ 270.377154][T13162] lo speed is unknown, defaulting to 1000 [ 270.486936][T13165] No such timeout policy "syz0" [ 270.663615][T13162] wg1 speed is unknown, defaulting to 1000 [ 270.881493][T13176] 1·: renamed from c0· (while UP) [ 270.896502][T13176] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 271.185984][T13162] Cannot find del_set index 4 as target [ 271.306999][T13162] lo speed is unknown, defaulting to 1000 [ 271.326112][T13168] pim6reg: entered allmulticast mode [ 271.358690][T13206] __nla_validate_parse: 5 callbacks suppressed [ 271.358709][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 271.501715][T13162] wg1 speed is unknown, defaulting to 1000 [ 271.614792][T13211] netlink: 'syz.3.2165': attribute type 6 has an invalid length. [ 272.018089][T13223] lo speed is unknown, defaulting to 1000 [ 272.021849][T13225] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2172'. [ 272.061633][T13225] 0·: renamed from c1· (while UP) [ 272.076316][T13225] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 272.144087][T13223] wg1 speed is unknown, defaulting to 1000 [ 272.176405][T13228] lo speed is unknown, defaulting to 1000 [ 272.343349][T13228] wg1 speed is unknown, defaulting to 1000 [ 272.361749][T13213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.404483][T13231] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 272.861592][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2177'. [ 272.951540][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2177'. [ 273.071154][T13246] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.096992][T13254] lo speed is unknown, defaulting to 1000 [ 273.105847][T13254] wg1 speed is unknown, defaulting to 1000 [ 273.294227][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'. [ 273.534123][T13272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2184'. [ 273.866653][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2188'. [ 273.892744][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2188'. [ 273.952359][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2188'. [ 273.961857][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2188'. [ 273.995324][T13294] bridge0: port 1(vlan2) entered blocking state [ 274.027169][T13294] bridge0: port 1(vlan2) entered disabled state [ 274.045419][T13294] vlan2: entered allmulticast mode [ 274.059312][T13294] vlan2: left allmulticast mode [ 274.336153][T13293] bridge0: port 1(vlan2) entered blocking state [ 274.347162][T13293] bridge0: port 1(vlan2) entered disabled state [ 274.357538][T13293] vlan2: entered allmulticast mode [ 274.367080][T13293] vlan2: left allmulticast mode [ 274.534285][T13316] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 274.813646][T13329] ipip0: entered promiscuous mode [ 275.304927][T13355] No such timeout policy "syz0" [ 275.331140][ T9] IPVS: starting estimator thread 0... [ 275.461459][T13364] IPVS: using max 18 ests per chain, 43200 per kthread [ 275.576883][T13376] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 275.599295][T13376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.729269][T13385] netlink: 'syz.4.2215': attribute type 26 has an invalid length. [ 275.930165][T13393] syzkaller1: entered promiscuous mode [ 275.940980][T13393] syzkaller1: entered allmulticast mode [ 275.955671][T13393] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 25 [ 276.017438][T13401] FAULT_INJECTION: forcing a failure. [ 276.017438][T13401] name failslab, interval 1, probability 0, space 0, times 0 [ 276.049073][T13401] CPU: 1 UID: 0 PID: 13401 Comm: syz.3.2221 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 276.049104][T13401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.049117][T13401] Call Trace: [ 276.049125][T13401] [ 276.049133][T13401] dump_stack_lvl+0x241/0x360 [ 276.049165][T13401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.049188][T13401] ? __pfx__printk+0x10/0x10 [ 276.049211][T13401] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 276.049242][T13401] ? __pfx___might_resched+0x10/0x10 [ 276.049275][T13401] should_fail_ex+0x40a/0x550 [ 276.049331][T13401] should_failslab+0xac/0x100 [ 276.049361][T13401] kmem_cache_alloc_node_noprof+0x77/0x380 [ 276.049391][T13401] ? __alloc_skb+0x1c3/0x440 [ 276.049418][T13401] __alloc_skb+0x1c3/0x440 [ 276.049446][T13401] ? __pfx___alloc_skb+0x10/0x10 [ 276.049471][T13401] ? netlink_autobind+0xd6/0x2f0 [ 276.049490][T13401] ? netlink_autobind+0x2b0/0x2f0 [ 276.049515][T13401] netlink_sendmsg+0x634/0xcb0 [ 276.049569][T13401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.049606][T13401] ? aa_sock_msg_perm+0x91/0x160 [ 276.049644][T13401] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.049675][T13401] __sock_sendmsg+0x221/0x270 [ 276.049709][T13401] ____sys_sendmsg+0x53a/0x860 [ 276.049743][T13401] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.049767][T13401] ? __fget_files+0x2a/0x410 [ 276.049801][T13401] ? __fget_files+0x2a/0x410 [ 276.049841][T13401] __sys_sendmsg+0x269/0x350 [ 276.049872][T13401] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.049910][T13401] ? do_sys_openat2+0x17a/0x1d0 [ 276.049969][T13401] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.050004][T13401] ? do_syscall_64+0x100/0x230 [ 276.050035][T13401] ? do_syscall_64+0xb6/0x230 [ 276.050065][T13401] do_syscall_64+0xf3/0x230 [ 276.050092][T13401] ? clear_bhb_loop+0x35/0x90 [ 276.050125][T13401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.050153][T13401] RIP: 0033:0x7fdf2d18d169 [ 276.050172][T13401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.050189][T13401] RSP: 002b:00007fdf2df39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.050212][T13401] RAX: ffffffffffffffda RBX: 00007fdf2d3a5fa0 RCX: 00007fdf2d18d169 [ 276.050228][T13401] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000a [ 276.050241][T13401] RBP: 00007fdf2df39090 R08: 0000000000000000 R09: 0000000000000000 [ 276.050254][T13401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.050266][T13401] R13: 0000000000000000 R14: 00007fdf2d3a5fa0 R15: 00007ffdd86da008 [ 276.050297][T13401] [ 276.313944][T13398] ipt_REJECT: TCP_RESET invalid for non-tcp [ 276.495041][T13412] __nla_validate_parse: 3 callbacks suppressed [ 276.495061][T13412] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2225'. [ 276.530494][T13412] 1·: renamed from c0· (while UP) [ 276.547648][T13412] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 276.732756][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2226'. [ 277.000274][T13442] netlink: 560 bytes leftover after parsing attributes in process `syz.0.2235'. [ 277.010142][T13441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2234'. [ 277.032303][T13441] ipvlan2: entered promiscuous mode [ 277.039345][T13441] bridge0: port 1(ipvlan2) entered blocking state [ 277.046211][T13441] bridge0: port 1(ipvlan2) entered disabled state [ 277.053350][T13441] ipvlan2: entered allmulticast mode [ 277.058856][T13441] bridge0: entered allmulticast mode [ 277.065877][T13441] ipvlan2: left allmulticast mode [ 277.072292][T13441] bridge0: left allmulticast mode [ 277.228995][T13457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2236'. [ 277.240103][T13457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2236'. [ 277.286231][T13453] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2238'. [ 277.317636][T13458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 277.329721][T13458] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2236'. [ 277.356479][T13458] rdma_rxe: rxe_newlink: failed to add lo [ 277.525508][T11437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.534503][T11437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.559055][T13476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.581425][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.589277][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.666130][T13482] netlink: 'syz.0.2246': attribute type 49 has an invalid length. [ 277.673616][T13480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2245'. [ 278.439192][T13508] lo speed is unknown, defaulting to 1000 [ 278.469333][T13508] wg1 speed is unknown, defaulting to 1000 [ 279.084116][T13541] netlink: 'syz.1.2264': attribute type 4 has an invalid length. [ 279.126453][T13541] netlink: 'syz.1.2264': attribute type 4 has an invalid length. [ 279.127929][T13543] xt_l2tp: unknown flags: 10 [ 279.143876][T13544] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 279.958588][T13579] x_tables: unsorted entry at hook 2 [ 279.982177][T13581] sctp: [Deprecated]: syz.2.2278 (pid 13581) Use of int in maxseg socket option. [ 279.982177][T13581] Use struct sctp_assoc_value instead [ 280.125864][T13587] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 280.148579][T13588] sctp: [Deprecated]: syz.2.2281 (pid 13588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.148579][T13588] Use struct sctp_sack_info instead [ 280.347169][T13595] 0·: renamed from c1· (while UP) [ 280.362905][T13595] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 280.553935][T13604] bridge10: entered allmulticast mode [ 280.790257][T13616] bond9: entered promiscuous mode [ 280.801707][T13616] 8021q: adding VLAN 0 to HW filter on device bond9 [ 281.183034][T13626] 1· (unregistering): left promiscuous mode [ 281.310455][T13644] vlan0: entered allmulticast mode [ 281.378072][T13649] 1·: renamed from c0· (while UP) [ 281.385763][T13649] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 281.541008][T13657] __nla_validate_parse: 8 callbacks suppressed [ 281.541028][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 282.021513][T13693] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2310'. [ 282.035756][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 282.061397][T13693] 1·: renamed from c0· (while UP) [ 282.087698][T13693] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 282.206243][T13699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2313'. [ 282.230062][T13694] 1· (unregistering): left promiscuous mode [ 282.282536][T13705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2314'. [ 282.314131][T13700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2314'. [ 282.361188][T13700] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2314'. [ 282.618226][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 282.646246][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2321'. [ 282.698615][T13729] raw_sendmsg: syz.0.2323 forgot to set AF_INET. Fix it! [ 283.117048][T13742] lo speed is unknown, defaulting to 1000 [ 283.137677][T13742] wg1 speed is unknown, defaulting to 1000 [ 283.519771][T13761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2330'. [ 283.581918][ T10] hid-generic 0005:07C0:06E6.0002: item fetching failed at offset 0/1 [ 283.591297][ T10] hid-generic 0005:07C0:06E6.0002: probe with driver hid-generic failed with error -22 [ 284.130358][T13778] Bluetooth: MGMT ver 1.23 [ 285.383454][T13781] lo speed is unknown, defaulting to 1000 [ 285.432042][T13781] wg1 speed is unknown, defaulting to 1000 [ 285.852290][T13804] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 286.095996][T13814] syzkaller1: entered promiscuous mode [ 286.101607][T13814] syzkaller1: entered allmulticast mode [ 286.233380][T13818] netlink: 'syz.1.2346': attribute type 11 has an invalid length. [ 286.284550][T13821] SET target dimension over the limit! [ 286.331885][T13820] lo speed is unknown, defaulting to 1000 [ 286.352070][T13820] wg1 speed is unknown, defaulting to 1000 [ 286.741504][T13832] __nla_validate_parse: 6 callbacks suppressed [ 286.741525][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2351'. [ 286.775016][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2351'. [ 286.833851][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2351'. [ 286.856100][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2351'. [ 286.871280][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2351'. [ 286.903319][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2351'. [ 286.941256][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2351'. [ 286.981885][T13832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2351'. [ 286.999632][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 287.013119][T13848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'. [ 287.024027][T13846] vlan3: entered allmulticast mode [ 