last executing test programs: 8.166866525s ago: executing program 2 (id=1030): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01e217"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08000640000000250900010073797a3000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r3, &(0x7f0000001480)=""/4096, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000140)=0x5, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) unshare(0x74010a00) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000640)=@tcp, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000000)={0x0, 0xf2a9, 0x7, 0x10000, 0xff, 0x1, 0x3f80, 0x5}, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0xe, 0xfffffffffffffffb, 0x457, 0x40, 0x3, 0x3}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 7.830333951s ago: executing program 2 (id=1037): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2000c2c00fe8000000000000000000000000000bbfe8000000000000000000200000000aa000000f6"], 0x0) 7.655702707s ago: executing program 2 (id=1040): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) recvmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000003c0)=""/90, 0x5a}], 0x1}, 0x400100a3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x2c, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x4c, 0x0, 0x821}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x4}]}, 0x2c}, 0x1, 0xffffa888, 0x0, 0x20008800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 4.417866864s ago: executing program 0 (id=1052): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) 4.391002457s ago: executing program 4 (id=1054): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf51) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="25abe638fa0475ac2cab0df74d7ce48f0a6106917f941e5a3682081fcf7520aac56250a9e876d6e79ae79037eb5fa5348f3ad2265798847d2101b978df6b81e41ff06e99ba0f06ceec34a127b0ecea47d7c6d201dd22330b1192ee52dfb8e4ead2decc581ac0ca5122e937fc7423e17950ce08bb1e5492a0ddafe2bdca8e8d5d", 0x80}], 0x1}}], 0x1, 0x0) (fail_nth: 4) 4.25103746s ago: executing program 0 (id=1056): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000003000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af8ff00000000c509040004000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.70681809s ago: executing program 3 (id=1061): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b0000009500000000000080"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x22020600) unshare(0x2a020400) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x3, 0x9) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r11, 0x5421, &(0x7f0000000080)=0x7) connect$unix(r11, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) 3.525571206s ago: executing program 3 (id=1063): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a000100", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x44081) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae0000000000"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES16=r7, @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000d0) write$cgroup_subtree(r3, 0x0, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r8, &(0x7f00000004c0)="177c99b8c3897b56aaebb07e350a1e816e3db2e467bf8ef3098d61043e4ead85e5583d089dd4b4587c2a491189f4234985406d68fa04b2f64a307433840f2d0ae195e8de44b94dc57c30fe212eb53ad80747c1340b324dd601bb5207051a6dff149ea5f120b48006055ecdc22009609fffe2866b3022c8e51c1d346f83177e52d1eb321eb8055bc299654f2ff75b3f2f1129f1c561dab4fce052fe065b58a1098cde30744ed53f2b8f29bbbdc062d59df06c67a5c4ef7747b71f59d2c533d06b350ba37b1f072d0e85927929d2f862c961135564067c88f2"}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1053040000200000240012800b000163c51f006272696467650000140002800500190000000000080004000c"], 0x44}}, 0x8080) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 3.468116911s ago: executing program 1 (id=1064): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6002adf700033a00fe8800000000f5000000000000000001ff020000000000000000000000000001"], 0x0) 3.429583354s ago: executing program 4 (id=1065): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01e217"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08000640000000250900010073797a3000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r4, &(0x7f0000001480)=""/4096, 0x1000) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000140)=0x5, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) unshare(0x74010a00) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r6, &(0x7f00000005c0), &(0x7f0000000640)=@tcp, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000000)={0x0, 0xf2a9, 0x7, 0x10000, 0xff, 0x1, 0x3f80, 0x5}, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0xe, 0xfffffffffffffffb, 0x457, 0x40, 0x3, 0x3}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 3.250762079s ago: executing program 0 (id=1066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6daeb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcfe51ced00000000000000000000000000000000000000006c63ebac70cd165b87b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3d71fde152e64bd06f4415b05000000004252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00"/334], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000500)="013cf22f9ec138583420f441d5be1381fc4375d3c0d2a7fc0b8fa18631ce190ab08e487467ce0b6cc8ae79f171e4022446d1fd006c7aadd4c0c1463b2174b5f1fee41bf7d3f09fcf6b51f7dbd3040bda66e6ff7b8eb1f99625740ca004144eb5ef9b4fa286a5db1a5b0c542e3a1cdc3e3ed49e3c57", &(0x7f0000000580)=""/199, &(0x7f0000000680)="238c7b83bdc8d99c6a9652913aaa64d82bd390f3c84a14b1e4f6570c3d7c5b0564165517a28c68c34195cf6c0520c51a2a222283cf728abb15fc670d776527ebb6975336a12b0534582dad54d64137623ec956268c245f41446f3892a9f5a672b34aa96733bd9875863dd6cd15aca698de66b91b21dbb77ca24da750204fe55ec3fc3f2d5e48b54096b49c0a7922716f6d8b081be062a9ff9a0371f82cc7001a98d329aaa43609e0c9fc9ad69270360511fe09b8a3bc3499b20c9f7fd2106c3c7750c3f6349958e17923", &(0x7f0000000840)="c276152c1ebeca7703241cb008219ed464588ecd7ccc0a49015c0074dbab662089b79816f8b9203ecf9accab1439a4dafe8f0ddda770215e01ae8431519810a8bf151d74f7009248083b0a185f9c0517136bea59f9e04efb21760e070b6807ca9306c7e63791f2471d149e3a3d676eed18729f1c5e1b359ec653bf60bd31886fa6035c08bd6fce6a60a1bc6e9cf386113c92d0", 0x2, r3, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 3.238268367s ago: executing program 1 (id=1067): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000bc046a"], 0x18}}], 0x1, 0x7ffffff7) r1 = socket(0x2a, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="380000002d000100000000001f00000000000000", @ANYRES32=r6, @ANYBLOB="0b000080976b64086860300014000180325531db20a2d0431d1ef0f29674d908"], 0x38}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='N-N:5/F'], 0x6a) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r12 = socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="77ba00000000000000001f000000080001000000000008000300", @ANYRES32=r13], 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x38, r8, 0x100, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) 3.147009232s ago: executing program 2 (id=1068): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000bc046a"], 0x18}}], 0x1, 0x7ffffff7) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x6044040}, 0x0) 2.998868437s ago: executing program 0 (id=1069): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200", @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) write(0xffffffffffffffff, &(0x7f0000000140)="260000002200470105000007", 0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) 1.192259914s ago: executing program 2 (id=1070): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x8) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.176921341s ago: executing program 0 (id=1071): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_emit_ethernet(0x6e, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='mm_vmscan_node_reclaim_begin\x00', r4}, 0x18) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) listen(r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002840)=@newtfilter={0x5cc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x59c, 0x2, [@TCA_FLOW_ACT={0x598, 0x9, 0x0, 0x1, [@m_bpf={0x114, 0x18, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x973, 0x10000000, 0x8, 0x9}}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x1000, 0x7, 0xc5, 0xffffff80}, {0x200, 0x10, 0xd, 0x7ee}, {0x72c, 0xb, 0x1, 0x7}, {0x2, 0x7f, 0x7, 0x7}, {0x7, 0x69, 0x47, 0x2}, {0x8, 0x2, 0x0, 0x9}, {0xfffe, 0x1, 0xf8, 0x5}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x4, 0x2, 0x4, 0x146e}, {0x7fff, 0x1, 0x5, 0x9}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4c, 0x6, "25edef4a6373d1ee445c0d0609754ee1ef7bc6dccf35dc836f0862be96548923544d857af0ed1cbe073b7c992e7e902b8a97b768743f2be82c118589d86c7647d777767e7628141d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xb8, 0xa, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xdce1, 0x0, 0x7, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8f, 0x7, 0x4}, 0x2}}]}, {0x49, 0x6, "387e3dcb434a835af3b56880ab2cb9ea7d073454c382b20222a99566ccbc8bbe54b6c6f437efc6e364d1f8dc5f2810cf6f53dde99202ba24ebe6f11215519e66c58a2c9ab7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0x88, 0x20, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x4a, 0x6, "f9eef18dcc987c7d4cbb21ddeb67e2f199651c7cadda136c03749fac0ddb78b679d1b75ec848aa32b1f18172eca0bfad2b4b311a1afe99be10a526e786899b19f5d72a3278f4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x144, 0xd, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0xc1, 0x6, "e2cfe64ac3ac4e1e0a1bfabe8f7281adeb1854db80e2ba73af2118b39091504792c40b091fbc35997a6c08e4eb3d50030d0c93c8f98034eb7eefc9bc66563f8865299f44cc3c75b57a97e9f97834084dca3f2ae3a462471813d1d0e638e93bb40b463202d97bf1d5b795b4d91f3fd85230c68a5619626bd9234bf78e8f11138bfaacfdd210f6b28df8a8a48075a9a5da01079be2d90cdc9762dc7f263411433aaf6fcfe5c12054dd93899bed040d41903a80e7d76f02ff8963f4ead74d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_mirred={0x1fc, 0x12, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x7, 0x3, 0x6, 0x5}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5398, 0x6, 0x88e, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x8, 0xfffffffe, 0xf}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x5, 0xc, 0x78000000}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc28f, 0x80000001, 0x20000000, 0x6, 0x40}, 0x4, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x3, 0x4, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x700000, 0x0, 0xffffffffffffffff, 0x1, 0xe4b2}, 0x2, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x44b0fe44, 0x3, 0x6, 0x8}, 0x2, r1}}]}, {0xd0, 0x6, "c1888843dee787bc62f78f2d0eed0c9dd78c145e0f1472fe53dabedb03bf424f94e30d3f67c2666b362694c975cdc1ef8181bddc4b735b25e89ba4a201c69e97a304e65379021478871946cf2d3c3f2bf51a9123236a87611165c2cf1505f3be1b9cc3b9ec8a4b0c848862ada7e01f1e981d416a7e3f497e11b298da883d36c5649626fa9b4c16ee7f1804d9aa99b5d49b33e69012a09660a9c9ad31cf65e5f20c131ed28943ca2d1731c7da3b00d09e14310736798f158d9576ad6ecaf6a369d94106edf9471cb9595ba39e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x5cc}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0) close(r5) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r10, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.176585387s ago: executing program 1 (id=1072): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000007000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) 1.138159425s ago: executing program 3 (id=1073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x20, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x108, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x401, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x22, 0x6, 0x6, 0x5, 0x4, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x1b, 0x6, 0x18, 0x12, 0x18, 0x3, 0x1, 0x25, 0x5a, 0x24, 0x6c, 0x4, 0x9, 0x24, 0x6c, 0x30, 0x2, 0x12, 0x60, 0xc, 0xb, 0x18, 0x18, 0x2, 0x36, 0x5, 0x48, 0x3, 0x1b, 0x49, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2cdc, 0x6000, 0x0, 0x6, 0x667a, 0xb800, 0x4]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x3, 0x3}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x5, 0x5}, {0x1, 0x6}, {0x5, 0x9}, {0x7, 0x5}, {0x5, 0x1}, {0x7, 0x8}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x52ee63f59ad857c}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x60, 0x1b, 0x0, 0x1b, 0x3a, 0x6, 0x50, 0x24, 0x48, 0x3, 0x66, 0x18, 0x6, 0x4, 0x2, 0x4, 0x48, 0x1b, 0x4, 0x3, 0x11, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x5, 0xff3c, 0x8, 0xb3, 0x0, 0x8]}}]}]}]}, 0x108}}, 0x0) 1.099608259s ago: executing program 4 (id=1074): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x28242, 0x880}}}}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x4000840) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 954.784002ms ago: executing program 1 (id=1075): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000040)=@phonet={0x23, 0x3, 0x6, 0x10}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)="3baaacdfbfe5c1be687049d12089c81c873ce71fa0014b899b39aa3dec7d5501b6545492868e540a30cd4167f5cb6ed6d79ee4b387630c9a6f28c9ea6befde6a75fcc50cc2f56e28df89e3f83cd2b8e44057846587baa335dd26eec4480fbe07dd12b9383ddde592d0be54bc59f338d61534ffd357e5bd84baaa9cc3a6da34f17c99ca723992790a408bd3a51e764bfd7b0551fd855bc5ce6ed8aeba32501506ad8ad0107b08f30f272f1e07bcba287dab736d7eb992d92763140262ed6a0b5cdaa1b98e7a2ef082fc1786ff369ef9749ff4d729216a6b8eb0a21e613634780ff98543ffafe75b306445d1", 0xeb}, {&(0x7f0000000340)="c0711c6f6432b3ed83077d3ab93cc018b3bd016bd39518a37612302ca8a40a309ca1389aac306aa497ee1e41fb0deeea356bb53933d9e42302721cf004afcf16e61aa677757fd8460d6a6ced730af596", 0x50}, {&(0x7f0000000100)="ab3693d760555526f93b98571f9fa1", 0xf}, {&(0x7f00000003c0)="d758bb9370db7d8d45ae3f99d73732737b74d39593b667fb6843868397c0edf1e08774d9499f8a462e33a88f4bfa4b5447d07ef8bbb6a33935df850e8e7865696b13d4ab826994a14ce1fe6befd5b95e48d70002a57a99e683", 0x59}], 0x4, &(0x7f0000000480)=[{0xc0, 0x1, 0x6, "0682d46ba05a7a4c2be852f8cff56a4df259860602ac1b14113b4a8b898a6e945fb5e1ce364737fbf97afc39009be56d45ab648afa622646be8d03226dbb4ea9aa2ecfc3c13b22f6e6fbff43044a6d6cf934f26fa3d421bfa5a827ecc797aaba5d1328ff5296730187def86c4a3364f910b14abcc5248eef30ed88eef6e0d12f1913b3cb70a97e977a968ba8d6026de44cb17f84fc11b1c53cd2657765de7de700e2fc07a00ada4b831618bc1979fb"}, {0x70, 0x103, 0xe, "30cc61a4e7e6988839eb147f786fdb7e0a16e0f13cfaa17e66e9dfffdcaadc1867e37f8ea525bdf0848b3d712b6181fc8a0c4c8ddd1f9ae3ab465a1fe5037a36dfcb695e2e92e9e192e7fcde82cf37ce062804c3dcc8a37770af4cff40"}, {0x38, 0x29, 0x10, "b5df8375dd0493caf96704d3571933c23c4df70058fecf09be1b00deb4a0000fb116cf090c167ce3"}], 0x168}, 0x40000) (rerun: 32) 511.356477ms ago: executing program 3 (id=1076): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000600)={0x1, 0x4dab}, 0x8) close(r0) 484.02107ms ago: executing program 1 (id=1077): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xffe9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x75, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 386.991102ms ago: executing program 4 (id=1078): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 266.260398ms ago: executing program 3 (id=1079): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2a, 0xe, 0x98, {0x9, @usr_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x24}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2696, 0x6, 0x1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, 0xd, 0x7, [0x0, 0xf2c]}, @udp_ip6_spec={@local, @private0, 0x4e22, 0x4e21, 0x3}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x2, 0x3, [0x6, 0xc]}, 0x1, 0x4}}}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="6900330080000000ffffffe9ffff080211000000505050505050000000000000000000002b00410000060101010101010100060201000503b392ff2a01063c04010224092d1a000012fc"], 0x88}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='nilfs2_segment_usage_check\x00'}, 0x18) socket$kcm(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x1, @ANYBLOB="0e000000000000000000007e35f79af88bf5791f06384a040000080000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/28], 0x50) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB], 0x94}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) getsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000180)=0x4) 265.704334ms ago: executing program 4 (id=1080): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000005c0)=[{{&(0x7f0000003080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000001701000003000000", @ANYRES32], 0x20}}], 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x528, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x458, 0x2e8, 0x2e8, 0x458, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x4, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0xc, 0x6, 0x7, 0xfffffff6, 0x238c16d9, 0x9, 0x0, 0x90}, {0x8}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x208, 0x270, 0x0, {}, [@common=@rt={{0x138}, {0x37, [0x4, 0x5], 0xfffffffd, 0x4, 0x2, [@dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @local, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @remote, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}], 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x2, @loopback}}, 0x27c0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)={0x84, r5, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x3, @void, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_TAIL={0x23, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x5}, 0x1, 0x2b, @broadcast, 0x1, 0x9, 0x9}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x40, 0x5}}, @random={0x8}]}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x84}}, 0x0) 209.649581ms ago: executing program 1 (id=1081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010080f5823c3a99af0cde000000", @ANYRES32=r2], 0x20}}, 0x24008040) 177.287846ms ago: executing program 2 (id=1082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}}, 0x0) recvmmsg$unix(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/208, 0xd0}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f00000018c0)=""/240, 0xf0}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/194, 0xc2}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000001480)=""/244, 0xf4}], 0xa}}], 0x1, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x6}}]}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x4) 126.417651ms ago: executing program 0 (id=1083): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a000100", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x44081) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000001a0069ae0000000000"], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x49, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@empty, @empty, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @link_local, "", @remote}}}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYRES16=r7, @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000d0) write$cgroup_subtree(r3, 0x0, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r8, &(0x7f00000004c0)="177c99b8c3897b56aaebb07e350a1e816e3db2e467bf8ef3098d61043e4ead85e5583d089dd4b4587c2a491189f4234985406d68fa04b2f64a307433840f2d0ae195e8de44b94dc57c30fe212eb53ad80747c1340b324dd601bb5207051a6dff149ea5f120b48006055ecdc22009609fffe2866b3022c8e51c1d346f83177e52d1eb321eb8055bc299654f2ff75b3f2f1129f1c561dab4fce052fe065b58a1098cde30744ed53f2b8f29bbbdc062d59df06c67a5c4ef7747b71f59d2c533d06b350ba37b1f072d0e85927929d2f862c961135564067c88f2"}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1053040000200000240012800b000163c51f006272696467650000140002800500190000000000080004000c"], 0x44}}, 0x8080) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 34.784601ms ago: executing program 4 (id=1084): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01e217"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08000640000000250900010073797a3000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r4, &(0x7f0000001480)=""/4096, 0x1000) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000140)=0x5, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) unshare(0x74010a00) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r6, &(0x7f00000005c0), &(0x7f0000000640)=@tcp, 0x1}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000000)={0x0, 0xf2a9, 0x7, 0x10000, 0xff, 0x1, 0x3f80, 0x5}, 0x0, &(0x7f0000000240)={0x1ff, 0x1ff, 0xe, 0xfffffffffffffffb, 0x457, 0x40, 0x3, 0x3}, &(0x7f00000002c0)={0x0, 0x3938700}, 0x0) 0s ago: executing program 3 (id=1085): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c00)="08001497733f5c3edb", 0x9}, {0x0}], 0x2}}], 0x1, 0x2004004) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000001c0)={{0x3, 0x7}, 0x100, './file0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) socket(0x1e, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000002c0)={r7, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r7, 0xa}, 0x8) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xf51) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) ioctl$FS_IOC_RESVSP(r8, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7}) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="25abe638fa0475ac2cab0df74d7ce48f0a6106917f941e5a3682081fcf7520aac56250a9e876d6e79ae79037eb5fa5348f3ad2265798847d2101b978df6b81e41ff06e99ba0f06ceec34a127b0ecea47d7c6d201dd22330b1192ee52dfb8e4ead2decc581ac0ca5122e937fc7423e17950ce08bb1e5492a0ddafe2bdca8e8d5d", 0x80}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): > 1 [ 81.591946][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.599903][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.606412][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.614263][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.621256][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.626684][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.634468][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.649247][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.649598][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.659526][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.664763][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.671590][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.678573][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.685047][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.692530][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.698579][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.706072][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.720307][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.728969][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.740803][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.748153][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.756047][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.766705][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.769256][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.789163][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.797021][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.211778][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 82.263857][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 82.374007][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 82.442446][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 82.464936][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 82.485359][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.493501][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.501102][ T5834] bridge_slave_0: entered allmulticast mode [ 82.507968][ T5834] bridge_slave_0: entered promiscuous mode [ 82.552154][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.559366][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.566526][ T5834] bridge_slave_1: entered allmulticast mode [ 82.574818][ T5834] bridge_slave_1: entered promiscuous mode [ 82.618251][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.625522][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.633623][ T5844] bridge_slave_0: entered allmulticast mode [ 82.640749][ T5844] bridge_slave_0: entered promiscuous mode [ 82.672878][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.700113][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.707298][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.714834][ T5844] bridge_slave_1: entered allmulticast mode [ 82.721766][ T5844] bridge_slave_1: entered promiscuous mode [ 82.743873][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.824145][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.835275][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.842536][ T5848] bridge_slave_0: entered allmulticast mode [ 82.850473][ T5848] bridge_slave_0: entered promiscuous mode [ 82.859714][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.901072][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.908317][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.920732][ T5848] bridge_slave_1: entered allmulticast mode [ 82.927450][ T5848] bridge_slave_1: entered promiscuous mode [ 82.937424][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.959985][ T5834] team0: Port device team_slave_0 added [ 82.966143][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.973468][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.980838][ T5835] bridge_slave_0: entered allmulticast mode [ 82.988000][ T5835] bridge_slave_0: entered promiscuous mode [ 82.995922][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.003404][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.010872][ T5835] bridge_slave_1: entered allmulticast mode [ 83.017641][ T5835] bridge_slave_1: entered promiscuous mode [ 83.048178][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.055812][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.063147][ T5833] bridge_slave_0: entered allmulticast mode [ 83.070310][ T5833] bridge_slave_0: entered promiscuous mode [ 83.078434][ T5834] team0: Port device team_slave_1 added [ 83.104689][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.124672][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.132655][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.140067][ T5833] bridge_slave_1: entered allmulticast mode [ 83.147047][ T5833] bridge_slave_1: entered promiscuous mode [ 83.182376][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.195103][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.206275][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.227552][ T5844] team0: Port device team_slave_0 added [ 83.254806][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.269132][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.276113][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.302808][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.343747][ T5848] team0: Port device team_slave_0 added [ 83.351373][ T5844] team0: Port device team_slave_1 added [ 83.358742][ T5848] team0: Port device team_slave_1 added [ 83.367546][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.393978][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.401468][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.427741][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.448107][ T5835] team0: Port device team_slave_0 added [ 83.491237][ T5833] team0: Port device team_slave_0 added [ 83.511195][ T5835] team0: Port device team_slave_1 added [ 83.527995][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.535119][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.562037][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.575516][ T5833] team0: Port device team_slave_1 added [ 83.608197][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.615646][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.642166][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.654335][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.664628][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.691512][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.714835][ T5834] hsr_slave_0: entered promiscuous mode [ 83.721693][ T5834] hsr_slave_1: entered promiscuous mode [ 83.738085][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.745408][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.770725][ T5853] Bluetooth: hci3: command tx timeout [ 83.772591][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.777215][ T53] Bluetooth: hci1: command tx timeout [ 83.823830][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.831041][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.858104][ T53] Bluetooth: hci2: command tx timeout [ 83.864034][ T5853] Bluetooth: hci4: command tx timeout [ 83.864046][ T5850] Bluetooth: hci0: command tx timeout [ 83.865962][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.888476][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.895805][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.922014][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.935114][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.942621][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.968679][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.982040][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.989741][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.015839][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.034273][ T5844] hsr_slave_0: entered promiscuous mode [ 84.041904][ T5844] hsr_slave_1: entered promiscuous mode [ 84.048068][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.056031][ T5844] Cannot create hsr debugfs directory [ 84.142424][ T5848] hsr_slave_0: entered promiscuous mode [ 84.148796][ T5848] hsr_slave_1: entered promiscuous mode [ 84.156072][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.164353][ T5848] Cannot create hsr debugfs directory [ 84.209720][ T5833] hsr_slave_0: entered promiscuous mode [ 84.216319][ T5833] hsr_slave_1: entered promiscuous mode [ 84.222769][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.230609][ T5833] Cannot create hsr debugfs directory [ 84.258648][ T5835] hsr_slave_0: entered promiscuous mode [ 84.265131][ T5835] hsr_slave_1: entered promiscuous mode [ 84.272541][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.280527][ T5835] Cannot create hsr debugfs directory [ 84.639360][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.664879][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.678735][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.703570][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.721933][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.735184][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.749480][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.773662][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.831909][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.862845][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.891306][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.912218][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.991991][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.008179][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.018602][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.041050][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.063002][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.104739][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.142884][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.167914][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.177728][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.190632][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.202064][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.225027][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.232492][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.248559][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.285983][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.293177][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.305169][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.312304][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.322567][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.330310][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.418576][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.452622][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.463360][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.506167][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.571717][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.578974][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.610664][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.617786][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.673783][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.784708][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.804480][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.832094][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.839401][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.859166][ T53] Bluetooth: hci1: command tx timeout [ 85.859250][ T5853] Bluetooth: hci3: command tx timeout [ 85.897160][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.904358][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.916714][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.930169][ T5853] Bluetooth: hci2: command tx timeout [ 85.930583][ T53] Bluetooth: hci4: command tx timeout [ 85.935606][ T5853] Bluetooth: hci0: command tx timeout [ 85.964069][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.971247][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.980540][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.987689][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.037758][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.076270][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.095871][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.207810][ T5834] veth0_vlan: entered promiscuous mode [ 86.298717][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.313165][ T5834] veth1_vlan: entered promiscuous mode [ 86.341357][ T5844] veth0_vlan: entered promiscuous mode [ 86.393683][ T5844] veth1_vlan: entered promiscuous mode [ 86.424816][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.536122][ T5834] veth0_macvtap: entered promiscuous mode [ 86.558456][ T5834] veth1_macvtap: entered promiscuous mode [ 86.606917][ T5848] veth0_vlan: entered promiscuous mode [ 86.621706][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.631291][ T5844] veth0_macvtap: entered promiscuous mode [ 86.658323][ T5848] veth1_vlan: entered promiscuous mode [ 86.679592][ T5844] veth1_macvtap: entered promiscuous mode [ 86.699677][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.737193][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.747993][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.762779][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.775538][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.800903][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.811895][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.822065][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.831964][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.848449][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.860657][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.872320][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.915612][ T5833] veth0_vlan: entered promiscuous mode [ 86.923989][ T5844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.933958][ T5844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.943750][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.952602][ T5844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.969879][ T5848] veth0_macvtap: entered promiscuous mode [ 86.984137][ T5835] veth0_vlan: entered promiscuous mode [ 87.000854][ T5848] veth1_macvtap: entered promiscuous mode [ 87.027715][ T5835] veth1_vlan: entered promiscuous mode [ 87.061794][ T9] cfg80211: failed to load regulatory.db [ 87.106804][ T5833] veth1_vlan: entered promiscuous mode [ 87.134516][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.145922][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.158255][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.170084][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.181819][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.221441][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.238489][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.251388][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.268083][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.280058][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.345738][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.355831][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.365475][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.377065][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.432008][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.444102][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.478696][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.498991][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.512047][ T5835] veth0_macvtap: entered promiscuous mode [ 87.554033][ T5835] veth1_macvtap: entered promiscuous mode [ 87.577024][ T5833] veth0_macvtap: entered promiscuous mode [ 87.601388][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.622052][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.663064][ T5833] veth1_macvtap: entered promiscuous mode [ 87.671324][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.696790][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.750606][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.766283][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.777481][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.788733][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.805036][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.815596][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.828305][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.872875][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.893472][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.907006][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.929126][ T5853] Bluetooth: hci3: command tx timeout [ 87.929324][ T53] Bluetooth: hci1: command tx timeout [ 87.942969][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.965950][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.975891][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.986610][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.997366][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.008019][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.017285][ T53] Bluetooth: hci0: command tx timeout [ 88.020378][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.023568][ T5853] Bluetooth: hci4: command tx timeout [ 88.030997][ T5850] Bluetooth: hci2: command tx timeout [ 88.043662][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.054502][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.064727][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.075438][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.085371][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.097184][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.107127][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.117733][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.130264][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.155616][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.164667][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.175421][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.184366][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.197167][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.208283][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.218912][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.229466][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.241117][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.252398][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.262664][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.274501][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.285837][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.295405][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.299705][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.312187][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.320977][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.322142][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.329823][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.568792][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.578481][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.700532][ T5924] netlink: zone id is out of range [ 88.705957][ T5924] netlink: zone id is out of range [ 88.737512][ T5921] Zero length message leads to an empty skb [ 88.737796][ T5924] netlink: zone id is out of range [ 88.744007][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.764937][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.770585][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.793287][ T5924] netlink: zone id is out of range [ 88.798652][ T5924] netlink: zone id is out of range [ 88.798712][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.807941][ T5924] netlink: zone id is out of range [ 88.823497][ T5924] netlink: zone id is out of range [ 88.831138][ T5924] netlink: zone id is out of range [ 88.836315][ T5924] netlink: zone id is out of range [ 88.841831][ T5924] netlink: zone id is out of range [ 88.961434][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.969801][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.298110][ T5934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 89.509831][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.592952][ T5946] xt_nat: multiple ranges no longer supported [ 89.594099][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.783763][ T5953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'. [ 90.010870][ T5850] Bluetooth: hci3: command tx timeout [ 90.010879][ T53] Bluetooth: hci1: command tx timeout [ 90.089074][ T53] Bluetooth: hci0: command tx timeout [ 90.091982][ T5850] Bluetooth: hci4: command tx timeout [ 90.095197][ T5853] Bluetooth: hci2: command tx timeout [ 90.224332][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 90.579649][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 90.633280][ T5972] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.654796][ T5977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24'. [ 90.675611][ T5977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.24'. [ 90.702927][ T5984] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 90.706094][ T5979] bridge_slave_0: left allmulticast mode [ 90.712045][ T5984] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 90.727093][ T5984] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 90.727389][ T5979] bridge_slave_0: left promiscuous mode [ 90.752513][ T5984] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 90.758904][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.772030][ T5984] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 90.783277][ T5984] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 90.795013][ T5979] bridge_slave_1: left allmulticast mode [ 90.802712][ T5985] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.27'. [ 90.805678][ T5979] bridge_slave_1: left promiscuous mode [ 90.813516][ T53] block nbd0: Receive control failed (result -107) [ 90.819215][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.837350][ T5984] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 90.857707][ T5979] bond0: (slave bond_slave_0): Releasing backup interface [ 90.869423][ T5977] nbd0: detected capacity change from 0 to 256 [ 90.877170][ T5979] bond0: (slave bond_slave_1): Releasing backup interface [ 90.913737][ T5979] team0: Port device team_slave_0 removed [ 90.926580][ T5979] team0: Port device team_slave_1 removed [ 90.935333][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.944838][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.957952][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.966526][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.092607][ T5972] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.319863][ T5972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.404096][ T5998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.32'. [ 91.517211][ T5972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.792952][ T6016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.39'. [ 92.202052][ T6028] netlink: 'syz.0.44': attribute type 29 has an invalid length. [ 92.270677][ T6031] netlink: 'syz.0.44': attribute type 29 has an invalid length. [ 92.300270][ T6028] netlink: 'syz.0.44': attribute type 29 has an invalid length. [ 92.468593][ T6038] tipc: Enabling of bearer rejected, failed to enable media [ 92.530604][ T6043] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 92.785869][ T6040] pim6reg1: entered promiscuous mode [ 92.839231][ T6040] pim6reg1: entered allmulticast mode [ 93.008944][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 94.084751][ T6086] net_ratelimit: 2014 callbacks suppressed [ 94.084777][ T6086] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 94.642976][ T6108] __nla_validate_parse: 2 callbacks suppressed [ 94.642998][ T6108] netlink: 380 bytes leftover after parsing attributes in process `syz.0.70'. [ 94.741510][ T6112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.847597][ T6115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.73'. [ 95.015849][ T6123] syz.2.75 uses obsolete (PF_INET,SOCK_PACKET) [ 95.339229][ T6134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.79'. [ 96.426785][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.94'. [ 96.549382][ T6180] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.95'. [ 96.584626][ T6180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.615230][ T6182] netlink: 380 bytes leftover after parsing attributes in process `syz.1.96'. [ 96.821801][ T6187] IPv6: Can't replace route, no match found [ 96.913893][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 96.996033][ T6192] vlan2: entered promiscuous mode [ 97.009003][ T6192] vlan2: entered allmulticast mode [ 97.027013][ T6192] macvlan0: entered allmulticast mode [ 97.046271][ T6192] veth1_vlan: entered allmulticast mode [ 97.055953][ T6197] Cannot find set identified by id 0 to match [ 97.068660][ T6192] macvlan0: entered promiscuous mode [ 97.095264][ T6192] team0: Port device vlan2 added [ 97.105961][ T6200] tipc: Started in network mode [ 97.111521][ T6200] tipc: Node identity ac1414aa, cluster identity 4711 [ 97.120259][ T6200] tipc: Enabled bearer , priority 10 [ 97.243535][ T6205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.249674][ T6202] dummy0: entered promiscuous mode [ 97.270494][ T6202] dummy0: left promiscuous mode [ 97.533287][ T6210] team0: Mode changed to "loadbalance" [ 97.696979][ T6226] veth3: entered promiscuous mode [ 97.903758][ T6236] xt_ecn: cannot match TCP bits for non-tcp packets [ 97.997405][ T6239] x_tables: duplicate underflow at hook 1 [ 98.135472][ T6243] netlink: 104 bytes leftover after parsing attributes in process `syz.2.117'. [ 98.208773][ T6249] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.218275][ T6249] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.227427][ T6249] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.236301][ T6249] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.240733][ T25] tipc: Node number set to 2886997162 [ 98.261898][ T6249] vxlan0: entered promiscuous mode [ 98.267522][ T6249] vxlan0: entered allmulticast mode [ 98.287145][ T6249] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.296726][ T6249] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.307155][ T6249] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.317470][ T6249] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.605397][ T6266] netlink: 56 bytes leftover after parsing attributes in process `syz.0.125'. [ 