287.029197][T13846] batadv0: entered allmulticast mode [ 287.047530][T13846] batadv0: left allmulticast mode [ 287.221573][T13859] netlink: 'syz.0.2361': attribute type 39 has an invalid length. [ 287.501381][T13869] team0: Port device macvlan0 removed [ 287.516001][T13869] team0: Port device bond2 removed [ 287.524700][T13869] bond3: (slave ip6gretap1): Removing an active aggregator [ 287.534131][T13869] bond3: (slave ip6gretap1): Releasing backup interface [ 287.542669][T13869] bond3: (slave ip6gretap1): the permanent HWaddr of slave - c6:9a:3f:86:c5:62 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 287.577024][T13869] bond3: (slave veth3): Releasing backup interface [ 288.317201][T13899] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 288.369132][T13902] FAULT_INJECTION: forcing a failure. [ 288.369132][T13902] name failslab, interval 1, probability 0, space 0, times 0 [ 288.400174][T13902] CPU: 0 UID: 0 PID: 13902 Comm: syz.0.2377 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 288.400205][T13902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.400218][T13902] Call Trace: [ 288.400226][T13902] [ 288.400235][T13902] dump_stack_lvl+0x241/0x360 [ 288.400266][T13902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.400290][T13902] ? __pfx__printk+0x10/0x10 [ 288.400313][T13902] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 288.400344][T13902] ? __pfx___might_resched+0x10/0x10 [ 288.400378][T13902] should_fail_ex+0x40a/0x550 [ 288.400416][T13902] should_failslab+0xac/0x100 [ 288.400445][T13902] __kmalloc_node_noprof+0xe1/0x4d0 [ 288.400474][T13902] ? __kvmalloc_node_noprof+0x72/0x190 [ 288.400513][T13902] __kvmalloc_node_noprof+0x72/0x190 [ 288.400547][T13902] alloc_netdev_mqs+0xac6/0x1210 [ 288.400582][T13902] rtnl_create_link+0x2f9/0xc90 [ 288.400616][T13902] rtnl_newlink_create+0x2e1/0xbd0 [ 288.400645][T13902] ? __pfx_aa_get_newest_label+0x10/0x10 [ 288.400680][T13902] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 288.400706][T13902] ? __pfx___mutex_lock+0x10/0x10 [ 288.400743][T13902] ? ns_capable+0x8a/0xf0 [ 288.400771][T13902] rtnl_newlink+0x167a/0x1d90 [ 288.400806][T13902] ? stack_depot_save_flags+0x37/0x940 [ 288.400854][T13902] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.400883][T13902] ? __netlink_deliver_tap+0x561/0x7f0 [ 288.400919][T13902] ? __pfx_validate_chain+0x10/0x10 [ 288.400940][T13902] ? __sock_sendmsg+0x221/0x270 [ 288.400966][T13902] ? ____sys_sendmsg+0x53a/0x860 [ 288.400994][T13902] ? __sys_sendmsg+0x269/0x350 [ 288.401015][T13902] ? do_syscall_64+0xf3/0x230 [ 288.401038][T13902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.401088][T13902] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 288.401123][T13902] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.401189][T13902] ? mark_lock+0x9a/0x360 [ 288.401214][T13902] ? __lock_acquire+0x1397/0x2100 [ 288.401282][T13902] ? __pfx_lock_release+0x10/0x10 [ 288.401331][T13902] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.401365][T13902] rtnetlink_rcv_msg+0x791/0xcf0 [ 288.401395][T13902] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 288.401433][T13902] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.401473][T13902] ? ref_tracker_free+0x643/0x7e0 [ 288.401502][T13902] netlink_rcv_skb+0x206/0x480 [ 288.401534][T13902] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.401569][T13902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.401626][T13902] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.401660][T13902] netlink_unicast+0x7f6/0x990 [ 288.401698][T13902] ? __pfx_netlink_unicast+0x10/0x10 [ 288.401724][T13902] ? __virt_addr_valid+0x45f/0x530 [ 288.401746][T13902] ? __phys_addr_symbol+0x2f/0x70 [ 288.401766][T13902] ? __check_object_size+0x47a/0x730 [ 288.401801][T13902] netlink_sendmsg+0x8de/0xcb0 [ 288.401847][T13902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.401884][T13902] ? aa_sock_msg_perm+0x91/0x160 [ 288.401922][T13902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.401952][T13902] __sock_sendmsg+0x221/0x270 [ 288.401995][T13902] ____sys_sendmsg+0x53a/0x860 [ 288.402030][T13902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.402052][T13902] ? __fget_files+0x2a/0x410 [ 288.402088][T13902] ? __fget_files+0x2a/0x410 [ 288.402129][T13902] __sys_sendmsg+0x269/0x350 [ 288.402160][T13902] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.402200][T13902] ? do_sys_openat2+0x17a/0x1d0 [ 288.402260][T13902] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 288.402295][T13902] ? do_syscall_64+0x100/0x230 [ 288.402326][T13902] ? do_syscall_64+0xb6/0x230 [ 288.402370][T13902] do_syscall_64+0xf3/0x230 [ 288.402396][T13902] ? clear_bhb_loop+0x35/0x90 [ 288.402438][T13902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.402464][T13902] RIP: 0033:0x7f4e8f78d169 [ 288.402480][T13902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.402496][T13902] RSP: 002b:00007f4e8d5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.402517][T13902] RAX: ffffffffffffffda RBX: 00007f4e8f9a5fa0 RCX: 00007f4e8f78d169 [ 288.402530][T13902] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000a [ 288.402542][T13902] RBP: 00007f4e8d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 288.402554][T13902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.402565][T13902] R13: 0000000000000000 R14: 00007f4e8f9a5fa0 R15: 00007ffdcb191c58 [ 288.402594][T13902] [ 289.667269][T13929] lo speed is unknown, defaulting to 1000 [ 289.722042][T13929] wg1 speed is unknown, defaulting to 1000 [ 290.135807][T13955] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 290.169350][T13955] x_tables: duplicate underflow at hook 2 [ 290.709299][T13975] lo speed is unknown, defaulting to 1000 [ 290.761416][T13978] netlink: 'syz.3.2399': attribute type 11 has an invalid length. [ 290.783166][T13975] wg1 speed is unknown, defaulting to 1000 [ 291.587011][T14024] ipvlan2: entered promiscuous mode [ 291.599545][T14024] bridge0: port 3(ipvlan2) entered blocking state [ 291.606295][T14024] bridge0: port 3(ipvlan2) entered disabled state [ 291.626056][T14024] ipvlan2: entered allmulticast mode [ 291.633931][T14024] bridge0: entered allmulticast mode [ 291.662072][T14024] ipvlan2: left allmulticast mode [ 291.667177][T14024] bridge0: left allmulticast mode [ 291.738406][T14028] hsr0: left allmulticast mode [ 291.748621][T14028] hsr_slave_0: left allmulticast mode [ 291.755507][ T5933] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.774159][T14028] team0: Port device hsr0 removed [ 291.794239][ T5933] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 291.804828][T14028] bond0: (slave netdevsim0): Releasing backup interface [ 291.826223][T14028] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 291.846230][T14038] __nla_validate_parse: 75 callbacks suppressed [ 291.846250][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2418'. [ 291.900148][ T5884] wg1 speed is unknown, defaulting to 1000 [ 292.096167][T14040] syzkaller0: entered promiscuous mode [ 292.113304][T14040] syzkaller0: entered allmulticast mode [ 292.126273][T14046] lo speed is unknown, defaulting to 1000 [ 292.134174][T14046] wg1 speed is unknown, defaulting to 1000 [ 292.176038][T14056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2424'. [ 292.188161][T14051] netlink: 'syz.0.2423': attribute type 9 has an invalid length. [ 292.221959][T14051] netlink: 'syz.0.2423': attribute type 6 has an invalid length. [ 292.249289][T14051] netlink: 'syz.0.2423': attribute type 7 has an invalid length. [ 292.273621][T14051] netlink: 'syz.0.2423': attribute type 8 has an invalid length. [ 292.298555][T14051] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 292.310076][T14051] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2423'. [ 292.448555][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2425'. [ 292.553915][T14067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2427'. [ 292.609950][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2427'. [ 292.629932][T14070] xt_ecn: cannot match TCP bits for non-tcp packets [ 294.233701][T14063] 0· (unregistering): left promiscuous mode [ 294.327606][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2430'. [ 294.394065][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2431'. [ 294.419608][T14080] ipvlan2: entered promiscuous mode [ 294.442934][T14080] bridge0: port 3(ipvlan2) entered blocking state [ 294.450795][T14080] bridge0: port 3(ipvlan2) entered disabled state [ 294.457947][T14080] ipvlan2: entered allmulticast mode [ 294.463630][T14080] bridge0: entered allmulticast mode [ 294.489010][T14080] ipvlan2: left allmulticast mode [ 294.499781][T14080] bridge0: left allmulticast mode [ 294.913218][T14108] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 295.336058][T14122] macsec2: entered promiscuous mode [ 295.351151][T14122] bond0: entered promiscuous mode [ 295.361329][T14122] bond_slave_0: entered promiscuous mode [ 295.396557][T14122] bond_slave_1: entered promiscuous mode [ 295.421597][T14122] macsec2: entered allmulticast mode [ 295.423249][T14126] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.2447'. [ 295.426931][T14122] bond0: entered allmulticast mode [ 295.426953][T14122] bond_slave_0: entered allmulticast mode [ 295.426973][T14122] bond_slave_1: entered allmulticast mode [ 295.459845][T14122] bond0: left allmulticast mode [ 295.465534][T14122] bond_slave_0: left allmulticast mode [ 295.481148][T14122] bond_slave_1: left allmulticast mode [ 295.498481][T14122] bond0: left promiscuous mode [ 295.516852][T14122] bond_slave_0: left promiscuous mode [ 295.524886][T14122] bond_slave_1: left promiscuous mode [ 295.854109][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2455'. [ 295.879832][T14150] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 295.956684][T14153] syz_tun: entered allmulticast mode [ 296.898800][T14201] syz_tun: entered promiscuous mode [ 296.911228][T14201] macsec1: entered promiscuous mode [ 296.924585][T14201] macsec1: entered allmulticast mode [ 296.940453][T14201] syz_tun: entered allmulticast mode [ 296.964115][T14201] syz_tun: left allmulticast mode [ 296.971349][T14201] syz_tun: left promiscuous mode [ 297.018417][T14207] tc_dump_action: action bad kind [ 297.326589][T14226] smc: net device bond0 erased user defined pnetid SYZ2 [ 297.334977][T14228] __nla_validate_parse: 3 callbacks suppressed [ 297.334994][T14228] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2494'. [ 297.578559][T14239] : (slave bond4): Releasing backup interface [ 297.607721][T14239] bond5: (slave vti0): Releasing backup interface [ 297.630583][T14241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2499'. [ 297.827231][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 298.016822][T14261] lo speed is unknown, defaulting to 1000 [ 298.052221][T14270] No such timeout policy "syz0" [ 298.060518][T14261] wg1 speed is unknown, defaulting to 1000 [ 298.336563][T14278] bridge0: port 1(team0) entered blocking state [ 298.348584][T14278] bridge0: port 1(team0) entered disabled state [ 301.560465][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2539'. [ 301.586249][T14348] ipvlan0: entered promiscuous mode [ 301.595989][T14348] bridge0: port 3(ipvlan0) entered blocking state [ 301.604004][T14348] bridge0: port 3(ipvlan0) entered disabled state [ 301.610779][T14348] ipvlan0: entered allmulticast mode [ 301.619855][T14348] bridge0: entered allmulticast mode [ 301.637455][T14348] ipvlan0: left allmulticast mode [ 301.647156][T14348] bridge0: left allmulticast mode [ 301.951242][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 301.963421][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2547'. [ 302.382549][T14403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'. [ 302.407707][T14403] ipvlan0: entered promiscuous mode [ 302.413789][T14403] bridge0: port 3(ipvlan0) entered blocking state [ 302.421614][T14403] bridge0: port 3(ipvlan0) entered disabled state [ 302.428891][T14403] ipvlan0: entered allmulticast mode [ 302.474517][T14403] bridge0: entered allmulticast mode [ 302.484731][T14403] ipvlan0: left allmulticast mode [ 302.489885][T14403] bridge0: left allmulticast mode [ 302.533694][T14408] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 302.578976][T14413] lo speed is unknown, defaulting to 1000 [ 302.597540][T14413] wg1 speed is unknown, defaulting