98.674121][ T6271] Bluetooth: MGMT ver 1.23 [ 98.850417][ T6277] FAULT_INJECTION: forcing a failure. [ 98.850417][ T6277] name failslab, interval 1, probability 0, space 0, times 0 [ 98.922278][ T6277] CPU: 0 UID: 0 PID: 6277 Comm: syz.3.127 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 98.933044][ T6277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.943168][ T6277] Call Trace: [ 98.946587][ T6277] [ 98.949574][ T6277] dump_stack_lvl+0x241/0x360 [ 98.954339][ T6277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.959601][ T6277] ? __pfx__printk+0x10/0x10 [ 98.964257][ T6277] ? ref_tracker_alloc+0x332/0x490 [ 98.969439][ T6277] should_fail_ex+0x3b0/0x4e0 [ 98.974163][ T6277] should_failslab+0xac/0x100 [ 98.978893][ T6277] ? skb_clone+0x20c/0x390 [ 98.983351][ T6277] kmem_cache_alloc_noprof+0x70/0x380 [ 98.988779][ T6277] skb_clone+0x20c/0x390 [ 98.993068][ T6277] __netlink_deliver_tap+0x3cc/0x7f0 [ 98.998568][ T6277] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.003788][ T6277] netlink_deliver_tap+0x19d/0x1b0 [ 99.008950][ T6277] netlink_sendskb+0x68/0x140 [ 99.013658][ T6277] netlink_unicast+0x39d/0x990 [ 99.018465][ T6277] ? __pfx_netlink_unicast+0x10/0x10 [ 99.023899][ T6277] netlink_rcv_skb+0x262/0x430 [ 99.028704][ T6277] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.033951][ T6277] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.039285][ T6277] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 99.044811][ T6277] genl_rcv+0x28/0x40 [ 99.048839][ T6277] netlink_unicast+0x7f6/0x990 [ 99.053674][ T6277] ? __pfx_netlink_unicast+0x10/0x10 [ 99.059333][ T6277] ? __virt_addr_valid+0x183/0x530 [ 99.064465][ T6277] ? __check_object_size+0x48e/0x900 [ 99.069775][ T6277] netlink_sendmsg+0x8e4/0xcb0 [ 99.074570][ T6277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.079878][ T6277] ? aa_sock_msg_perm+0x91/0x160 [ 99.084835][ T6277] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.090133][ T6277] __sock_sendmsg+0x221/0x270 [ 99.094847][ T6277] ____sys_sendmsg+0x52a/0x7e0 [ 99.099638][ T6277] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.104942][ T6277] ? __fget_files+0x2a/0x410 [ 99.109634][ T6277] ? __fget_files+0x2a/0x410 [ 99.114332][ T6277] __sys_sendmsg+0x269/0x350 [ 99.118939][ T6277] ? __pfx_lock_release+0x10/0x10 [ 99.123989][ T6277] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.129142][ T6277] ? __pfx_vfs_write+0x10/0x10 [ 99.133958][ T6277] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.140308][ T6277] ? do_syscall_64+0x100/0x230 [ 99.145096][ T6277] ? do_syscall_64+0xb6/0x230 [ 99.149802][ T6277] do_syscall_64+0xf3/0x230 [ 99.154325][ T6277] ? clear_bhb_loop+0x35/0x90 [ 99.159030][ T6277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.164966][ T6277] RIP: 0033:0x7fbfcbd7fed9 [ 99.169407][ T6277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.189027][ T6277] RSP: 002b:00007fbfccb9d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.197469][ T6277] RAX: ffffffffffffffda RBX: 00007fbfcbf45fa0 RCX: 00007fbfcbd7fed9 [ 99.205453][ T6277] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 99.213449][ T6277] RBP: 00007fbfccb9d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 99.221437][ T6277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.229431][ T6277] R13: 0000000000000000 R14: 00007fbfcbf45fa0 R15: 00007ffe03ce6388 [ 99.237541][ T6277] [ 99.283417][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 99.325986][ T6288] validate_nla: 1 callbacks suppressed [ 99.326009][ T6288] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 99.772008][ T6282] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 99.961555][ T6304] netlink: zone id is out of range [ 99.966785][ T6304] netlink: zone id is out of range [ 99.972107][ T6304] netlink: zone id is out of range [ 99.977258][ T6304] netlink: zone id is out of range [ 99.982711][ T6304] netlink: zone id is out of range [ 99.987888][ T6304] netlink: zone id is out of range [ 99.993178][ T6304] netlink: zone id is out of range [ 99.998332][ T6304] netlink: zone id is out of range [ 100.003662][ T6304] netlink: zone id is out of range [ 100.089006][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 100.114322][ T6306] syzkaller0: entered promiscuous mode [ 100.138735][ T6306] syzkaller0: entered allmulticast mode [ 100.167669][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 100.198981][ T6312] netlink: 'syz.2.140': attribute type 3 has an invalid length. [ 100.729181][ T53] Bluetooth: hci0: command tx timeout [ 101.882532][ T6312] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.892674][ T6312] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.902430][ T6312] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.911339][ T6312] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.319633][ T6344] netlink: 380 bytes leftover after parsing attributes in process `syz.1.153'. [ 102.356785][ T6332] dummy0: entered promiscuous mode [ 102.370040][ T6332] vlan2: entered promiscuous mode [ 102.389617][ T6332] dummy0: left promiscuous mode [ 102.481159][ T6349] netlink: 48 bytes leftover after parsing attributes in process `syz.1.154'. [ 102.767095][ T6364] Cannot find add_set index 0 as target [ 102.803199][ T6366] syzkaller0: entered promiscuous mode [ 102.810951][ T6366] syzkaller0: entered allmulticast mode [ 104.799171][ T6398] Cannot find set identified by id 0 to match [ 104.892369][ T6407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.177'. [ 104.901469][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 104.943078][ T6409] net_ratelimit: 2776 callbacks suppressed [ 104.943101][ T6409] netlink: zone id is out of range [ 104.964379][ T6409] netlink: zone id is out of range [ 104.973641][ T6409] netlink: zone id is out of range [ 104.978977][ T6409] netlink: zone id is out of range [ 104.984199][ T6409] netlink: zone id is out of range [ 104.995970][ T6409] netlink: zone id is out of range [ 105.001302][ T6409] netlink: zone id is out of range [ 105.006585][ T6409] netlink: zone id is out of range [ 105.018732][ T6409] netlink: zone id is out of range [ 105.024879][ T6409] netlink: zone id is out of range [ 105.239497][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.183'. [ 105.248522][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.183'. [ 105.257485][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.183'. [ 105.267377][ T6419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.183'. [ 105.628720][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 105.652554][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 105.892927][ T6450] FAULT_INJECTION: forcing a failure. [ 105.892927][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 105.918975][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.1.195 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 105.929656][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.939792][ T6450] Call Trace: [ 105.943115][ T6450] [ 105.946131][ T6450] dump_stack_lvl+0x241/0x360 [ 105.950871][ T6450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.956300][ T6450] ? __pfx__printk+0x10/0x10 [ 105.960939][ T6450] ? ref_tracker_alloc+0x332/0x490 [ 105.966111][ T6450] should_fail_ex+0x3b0/0x4e0 [ 105.970812][ T6450] should_failslab+0xac/0x100 [ 105.975537][ T6450] ? skb_clone+0x20c/0x390 [ 105.979983][ T6450] kmem_cache_alloc_noprof+0x70/0x380 [ 105.985423][ T6450] skb_clone+0x20c/0x390 [ 105.989731][ T6450] __netlink_deliver_tap+0x3cc/0x7f0 [ 105.995083][ T6450] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.000326][ T6450] netlink_deliver_tap+0x19d/0x1b0 [ 106.005486][ T6450] netlink_sendskb+0x68/0x140 [ 106.010231][ T6450] netlink_unicast+0x39d/0x990 [ 106.015071][ T6450] ? __pfx_netlink_unicast+0x10/0x10 [ 106.020425][ T6450] netlink_rcv_skb+0x262/0x430 [ 106.025269][ T6450] ? __pfx_genl_rcv_msg+0x10/0x10 [ 106.030362][ T6450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.035715][ T6450] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 106.041243][ T6450] genl_rcv+0x28/0x40 [ 106.045274][ T6450] netlink_unicast+0x7f6/0x990 [ 106.050104][ T6450] ? __pfx_netlink_unicast+0x10/0x10 [ 106.055441][ T6450] ? __virt_addr_valid+0x183/0x530 [ 106.060607][ T6450] ? __check_object_size+0x48e/0x900 [ 106.065961][ T6450] netlink_sendmsg+0x8e4/0xcb0 [ 106.070350][ T6457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'. [ 106.070768][ T6450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.084955][ T6450] ? aa_sock_msg_perm+0x91/0x160 [ 106.089951][ T6450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.095293][ T6450] __sock_sendmsg+0x221/0x270 [ 106.100034][ T6450] ____sys_sendmsg+0x52a/0x7e0 [ 106.104853][ T6450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.110185][ T6450] ? __fget_files+0x2a/0x410 [ 106.114834][ T6450] ? __fget_files+0x2a/0x410 [ 106.119487][ T6450] __sys_sendmsg+0x269/0x350 [ 106.124131][ T6450] ? __pfx_lock_release+0x10/0x10 [ 106.129219][ T6450] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.134409][ T6450] ? __pfx_vfs_write+0x10/0x10 [ 106.139257][ T6450] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.145648][ T6450] ? do_syscall_64+0x100/0x230 [ 106.150475][ T6450] ? do_syscall_64+0xb6/0x230 [ 106.155216][ T6450] do_syscall_64+0xf3/0x230 [ 106.159772][ T6450] ? clear_bhb_loop+0x35/0x90 [ 106.164502][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.170454][ T6450] RIP: 0033:0x7f0f8017fed9 [ 106.174920][ T6450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.176095][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 106.194636][ T6450] RSP: 002b:00007f0f80ec1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.194673][ T6450] RAX: ffffffffffffffda RBX: 00007f0f80345fa0 RCX: 00007f0f8017fed9 [ 106.194691][ T6450] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 106.194706][ T6450] RBP: 00007f0f80ec10a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.194720][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.194735][ T6450] R13: 0000000000000000 R14: 00007f0f80345fa0 R15: 00007ffe86c930d8 [ 106.194770][ T6450] [ 106.264087][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 106.315796][ T6460] bridge_slave_0: left allmulticast mode [ 106.339494][ T6460] bridge_slave_0: left promiscuous mode [ 106.345358][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.366975][ T6460] bridge_slave_1: left allmulticast mode [ 106.372970][ T6460] bridge_slave_1: left promiscuous mode [ 106.378976][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.389621][ T6464] ipt_REJECT: TCP_RESET invalid for non-tcp [ 106.403256][ T6460] bond0: (slave bond_slave_0): Releasing backup interface [ 106.452054][ T6460] bond0: (slave bond_slave_1): Releasing backup interface [ 106.538155][ T6460] team0: Port device team_slave_0 removed [ 106.567364][ T6460] team0: Port device team_slave_1 removed [ 106.589820][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.609187][ T6460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.631005][ T6460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.649393][ T6460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.830026][ T6481] netlink: 'syz.2.208': attribute type 1 has an invalid length. [ 107.546536][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 107.960569][ T6522] bridge0: entered promiscuous mode [ 107.975795][ T6522] macsec1: entered promiscuous mode [ 108.000084][ T6522] bridge0: left promiscuous mode [ 108.054027][ T6524] bond0: entered promiscuous mode [ 108.066589][ T6524] bond_slave_0: entered promiscuous mode [ 108.099168][ T6524] bond_slave_1: entered promiscuous mode [ 108.122684][ T6524] bridge0: entered promiscuous mode [ 108.189545][ T6528] vlan2: entered promiscuous mode [ 108.463395][ T6527] pim6reg1: entered promiscuous mode [ 108.483705][ T6527] pim6reg1: entered allmulticast mode [ 108.560068][ T6539] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 109.508493][ T6591] FAULT_INJECTION: forcing a failure. [ 109.508493][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 109.540838][ T6591] CPU: 0 UID: 0 PID: 6591 Comm: syz.3.251 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 109.551598][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.561702][ T6591] Call Trace: [ 109.565026][ T6591] [ 109.567998][ T6591] dump_stack_lvl+0x241/0x360 [ 109.572738][ T6591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.577989][ T6591] ? __pfx__printk+0x10/0x10 [ 109.582612][ T6591] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 109.588622][ T6591] ? __pfx___might_resched+0x10/0x10 [ 109.593931][ T6591] should_fail_ex+0x3b0/0x4e0 [ 109.598629][ T6591] should_failslab+0xac/0x100 [ 109.603423][ T6591] kmem_cache_alloc_node_noprof+0x77/0x380 [ 109.609263][ T6591] ? __alloc_skb+0x1c3/0x440 [ 109.613885][ T6591] __alloc_skb+0x1c3/0x440 [ 109.618320][ T6591] ? __pfx___alloc_skb+0x10/0x10 [ 109.623274][ T6591] ? __pfx___might_resched+0x10/0x10 [ 109.628573][ T6591] alloc_skb_with_frags+0xc3/0x820 [ 109.633705][ T6591] ? __virt_addr_valid+0x183/0x530 [ 109.638843][ T6591] sock_alloc_send_pskb+0x91a/0xa60 [ 109.644078][ T6591] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 109.649815][ T6591] ? __virt_addr_valid+0x183/0x530 [ 109.654942][ T6591] ? __virt_addr_valid+0x183/0x530 [ 109.660065][ T6591] ? __virt_addr_valid+0x45f/0x530 [ 109.665193][ T6591] ? __check_object_size+0x48e/0x900 [ 109.670512][ T6591] bt_skb_sendmsg+0xf1/0x720 [ 109.675122][ T6591] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 109.680338][ T6591] rfcomm_sock_sendmsg+0x2a2/0x440 [ 109.685469][ T6591] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 109.691122][ T6591] __sock_sendmsg+0x221/0x270 [ 109.695824][ T6591] ____sys_sendmsg+0x52a/0x7e0 [ 109.700608][ T6591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.705903][ T6591] ? __fget_files+0x2a/0x410 [ 109.710513][ T6591] ? __fget_files+0x2a/0x410 [ 109.715124][ T6591] __sys_sendmmsg+0x36a/0x720 [ 109.719827][ T6591] ? __pfx___sys_sendmmsg+0x10/0x10 [ 109.725049][ T6591] ? __pfx_lock_release+0x10/0x10 [ 109.730088][ T6591] ? kstrtouint_from_user+0x128/0x190 [ 109.735501][ T6591] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 109.741415][ T6591] ? ksys_write+0x22a/0x2b0 [ 109.745961][ T6591] ? __pfx_lock_release+0x10/0x10 [ 109.751008][ T6591] ? vfs_write+0x730/0xd30 [ 109.755462][ T6591] ? __mutex_unlock_slowpath+0x21e/0x790 [ 109.761137][ T6591] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 109.767152][ T6591] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.773501][ T6591] ? do_syscall_64+0x100/0x230 [ 109.778316][ T6591] __x64_sys_sendmmsg+0xa0/0xb0 [ 109.783188][ T6591] do_syscall_64+0xf3/0x230 [ 109.787767][ T6591] ? clear_bhb_loop+0x35/0x90 [ 109.792457][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.798376][ T6591] RIP: 0033:0x7fbfcbd7fed9 [ 109.802802][ T6591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.822422][ T6591] RSP: 002b:00007fbfccb7c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.830858][ T6591] RAX: ffffffffffffffda RBX: 00007fbfcbf46080 RCX: 00007fbfcbd7fed9 [ 109.838847][ T6591] RDX: 0000000000000001 RSI: 0000000020002c40 RDI: 0000000000000004 [ 109.846833][ T6591] RBP: 00007fbfccb7c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.854816][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.862797][ T6591] R13: 0000000000000001 R14: 00007fbfcbf46080 R15: 00007ffe03ce6388 [ 109.870792][ T6591] [ 110.292944][ T6618] tipc: Started in network mode [ 110.298011][ T6618] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.306280][ T6618] tipc: Enabled bearer , priority 10 [ 110.447902][ T6627] netlink: 'syz.3.262': attribute type 4 has an invalid length. [ 110.498087][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.925162][ T6635] syzkaller0: entered promiscuous mode [ 110.931083][ T6635] syzkaller0: entered allmulticast mode [ 111.047828][ T6640] net_ratelimit: 3217 callbacks suppressed [ 111.047852][ T6640] netlink: set zone limit has 8 unknown bytes [ 111.145557][ T6642] __nla_validate_parse: 4 callbacks suppressed [ 111.145578][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.270'. [ 