to 1000 [ 302.681560][T14419] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2557'. [ 302.798874][T14421] No such timeout policy "syz0" [ 302.813233][T14424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2563'. [ 302.827151][T14424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2563'. [ 302.829572][T14422] syzkaller1: entered promiscuous mode [ 302.836430][T14424] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2563'. [ 302.852136][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'. [ 302.869913][T14422] syzkaller1: entered allmulticast mode [ 303.076628][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2565'. [ 303.110452][T14422] sit0: left promiscuous mode [ 303.212485][T14422] 1·: left allmulticast mode [ 303.237736][T14422] gretap1: left promiscuous mode [ 303.255257][T14422] bond9: left promiscuous mode [ 303.408897][T14448] openvswitch: netlink: IP tunnel dst address not specified [ 303.422115][T14438] bridge0: port 1(team0) entered disabled state [ 303.534356][T14455] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2570'. [ 303.555370][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2572'. [ 303.585594][T14457] ipvlan2: entered promiscuous mode [ 303.592118][T14457] bridge0: port 3(ipvlan2) entered blocking state [ 303.601958][T14457] bridge0: port 3(ipvlan2) entered disabled state [ 303.609099][T14457] ipvlan2: entered allmulticast mode [ 303.613000][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2565'. [ 303.614707][T14457] bridge0: entered allmulticast mode [ 303.630383][T14457] ipvlan2: left allmulticast mode [ 303.635885][T14457] bridge0: left allmulticast mode [ 303.845204][T14470] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.935262][T14476] FAULT_INJECTION: forcing a failure. [ 303.935262][T14476] name failslab, interval 1, probability 0, space 0, times 0 [ 303.950337][T14476] CPU: 0 UID: 0 PID: 14476 Comm: syz.1.2578 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 303.950367][T14476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.950380][T14476] Call Trace: [ 303.950387][T14476] [ 303.950396][T14476] dump_stack_lvl+0x241/0x360 [ 303.950426][T14476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.950450][T14476] ? __pfx__printk+0x10/0x10 [ 303.950473][T14476] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 303.950505][T14476] ? __pfx___might_resched+0x10/0x10 [ 303.950537][T14476] should_fail_ex+0x40a/0x550 [ 303.950574][T14476] should_failslab+0xac/0x100 [ 303.950605][T14476] kmem_cache_alloc_node_noprof+0x77/0x380 [ 303.950635][T14476] ? __alloc_skb+0x1c3/0x440 [ 303.950661][T14476] __alloc_skb+0x1c3/0x440 [ 303.950688][T14476] ? __pfx___alloc_skb+0x10/0x10 [ 303.950713][T14476] ? netlink_autobind+0xd6/0x2f0 [ 303.950732][T14476] ? netlink_autobind+0x2b0/0x2f0 [ 303.950756][T14476] netlink_sendmsg+0x634/0xcb0 [ 303.950800][T14476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.950842][T14476] ? aa_sock_msg_perm+0x91/0x160 [ 303.950886][T14476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.950916][T14476] __sock_sendmsg+0x221/0x270 [ 303.950950][T14476] ____sys_sendmsg+0x53a/0x860 [ 303.950982][T14476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.951005][T14476] ? __fget_files+0x2a/0x410 [ 303.951039][T14476] ? __fget_files+0x2a/0x410 [ 303.951077][T14476] __sys_sendmsg+0x269/0x350 [ 303.951108][T14476] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.951145][T14476] ? do_sys_openat2+0x17a/0x1d0 [ 303.951202][T14476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 303.951237][T14476] ? do_syscall_64+0x100/0x230 [ 303.951267][T14476] ? do_syscall_64+0xb6/0x230 [ 303.951297][T14476] do_syscall_64+0xf3/0x230 [ 303.951324][T14476] ? clear_bhb_loop+0x35/0x90 [ 303.951358][T14476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.951386][T14476] RIP: 0033:0x7f8a22f8d169 [ 303.951404][T14476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.951422][T14476] RSP: 002b:00007f8a23d5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.951444][T14476] RAX: ffffffffffffffda RBX: 00007f8a231a5fa0 RCX: 00007f8a22f8d169 [ 303.951459][T14476] RDX: 0000000000000000 RSI: 0000400000000180 RDI: 0000000000000003 [ 303.951472][T14476] RBP: 00007f8a23d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 303.951484][T14476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.951497][T14476] R13: 0000000000000000 R14: 00007f8a231a5fa0 R15: 00007ffe6db07988 [ 303.951527][T14476] [ 304.669992][T14506] atomic_op ffff88802a757998 conn xmit_atomic 0000000000000000 [ 304.990594][T14531] macvlan1: entered promiscuous mode [ 304.998679][T14531] bond0: entered promiscuous mode [ 305.010241][T14531] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 305.309529][T14540] IPv6: NLM_F_REPLACE set, but no existing node found! [ 305.978318][T14558] FAULT_INJECTION: forcing a failure. [ 305.978318][T14558] name failslab, interval 1, probability 0, space 0, times 0 [ 306.009570][T14558] CPU: 0 UID: 0 PID: 14558 Comm: syz.4.2606 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 306.009615][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 306.009628][T14558] Call Trace: [ 306.009635][T14558] [ 306.009644][T14558] dump_stack_lvl+0x241/0x360 [ 306.009675][T14558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.009698][T14558] ? __pfx__printk+0x10/0x10 [ 306.009722][T14558] ? __kmalloc_cache_noprof+0x48/0x390 [ 306.009753][T14558] ? __pfx___might_resched+0x10/0x10 [ 306.009786][T14558] should_fail_ex+0x40a/0x550 [ 306.009822][T14558] should_failslab+0xac/0x100 [ 306.009849][T14558] __kmalloc_cache_noprof+0x70/0x390 [ 306.009877][T14558] ? ipvlan_init+0x67c/0xcb0 [ 306.009907][T14558] ipvlan_init+0x67c/0xcb0 [ 306.009941][T14558] register_netdevice+0x6d7/0x1b70 [ 306.009974][T14558] ? __asan_memset+0x23/0x50 [ 306.009995][T14558] ? lockdep_init_map_type+0xa1/0x910 [ 306.010029][T14558] ? __pfx_register_netdevice+0x10/0x10 [ 306.010053][T14558] ? dev_addr_check+0x20/0x250 [ 306.010075][T14558] ? dev_addr_mod+0xf1/0x430 [ 306.010100][T14558] ? __asan_memset+0x23/0x50 [ 306.010148][T14558] ipvlan_link_new+0x412/0xa80 [ 306.010193][T14558] ? __pfx_ipvlan_link_new+0x10/0x10 [ 306.010221][T14558] rtnl_newlink_create+0x37b/0xbd0 [ 306.010249][T14558] ? __pfx_aa_get_newest_label+0x10/0x10 [ 306.010286][T14558] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 306.010312][T14558] ? __pfx___mutex_lock+0x10/0x10 [ 306.010348][T14558] ? ns_capable+0x8a/0xf0 [ 306.010377][T14558] rtnl_newlink+0x167a/0x1d90 [ 306.010410][T14558] ? stack_depot_save_flags+0x37/0x940 [ 306.010462][T14558] ? __pfx_rtnl_newlink+0x10/0x10 [ 306.010492][T14558] ? __netlink_deliver_tap+0x561/0x7f0 [ 306.010522][T14558] ? __pfx_validate_chain+0x10/0x10 [ 306.010544][T14558] ? __sock_sendmsg+0x221/0x270 [ 306.010578][T14558] ? ____sys_sendmsg+0x53a/0x860 [ 306.010600][T14558] ? __sys_sendmsg+0x269/0x350 [ 306.010621][T14558] ? do_syscall_64+0xf3/0x230 [ 306.010646][T14558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.010696][T14558] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 306.010730][T14558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.010769][T14558] ? mark_lock+0x9a/0x360 [ 306.010791][T14558] ? __lock_acquire+0x1397/0x2100 [ 306.010854][T14558] ? __pfx_lock_release+0x10/0x10 [ 306.010904][T14558] ? __pfx_rtnl_newlink+0x10/0x10 [ 306.010935][T14558] rtnetlink_rcv_msg+0x791/0xcf0 [ 306.010963][T14558] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 306.010998][T14558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 306.011035][T14558] ? ref_tracker_free+0x643/0x7e0 [ 306.011061][T14558] netlink_rcv_skb+0x206/0x480 [ 306.011092][T14558] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 306.011120][T14558] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.011170][T14558] ? netlink_deliver_tap+0x2e/0x1b0 [ 306.011199][T14558] netlink_unicast+0x7f6/0x990 [ 306.011248][T14558] ? __pfx_netlink_unicast+0x10/0x10 [ 306.011270][T14558] ? __virt_addr_valid+0x45f/0x530 [ 306.011289][T14558] ? __phys_addr_symbol+0x2f/0x70 [ 306.011305][T14558] ? __check_object_size+0x47a/0x730 [ 306.011335][T14558] netlink_sendmsg+0x8de/0xcb0 [ 306.011373][T14558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.011404][T14558] ? aa_sock_msg_perm+0x91/0x160 [ 306.011437][T14558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.011462][T14558] __sock_sendmsg+0x221/0x270 [ 306.011491][T14558] ____sys_sendmsg+0x53a/0x860 [ 306.011521][T14558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.011540][T14558] ? __fget_files+0x2a/0x410 [ 306.011575][T14558] ? __fget_files+0x2a/0x410 [ 306.011610][T14558] __sys_sendmsg+0x269/0x350 [ 306.011635][T14558] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.011669][T14558] ? do_sys_openat2+0x17a/0x1d0 [ 306.011718][T14558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.011747][T14558] ? do_syscall_64+0x100/0x230 [ 306.011774][T14558] ? do_syscall_64+0xb6/0x230 [ 306.011799][T14558] do_syscall_64+0xf3/0x230 [ 306.011823][T14558] ? clear_bhb_loop+0x35/0x90 [ 306.011851][T14558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.011876][T14558] RIP: 0033:0x7fd1e718d169 [ 306.011892][T14558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.011908][T14558] RSP: 002b:00007fd1e7faf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.011927][T14558] RAX: ffffffffffffffda RBX: 00007fd1e73a5fa0 RCX: 00007fd1e718d169 [ 306.011940][T14558] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 000000000000000a [ 306.011952][T14558] RBP: 00007fd1e7faf090 R08: 0000000000000000 R09: 0000000000000000 [ 306.011963][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.011973][T14558] R13: 0000000000000000 R14: 00007fd1e73a5fa0 R15: 00007ffda4f85288 [ 306.011999][T14558] [ 306.685035][T14588] lo speed is unknown, defaulting to 1000 [ 306.708946][T14588] wg1 speed is unknown, defaulting to 1000 [ 307.437076][T14623] __nla_validate_parse: 82 callbacks suppressed [ 307.437089][T14623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2624'. [ 307.487104][T14623] FAULT_INJECTION: forcing a failure. [ 307.487104][T14623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.527025][T14623] CPU: 0 UID: 0 PID: 14623 Comm: syz.2.2624 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 307.527050][T14623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.527060][T14623] Call Trace: [ 307.527066][T14623] [ 307.527072][T14623] dump_stack_lvl+0x241/0x360 [ 307.527098][T14623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.527117][T14623] ? __pfx__printk+0x10/0x10 [ 307.527135][T14623] ? __pfx_lock_release+0x10/0x10 [ 307.527161][T14623] ? __lock_acquire+0x1397/0x2100 [ 307.527191][T14623] should_fail_ex+0x40a/0x550 [ 307.527217][T14623] _copy_from_user+0x2d/0xb0 [ 307.527240][T14623] kstrtouint_from_user+0xc6/0x190 [ 307.527259][T14623] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 307.527296][T14623] ? __pfx_lock_acquire+0x10/0x10 [ 307.527329][T14623] proc_fail_nth_write+0xaa/0x2d0 [ 307.527354][T14623] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 307.527385][T14623] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 307.527416][T14623] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 307.527442][T14623] vfs_write+0x29f/0xd10 [ 307.527463][T14623] ? fdget_pos+0x254/0x320 [ 307.527487][T14623] ? __mutex_unlock_slowpath+0x227/0x800 [ 307.527515][T14623] ? __pfx_vfs_write+0x10/0x10 [ 307.527530][T14623] ? do_sys_openat2+0x17a/0x1d0 [ 307.527555][T14623] ? __fget_files+0x2a/0x410 [ 307.527579][T14623] ? __fget_files+0x395/0x410 [ 307.527601][T14623] ? __fget_files+0x2a/0x410 [ 307.527631][T14623] ksys_write+0x18f/0x2b0 [ 307.527652][T14623] ? __pfx_ksys_write+0x10/0x10 [ 307.527681][T14623] ? do_syscall_64+0x100/0x230 [ 307.527706][T14623] ? do_syscall_64+0xb6/0x230 [ 307.527730][T14623] do_syscall_64+0xf3/0x230 [ 307.527750][T14623] ? clear_bhb_loop+0x35/0x90 [ 307.527775][T14623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.527796][T14623] RIP: 0033:0x7f165398bc1f [ 307.527826][T14623] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 307.527840][T14623] RSP: 002b:00007f16548ba030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 307.527859][T14623] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f165398bc1f [ 307.527870][T14623] RDX: 0000000000000001 RSI: 00007f16548ba0a0 RDI: 000000000000000e [ 307.527881][T14623] RBP: 