111.394157][ T6648] Cannot find set identified by id 0 to match [ 111.423653][ T5887] tipc: Node number set to 2886997162 [ 111.587291][ T6653] netlink: zone id is out of range [ 111.593764][ T6653] netlink: zone id is out of range [ 111.601676][ T6653] netlink: zone id is out of range [ 111.607288][ T6653] netlink: zone id is out of range [ 111.615006][ T6653] netlink: zone id is out of range [ 111.620468][ T6653] netlink: zone id is out of range [ 111.625755][ T6653] netlink: zone id is out of range [ 111.636907][ T6653] netlink: zone id is out of range [ 111.642422][ T6653] netlink: zone id is out of range [ 111.705364][ T6655] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.276'. [ 113.006486][ T6642] team_slave_0: entered promiscuous mode [ 113.012479][ T6642] team_slave_1: entered promiscuous mode [ 113.019828][ T6642] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.028544][ T6642] team_slave_0: left promiscuous mode [ 113.034063][ T6642] team_slave_1: left promiscuous mode [ 113.062757][ T6657] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 113.075097][ T6658] netlink: 'syz.4.277': attribute type 10 has an invalid length. [ 113.299266][ T6666] team_slave_0: entered promiscuous mode [ 113.305354][ T6666] team_slave_1: entered promiscuous mode [ 113.311338][ T6666] vlan2: entered promiscuous mode [ 113.316412][ T6666] team0: entered promiscuous mode [ 113.324059][ T6666] team0: Device vlan2 is already an upper device of the team interface [ 113.349527][ T6666] team0: left promiscuous mode [ 113.360123][ T6666] team_slave_0: left promiscuous mode [ 113.365648][ T6666] team_slave_1: left promiscuous mode [ 113.640022][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.288'. [ 113.795246][ T6695] syzkaller0: entered promiscuous mode [ 113.816199][ T6695] syzkaller0: entered allmulticast mode [ 113.921554][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 113.956433][ T6707] netlink: 31 bytes leftover after parsing attributes in process `syz.0.292'. [ 113.979940][ T6707] netlink: 'syz.0.292': attribute type 3 has an invalid length. [ 113.989025][ T6707] netlink: 'syz.0.292': attribute type 2 has an invalid length. [ 113.997116][ T6707] netlink: 31 bytes leftover after parsing attributes in process `syz.0.292'. [ 115.941839][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.968491][ T6698] bridge_slave_1 (unregistering): left allmulticast mode [ 115.975869][ T6698] bridge_slave_1 (unregistering): left promiscuous mode [ 115.989020][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.278481][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.308637][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.338205][ T6714] bond0 (unregistering): Released all slaves [ 116.535869][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 116.540358][ T6750] net_ratelimit: 19 callbacks suppressed [ 116.540384][ T6750] netlink: zone id is out of range [ 116.563194][ T6750] netlink: zone id is out of range [ 116.574631][ T6750] netlink: zone id is out of range [ 116.578421][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 116.585600][ T6750] netlink: zone id is out of range [ 116.606629][ T6750] netlink: zone id is out of range [ 116.610233][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.309'. [ 116.616818][ T6750] netlink: zone id is out of range [ 116.643298][ T6750] netlink: zone id is out of range [ 116.653487][ T6750] netlink: zone id is out of range [ 116.663358][ T6750] netlink: zone id is out of range [ 116.679456][ T6750] netlink: zone id is out of range [ 116.684762][ T53] block nbd1: Receive control failed (result -107) [ 116.739229][ T6752] nbd1: detected capacity change from 0 to 256 [ 116.928169][ T6761] netlink: 56 bytes leftover after parsing attributes in process `syz.1.309'. [ 116.962414][ T6761] netlink: 56 bytes leftover after parsing attributes in process `syz.1.309'. [ 117.045570][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 117.126308][ T6772] netlink: 52 bytes leftover after parsing attributes in process `syz.4.315'. [ 117.293894][ T6757] infiniband syz1: set active [ 117.314229][ T6757] infiniband syz1: added team_slave_0 [ 117.471703][ T6757] RDS/IB: syz1: added [ 117.476565][ T6757] smc: adding ib device syz1 with port count 1 [ 117.488608][ T6757] smc: ib device syz1 port 1 has pnetid [ 117.589236][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 117.842176][ T6789] netlink: 104 bytes leftover after parsing attributes in process `syz.0.321'. [ 117.937092][ T6796] netlink: 104 bytes leftover after parsing attributes in process `syz.2.323'. [ 118.307716][ T6799] smc: removing ib device syz1 [ 118.698647][ T6817] xt_nfacct: accounting object `syz1' does not exists [ 119.571614][ T6843] bridge_slave_0: left allmulticast mode [ 119.587684][ T6843] bridge_slave_0: left promiscuous mode [ 119.609399][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.640796][ T6843] bridge_slave_1: left allmulticast mode [ 119.668483][ T6843] bridge_slave_1: left promiscuous mode [ 119.685964][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.721483][ T6843] bond0: (slave bond_slave_0): Releasing backup interface [ 119.734943][ T6843] bond_slave_0: left promiscuous mode [ 119.751633][ T6843] bond0: (slave bond_slave_1): Releasing backup interface [ 119.766252][ T6843] bond_slave_1: left promiscuous mode [ 119.821969][ T6843] team0: Port device team_slave_0 removed [ 119.842830][ T6843] team0: Port device team_slave_1 removed [ 119.860142][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.871787][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.881005][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.888559][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.649784][ T6883] bridge0: entered promiscuous mode [ 120.677475][ T6880] bridge0: left promiscuous mode [ 121.003166][ T6901] IPv6: Can't replace route, no match found [ 121.204249][ T6910] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 121.640550][ T6928] net_ratelimit: 45 callbacks suppressed [ 121.640574][ T6928] netlink: zone id is out of range [ 121.653667][ T6928] netlink: zone id is out of range [ 121.659133][ T6928] netlink: zone id is out of range [ 121.664837][ T6928] netlink: zone id is out of range [ 121.672352][ T6930] __nla_validate_parse: 11 callbacks suppressed [ 121.672375][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 121.688033][ T6928] netlink: zone id is out of range [ 121.695048][ T6928] netlink: zone id is out of range [ 121.707499][ T6928] netlink: zone id is out of range [ 121.715125][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 121.724500][ T6928] netlink: zone id is out of range [ 121.730871][ T6928] netlink: del zone limit has 8 unknown bytes [ 122.038039][ T6934] trusted_key: syz.0.375 sent an empty control message without MSG_MORE. [ 122.090072][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 122.162973][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 122.384511][ T6955] xt_cgroup: invalid path, errno=-2 [ 122.419114][ T6958] netlink: zone id is out of range [ 122.799215][ T6980] batadv_slave_1: entered promiscuous mode [ 122.889939][ T6972] batadv_slave_1: left promiscuous mode [ 123.044002][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 123.079290][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 123.084175][ T6989] syzkaller1: entered promiscuous mode [ 123.090240][ T6993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.396'. [ 123.146394][ T53] block nbd2: Receive control failed (result -107) [ 123.172509][ T6993] nbd2: detected capacity change from 0 to 256 [ 123.505782][ T7015] netlink: 56 bytes leftover after parsing attributes in process `syz.0.403'. [ 123.555679][ T7017] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 123.622626][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 123.813748][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 123.815763][ T7031] FAULT_INJECTION: forcing a failure. [ 123.815763][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 123.841991][ T7031] CPU: 0 UID: 0 PID: 7031 Comm: syz.4.408 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 123.852649][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.862767][ T7031] Call Trace: [ 123.866087][ T7031] [ 123.869051][ T7031] dump_stack_lvl+0x241/0x360 [ 123.873804][ T7031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.879111][ T7031] ? __pfx__printk+0x10/0x10 [ 123.883757][ T7031] ? __kmalloc_cache_noprof+0x48/0x390 [ 123.889283][ T7031] ? __pfx___might_resched+0x10/0x10 [ 123.894629][ T7031] should_fail_ex+0x3b0/0x4e0 [ 123.899335][ T7031] should_failslab+0xac/0x100 [ 123.904057][ T7031] __kmalloc_cache_noprof+0x70/0x390 [ 123.909373][ T7031] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 123.914763][ T7031] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 123.919979][ T7031] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 123.926346][ T7031] genl_rcv_msg+0xb14/0xec0 [ 123.930883][ T7031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.935949][ T7031] ? __pfx_lock_acquire+0x10/0x10 [ 123.940989][ T7031] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 123.946723][ T7031] ? __pfx___might_resched+0x10/0x10 [ 123.952034][ T7031] netlink_rcv_skb+0x1e3/0x430 [ 123.956826][ T7031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.961868][ T7031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.967195][ T7031] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 123.972675][ T7031] genl_rcv+0x28/0x40 [ 123.976673][ T7031] netlink_unicast+0x7f6/0x990 [ 123.981462][ T7031] ? __pfx_netlink_unicast+0x10/0x10 [ 123.986766][ T7031] ? __virt_addr_valid+0x183/0x530 [ 123.991917][ T7031] ? __check_object_size+0x48e/0x900 [ 123.997222][ T7031] netlink_sendmsg+0x8e4/0xcb0 [ 124.002007][ T7031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.007309][ T7031] ? aa_sock_msg_perm+0x91/0x160 [ 124.012276][ T7031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.017574][ T7031] __sock_sendmsg+0x221/0x270 [ 124.022282][ T7031] ____sys_sendmsg+0x52a/0x7e0 [ 124.027075][ T7031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.032375][ T7031] ? __fget_files+0x2a/0x410 [ 124.037001][ T7031] ? __fget_files+0x2a/0x410 [ 124.041608][ T7031] __sys_sendmsg+0x269/0x350 [ 124.046213][ T7031] ? __pfx_lock_release+0x10/0x10 [ 124.051263][ T7031] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.056397][ T7031] ? __pfx_vfs_write+0x10/0x10 [ 124.061202][ T7031] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.067545][ T7031] ? do_syscall_64+0x100/0x230 [ 124.072332][ T7031] ? do_syscall_64+0xb6/0x230 [ 124.077028][ T7031] do_syscall_64+0xf3/0x230 [ 124.081551][ T7031] ? clear_bhb_loop+0x35/0x90 [ 124.086240][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.092157][ T7031] RIP: 0033:0x7f9c8cb7fed9 [ 124.096595][ T7031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.116222][ T7031] RSP: 002b:00007f9c8da19058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.124656][ T7031] RAX: ffffffffffffffda RBX: 00007f9c8cd45fa0 RCX: 00007f9c8cb7fed9 [ 124.132641][ T7031] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 124.140622][ T7031] RBP: 00007f9c8da190a0 R08: 0000000000000000 R09: 0000000000000000 [ 124.148603][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 124.156582][ T7031] R13: 0000000000000000 R14: 00007f9c8cd45fa0 R15: 00007ffe46e1fa28 [ 124.164581][ T7031] [ 124.200177][ T6998] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 124.880885][ T53] block nbd3: Receive control failed (result -107) [ 124.930563][ T7063] nbd3: detected capacity change from 0 to 256 [ 125.205043][ T7084] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 125.213738][ T53] Bluetooth: hci0: command 0x0401 tx timeout [ 125.220134][ T7084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.227467][ T7084] IPv6: NLM_F_CREATE should be set when creating new route [ 125.243715][ T7084] vlan2: entered promiscuous mode [ 125.250266][ T7084] bond0: entered promiscuous mode [ 125.258963][ T7084] bond0: left promiscuous mode [ 125.316013][ T7093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.443586][ T7096] FAULT_INJECTION: forcing a failure. [ 125.443586][ T7096] name failslab, interval 1, probability 0, space 0, times 0 [ 125.471726][ T7096] CPU: 1 UID: 0 PID: 7096 Comm: syz.3.435 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 125.482397][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.492500][ T7096] Call Trace: [ 125.495816][ T7096] [ 125.498784][ T7096] dump_stack_lvl+0x241/0x360 [ 125.503514][ T7096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.508938][ T7096] ? __pfx__printk+0x10/0x10 [ 125.513581][ T7096] ? __kmalloc_noprof+0xb5/0x4c0 [ 125.518578][ T7096] ? __pfx___might_resched+0x10/0x10 [ 125.523912][ T7096] should_fail_ex+0x3b0/0x4e0 [ 125.528647][ T7096] should_failslab+0xac/0x100 [ 125.533384][ T7096] __kmalloc_noprof+0xdd/0x4c0 [ 125.538200][ T7096] ? sock_kmalloc+0xd7/0x160 [ 125.542840][ T7096] sock_kmalloc+0xd7/0x160 [ 125.547316][ T7096] aead_accept_parent_nokey+0xae/0x250 [ 125.552823][ T7096] ? __pfx_aead_accept_parent_nokey+0x10/0x10 [ 125.558949][ T7096] af_alg_accept+0x204/0x510 [ 125.563598][ T7096] do_accept+0x4c4/0x6d0 [ 125.567932][ T7096] ? __pfx_do_accept+0x10/0x10 [ 125.572758][ T7096] __sys_accept4+0x11f/0x1d0 [ 125.577389][ T7096] ? __pfx___sys_accept4+0x10/0x10 [ 125.582539][ T7096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.588915][ T7096] ? do_syscall_64+0x100/0x230 [ 125.593742][ T7096] __x64_sys_accept4+0x9a/0xb0 [ 125.598553][ T7096] do_syscall_64+0xf3/0x230 [ 125.603111][ T7096] ? clear_bhb_loop+0x35/0x90 [ 125.607830][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.613775][ T7096] RIP: 0033:0x7fbfcbd7fed9 [ 125.618228][ T7096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.637896][ T7096] RSP: 002b:00007fbfccb9d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 125.646368][ T7096] RAX: ffffffffffffffda RBX: 00007fbfcbf45fa0 RCX: 00007fbfcbd7fed9 [ 125.654385][ T7096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 125.662396][ T7096] RBP: 00007fbfccb9d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.670413][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.678424][ T7096] R13: 0000000000000000 R14: 00007fbfcbf45fa0 R15: 00007ffe03ce6388 [ 125.686490][ T7096] [ 126.225645][ T7124] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 126.248533][ T7126] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 126.265741][ T7126] syz_tun: entered promiscuous mode [ 126.356249][ T7126] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 126.683827][ T7145] __nla_validate_parse: 9 callbacks suppressed [ 126.683850][ T7145] netlink: 104 bytes leftover after parsing attributes in process `syz.1.449'. [ 126.726367][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'. [ 126.799697][ T7152] netlink: 104 bytes leftover after parsing attributes in process `syz.2.454'. [ 126.933471][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 126.951105][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.456'. [ 126.985542][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 127.140549][ T7168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'. [ 127.145316][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.463'. [ 127.158568][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.463'. [ 127.306960][ T7176] pim6reg1: entered promiscuous mode [ 127.338374][ T7176] pim6reg1: entered allmulticast mode [ 127.524892][ T7188] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.469'. [ 127.534448][ T7188] net_ratelimit: 9 callbacks suppressed [ 127.534467][ T7188] openvswitch: netlink: Flow key attr not present in new flow. [ 128.036716][ T7205] FAULT_INJECTION: forcing a failure. [ 128.036716][ T7205] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.067070][ T7205] CPU: 0 UID: 0 PID: 7205 Comm: syz.4.474 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 128.077740][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.087850][ T7205] Call Trace: [ 128.091168][ T7205] [ 128.094136][ T7205] dump_stack_lvl+0x241/0x360 [ 128.098862][ T7205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.104091][ T7205] ? __pfx__printk+0x10/0x10 [ 128.108704][ T7205] ? __pfx_lock_release+0x10/0x10 [ 128.113753][ T7205] should_fail_ex+0x3b0/0x4e0 [ 128.118443][ T7205] _copy_from_user+0x2f/0xc0 [ 128.123051][ T7205] copy_msghdr_from_user+0xae/0x680 [ 128.128302][ T7205] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 128.134123][ T7205] ? __fget_files+0x2a/0x410 [ 128.138730][ T7205] ? __fget_files+0x2a/0x410 [ 128.143356][ T7205] __sys_sendmsg+0x209/0x350 [ 128.147961][ T7205] ? __pfx_lock_release+0x10/0x10 [ 128.153006][ T7205] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.158139][ T7205] ? __pfx_vfs_write+0x10/0x10 [ 128.162935][ T7205] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 128.169294][ T7205] ? do_syscall_64+0x100/0x230 [ 128.174094][ T7205] ? do_syscall_64+0xb6/0x230 [ 128.178799][ T7205] do_syscall_64+0xf3/0x230 [ 128.183354][ T7205] ? clear_bhb_loop+0x35/0x90 [ 128.188042][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.193955][ T7205] RIP: 0033:0x7f9c8cb7fed9 [ 128.198397][ T7205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.218041][ T7205] RSP: 002b:00007f9c8da19058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.226489][ T7205] RAX: ffffffffffffffda RBX: 00007f9c8cd45fa0 RCX: 00007f9c8cb7fed9 [ 128.234471][ T7205] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 128.242573][ T7205] RBP: 00007f9c8da190a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.250567][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.258548][ T7205] R13: 0000000000000000 R14: 00007f9c8cd45fa0 R15: 00007ffe46e1fa28 [ 128.266645][ T7205] [ 128.310049][ T7211] netlink: set zone limit has 8 unknown bytes [ 128.632672][ T53] Bluetooth: hci4: link tx timeout [ 128.638887][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.903079][ T7246] xt_ecn: cannot match TCP bits for non-tcp packets [ 129.046347][ T7244] syzkaller0: entered promiscuous mode [ 129.053623][ T7244] syzkaller0: entered allmulticast mode [ 129.084421][ T7251] batadv0: entered promiscuous mode [ 130.571098][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 130.791629][ T7261] IPv6: Can't replace route, no match found [ 131.028199][ T7273] tipc: Enabling of bearer rejected, already enabled [ 131.757493][ T7305] syzkaller0: entered promiscuous mode [ 131.776287][ T7305] syzkaller0: entered allmulticast mode [ 132.193696][ T7326] __nla_validate_parse: 10 callbacks suppressed [ 132.193716][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.516'. [ 132.264091][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 132.279125][ T7326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.516'. [ 132.357149][ T53] block nbd4: Receive control failed (result -107) [ 132.379229][ T7326] nbd4: detected capacity change from 0 to 256 [ 132.651976][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 133.131946][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.144416][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.941017][ T7315] netlink: 830 bytes leftover after parsing attributes in process `syz.4.513'. [ 134.047069][ T7324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.383155][ T7345] netlink: 380 bytes leftover after parsing attributes in process `syz.4.521'. [ 134.402402][ T7349] team_slave_0: entered promiscuous mode [ 134.408183][ T7349] team_slave_1: entered promiscuous mode [ 134.432772][ T7349] vlan3: entered promiscuous mode [ 134.461419][ T7349] team0: entered promiscuous mode [ 134.495372][ T7349] team0: Device vlan3 is already an upper device of the team interface [ 134.536738][ T7349] team0: left promiscuous mode [ 134.554541][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 134.579860][ T7349] team_slave_0: left promiscuous mode [ 134.585412][ T7349] team_slave_1: left promiscuous mode [ 134.968336][ T7375] netlink: 68 bytes leftover after parsing attributes in process `syz.1.528'. [ 135.066325][ T7378] netlink: set zone limit has 8 unknown bytes [ 135.448696][ T7386] syzkaller0: entered promiscuous mode [ 135.503426][ T7386] syzkaller0: entered allmulticast mode [ 135.735824][ T7412] netlink: 108 bytes leftover after parsing attributes in process `syz.0.533'. [ 135.991901][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 136.009072][ T7437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.536'. [ 137.678294][ T7437] vlan2: entered allmulticast mode [ 137.698988][ T7437] bridge_slave_0: entered allmulticast mode [ 137.753326][ T7446] netlink: 380 bytes leftover after parsing attributes in process `syz.1.535'. [ 137.931038][ T7460] netlink: 104 bytes leftover after parsing attributes in process `syz.4.540'. [ 138.190590][ T7472] netlink: 104 bytes leftover after parsing attributes in process `syz.1.542'. [ 138.198424][ T7475] bridge0: entered promiscuous mode [ 138.236635][ T7475] macsec1: entered promiscuous mode [ 138.260826][ T7475] bridge0: left promiscuous mode [ 138.409798][ T7483] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.548'. [ 138.432222][ T7483] openvswitch: netlink: Flow key attr not present in new flow. [ 138.507102][ T7487] netlink: set zone limit has 8 unknown bytes [ 138.589574][ T7485] syzkaller0: entered promiscuous mode [ 138.608357][ T7485] syzkaller0: entered allmulticast mode [ 138.804011][ T7497] FAULT_INJECTION: forcing a failure. [ 138.804011][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 138.817138][ T7497] CPU: 0 UID: 0 PID: 7497 Comm: syz.3.554 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 138.827796][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.837908][ T7497] Call Trace: [ 138.841223][ T7497] [ 138.844175][ T7497] dump_stack_lvl+0x241/0x360 [ 138.848891][ T7497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.854154][ T7497] ? __pfx__printk+0x10/0x10 [ 138.858803][ T7497] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 138.864868][ T7497] ? __pfx___might_resched+0x10/0x10 [ 138.870199][ T7497] should_fail_ex+0x3b0/0x4e0 [ 138.874933][ T7497] should_failslab+0xac/0x100 [ 138.879648][ T7497] kmem_cache_alloc_node_noprof+0x77/0x380 [ 138.885516][ T7497] ? __alloc_skb+0x1c3/0x440 [ 138.890153][ T7497] __alloc_skb+0x1c3/0x440 [ 138.894619][ T7497] ? __pfx___alloc_skb+0x10/0x10 [ 138.899604][ T7497] pfkey_sendmsg+0x1da/0x1050 [ 138.904336][ T7497] ? __pfx___might_resched+0x10/0x10 [ 138.909640][ T7497] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 138.914785][ T7497] ? aa_sk_perm+0x96d/0xab0 [ 138.919314][ T7497] ? __pfx_aa_sk_perm+0x10/0x10 [ 138.924198][ T7497] ? __pfx_lock_release+0x10/0x10 [ 138.929239][ T7497] ? __import_iovec+0x590/0x870 [ 138.934111][ T7497] ? aa_sock_msg_perm+0x91/0x160 [ 138.939066][ T7497] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 138.944205][ T7497] __sock_sendmsg+0x221/0x270 [ 138.948907][ T7497] ____sys_sendmsg+0x52a/0x7e0 [ 138.953692][ T7497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.958996][ T7497] ? __fget_files+0x2a/0x410 [ 138.963611][ T7497] ? __fget_files+0x2a/0x410 [ 138.968216][ T7497] __sys_sendmsg+0x269/0x350 [ 138.972823][ T7497] ? __pfx_lock_release+0x10/0x10 [ 138.977863][ T7497] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.983016][ T7497] ? __pfx_vfs_write+0x10/0x10 [ 138.987815][ T7497] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.994157][ T7497] ? do_syscall_64+0x100/0x230 [ 138.999076][ T7497] ? do_syscall_64+0xb6/0x230 [ 139.003790][ T7497] do_syscall_64+0xf3/0x230 [ 139.008351][ T7497] ? clear_bhb_loop+0x35/0x90 [ 139.013082][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.019005][ T7497] RIP: 0033:0x7fbfcbd7fed9 [ 139.023519][ T7497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.043154][ T7497] RSP: 002b:00007fbfccb9d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.051602][ T7497] RAX: ffffffffffffffda RBX: 00007fbfcbf45fa0 RCX: 00007fbfcbd7fed9 [ 139.059594][ T7497] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 139.067578][ T7497] RBP: 00007fbfccb9d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 139.075562][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.083630][ T7497] R13: 0000000000000000 R14: 00007fbfcbf45fa0 R15: 00007ffe03ce6388 [ 139.091744][ T7497] [ 140.591891][ T7492] netlink: 380 bytes leftover after parsing attributes in process `syz.0.552'. [ 140.886166][ T7515] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.561'. [ 140.915013][ T7515] openvswitch: netlink: Flow key attr not present in new flow. [ 140.939024][ T7519] xt_ecn: cannot match TCP bits for non-tcp packets [ 141.109240][ T7526] xt_NFQUEUE: number of total queues is 0 [ 141.124815][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 141.165622][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 141.275026][ T7529] netlink: 380 bytes leftover after parsing attributes in process `syz.2.567'. [ 141.504670][ T7544] syzkaller0: entered promiscuous mode [ 141.510711][ T7544] syzkaller0: entered allmulticast mode [ 143.439631][ T7554] lo speed is unknown, defaulting to 1000 [ 143.475243][ T7564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.538197][ T7554] lo speed is unknown, defaulting to 1000 [ 143.570810][ T7569] netlink: 'syz.1.581': attribute type 3 has an invalid length. [ 143.578653][ T7554] lo speed is unknown, defaulting to 1000 [ 143.816936][ T7554] infiniband syz0: set active [ 143.822157][ T7554] infiniband syz0: added lo [ 143.827509][ T7554] syz0: rxe_create_cq: returned err = -12 [ 143.833434][ T8] lo speed is unknown, defaulting to 1000 [ 143.840789][ T7554] infiniband syz0: Couldn't create ib_mad CQ [ 143.846993][ T7554] infiniband syz0: Couldn't open port 1 [ 143.874610][ T7554] RDS/IB: syz0: added [ 143.881374][ T7573] netlink: 380 bytes leftover after parsing attributes in process `syz.1.583'. [ 143.890658][ T7554] smc: adding ib device syz0 with port count 1 [ 143.896888][ T7554] smc: ib device syz0 port 1 has pnetid [ 143.920756][ T7554] lo speed is unknown, defaulting to 1000 [ 143.945785][ T8] lo speed is unknown, defaulting to 1000 [ 144.083913][ T7554] lo speed is unknown, defaulting to 1000 [ 144.174679][ T7582] netlink: zone id is out of range [ 144.181802][ T7582] netlink: zone id is out of range [ 144.187072][ T7582] netlink: zone id is out of range [ 144.194636][ T7582] netlink: del zone limit has 8 unknown bytes [ 144.221714][ T7584] set match dimension is over the limit! [ 144.347715][ T7554] lo speed is unknown, defaulting to 1000 [ 144.528734][ T7590] syzkaller0: entered promiscuous mode [ 144.541342][ T7590] syzkaller0: entered allmulticast mode [ 144.558280][ T7595] sit0: mtu less than device minimum [ 144.575507][ T7554] lo speed is unknown, defaulting to 1000 [ 144.690089][ T7600] netlink: 'syz.4.594': attribute type 1 has an invalid length. [ 144.973411][ T7609] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 146.396808][ T7600] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 146.398189][ T7554] lo speed is unknown, defaulting to 1000 [ 146.423577][ T7609] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 146.425312][ T7611] netlink: 380 bytes leftover after parsing attributes in process `syz.1.598'. [ 147.206663][ T7638] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.608'. [ 147.428676][ T7642] syzkaller0: entered promiscuous mode [ 147.436909][ T7642] syzkaller0: entered allmulticast mode [ 147.443261][ T7646] netlink: 380 bytes leftover after parsing attributes in process `syz.1.611'. [ 147.526572][ T7653] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 149.571392][ T7651] sch_fq: defrate 511 ignored. [ 149.740331][ T7675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.309361][ T7697] syzkaller0: entered promiscuous mode [ 150.323543][ T7697] syzkaller0: entered allmulticast mode [ 150.352538][ T7695] lo speed is unknown, defaulting to 1000 [ 152.616367][ T7711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.647481][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.638'. [ 152.647527][ T7721] bridge0: entered promiscuous mode [ 152.664197][ T7721] macsec1: entered promiscuous mode [ 152.674240][ T7721] bridge0: left promiscuous mode [ 152.711167][ T7725] netlink: 'syz.1.639': attribute type 4 has an invalid length. [ 152.822269][ T7730] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.641'. [ 152.831671][ T7730] openvswitch: netlink: Flow key attr not present in new flow. [ 153.011304][ T7736] netlink: zone id is out of range [ 153.018661][ T7736] netlink: zone id is out of range [ 153.042013][ T7736] netlink: del zone limit has 8 unknown bytes [ 153.521595][ T7756] syzkaller0: entered promiscuous mode [ 153.527177][ T7756] syzkaller0: entered allmulticast mode [ 153.632083][ T7763] netlink: 104 bytes leftover after parsing attributes in process `syz.1.651'. [ 155.206297][ T7771] ªªªªªª: renamed from vlan0 (while UP) [ 155.357140][ T7778] netlink: zone id is out of range [ 155.374859][ T7778] netlink: zone id is out of range [ 155.390506][ T7778] netlink: del zone limit has 8 unknown bytes [ 155.421777][ T7780] x_tables: duplicate underflow at hook 1 [ 155.619474][ T7791] xt_ecn: cannot match TCP bits for non-tcp packets [ 155.798077][ T7794] pim6reg1: entered promiscuous mode [ 155.803696][ T7794] pim6reg1: entered allmulticast mode [ 156.030593][ T7813] xt_l2tp: v2 tid > 0xffff: 150994944 [ 156.057343][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.667'. [ 156.060206][ T7811] syzkaller0: entered promiscuous mode [ 156.089120][ T7811] syzkaller0: entered allmulticast mode [ 156.244008][ T7823] netlink: zone id is out of range [ 156.251241][ T7823] netlink: zone id is out of range [ 157.850781][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 158.091981][ T7841] netlink: 60 bytes leftover after parsing attributes in process `syz.0.676'. [ 158.594484][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.685'. [ 158.611317][ T7863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.685'. [ 158.671033][ T7863] bond0: entered promiscuous mode [ 158.678058][ T7863] bridge0: entered promiscuous mode [ 158.678362][ T7866] net_ratelimit: 1 callbacks suppressed [ 158.678381][ T7866] netlink: zone id is out of range [ 158.694696][ T7863] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 158.715712][ T7866] netlink: zone id is out of range [ 158.721386][ T7863] Cannot create hsr debugfs directory [ 158.721631][ T7863] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 158.721657][ T7863] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 158.762408][ T7866] netlink: del zone limit has 8 unknown bytes [ 158.763798][ T7871] netlink: zone id is out of range [ 158.804522][ T7871] netlink: zone id is out of range [ 158.813320][ T7871] netlink: zone id is out of range [ 158.818508][ T7871] netlink: zone id is out of range [ 158.835279][ T7871] netlink: zone id is out of range [ 158.842040][ T7871] netlink: zone id is out of range [ 158.847368][ T7871] netlink: zone id is out of range [ 159.091614][ T7887] syzkaller0: entered promiscuous mode [ 159.099836][ T7887] syzkaller0: entered allmulticast mode [ 159.756263][ T7904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.697'. [ 159.775171][ T7904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.697'. [ 159.798873][ T7904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.697'. [ 159.843248][ T7904] netlink: 36 bytes leftover after parsing attributes in process `syz.2.697'. [ 160.146581][ T7911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.700'. [ 161.344494][ T7890] lo speed is unknown, defaulting to 1000 [ 161.429915][ T7900] warning: `syz.4.696' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 161.580651][ T7920] ip6gretap1: entered promiscuous mode [ 161.588208][ T7920] ip6gretap1: entered allmulticast mode [ 161.722718][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 161.822327][ T7930] netlink: 48 bytes leftover after parsing attributes in process `syz.4.707'. [ 161.887304][ T7933] xt_cgroup: invalid path, errno=-2 [ 162.228163][ T7950] x_tables: duplicate underflow at hook 1 [ 162.263844][ T7951] netlink: 'syz.2.709': attribute type 10 has an invalid length. [ 162.387102][ T7951] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 162.547234][ T7956] FAULT_INJECTION: forcing a failure. [ 162.547234][ T7956] name failslab, interval 1, probability 0, space 0, times 0 [ 162.589056][ T7956] CPU: 0 UID: 0 PID: 7956 Comm: syz.1.715 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 162.599732][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.609826][ T7956] Call Trace: [ 162.613123][ T7956] [ 162.616073][ T7956] dump_stack_lvl+0x241/0x360 [ 162.620776][ T7956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.625994][ T7956] ? __pfx__printk+0x10/0x10 [ 162.630604][ T7956] ? __kmalloc_cache_noprof+0x48/0x390 [ 162.636086][ T7956] ? __pfx___might_resched+0x10/0x10 [ 162.641389][ T7956] should_fail_ex+0x3b0/0x4e0 [ 162.646087][ T7956] should_failslab+0xac/0x100 [ 162.650786][ T7956] __kmalloc_cache_noprof+0x70/0x390 [ 162.656129][ T7956] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 162.661521][ T7956] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 162.666743][ T7956] genl_rcv_msg+0xb14/0xec0 [ 162.671275][ T7956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.676431][ T7956] ? __pfx_lock_acquire+0x10/0x10 [ 162.681511][ T7956] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 162.687246][ T7956] ? __pfx___might_resched+0x10/0x10 [ 162.692558][ T7956] netlink_rcv_skb+0x1e3/0x430 [ 162.697340][ T7956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 162.702383][ T7956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.707690][ T7956] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 162.713175][ T7956] genl_rcv+0x28/0x40 [ 162.717180][ T7956] netlink_unicast+0x7f6/0x990 [ 162.721979][ T7956] ? __pfx_netlink_unicast+0x10/0x10 [ 162.727299][ T7956] ? __virt_addr_valid+0x183/0x530 [ 162.732432][ T7956] ? __check_object_size+0x48e/0x900 [ 162.737748][ T7956] netlink_sendmsg+0x8e4/0xcb0 [ 162.742536][ T7956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.747840][ T7956] ? aa_sock_msg_perm+0x91/0x160 [ 162.752798][ T7956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.758106][ T7956] __sock_sendmsg+0x221/0x270 [ 162.762809][ T7956] ____sys_sendmsg+0x52a/0x7e0 [ 162.767598][ T7956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.772988][ T7956] ? __fget_files+0x2a/0x410 [ 162.777600][ T7956] ? __fget_files+0x2a/0x410 [ 162.782214][ T7956] __sys_sendmsg+0x269/0x350 [ 162.786849][ T7956] ? __pfx_lock_release+0x10/0x10 [ 162.791894][ T7956] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.797036][ T7956] ? __pfx_vfs_write+0x10/0x10 [ 162.801839][ T7956] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.808181][ T7956] ? do_syscall_64+0x100/0x230 [ 162.812968][ T7956] ? do_syscall_64+0xb6/0x230 [ 162.817784][ T7956] do_syscall_64+0xf3/0x230 [ 162.822408][ T7956] ? clear_bhb_loop+0x35/0x90 [ 162.827114][ T7956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.833204][ T7956] RIP: 0033:0x7f0f8017fed9 [ 162.837632][ T7956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.857514][ T7956] RSP: 002b:00007f0f80ec1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.865949][ T7956] RAX: ffffffffffffffda RBX: 00007f0f80345fa0 RCX: 00007f0f8017fed9 [ 162.873970][ T7956] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 162.881975][ T7956] RBP: 00007f0f80ec10a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.890048][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.898032][ T7956] R13: 0000000000000000 R14: 00007f0f80345fa0 R15: 00007ffe86c930d8 [ 162.906031][ T7956] [ 163.300127][ T7980] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 163.708047][ T8001] __nla_validate_parse: 1 callbacks suppressed [ 163.708070][ T8001] netlink: 380 bytes leftover after parsing attributes in process `syz.0.730'. [ 163.905168][ T8011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.594339][ T8041] netlink: 380 bytes leftover after parsing attributes in process `syz.3.742'. [ 164.636437][ T8045] x_tables: duplicate underflow at hook 2 [ 164.660081][ T8045] netlink: 104 bytes leftover after parsing attributes in process `syz.1.744'. [ 164.978043][ T8061] FAULT_INJECTION: forcing a failure. [ 164.978043][ T8061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.019178][ T8061] CPU: 0 UID: 0 PID: 8061 Comm: syz.3.751 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 165.029858][ T8061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.039968][ T8061] Call Trace: [ 165.043291][ T8061] [ 165.046262][ T8061] dump_stack_lvl+0x241/0x360 [ 165.051003][ T8061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.056270][ T8061] ? __pfx__printk+0x10/0x10 [ 165.060920][ T8061] ? __pfx_lock_release+0x10/0x10 [ 165.066011][ T8061] should_fail_ex+0x3b0/0x4e0 [ 165.070759][ T8061] _copy_from_user+0x2f/0xc0 [ 165.075497][ T8061] copy_msghdr_from_user+0xae/0x680 [ 165.080767][ T8061] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 165.086644][ T8061] ? __fget_files+0x2a/0x410 [ 165.091294][ T8061] ? __fget_files+0x2a/0x410 [ 165.095958][ T8061] __sys_sendmsg+0x209/0x350 [ 165.100603][ T8061] ? __pfx_lock_release+0x10/0x10 [ 165.105688][ T8061] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.110867][ T8061] ? __pfx_vfs_write+0x10/0x10 [ 165.115717][ T8061] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.122100][ T8061] ? do_syscall_64+0x100/0x230 [ 165.126933][ T8061] ? do_syscall_64+0xb6/0x230 [ 165.131728][ T8061] do_syscall_64+0xf3/0x230 [ 165.136314][ T8061] ? clear_bhb_loop+0x35/0x90 [ 165.141032][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.146982][ T8061] RIP: 0033:0x7fbfcbd7fed9 [ 165.151440][ T8061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.171096][ T8061] RSP: 002b:00007fbfccb9d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.179661][ T8061] RAX: ffffffffffffffda RBX: 00007fbfcbf45fa0 RCX: 00007fbfcbd7fed9 [ 165.187693][ T8061] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 165.195713][ T8061] RBP: 00007fbfccb9d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.203823][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.211843][ T8061] R13: 0000000000000000 R14: 00007fbfcbf45fa0 R15: 00007ffe03ce6388 [ 165.219893][ T8061] [ 165.509540][ T8075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.757'. [ 165.521694][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.2.756'. [ 165.679678][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.762'. [ 165.745807][ T8086] netlink: 380 bytes leftover after parsing attributes in process `syz.4.760'. [ 165.907840][ T8095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'. [ 165.929231][ T8100] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.768'. [ 165.948202][ T8097] bridge0: entered promiscuous mode [ 165.949145][ T8100] net_ratelimit: 682 callbacks suppressed [ 165.949165][ T8100] openvswitch: netlink: Flow key attr not present in new flow. [ 165.967291][ T8097] macsec1: entered promiscuous mode [ 165.979445][ T8097] bridge0: left promiscuous mode [ 166.342858][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 166.365340][ T8114] netlink: 'syz.0.773': attribute type 5 has an invalid length. [ 166.525626][ T8118] lo speed is unknown, defaulting to 1000 [ 166.849378][ T8132] FAULT_INJECTION: forcing a failure. [ 166.849378][ T8132] name failslab, interval 1, probability 0, space 0, times 0 [ 166.875711][ T8132] CPU: 1 UID: 0 PID: 8132 Comm: syz.1.780 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 166.886389][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.896492][ T8132] Call Trace: [ 166.899819][ T8132] [ 166.902787][ T8132] dump_stack_lvl+0x241/0x360 [ 166.907528][ T8132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.912792][ T8132] ? __pfx__printk+0x10/0x10 [ 166.917439][ T8132] ? __kmalloc_cache_noprof+0x48/0x390 [ 166.922964][ T8132] ? __pfx___might_resched+0x10/0x10 [ 166.928303][ T8132] should_fail_ex+0x3b0/0x4e0 [ 166.933033][ T8132] should_failslab+0xac/0x100 [ 166.937770][ T8132] __kmalloc_cache_noprof+0x70/0x390 [ 166.943112][ T8132] ? garp_init_applicant+0x12b/0x450 [ 166.948458][ T8132] garp_init_applicant+0x12b/0x450 [ 166.953629][ T8132] ? vlan_gvrp_init_applicant+0xd/0x20 [ 166.959147][ T8132] register_vlan_dev+0x1eb/0x810 [ 166.964144][ T8132] vlan_newlink+0x476/0x5c0 [ 166.968706][ T8132] ? __pfx_vlan_newlink+0x10/0x10 [ 166.973786][ T8132] rtnl_newlink_create+0x2ee/0xa40 [ 166.978965][ T8132] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 166.984650][ T8132] ? ns_capable+0x8a/0xf0 [ 166.989032][ T8132] rtnl_newlink+0x1b40/0x20e0 [ 166.993744][ T8132] ? __pfx_rtnl_newlink+0x10/0x10 [ 166.998792][ T8132] ? __netlink_deliver_tap+0x56b/0x7f0 [ 167.004304][ T8132] ? __pfx_validate_chain+0x10/0x10 [ 167.009525][ T8132] ? __sock_sendmsg+0x221/0x270 [ 167.014400][ T8132] ? ____sys_sendmsg+0x52a/0x7e0 [ 167.019379][ T8132] ? __sys_sendmsg+0x269/0x350 [ 167.024203][ T8132] ? do_syscall_64+0xf3/0x230 [ 167.028908][ T8132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.035030][ T8132] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 167.041031][ T8132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.047383][ T8132] ? mark_lock+0x9a/0x360 [ 167.051824][ T8132] ? __lock_acquire+0x1397/0x2100 [ 167.056891][ T8132] ? __pfx_lock_release+0x10/0x10 [ 167.061944][ T8132] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.066987][ T8132] rtnetlink_rcv_msg+0x791/0xcf0 [ 167.071941][ T8132] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 167.077071][ T8132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.082559][ T8132] ? ref_tracker_free+0x643/0x7e0 [ 167.087637][ T8132] netlink_rcv_skb+0x1e3/0x430 [ 167.092440][ T8132] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.097927][ T8132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.103244][ T8132] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.108478][ T8132] netlink_unicast+0x7f6/0x990 [ 167.113275][ T8132] ? __pfx_netlink_unicast+0x10/0x10 [ 167.118614][ T8132] ? __virt_addr_valid+0x183/0x530 [ 167.123784][ T8132] ? __check_object_size+0x48e/0x900 [ 167.129113][ T8132] netlink_sendmsg+0x8e4/0xcb0 [ 167.133918][ T8132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.139224][ T8132] ? aa_sock_msg_perm+0x91/0x160 [ 167.144183][ T8132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.149482][ T8132] __sock_sendmsg+0x221/0x270 [ 167.154180][ T8132] ____sys_sendmsg+0x52a/0x7e0 [ 167.158966][ T8132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.164264][ T8132] ? __fget_files+0x2a/0x410 [ 167.168866][ T8132] ? __fget_files+0x2a/0x410 [ 167.173514][ T8132] __sys_sendmsg+0x269/0x350 [ 167.178121][ T8132] ? __pfx_lock_release+0x10/0x10 [ 167.183171][ T8132] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.188329][ T8132] ? __pfx_vfs_write+0x10/0x10 [ 167.193128][ T8132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 167.199473][ T8132] ? do_syscall_64+0x100/0x230 [ 167.204256][ T8132] ? do_syscall_64+0xb6/0x230 [ 167.208954][ T8132] do_syscall_64+0xf3/0x230 [ 167.213477][ T8132] ? clear_bhb_loop+0x35/0x90 [ 167.218192][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.224112][ T8132] RIP: 0033:0x7f0f8017fed9 [ 167.228540][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.248165][ T8132] RSP: 002b:00007f0f80ec1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.256599][ T8132] RAX: ffffffffffffffda RBX: 00007f0f80345fa0 RCX: 00007f0f8017fed9 [ 167.264586][ T8132] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000003 [ 167.272612][ T8132] RBP: 00007f0f80ec10a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.280609][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.288591][ T8132] R13: 0000000000000000 R14: 00007f0f80345fa0 R15: 00007ffe86c930d8 [ 167.296587][ T8132] [ 167.560130][ T8118] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 167.979198][ T8154] xt_ecn: cannot match TCP bits for non-tcp packets [ 168.008500][ T8160] raw_sendmsg: syz.3.787 forgot to set AF_INET. Fix it! [ 168.040356][ T8159] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 168.406878][ T8175] pim6reg1: entered promiscuous mode [ 168.454566][ T8175] pim6reg1: entered allmulticast mode [ 168.775260][ T8195] __nla_validate_parse: 4 callbacks suppressed [ 168.775284][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.802'. [ 168.886366][ T8203] netlink: 104 bytes leftover after parsing attributes in process `syz.4.804'. [ 169.142425][ T8218] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.810'. [ 169.160932][ T8218] openvswitch: netlink: Flow key attr not present in new flow. [ 169.236401][ T8221] netlink: 104 bytes leftover after parsing attributes in process `syz.4.812'. [ 169.307838][ T8225] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 169.332785][ T8225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.377257][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 169.402147][ T8225] bond1: (slave batadv1): making interface the new active one [ 169.422799][ T8225] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 169.804039][ T8247] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.822'. [ 169.818742][ T8247] openvswitch: netlink: Flow key attr not present in new flow. [ 169.929879][ T8251] netlink: 36 bytes leftover after parsing attributes in process `syz.3.824'. [ 169.977903][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.824'. [ 169.999577][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.824'. [ 170.044486][ T8255] netlink: 380 bytes leftover after parsing attributes in process `syz.1.827'. [ 170.222888][ T8263] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 170.316501][ T8263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.367579][ T8269] bond2: (slave veth3): Enslaving as an active interface with a down link [ 170.568612][ T8279] Driver unsupported XDP return value 0 on prog (id 271) dev N/A, expect packet loss! [ 170.587786][ T8281] tipc: Started in network mode [ 170.592991][ T8281] tipc: Node identity 7e41b06dea4e, cluster identity 4711 [ 170.601875][ T8281] tipc: Enabled bearer , priority 0 [ 170.632996][ T8284] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.836'. [ 170.642576][ T8281] tipc: Resetting bearer [ 170.680094][ T8284] openvswitch: netlink: Flow key attr not present in new flow. [ 170.753934][ T8281] tipc: Resetting bearer [ 171.636437][ T9] tipc: Node number set to 2484056173 [ 172.725268][ T8281] tipc: Disabling bearer [ 172.758337][ T8286] team0: Device vlan2 is already an upper device of the team interface [ 172.986185][ T8301] netlink: 'syz.3.845': attribute type 1 has an invalid length. [ 173.126704][ T8301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.140713][ T8313] openvswitch: netlink: Flow key attr not present in new flow. [ 173.178428][ T8315] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 173.185849][ T8315] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 173.227329][ T8319] netlink: 'syz.2.851': attribute type 1 has an invalid length. [ 173.229316][ T8309] bond1: (slave veth5): Enslaving as an active interface with a down link [ 173.283770][ T8319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.444680][ T8331] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 173.444865][ T8329] xt_cgroup: invalid path, errno=-2 [ 174.171061][ T8345] __nla_validate_parse: 3 callbacks suppressed [ 174.171084][ T8345] netlink: 380 bytes leftover after parsing attributes in process `syz.1.859'. [ 174.310505][ T8352] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.863'. [ 174.337452][ T8352] openvswitch: netlink: Flow key attr not present in new flow. [ 174.389878][ T8354] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 174.423456][ T8354] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.475375][ T8354] bond3: (slave veth5): Enslaving as an active interface with a down link [ 174.529144][ T8355] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 63 [ 174.544691][ T8369] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.868'. [ 174.768006][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.870'. [ 174.862181][ T8381] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.171761][ T8394] FAULT_INJECTION: forcing a failure. [ 175.171761][ T8394] name