00007f16548ba090 R08: 0000000000000000 R09: 0000000000000000 [ 307.527891][T14623] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 307.527901][T14623] R13: 0000000000000000 R14: 00007f1653ba5fa0 R15: 00007fffc75f21e8 [ 307.527931][T14623] [ 307.907681][ T2973] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.047749][T14626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2626'. [ 308.085819][T14626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2626'. [ 308.120226][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.130374][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.131059][T14626] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2626'. [ 308.138840][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.154823][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.162618][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.170101][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.193618][ T2973] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.284914][T14631] lo speed is unknown, defaulting to 1000 [ 308.291767][T14631] wg1 speed is unknown, defaulting to 1000 [ 308.365489][ T2973] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.470544][T14641] lo speed is unknown, defaulting to 1000 [ 308.552315][ T2973] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 308.696402][ T2973] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.750143][T14641] wg1 speed is unknown, defaulting to 1000 [ 308.833225][T14665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2638'. [ 309.040295][T14631] chnl_net:caif_netlink_parms(): no params data found [ 309.206137][T14683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2641'. [ 309.228503][T14683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2641'. [ 309.238325][T14683] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2641'. [ 309.640410][T14688] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2643'. [ 309.886958][ T2973]  (unregistering): Released all slaves [ 309.897926][ T2973] bond1 (unregistering): Released all slaves [ 309.908912][ T2973] bond2 (unregistering): Released all slaves [ 309.920726][ T2973] bond3 (unregistering): Released all slaves [ 310.041312][ T2973] bond4 (unregistering): Released all slaves [ 310.052975][ T2973] bond0 (unregistering): Released all slaves [ 310.161414][ T2973] bond5 (unregistering): Released all slaves [ 310.191236][ T5835] Bluetooth: hci3: command tx timeout [ 310.311729][T14631] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.345767][T14631] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.360538][T14631] bridge_slave_0: entered allmulticast mode [ 310.393270][T14631] bridge_slave_0: entered promiscuous mode [ 310.415146][ T2973] : left promiscuous mode [ 310.460376][T14631] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.476495][T14631] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.497499][T14631] bridge_slave_1: entered allmulticast mode [ 310.516859][T14631] bridge_slave_1: entered promiscuous mode [ 310.531300][ T2973] : left promiscuous mode [ 310.560361][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'. [ 310.609496][T14631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.634532][T14631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.651578][ T2973] tipc: Disabling bearer [ 310.673598][ T2973] tipc: Left network mode [ 310.734244][T14631] team0: Port device team_slave_0 added [ 310.754732][T14631] team0: Port device team_slave_1 added [ 310.806570][T14705] lo speed is unknown, defaulting to 1000 [ 310.900772][T14705] wg1 speed is unknown, defaulting to 1000 [ 310.910543][T14631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.930216][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.956790][T14631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.010081][T14631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.022457][T14631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.057465][T14631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.117489][T14716] lo speed is unknown, defaulting to 1000 [ 311.253927][T14716] wg1 speed is unknown, defaulting to 1000 [ 311.414710][T14631] hsr_slave_0: entered promiscuous mode [ 311.430757][T14631] hsr_slave_1: entered promiscuous mode [ 311.439179][T14631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.454877][T14631] Cannot create hsr debugfs directory [ 311.521514][T14728] tipc: Disabling bearer [ 311.631568][ T2973] hsr_slave_0: left promiscuous mode [ 311.637903][ T2973] 1·: left promiscuous mode [ 311.695789][ T2973] veth0_macvtap: left promiscuous mode [ 311.705943][ T2973] veth1_vlan: left promiscuous mode [ 311.714376][ T2973] veth0_vlan: left promiscuous mode [ 312.285543][ T5835] Bluetooth: hci3: command tx timeout [ 312.883762][T14748] __nla_validate_parse: 2 callbacks suppressed [ 312.883782][T14748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2661'. [ 312.920183][T14748] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2661'. [ 313.071779][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 313.090210][ T2973] IPVS: stop unused estimator thread 0... [ 313.167520][T14760] 1· (unregistering): left promiscuous mode [ 313.189808][T14763] vlan1: entered promiscuous mode [ 313.200792][T14763] veth1: entered promiscuous mode [ 313.208148][T14763] veth1: left promiscuous mode [ 313.398614][T14778] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2667'. [ 313.476787][T14778] pimreg: entered allmulticast mode [ 313.544338][T14780] netlink: 'syz.0.2670': attribute type 39 has an invalid length. [ 313.691678][T14631] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.710073][T14631] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.738355][T14631] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.763703][T14631] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.802896][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 313.878306][T14631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.905175][T14631] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.107578][T14771] pimreg: left allmulticast mode [ 314.167203][T14793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2675'. [ 314.177427][T14793] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2675'. [ 314.363867][T14806] netlink: 'syz.2.2678': attribute type 9 has an invalid length. [ 314.375357][T14806] netlink: 'syz.2.2678': attribute type 6 has an invalid length. [ 314.384166][T14806] netlink: 'syz.2.2678': attribute type 7 has an invalid length. [ 314.392359][T14806] netlink: 'syz.2.2678': attribute type 8 has an invalid length. [ 314.491686][T14808] 8021q: VLANs not supported on gre0 [ 314.758570][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'. [ 314.951082][T14835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2688'. [ 314.961921][T14836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2687'. [ 315.095000][T14838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.124750][T14838] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.154208][T14838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.398311][T14841] lo speed is unknown, defaulting to 1000 [ 315.409428][T14841] wg1 speed is unknown, defaulting to 1000 [ 315.672472][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.682921][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.691011][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.699501][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.713512][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 315.724230][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.793779][T14846] lo speed is unknown, defaulting to 1000 [ 315.795284][T11442] bridge_slave_1: left allmulticast mode [ 315.811931][T11442] bridge_slave_1: left promiscuous mode [ 315.819452][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.851809][T11442] bridge_slave_0: left allmulticast mode [ 315.862177][T11442] bridge_slave_0: left promiscuous mode [ 315.868060][T11442] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.415401][T11442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.434892][T11442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.448943][T11442] bond0 (unregistering): Released all slaves [ 316.466985][T14846] wg1 speed is unknown, defaulting to 1000 [ 316.668940][T11442] hsr_slave_0: left promiscuous mode [ 316.680531][T11442] hsr_slave_1: left promiscuous mode [ 316.700545][T11442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.721852][T11442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.051890][T11442] team0 (unregistering): Port device team_slave_1 removed [ 317.084778][T11442] team0 (unregistering): Port device team_slave_0 removed [ 317.375619][T14882] ipvlan0: entered promiscuous mode [ 317.381627][T14882] bridge0: port 3(ipvlan0) entered blocking state [ 317.389919][T14882] bridge0: port 3(ipvlan0) entered disabled state [ 317.396990][T14882] ipvlan0: entered allmulticast mode [ 317.402520][T14882] bridge0: entered allmulticast mode [ 317.409218][T14882] ipvlan0: left allmulticast mode [ 317.414336][T14882] bridge0: left allmulticast mode [ 317.689860][T14846] chnl_net:caif_netlink_parms(): no params data found [ 317.791154][ T5835] Bluetooth: hci3: command tx timeout [ 317.915232][T14912] __nla_validate_parse: 6 callbacks suppressed [ 317.915251][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 317.921372][T14906] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 317.998987][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 318.049872][T14846] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.067332][T14846] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.086241][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 318.087667][T14846] bridge_slave_0: entered allmulticast mode [ 318.119508][T14846] bridge_slave_0: entered promiscuous mode [ 318.136764][T14846] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.155502][T14846] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.171974][T14846] bridge_slave_1: entered allmulticast mode [ 318.189334][T14846] bridge_slave_1: entered promiscuous mode [ 318.232583][T14923] netlink: 'syz.2.2714': attribute type 21 has an invalid length. [ 318.280749][T14923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2714'. [ 318.294331][T14846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.320740][T14846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.402052][T14846] team0: Port device team_slave_0 added [ 318.421787][T14846] team0: Port device team_slave_1 added [ 318.479262][T14941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'. [ 318.544513][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2721'. [ 318.581509][T14944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2721'. [ 318.590501][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2721'. [ 318.627337][T14944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2721'. [ 318.638873][T14948] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2723'. [ 318.678709][T14846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.697964][T14846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.772134][T14846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.801497][T14846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.808569][T14846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.835508][T14846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.934480][T14846] hsr_slave_0: entered promiscuous mode [ 318.958625][T14846] hsr_slave_1: entered promiscuous mode [ 318.976147][T14846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.995530][T14846] Cannot create hsr debugfs directory [ 319.342733][T14967] lo speed is unknown, defaulting to 1000 [ 319.383819][T14972] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 319.394092][T14967] wg1 speed is unknown, defaulting to 1000 [ 319.406051][T14974] netlink: 'syz.2.2733': attribute type 33 has an invalid length. [ 319.593409][T14846] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 319.825505][T14846] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.871110][ T5835] Bluetooth: hci3: command tx timeout [ 319.915621][T14846] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.946527][T14846] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.252436][T14846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.309598][T14846] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.329235][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.336418][T11435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.383836][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.391082][T11435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.419012][T14990] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 320.445448][T14990] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 320.480306][T14990] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 320.524752][T14967] lo speed is unknown, defaulting to 1000 [ 320.554696][T14967] wg1 speed is unknown, defaulting to 1000 [ 320.983163][T15011] netlink: zone id is out of range [ 320.998083][T15012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.027877][T15011] netlink: zone id is out of range [ 321.049760][T15004] team0: left allmulticast mode [ 321.056294][T15011] netlink: zone id is out of range [ 321.071907][T15011] netlink: zone id is out of range [ 321.078761][T15004] dummy0: left promiscuous mode [ 321.091024][T15011] netlink: zone id is out of range [ 321.096387][T15011] netlink: zone id is out of range [ 321.101354][T15004] dummy0: left allmulticast mode [ 321.110091][T15011] netlink: zone id is out of range [ 321.125715][T15011] netlink: zone id is out of range [ 321.143112][T15011] netlink: zone id is out of range [ 321.375914][T15004] vlan0: left promiscuous mode [ 321.383969][T15004] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 321.408956][T15004] macvtap1: left promiscuous mode [ 321.421261][T15004] macvtap1: left allmulticast mode [ 321.430552][T15004] ipip0: left promiscuous mode [ 321.461123][T15004] geneve2: left promiscuous mode [ 321.484374][T15004] ipip1: left promiscuous mode [ 321.524585][T15004] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.538240][T15004] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.553812][T15004] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.562816][T15004] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.577592][T15004] bond0: left promiscuous mode [ 321.583200][T15004] macvlan1: left promiscuous mode [ 321.597296][ T9] wg1 speed is unknown, defaulting to 1000 [ 321.669406][T15033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 321.951026][ T5835] Bluetooth: hci3: command tx timeout [ 322.006206][T14846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.528302][T14846] veth0_vlan: entered promiscuous mode [ 322.563706][T14846] veth1_vlan: entered promiscuous mode [ 322.634036][T14846] veth0_macvtap: entered promiscuous mode [ 322.649012][T14846] veth1_macvtap: entered promiscuous mode [ 322.686548][T14846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.708026][T14846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.764111][T14846] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.792337][T14846] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.804081][T14846] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.813207][T14846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.948376][T15087] bridge0: port 3(team0) entered blocking state [ 322.957340][T15087] bridge0: port 3(team0) entered disabled state [ 322.964041][T15087] team0: entered allmulticast mode [ 322.969203][T15087] team_slave_0: entered allmulticast mode [ 322.988050][T15087] team_slave_1: entered allmulticast mode [ 323.015237][T15087] bond3: entered allmulticast mode [ 323.016145][T15093] __nla_validate_parse: 24 callbacks suppressed [ 323.016164][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'. [ 323.028216][T15087] bond4: entered allmulticast mode [ 323.046342][T15087] bond5: entered allmulticast mode [ 323.051663][T15087] bond6: entered allmulticast mode [ 323.063005][T15087] team0: entered promiscuous mode [ 323.068222][T15087] team_slave_0: entered promiscuous mode [ 323.076778][T15087] team_slave_1: entered promiscuous mode [ 323.083804][T15087] bond3: entered promiscuous mode [ 323.089176][T15087] bond4: entered promiscuous mode [ 323.094708][T15087] bond5: entered promiscuous mode [ 323.101745][T15087] bond6: entered promiscuous mode [ 323.116846][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 323.143616][T11442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.183023][T11442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.232208][T11442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.240087][T11442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.290397][T15097] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 323.589766][T15109] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2768'. [ 323.618657][T15115] sctp: [Deprecated]: syz.2.2769 (pid 15115) Use of int in max_burst socket option. [ 323.618657][T15115] Use struct sctp_assoc_value instead [ 323.645031][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2768'. [ 323.654203][T15116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2768'. [ 323.696298][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 323.731357][T15109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.739869][T15118] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2771'. [ 323.753348][T15109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.843793][T15118] 0·: renamed from hsr_slave_1 (while UP) [ 323.860529][T15118] 0·: entered allmulticast mode [ 323.981212][T15128] bridge0: port 1(team0) entered blocking state [ 323.987789][T15128] bridge0: port 1(team0) entered disabled state [ 323.994488][T15128] team0: entered allmulticast mode [ 324.031189][ T5835] Bluetooth: hci3: command tx timeout [ 324.155821][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2776'. [ 324.310007][T15140] lo speed is unknown, defaulting to 1000 [ 324.317059][T15140] wg1 speed is unknown, defaulting to 1000 [ 324.428402][T15144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.443048][T15144] team0: Port device bond5 added [ 324.615115][T15162] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2786'. [ 324.771969][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2788'. [ 324.797119][T15172] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.327228][T15198] 8021q: adding VLAN 0 to HW filter on device bond10 [ 325.406478][T15198] bond10: entered promiscuous mode [ 325.428001][T15198] bond10: entered allmulticast mode [ 325.435263][T15198] team0: Port device bond10 added [ 325.731685][T15232] veth1: entered allmulticast mode [ 326.150991][T15248] wireguard0: entered promiscuous mode [ 326.156514][T15248] wireguard0: entered allmulticast mode [ 326.253254][T15263] net_ratelimit: 2099 callbacks suppressed [ 326.253274][T15263] openvswitch: netlink: Missing valid actions attribute. [ 326.269183][T15263] openvswitch: netlink: Actions may not be safe on all matching packets [ 326.527898][T15277] netlink: 'syz.3.2819': attribute type 64 has an invalid length. [ 326.625233][T15286] xt_connbytes: Forcing CT accounting to be enabled [ 326.634536][T15286] Cannot find add_set index 2 as target [ 326.734603][T15290] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 326.834998][T15298] lo speed is unknown, defaulting to 1000 [ 326.846120][T15298] wg1 speed is unknown, defaulting to 1000 [ 327.244824][T15327] bridge0: port 3(team0) entered blocking state [ 327.252647][T15327] bridge0: port 3(team0) entered disabled state [ 327.259133][T15327] team0: entered allmulticast mode [ 327.269086][T15327] team_slave_0: entered allmulticast mode [ 327.277442][T15327] team_slave_1: entered allmulticast mode [ 327.289126][T15327] team0: entered promiscuous mode [ 327.311089][T15327] team_slave_0: entered promiscuous mode [ 327.321136][T15327] team_slave_1: entered promiscuous mode [ 327.345572][T15327] bridge0: port 3(team0) entered blocking state [ 327.351994][T15327] bridge0: port 3(team0) entered forwarding state [ 327.544335][T15346] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 327.728697][T15350] 0· (unregistering): left promiscuous mode [ 327.992916][T15360] netlink: 'syz.0.2842': attribute type 19 has an invalid length. [ 328.034803][T15360] __nla_validate_parse: 11 callbacks suppressed [ 328.034824][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2842'. [ 328.248451][T15360] bond0: (slave bond_slave_0): Releasing backup interface [ 328.468416][T15392] team0: Device gtp0 is of different type [ 328.511780][T15394] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 328.549165][T15396] lo speed is unknown, defaulting to 1000 [ 328.559083][T15396] wg1 speed is unknown, defaulting to 1000 [ 328.582768][T15400] netlink: 'syz.2.2858': attribute type 8 has an invalid length. [ 328.747408][T15406] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2859'. [ 328.975736][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2862'. [ 328.988226][T15413] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 329.567230][T15436] openvswitch: netlink: Message has 8 unknown bytes. [ 329.614227][T15436] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2869'. [ 329.711663][T15441] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2870'. [ 329.805395][T15443] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2872'. [ 330.403505][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2882'. [ 330.418847][T15477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2882'. [ 330.491803][T15485] FAULT_INJECTION: forcing a failure. [ 330.491803][T15485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.512760][T15477] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 330.532606][T15485] CPU: 0 UID: 0 PID: 15485 Comm: syz.5.2886 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 330.532636][T15485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.532649][T15485] Call Trace: [ 330.532656][T15485] [ 330.532665][T15485] dump_stack_lvl+0x241/0x360 [ 330.532706][T15485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.532727][T15485] ? __pfx__printk+0x10/0x10 [ 330.532748][T15485] ? __pfx_lock_release+0x10/0x10 [ 330.532785][T15485] should_fail_ex+0x40a/0x550 [ 330.532819][T15485] _copy_from_iter+0x1df/0x1c40 [ 330.532843][T15485] ? __virt_addr_valid+0x183/0x530 [ 330.532861][T15485] ? __pfx_lock_release+0x10/0x10 [ 330.532896][T15485] ? __alloc_skb+0x28f/0x440 [ 330.532915][T15485] ? __pfx__copy_from_iter+0x10/0x10 [ 330.532940][T15485] ? __virt_addr_valid+0x183/0x530 [ 330.532958][T15485] ? __virt_addr_valid+0x183/0x530 [ 330.532974][T15485] ? __virt_addr_valid+0x45f/0x530 [ 330.532993][T15485] ? __phys_addr_symbol+0x2f/0x70 [ 330.533011][T15485] ? __check_object_size+0x47a/0x730 [ 330.533041][T15485] netlink_sendmsg+0x742/0xcb0 [ 330.533086][T15485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.533120][T15485] ? aa_sock_msg_perm+0x91/0x160 [ 330.533154][T15485] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.533181][T15485] __sock_sendmsg+0x221/0x270 [ 330.533212][T15485] ____sys_sendmsg+0x53a/0x860 [ 330.533242][T15485] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.533262][T15485] ? __fget_files+0x2a/0x410 [ 330.533292][T15485] ? __fget_files+0x2a/0x410 [ 330.533328][T15485] __sys_sendmsg+0x269/0x350 [ 330.533356][T15485] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.533390][T15485] ? do_sys_openat2+0x17a/0x1d0 [ 330.533443][T15485] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.533473][T15485] ? do_syscall_64+0x100/0x230 [ 330.533501][T15485] ? do_syscall_64+0xb6/0x230 [ 330.533528][T15485] do_syscall_64+0xf3/0x230 [ 330.533552][T15485] ? clear_bhb_loop+0x35/0x90 [ 330.533583][T15485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.533608][T15485] RIP: 0033:0x7f545598d169 [ 330.533625][T15485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.533642][T15485] RSP: 002b:00007f545671b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.533662][T15485] RAX: ffffffffffffffda RBX: 00007f5455ba5fa0 RCX: 00007f545598d169 [ 330.533677][T15485] RDX: 0000000000040000 RSI: 0000400000000540 RDI: 0000000000000003 [ 330.533689][T15485] RBP: 00007f545671b090 R08: 0000000000000000 R09: 0000000000000000 [ 330.533701][T15485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.533712][T15485] R13: 0000000000000000 R14: 00007f5455ba5fa0 R15: 00007ffde08c5338 [ 330.533740][T15485] [ 330.540455][T15477] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 330.891389][T15489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2887'. [ 330.903259][T15489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2887'. [ 330.927979][T15493] x_tables: duplicate underflow at hook 2 [ 331.052057][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.064368][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.074271][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.087619][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.108794][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 331.116425][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.171549][T15494] lo speed is unknown, defaulting to 1000 [ 331.172783][T15498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.182101][T15494] wg1 speed is unknown, defaulting to 1000 [ 331.199033][T15503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.275189][T15506] bridge0: port 4(ipvlan2) entered blocking state [ 331.290367][T15506] bridge0: port 4(ipvlan2) entered disabled state [ 331.297669][T15506] ipvlan2: entered allmulticast mode [ 331.311573][T15506] bridge0: entered allmulticast mode [ 331.318676][T15506] ipvlan2: left allmulticast mode [ 331.324051][T15506] bridge0: left allmulticast mode [ 331.453944][T15520] FAULT_INJECTION: forcing a failure. [ 331.453944][T15520] name failslab, interval 1, probability 0, space 0, times 0 [ 331.470575][T15520] CPU: 0 UID: 0 PID: 15520 Comm: syz.5.2897 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 331.470603][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.470615][T15520] Call Trace: [ 331.470622][T15520] [ 331.470631][T15520] dump_stack_lvl+0x241/0x360 [ 331.470661][T15520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.470684][T15520] ? __pfx__printk+0x10/0x10 [ 331.470719][T15520] should_fail_ex+0x40a/0x550 [ 331.470754][T15520] should_failslab+0xac/0x100 [ 331.470783][T15520] ? skb_clone+0x20c/0x390 [ 331.470807][T15520] kmem_cache_alloc_noprof+0x70/0x380 [ 331.470842][T15520] skb_clone+0x20c/0x390 [ 331.470871][T15520] __netlink_deliver_tap+0x3c4/0x7f0 [ 331.470917][T15520] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.470946][T15520] netlink_deliver_tap+0x19d/0x1b0 [ 331.470976][T15520] netlink_unicast+0x7c4/0x990 [ 331.471018][T15520] ? __pfx_netlink_unicast+0x10/0x10 [ 331.471043][T15520] ? __virt_addr_valid+0x45f/0x530 [ 331.471065][T15520] ? __phys_addr_symbol+0x2f/0x70 [ 331.471084][T15520] ? __check_object_size+0x47a/0x730 [ 331.471117][T15520] netlink_sendmsg+0x8de/0xcb0 [ 331.471159][T15520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.471195][T15520] ? aa_sock_msg_perm+0x91/0x160 [ 331.471252][T15520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.471282][T15520] __sock_sendmsg+0x221/0x270 [ 331.471316][T15520] ____sys_sendmsg+0x53a/0x860 [ 331.471351][T15520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.471374][T15520] ? __fget_files+0x2a/0x410 [ 331.471409][T15520] ? __fget_files+0x2a/0x410 [ 331.471450][T15520] __sys_sendmsg+0x269/0x350 [ 331.471480][T15520] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.471519][T15520] ? do_sys_openat2+0x17a/0x1d0 [ 331.471579][T15520] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.471613][T15520] ? do_syscall_64+0x100/0x230 [ 331.471645][T15520] ? do_syscall_64+0xb6/0x230 [ 331.471675][T15520] do_syscall_64+0xf3/0x230 [ 331.471703][T15520] ? clear_bhb_loop+0x35/0x90 [ 331.471736][T15520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.471763][T15520] RIP: 0033:0x7f545598d169 [ 331.471782][T15520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.471800][T15520] RSP: 002b:00007f545671b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.471823][T15520] RAX: ffffffffffffffda RBX: 00007f5455ba5fa0 RCX: 00007f545598d169 [ 331.471839][T15520] RDX: 0000000000040000 RSI: 0000400000000540 RDI: 0000000000000003 [ 331.471852][T15520] RBP: 00007f545671b090 R08: 0000000000000000 R09: 0000000000000000 [ 331.471865][T15520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.471878][T15520] R13: 0000000000000000 R14: 00007f5455ba5fa0 R15: 00007ffde08c5338 [ 331.471910][T15520] [ 331.496474][T15515] lo speed is unknown, defaulting to 1000 [ 331.668210][T15527] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 331.767739][T15494] chnl_net:caif_netlink_parms(): no params data found [ 331.789107][T15515] wg1 speed is unknown, defaulting to 1000 [ 331.799762][T15528] ip6gre2: entered promiscuous mode [ 331.920297][T15531] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 332.063870][T15494] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.085783][T15494] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.100501][T15494] bridge_slave_0: entered allmulticast mode [ 332.123008][T15494] bridge_slave_0: entered promiscuous mode [ 332.143346][T15494] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.150501][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.180802][T15494] bridge_slave_1: entered allmulticast mode [ 332.199864][T15494] bridge_slave_1: entered promiscuous mode [ 332.437666][T15494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.502713][T15494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.642710][T15494] team0: Port device team_slave_0 added [ 332.686608][T15494] team0: Port device team_slave_1 added [ 332.937399][T15494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.991236][T15494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.101211][T15494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.161093][ T5835] Bluetooth: hci5: command tx timeout [ 333.213724][T15494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.222423][T15600] netlink: 'syz.5.2912': attribute type 1 has an invalid length. [ 333.245841][T15494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.330998][T15494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.562541][T15615] __nla_validate_parse: 10 callbacks suppressed [ 333.562562][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 333.621197][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2913'. [ 333.674497][T15494] hsr_slave_0: entered promiscuous mode [ 333.725465][T15494] hsr_slave_1: entered promiscuous mode [ 333.741855][T15494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.749480][T15494] Cannot create hsr debugfs directory [ 334.377364][T15596] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.394961][T15646] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2921'. [ 334.409487][T15596] tipc: Enabled bearer , priority 10 [ 334.426008][T15646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2921'. [ 334.511161][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.719199][T15494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 334.751482][T15494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.775735][T15494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.782629][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 334.814037][T15494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.837858][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 334.855543][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 334.864989][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 334.886320][T15667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2924'. [ 334.897625][T15667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2924'. [ 334.903015][T15668] openvswitch: netlink: Missing valid actions attribute. [ 334.923998][T15668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.995483][T15671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2926'. [ 335.092694][T15663] team0: Port device macvlan0 removed [ 335.137887][T15673] gtp1: entered promiscuous mode [ 335.144490][T15673] gtp1: entered allmulticast mode [ 335.230092][T15494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.239790][ T5835] Bluetooth: hci5: command tx timeout [ 335.258261][T15679] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 335.259206][T15494] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.285136][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.292316][T15474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.311172][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 335.359150][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.366337][T15474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.446895][T15683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.483696][T15494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.774866][T15494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.836265][T15494] veth0_vlan: entered promiscuous mode [ 335.849951][T15494] veth1_vlan: entered promiscuous mode [ 335.885775][T15494] veth0_macvtap: entered promiscuous mode [ 335.896198][T15494] veth1_macvtap: entered promiscuous mode [ 335.913730][T15494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.924790][T15494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.938352][T15494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.955571][T15494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.967142][T15494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.978502][T15494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.991688][T15494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.000588][T15494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.009572][T15494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.019580][T15494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.116294][T11440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.136502][T11440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.171046][ T6241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.195717][ T6241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.351112][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.538553][T15711] ip6gretap0: entered promiscuous mode [ 336.561866][T15711] ip6gretap0: left promiscuous mode [ 336.646666][T15712] ipvlan2: entered promiscuous mode [ 336.673254][T15712] bridge0: port 4(ipvlan2) entered blocking state [ 336.682340][T15712] bridge0: port 4(ipvlan2) entered disabled state [ 336.694632][T15712] ipvlan2: entered allmulticast mode [ 336.700124][T15712] bridge0: entered allmulticast mode [ 336.710023][T15712] ipvlan2: left allmulticast mode [ 336.715559][T15712] bridge0: left allmulticast mode [ 336.740671][T15714] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 337.262552][ T5836] syz_tun (unregistering): left allmulticast mode [ 337.315666][ T5839] Bluetooth: hci5: command tx timeout [ 337.326253][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.341631][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.353915][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.363240][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.370991][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.378541][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.540661][T15737] lo speed is unknown, defaulting to 1000 [ 337.594396][T15737] wg1 speed is unknown, defaulting to 1000 [ 337.937563][T15763] macvtap1: entered promiscuous mode [ 337.965886][T15763] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 337.981528][T15763] macvtap1: entered allmulticast mode [ 338.005800][T15763] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 338.110774][T15737] chnl_net:caif_netlink_parms(): no params data found [ 338.146757][T15772] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 338.377340][T15781] netlink: 'syz.1.2955': attribute type 4 has an invalid length. [ 338.419584][ T6239] team0: left allmulticast mode [ 338.427919][ T6239] bridge0: port 1(team0) entered disabled state [ 339.391318][ T5835] Bluetooth: hci5: command tx timeout [ 339.399417][ T6239] bond1 (unregistering): Released all slaves [ 339.483617][ T5835] Bluetooth: hci1: command tx timeout [ 339.520757][ T6239] bond2 (unregistering): Released all slaves [ 339.532264][ T6239] bond0 (unregistering): Released all slaves [ 339.648519][ T6239] bond3 (unregistering): Released all slaves [ 339.757736][ T6239] bond4 (unregistering): Released all slaves [ 339.768652][ T6239] bond5 (unregistering): Released all slaves [ 339.779195][T15737] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.786514][T15737] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.795711][T15737] bridge_slave_0: entered allmulticast mode [ 339.802831][T15737] bridge_slave_0: entered promiscuous mode [ 339.873228][T15788] lo: entered promiscuous mode [ 339.889256][T15788] tunl0: entered promiscuous mode [ 339.918050][T15788] gre0: entered promiscuous mode [ 339.924182][T15788] gretap0: entered promiscuous mode [ 339.932350][T15788] erspan0: entered promiscuous mode [ 339.951957][T15788] ip_vti0: entered promiscuous mode [ 339.957940][T15788] ip6_vti0: entered promiscuous mode [ 340.007509][T15788] sit0: entered promiscuous mode [ 340.020239][T15788] ip6tnl0: entered promiscuous mode [ 340.043121][T15788] ip6gre0: entered promiscuous mode [ 340.049427][T15788] syz_tun: entered promiscuous mode [ 340.073117][T15788] ip6gretap0: entered promiscuous mode [ 340.089400][T15788] bridge0: entered promiscuous mode [ 340.098946][T15788] vcan0: entered promiscuous mode [ 340.111455][T15788] bond0: entered promiscuous mode [ 340.119307][T15788] bond_slave_0: entered promiscuous mode [ 340.145798][T15788] bond_slave_1: entered promiscuous mode [ 340.154154][T15788] dummy0: entered promiscuous mode [ 340.159995][T15788] nlmon0: entered promiscuous mode [ 340.186301][T15788] caif0: entered promiscuous mode [ 340.197892][T15788] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.220159][T15737] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.227662][T15737] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.239077][T15737] bridge_slave_1: entered allmulticast mode [ 340.246746][T15737] bridge_slave_1: entered promiscuous mode [ 340.259058][T15783] lo speed is unknown, defaulting to 1000 [ 340.259074][ T6239] Tq€!7: left promiscuous mode [ 340.343684][T15783] wg1 speed is unknown, defaulting to 1000 [ 340.346560][T15737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.386266][ T6239] tipc: Disabling bearer [ 340.394309][ T6239] tipc: Left network mode [ 340.408588][T15737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.655231][T15806] __nla_validate_parse: 16 callbacks suppressed [ 340.655251][T15806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2963'. [ 340.671117][T15806] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2963'. [ 340.752849][T15801] team0 (unregistering): Port device team_slave_0 removed [ 340.773154][T15801] team0 (unregistering): Port device team_slave_1 removed [ 340.933354][T15737] team0: Port device team_slave_0 added [ 340.958195][T15812] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 340.962750][T15737] team0: Port device team_slave_1 added [ 341.003646][ T30] audit: type=1107 audit(1742216139.373:7): pid=15810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 341.149512][T15737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.168981][T15737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.205898][T15737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.271639][T15737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.286789][T15737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.323672][T15737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.392565][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2969'. [ 341.478838][T15816] lo speed is unknown, defaulting to 1000 [ 341.526247][T15737] hsr_slave_0: entered promiscuous mode [ 341.544023][T15737] hsr_slave_1: entered promiscuous mode [ 341.550379][T15737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.561117][ T5835] Bluetooth: hci1: command tx timeout [ 341.567530][T15737] Cannot create hsr debugfs directory [ 341.575508][T15816] wg1 speed is unknown, defaulting to 1000 [ 341.698657][ T6239] hsr_slave_0: left promiscuous mode [ 341.960018][T15844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2971'. [ 342.608539][T15830] syzkaller0: entered promiscuous mode [ 342.614127][T15830] syzkaller0: entered allmulticast mode [ 342.620310][ T10] lo speed is unknown, defaulting to 1000 [ 342.632144][ T10] infiniband syz2: ib_query_port failed (-19) [ 343.641103][ T5835] Bluetooth: hci1: command tx timeout [ 344.624635][T15855] wg1 speed is unknown, defaulting to 1000 [ 344.796437][T15860] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2979'. [ 344.819154][T15860] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2979'. [ 344.828452][T15860] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2979'. [ 345.078396][ T6239] IPVS: stop unused estimator thread 0... [ 345.313332][T15737] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.355462][T15737] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.384041][T15737] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.563306][T15737] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.644555][T15891] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 345.711205][ T5835] Bluetooth: hci1: command tx timeout [ 345.720582][ T30] audit: type=1804 audit(1742216144.073:8): pid=15895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2991" name="/newroot/603/cgroup.controllers" dev="tmpfs" ino=3134 res=1 errno=0 [ 345.758818][ T30] audit: type=1800 audit(1742216144.083:9): pid=15895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2991" name="cgroup.controllers" dev="tmpfs" ino=3134 res=0 errno=0 [ 345.833042][T15737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.869539][T15737] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.933380][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.940581][T15474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.966349][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.973564][T15474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.035521][T15737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.070825][T15899] bridge0: left promiscuous mode [ 346.185735][T15904] netlink: 'syz.5.2995': attribute type 10 has an invalid length. [ 346.212108][T15904] dummy0: left promiscuous mode [ 346.238504][T15904] dummy0: entered promiscuous mode [ 346.255583][T15904] dummy0: entered allmulticast mode [ 346.273805][T15904] team0: Port device dummy0 added [ 346.525305][T15737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.631666][T15920] [ 346.634245][T15920] ====================================================== [ 346.641282][T15920] WARNING: possible circular locking dependency detected [ 346.648308][T15920] 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 Not tainted [ 346.655411][T15920] ------------------------------------------------------ [ 346.662423][T15920] syz.3.2999/15920 is trying to acquire lock: [ 346.668493][T15920] ffff88805f380d28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 346.678769][T15920] [ 346.678769][T15920] but task is already holding lock: [ 346.686131][T15920] ffff88807f14cd28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 346.695818][T15920] [ 346.695818][T15920] which lock already depends on the new lock. [ 346.695818][T15920] [ 346.706213][T15920] [ 346.706213][T15920] the existing dependency chain (in reverse order) is: [ 346.715253][T15920] [ 346.715253][T15920] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 346.723684][T15920] lock_acquire+0x1ed/0x550 [ 346.728740][T15920] __mutex_lock+0x19c/0x1010 [ 346.733877][T15920] __dev_open+0x5cb/0x8a0 [ 346.738845][T15920] netif_open+0xae/0x1b0 [ 346.743619][T15920] dev_open+0x13e/0x260 [ 346.748292][T15920] team_add_slave+0xabe/0x28a0 [ 346.753571][T15920] do_set_master+0x579/0x730 [ 346.758681][T15920] rtnl_newlink_create+0x6e6/0xbd0 [ 346.764308][T15920] rtnl_newlink+0x167a/0x1d90 [ 346.769519][T15920] rtnetlink_rcv_msg+0x791/0xcf0 [ 346.774988][T15920] netlink_rcv_skb+0x206/0x480 [ 346.780277][T15920] netlink_unicast+0x7f6/0x990 [ 346.785572][T15920] netlink_sendmsg+0x8de/0xcb0 [ 346.790868][T15920] __sock_sendmsg+0x221/0x270 [ 346.796070][T15920] ____sys_sendmsg+0x53a/0x860 [ 346.801359][T15920] __sys_sendmsg+0x269/0x350 [ 346.806486][T15920] do_syscall_64+0xf3/0x230 [ 346.811553][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.817977][T15920] [ 346.817977][T15920] -> #1 (team->team_lock_key#5){+.+.}-{4:4}: [ 346.826175][T15920] lock_acquire+0x1ed/0x550 [ 346.831215][T15920] __mutex_lock+0x19c/0x1010 [ 346.836374][T15920] team_set_mac_address+0x122/0x280 [ 346.842108][T15920] netif_set_mac_address+0x327/0x510 [ 346.847917][T15920] do_setlink+0xaa6/0x40f0 [ 346.852853][T15920] rtnl_newlink+0x15a6/0x1d90 [ 346.858065][T15920] rtnetlink_rcv_msg+0x791/0xcf0 [ 346.863533][T15920] netlink_rcv_skb+0x206/0x480 [ 346.868822][T15920] netlink_unicast+0x7f6/0x990 [ 346.874105][T15920] netlink_sendmsg+0x8de/0xcb0 [ 346.879391][T15920] __sock_sendmsg+0x221/0x270 [ 346.884583][T15920] __sys_sendto+0x363/0x4c0 [ 346.889601][T15920] __x64_sys_sendto+0xde/0x100 [ 346.894882][T15920] do_syscall_64+0xf3/0x230 [ 346.899901][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.906341][T15920] [ 346.906341][T15920] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 346.914870][T15920] validate_chain+0x18ef/0x5920 [ 346.920234][T15920] __lock_acquire+0x1397/0x2100 [ 346.925604][T15920] lock_acquire+0x1ed/0x550 [ 346.930628][T15920] __mutex_lock+0x19c/0x1010 [ 346.935740][T15920] dev_set_mac_address+0x2a/0x50 [ 346.941213][T15920] bond_set_mac_address+0x28e/0x830 [ 346.946933][T15920] netif_set_mac_address+0x327/0x510 [ 346.952736][T15920] do_setlink+0xaa6/0x40f0 [ 346.957667][T15920] rtnl_newlink+0x15a6/0x1d90 [ 346.962872][T15920] rtnetlink_rcv_msg+0x791/0xcf0 [ 346.968332][T15920] netlink_rcv_skb+0x206/0x480 [ 346.973617][T15920] netlink_unicast+0x7f6/0x990 [ 346.978903][T15920] netlink_sendmsg+0x8de/0xcb0 [ 346.984202][T15920] __sock_sendmsg+0x221/0x270 [ 346.989403][T15920] ____sys_sendmsg+0x53a/0x860 [ 346.994688][T15920] __sys_sendmsg+0x269/0x350 [ 346.999799][T15920] do_syscall_64+0xf3/0x230 [ 347.004830][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.011286][T15920] [ 347.011286][T15920] other info that might help us debug this: [ 347.011286][T15920] [ 347.021510][T15920] Chain exists of: [ 347.021510][T15920] &dev_instance_lock_key#12 --> team->team_lock_key#5 --> &dev_instance_lock_key#2 [ 347.021510][T15920] [ 347.036751][T15920] Possible unsafe locking scenario: [ 347.036751][T15920] [ 347.044194][T15920] CPU0 CPU1 [ 347.049552][T15920] ---- ---- [ 347.054912][T15920] lock(&dev_instance_lock_key#2); [ 347.060126][T15920] lock(team->team_lock_key#5); [ 347.067603][T15920] lock(&dev_instance_lock_key#2); [ 347.075327][T15920] lock(&dev_instance_lock_key#12); [ 347.080622][T15920] [ 347.080622][T15920] *** DEADLOCK *** [ 347.080622][T15920] [ 347.088760][T15920] 2 locks held by syz.3.2999/15920: [ 347.093989][T15920] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 347.103066][T15920] #1: ffff88807f14cd28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 347.113178][T15920] [ 347.113178][T15920] stack backtrace: [ 347.119061][T15920] CPU: 1 UID: 0 PID: 15920 Comm: syz.3.2999 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 347.119080][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.119090][T15920] Call Trace: [ 347.119097][T15920] [ 347.119105][T15920] dump_stack_lvl+0x241/0x360 [ 347.119126][T15920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.119143][T15920] ? __pfx__printk+0x10/0x10 [ 347.119162][T15920] print_circular_bug+0x13a/0x1b0 [ 347.119183][T15920] check_noncircular+0x36a/0x4a0 [ 347.119203][T15920] ? __pfx_check_noncircular+0x10/0x10 [ 347.119221][T15920] ? lockdep_lock+0x123/0x2b0 [ 347.119248][T15920] validate_chain+0x18ef/0x5920 [ 347.119275][T15920] ? __pfx_validate_chain+0x10/0x10 [ 347.119292][T15920] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.119318][T15920] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 347.119335][T15920] ? lockdep_hardirqs_on+0x99/0x150 [ 347.119356][T15920] ? mark_lock+0x9a/0x360 [ 347.119371][T15920] ? __lock_acquire+0x1397/0x2100 [ 347.119399][T15920] ? mark_lock+0x9a/0x360 [ 347.119433][T15920] __lock_acquire+0x1397/0x2100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.119464][T15920] lock_acquire+0x1ed/0x550 [ 347.119488][T15920] ? dev_set_mac_address+0x2a/0x50 [ 347.119508][T15920] ? __pfx_lock_acquire+0x10/0x10 [ 347.119545][T15920] ? __pfx___might_resched+0x10/0x10 [ 347.119567][T15920] ? dev_set_mac_address+0x42/0x50 [ 347.119584][T15920] ? __pfx_lock_release+0x10/0x10 [ 347.119609][T15920] __mutex_lock+0x19c/0x1010 [ 347.119629][T15920] ? dev_set_mac_address+0x2a/0x50 [ 347.119645][T15920] ? notifier_call_chain+0x3cc/0x3f0 [ 347.119669][T15920] ? __mutex_unlock_slowpath+0x227/0x800 [ 347.119690][T15920] ? dev_set_mac_address+0x2a/0x50 [ 347.119708][T15920] ? __pfx___mutex_lock+0x10/0x10 [ 347.119728][T15920] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 347.119751][T15920] ? net_generic+0x1f/0x240 [ 347.119770][T15920] ? net_generic+0x1f0/0x240 [ 347.119790][T15920] dev_set_mac_address+0x2a/0x50 [ 347.119808][T15920] bond_set_mac_address+0x28e/0x830 [ 347.119831][T15920] ? __pfx_bond_set_mac_address+0x10/0x10 [ 347.119851][T15920] ? hsr_netdev_notify+0x295/0xb50 [ 347.119895][T15920] ? notifier_call_chain+0x15a/0x3f0 [ 347.119919][T15920] ? notifier_call_chain+0x3cc/0x3f0 [ 347.119943][T15920] netif_set_mac_address+0x327/0x510 [ 347.119970][T15920] ? __pfx_netif_set_mac_address+0x10/0x10 [ 347.120002][T15920] ? rcu_is_watching+0x15/0xb0 [ 347.120020][T15920] ? trace_kmalloc+0x1f/0xd0 [ 347.120041][T15920] ? do_setlink+0x7a7/0x40f0 [ 347.120059][T15920] do_setlink+0xaa6/0x40f0 [ 347.120081][T15920] ? mark_lock+0x9a/0x360 [ 347.120097][T15920] ? __pfx_do_setlink+0x10/0x10 [ 347.120111][T15920] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 347.120136][T15920] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.120163][T15920] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 347.120180][T15920] ? lockdep_hardirqs_on+0x99/0x150 [ 347.120199][T15920] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 347.120216][T15920] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.120235][T15920] ? rcu_is_watching+0x15/0xb0 [ 347.120253][T15920] ? __mutex_lock+0xba3/0x1010 [ 347.120273][T15920] ? __mutex_lock+0x602/0x1010 [ 347.120295][T15920] ? rtnl_newlink+0xc4c/0x1d90 [ 347.120319][T15920] ? __pfx___mutex_lock+0x10/0x10 [ 347.120343][T15920] ? ns_capable+0x8a/0xf0 [ 347.120362][T15920] ? rtnl_link_get_net_capable+0x168/0x340 [ 347.120380][T15920] rtnl_newlink+0x15a6/0x1d90 [ 347.120403][T15920] ? is_bpf_text_address+0x285/0x2a0 [ 347.120417][T15920] ? is_bpf_text_address+0x26/0x2a0 [ 347.120437][T15920] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.120461][T15920] ? __pfx_validate_chain+0x10/0x10 [ 347.120485][T15920] ? validate_chain+0x11e/0x5920 [ 347.120501][T15920] ? __pfx_lock_acquire+0x10/0x10 [ 347.120526][T15920] ? __pfx_lock_release+0x10/0x10 [ 347.120550][T15920] ? __pfx_validate_chain+0x10/0x10 [ 347.120568][T15920] ? mark_lock+0x9a/0x360 [ 347.120583][T15920] ? __lock_acquire+0x1397/0x2100 [ 347.120619][T15920] ? __pfx_lock_release+0x10/0x10 [ 347.120648][T15920] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.120673][T15920] rtnetlink_rcv_msg+0x791/0xcf0 [ 347.120696][T15920] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 347.120722][T15920] ? __lock_acquire+0x1397/0x2100 [ 347.120746][T15920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.120776][T15920] netlink_rcv_skb+0x206/0x480 [ 347.120800][T15920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.120825][T15920] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.120856][T15920] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.120885][T15920] netlink_unicast+0x7f6/0x990 [ 347.120910][T15920] ? __pfx_netlink_unicast+0x10/0x10 [ 347.120930][T15920] ? __virt_addr_valid+0x45f/0x530 [ 347.120949][T15920] ? __phys_addr_symbol+0x2f/0x70 [ 347.120964][T15920] ? __check_object_size+0x47a/0x730 [ 347.121005][T15920] netlink_sendmsg+0x8de/0xcb0 [ 347.121035][T15920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.121062][T15920] ? aa_sock_msg_perm+0x91/0x160 [ 347.121090][T15920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.121113][T15920] __sock_sendmsg+0x221/0x270 [ 347.121139][T15920] ____sys_sendmsg+0x53a/0x860 [ 347.121161][T15920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.121179][T15920] ? __fget_files+0x2a/0x410 [ 347.121204][T15920] ? __fget_files+0x2a/0x410 [ 347.121231][T15920] __sys_sendmsg+0x269/0x350 [ 347.121250][T15920] ? __pfx_futex_wake+0x10/0x10 [ 347.121276][T15920] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.121312][T15920] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.121337][T15920] ? do_syscall_64+0x100/0x230 [ 347.121359][T15920] ? do_syscall_64+0xb6/0x230 [ 347.121381][T15920] do_syscall_64+0xf3/0x230 [ 347.121402][T15920] ? clear_bhb_loop+0x35/0x90 [ 347.121426][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.121449][T15920] RIP: 0033:0x7fdf2d18d169 [ 347.121464][T15920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.121478][T15920] RSP: 002b:00007fdf2df39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.121495][T15920] RAX: ffffffffffffffda RBX: 00007fdf2d3a5fa0 RCX: 00007fdf2d18d169 [ 347.121507][T15920] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000004 [ 347.121518][T15920] RBP: 00007fdf2d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 347.121528][T15920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.121538][T15920] R13: 0000000000000000 R14: 00007fdf2d3a5fa0 R15: 00007ffdd86da008 [ 347.121556][T15920] [ 347.139419][T15922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3000'. [ 347.430813][T15920] bond0: entered promiscuous mode [ 347.782917][T15920] bond_slave_1: entered promiscuous mode [ 347.788726][T15920] team0: entered promiscuous mode [ 347.831113][T15920] team_slave_0: entered promiscuous mode [ 347.836971][T15920] team_slave_1: entered promiscuous mode [ 347.874822][T15920] bond3: entered promiscuous mode [ 347.880059][T15920] bond4: entered promiscuous mode [ 347.901065][T15920] bond5: entered promiscuous mode [ 347.906229][T15920] vxlan2: entered promiscuous mode [ 348.175661][T15469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.245415][T15469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.294976][T15469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.336298][T15469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.398120][T15469] bridge_slave_1: left allmulticast mode [ 348.403977][T15469] bridge_slave_1: left promiscuous mode [ 348.409715][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.418481][T15469] bridge_slave_0: left allmulticast mode [ 348.424283][T15469] bridge_slave_0: left promiscuous mode [ 348.429926][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.546511][T15469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.556795][T15469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.566555][T15469] bond0 (unregistering): Released all slaves [ 348.737825][T15469] hsr_slave_0: left promiscuous mode [ 348.743796][T15469] hsr_slave_1: left promiscuous mode [ 348.749392][T15469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.757994][T15469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.765995][T15469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.773871][T15469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.783019][T15469] veth1_macvtap: left promiscuous mode [ 348.788519][T15469] veth0_macvtap: left promiscuous mode [ 348.794180][T15469] veth1_vlan: left promiscuous mode [ 348.799416][T15469] veth0_vlan: left promiscuous mode [ 349.317809][T15469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.365986][T15469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.415095][T15469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.485347][T15469] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.976696][T15469] team0: left allmulticast mode [ 349.981854][T15469] team_slave_0: left allmulticast mode [ 349.987323][T15469] team_slave_1: left allmulticast mode [ 349.992856][T15469] dummy0: left allmulticast mode [ 349.997890][T15469] bridge0: port 3(team0) entered disabled state [ 350.006198][T15469] bridge_slave_1: left allmulticast mode [ 350.011956][T15469] bridge_slave_1: left promiscuous mode [ 350.017604][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.026300][T15469] bridge_slave_0: left allmulticast mode [ 350.032417][T15469] bridge_slave_0: left promiscuous mode [ 350.038104][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.047117][T15469] bridge_slave_1: left allmulticast mode [ 350.053270][T15469] bridge_slave_1: left promiscuous mode [ 350.058914][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.067318][T15469] bridge_slave_0: left allmulticast mode [ 350.073112][T15469] bridge_slave_0: left promiscuous mode [ 350.078750][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.087970][T15469] bridge_slave_1: left allmulticast mode [ 350.093747][T15469] bridge_slave_1: left promiscuous mode [ 350.099372][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.107356][T15469] bridge_slave_0: left allmulticast mode [ 350.113454][T15469] bridge_slave_0: left promiscuous mode [ 350.119142][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.297301][T15469] dvmrp1 (unregistering): left allmulticast mode [ 350.348839][T15469] vxlan2 (unregistering): left promiscuous mode [ 350.357692][T15469] team0: Port device vxlan2 removed [ 350.746664][T15469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.756489][T15469] bond_slave_0: left promiscuous mode [ 350.763189][T15469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.772068][T15469] bond_slave_1: left promiscuous mode [ 350.778178][T15469] bond0 (unregistering): Released all slaves [ 350.790408][T15469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.801075][T15469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.810526][T15469] bond0 (unregistering): Released all slaves [ 350.907222][T15469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.918003][T15469] bond_slave_1: left promiscuous mode [ 350.925246][T15469] bond0 (unregistering): (slave team0): Releasing backup interface [ 350.933552][T15469] team0: left promiscuous mode [ 350.938318][T15469] team_slave_0: left promiscuous mode [ 350.943809][T15469] team_slave_1: left promiscuous mode [ 350.949231][T15469] bond3 (unregistering): left promiscuous mode [ 350.955707][T15469] bond4 (unregistering): left promiscuous mode [ 350.961938][T15469] bond5 (unregistering): left promiscuous mode [ 350.970117][T15469] bond0 (unregistering): Released all slaves [ 350.979052][T15469] bond1 (unregistering): Released all slaves [ 351.089964][T15469] bond2 (unregistering): Released all slaves [ 351.188909][T15469] team0: Port device bond3 removed [ 351.194756][T15469] bond3 (unregistering): Released all slaves [ 351.289620][T15469] team0: Port device bond4 removed [ 351.295381][T15469] bond4 (unregistering): Released all slaves [ 351.386935][T15469] team0: Port device bond5 removed [ 351.393212][T15469] bond5 (unregistering): Released all slaves [ 351.483412][T15469] bond6 (unregistering): Released all slaves [ 351.492425][T15469] bond7 (unregistering): Released all slaves [ 351.500757][T15469] bond8 (unregistering): Released all slaves [ 352.923865][T15469] Tq€!7: left promiscuous mode [ 352.983522][T15469] tipc: Left network mode [ 353.113431][T15469] mac80211_hwsim hwsim10 wlan1 (unregistering): left allmulticast mode [ 353.121817][T15469] mac80211_hwsim hwsim10 wlan1 (unregistering): left promiscuous mode [ 353.263994][T15469] hsr_slave_0: left promiscuous mode [ 353.269623][T15469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.277159][T15469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.285157][T15469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.292875][T15469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.302718][T15469] hsr_slave_0: left promiscuous mode [ 353.308421][T15469] hsr_slave_1: left promiscuous mode [ 353.315532][T15469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.323379][T15469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.332471][T15469] hsr_slave_0: left promiscuous mode [ 353.340230][T15469] veth1_macvtap: left promiscuous mode [ 353.346067][T15469] veth0_macvtap: left promiscuous mode [ 353.351752][T15469] veth1_vlan: left promiscuous mode [ 353.356998][T15469] veth0_vlan: left promiscuous mode [ 353.506983][T15469] team_slave_1 (unregistering): left promiscuous mode [ 353.514491][T15469] team0 (unregistering): Port device team_slave_1 removed [ 353.536574][T15469] team_slave_0 (unregistering): left promiscuous mode [ 353.544478][T15469] team0 (unregistering): Port device team_slave_0 removed [ 353.630676][T15469] dummy0 (unregistering): left promiscuous mode [ 353.643921][T15469] team0 (unregistering): Port device dummy0 removed [ 353.753912][T15469] team0 (unregistering): Port device team_slave_1 removed [ 353.765062][T15469] team0 (unregistering): Port device team_slave_0 removed [ 353.865343][T15469] pimreg (unregistering): left allmulticast mode [ 354.038889][T15469] team0 (unregistering): Port device team_slave_1 removed [ 354.069538][T15469] team0 (unregistering): Port device team_slave_0 removed