failslab, interval 1, probability 0, space 0, times 0 [ 175.207835][ T8394] CPU: 0 UID: 0 PID: 8394 Comm: syz.1.877 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 175.218509][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.228615][ T8394] Call Trace: [ 175.231938][ T8394] [ 175.234903][ T8394] dump_stack_lvl+0x241/0x360 [ 175.239649][ T8394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.244900][ T8394] ? __pfx__printk+0x10/0x10 [ 175.249542][ T8394] ? __kmalloc_cache_noprof+0x48/0x390 [ 175.255055][ T8394] ? __pfx___might_resched+0x10/0x10 [ 175.260399][ T8394] should_fail_ex+0x3b0/0x4e0 [ 175.265132][ T8394] should_failslab+0xac/0x100 [ 175.269866][ T8394] __kmalloc_cache_noprof+0x70/0x390 [ 175.275214][ T8394] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 175.280659][ T8394] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 175.285940][ T8394] genl_rcv_msg+0xb14/0xec0 [ 175.290533][ T8394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.295645][ T8394] ? __pfx_lock_acquire+0x10/0x10 [ 175.300691][ T8394] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 175.306443][ T8394] ? __pfx___might_resched+0x10/0x10 [ 175.311866][ T8394] netlink_rcv_skb+0x1e3/0x430 [ 175.316679][ T8394] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.321749][ T8394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.327118][ T8394] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 175.332654][ T8394] genl_rcv+0x28/0x40 [ 175.336673][ T8394] netlink_unicast+0x7f6/0x990 [ 175.341498][ T8394] ? __pfx_netlink_unicast+0x10/0x10 [ 175.346807][ T8394] ? __virt_addr_valid+0x183/0x530 [ 175.351942][ T8394] ? __check_object_size+0x48e/0x900 [ 175.357256][ T8394] netlink_sendmsg+0x8e4/0xcb0 [ 175.362051][ T8394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.367358][ T8394] ? aa_sock_msg_perm+0x91/0x160 [ 175.372315][ T8394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.377615][ T8394] __sock_sendmsg+0x221/0x270 [ 175.382316][ T8394] ____sys_sendmsg+0x52a/0x7e0 [ 175.387104][ T8394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.392404][ T8394] ? __fget_files+0x2a/0x410 [ 175.397009][ T8394] ? __fget_files+0x2a/0x410 [ 175.401623][ T8394] __sys_sendmsg+0x269/0x350 [ 175.406251][ T8394] ? __pfx_lock_release+0x10/0x10 [ 175.411308][ T8394] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.416459][ T8394] ? __pfx_vfs_write+0x10/0x10 [ 175.421266][ T8394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.427612][ T8394] ? do_syscall_64+0x100/0x230 [ 175.432431][ T8394] ? do_syscall_64+0xb6/0x230 [ 175.437133][ T8394] do_syscall_64+0xf3/0x230 [ 175.441655][ T8394] ? clear_bhb_loop+0x35/0x90 [ 175.446346][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.452262][ T8394] RIP: 0033:0x7f0f8017fed9 [ 175.456724][ T8394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.476353][ T8394] RSP: 002b:00007f0f80ec1058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.484789][ T8394] RAX: ffffffffffffffda RBX: 00007f0f80345fa0 RCX: 00007f0f8017fed9 [ 175.492777][ T8394] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 175.500761][ T8394] RBP: 00007f0f80ec10a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.508744][ T8394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.516729][ T8394] R13: 0000000000000000 R14: 00007f0f80345fa0 R15: 00007ffe86c930d8 [ 175.524737][ T8394] [ 175.536287][ T8399] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.878'. [ 175.546193][ T8399] openvswitch: netlink: Flow key attr not present in new flow. [ 175.646842][ T8405] netlink: 'syz.3.882': attribute type 1 has an invalid length. [ 175.739311][ T8409] pimreg: entered allmulticast mode [ 175.829622][ T8413] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 176.179046][ T8431] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.892'. [ 176.195225][ T8434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.208594][ T8431] openvswitch: netlink: Flow key attr not present in new flow. [ 176.912168][ T8473] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.905'. [ 176.956991][ T8473] openvswitch: netlink: Flow key attr not present in new flow. [ 176.997406][ T8476] FAULT_INJECTION: forcing a failure. [ 176.997406][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 177.039212][ T8476] CPU: 0 UID: 0 PID: 8476 Comm: syz.3.907 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 177.049888][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.059994][ T8476] Call Trace: [ 177.063419][ T8476] [ 177.066394][ T8476] dump_stack_lvl+0x241/0x360 [ 177.071245][ T8476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.076512][ T8476] ? __pfx__printk+0x10/0x10 [ 177.081164][ T8476] ? __kmalloc_noprof+0xb5/0x4c0 [ 177.086291][ T8476] ? __pfx___might_resched+0x10/0x10 [ 177.091636][ T8476] should_fail_ex+0x3b0/0x4e0 [ 177.096379][ T8476] should_failslab+0xac/0x100 [ 177.101132][ T8476] __kmalloc_noprof+0xdd/0x4c0 [ 177.105974][ T8476] ? iovec_from_user+0x87/0x240 [ 177.110894][ T8476] iovec_from_user+0x87/0x240 [ 177.115629][ T8476] __import_iovec+0x152/0x870 [ 177.120367][ T8476] import_iovec+0xeb/0x120 [ 177.124842][ T8476] copy_msghdr_from_user+0x52f/0x680 [ 177.130193][ T8476] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 177.136183][ T8476] ? __fget_files+0x2a/0x410 [ 177.140832][ T8476] ? __fget_files+0x2a/0x410 [ 177.145516][ T8476] __sys_sendmsg+0x209/0x350 [ 177.150161][ T8476] ? __pfx_lock_release+0x10/0x10 [ 177.155283][ T8476] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.160477][ T8476] ? __pfx_vfs_write+0x10/0x10 [ 177.165328][ T8476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.171719][ T8476] ? do_syscall_64+0x100/0x230 [ 177.176556][ T8476] ? do_syscall_64+0xb6/0x230 [ 177.181304][ T8476] do_syscall_64+0xf3/0x230 [ 177.185868][ T8476] ? clear_bhb_loop+0x35/0x90 [ 177.190591][ T8476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.196540][ T8476] RIP: 0033:0x7fbfcbd7fed9 [ 177.200983][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.220619][ T8476] RSP: 002b:00007fbfccb9d058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.229060][ T8476] RAX: ffffffffffffffda RBX: 00007fbfcbf45fa0 RCX: 00007fbfcbd7fed9 [ 177.237045][ T8476] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 177.245028][ T8476] RBP: 00007fbfccb9d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.253026][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.261029][ T8476] R13: 0000000000000000 R14: 00007fbfcbf45fa0 R15: 00007ffe03ce6388 [ 177.269065][ T8476] [ 177.455670][ T8491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.915'. [ 177.521973][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.917'. [ 177.732761][ T8506] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.920'. [ 177.741594][ T8512] openvswitch: netlink: Flow key attr not present in new flow. [ 177.776461][ T8506] openvswitch: netlink: Flow key attr not present in new flow. [ 178.489969][ T8552] netlink: 'syz.0.936': attribute type 10 has an invalid length. [ 178.566763][ T8552] team0: Port device dummy0 added [ 178.609799][ T8557] netlink: 'syz.4.938': attribute type 6 has an invalid length. [ 178.621820][ T8557] x_tables: duplicate underflow at hook 1 [ 179.078134][ T8577] x_tables: unsorted underflow at hook 3 [ 179.424558][ T8592] __nla_validate_parse: 3 callbacks suppressed [ 179.424581][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 179.453816][ T8595] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.469210][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 179.482699][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.952'. [ 179.531571][ T53] block nbd5: Receive control failed (result -107) [ 179.579290][ T8592] nbd5: detected capacity change from 0 to 256 [ 179.652207][ T8603] netlink: 44 bytes leftover after parsing attributes in process `syz.0.955'. [ 179.674473][ T8603] netlink: 35 bytes leftover after parsing attributes in process `syz.0.955'. [ 179.694606][ T8603] netlink: 'syz.0.955': attribute type 5 has an invalid length. [ 179.707528][ T8606] bridge0: entered promiscuous mode [ 179.716604][ T8603] netlink: 35 bytes leftover after parsing attributes in process `syz.0.955'. [ 179.726329][ T8606] macsec1: entered promiscuous mode [ 179.735462][ T8606] bridge0: left promiscuous mode [ 179.840522][ T8610] netlink: 108 bytes leftover after parsing attributes in process `syz.2.959'. [ 179.868619][ T8610] netlink: 108 bytes leftover after parsing attributes in process `syz.2.959'. [ 179.883308][ T8616] FAULT_INJECTION: forcing a failure. [ 179.883308][ T8616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.888464][ T8610] netlink: 84 bytes leftover after parsing attributes in process `syz.2.959'. [ 179.916565][ T8615] netlink: set zone limit has 8 unknown bytes [ 179.919049][ T8616] CPU: 1 UID: 0 PID: 8616 Comm: syz.1.960 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 179.933459][ T8616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.943542][ T8616] Call Trace: [ 179.946829][ T8616] [ 179.949775][ T8616] dump_stack_lvl+0x241/0x360 [ 179.954482][ T8616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.959713][ T8616] ? __pfx__printk+0x10/0x10 [ 179.964339][ T8616] ? __pfx_lock_release+0x10/0x10 [ 179.969380][ T8616] ? __lock_acquire+0x1397/0x2100 [ 179.974423][ T8616] should_fail_ex+0x3b0/0x4e0 [ 179.979116][ T8616] _copy_from_user+0x2f/0xc0 [ 179.983727][ T8616] dccp_setsockopt+0x32c/0x12c0 [ 179.988609][ T8616] ? __pfx_dccp_setsockopt+0x10/0x10 [ 179.993913][ T8616] ? __pfx_lock_acquire+0x10/0x10 [ 179.998950][ T8616] ? aa_sock_opt_perm+0x79/0x120 [ 180.003901][ T8616] ? sock_common_setsockopt+0x37/0xc0 [ 180.009333][ T8616] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.015262][ T8616] do_sock_setsockopt+0x3af/0x720 [ 180.020321][ T8616] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 180.025892][ T8616] ? __fget_files+0x395/0x410 [ 180.030580][ T8616] ? __fget_files+0x2a/0x410 [ 180.035184][ T8616] __x64_sys_setsockopt+0x1ee/0x280 [ 180.040403][ T8616] do_syscall_64+0xf3/0x230 [ 180.044923][ T8616] ? clear_bhb_loop+0x35/0x90 [ 180.049611][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.055530][ T8616] RIP: 0033:0x7f0f8017fed9 [ 180.059964][ T8616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.079672][ T8616] RSP: 002b:00007f0f80ea0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.088099][ T8616] RAX: ffffffffffffffda RBX: 00007f0f80346080 RCX: 00007f0f8017fed9 [ 180.096602][ T8616] RDX: 000000000000000a RSI: 000000000000010d RDI: 0000000000000003 [ 180.104613][ T8616] RBP: 00007f0f80ea00a0 R08: 0000000000000004 R09: 0000000000000000 [ 180.112629][ T8616] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 180.120712][ T8616] R13: 0000000000000001 R14: 00007f0f80346080 R15: 00007ffe86c930d8 [ 180.128720][ T8616] [ 180.439650][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'. [ 180.878191][ T8654] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 181.155223][ T8671] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (35451) [ 181.188986][ T8671] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 181.796676][ T8696] bridge_slave_0: left allmulticast mode [ 181.810414][ T8696] bridge_slave_0: left promiscuous mode [ 181.838519][ T8696] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.012193][ T8696] bond0: (slave bond_slave_0): Releasing backup interface [ 182.067025][ T8696] bond0: (slave bond_slave_1): Releasing backup interface [ 182.125782][ T8696] team0: Port device team_slave_0 removed [ 182.171934][ T8696] team0: Port device team_slave_1 removed [ 182.206863][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.231065][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.243131][ T8696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.262702][ T8696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.326066][ T8696] bond0: (slave wlan1): Releasing backup interface [ 182.383296][ T8712] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 182.393498][ T8696] macvlan0: left allmulticast mode [ 182.401763][ T8696] veth1_vlan: left allmulticast mode [ 182.407575][ T8696] macvlan0: left promiscuous mode [ 182.425469][ T8696] team0: Port device vlan2 removed [ 182.488049][ T8712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.615437][ T8719] lo speed is unknown, defaulting to 1000 [ 182.769268][ T8724] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 182.778963][ T8724] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 182.799665][ T8724] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 183.144408][ T8719] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.819269][ T8755] netlink: 'syz.0.1007': attribute type 1 has an invalid length. [ 183.951983][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.447671][ T8777] syzkaller0: entered promiscuous mode [ 184.469483][ T8777] syzkaller0: entered allmulticast mode [ 184.480320][ T8780] netlink: 'syz.2.1017': attribute type 30 has an invalid length. [ 184.526395][ T8789] team0: Device vlan3 is already an upper device of the team interface [ 184.818183][ T8799] xt_cgroup: invalid path, errno=-2 [ 184.874374][ T8802] __nla_validate_parse: 6 callbacks suppressed [ 184.874398][ T8802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1025'. [ 184.973933][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1023'. [ 186.027813][ T8812] netlink: 'syz.0.1029': attribute type 1 has an invalid length. [ 187.200598][ T8801] bond0: (slave syz_tun): Releasing backup interface [ 187.213227][ T8801] syz_tun: left promiscuous mode [ 187.271700][ T8808] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 187.275412][ T8812] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 187.424288][ T8823] netlink: 'syz.4.1032': attribute type 10 has an invalid length. [ 187.473143][ T8825] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.1034'. [ 187.486234][ T8828] netlink: 'syz.4.1032': attribute type 10 has an invalid length. [ 187.533752][ T8823] team0: Failed to send options change via netlink (err -105) [ 187.571436][ T8823] team0: Port device netdevsim0 added [ 187.640101][ T8828] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 187.769829][ T8828] team0: Failed to send options change via netlink (err -105) [ 187.847633][ T8828] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 187.870597][ T8839] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 187.875797][ T8828] team0: Port device netdevsim0 removed [ 187.905278][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 187.932834][ T8828] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 188.013453][ T8843] lo speed is unknown, defaulting to 1000 [ 188.159960][ T8853] netlink: 'syz.1.1044': attribute type 1 has an invalid length. [ 188.267946][ T8849] syzkaller0: entered promiscuous mode [ 188.301203][ T8849] syzkaller0: entered allmulticast mode [ 188.407386][ T8853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.905484][ T8847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.179327][ T8899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 191.188268][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 191.210021][ T8901] FAULT_INJECTION: forcing a failure. [ 191.210021][ T8901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.287762][ T8901] CPU: 0 UID: 0 PID: 8901 Comm: syz.4.1054 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 191.298524][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.308828][ T8901] Call Trace: [ 191.312150][ T8901] [ 191.315112][ T8901] dump_stack_lvl+0x241/0x360 [ 191.319847][ T8901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.325093][ T8901] ? __pfx__printk+0x10/0x10 [ 191.329738][ T8901] ? __pfx_lock_release+0x10/0x10 [ 191.334821][ T8901] should_fail_ex+0x3b0/0x4e0 [ 191.339547][ T8901] _copy_from_iter+0x21f/0x1e70 [ 191.344449][ T8901] ? __virt_addr_valid+0x183/0x530 [ 191.349614][ T8901] ? __pfx_lock_release+0x10/0x10 [ 191.354708][ T8901] ? __pfx__copy_from_iter+0x10/0x10 [ 191.360052][ T8901] ? __virt_addr_valid+0x183/0x530 [ 191.365213][ T8901] ? __virt_addr_valid+0x183/0x530 [ 191.370378][ T8901] ? __virt_addr_valid+0x45f/0x530 [ 191.375549][ T8901] ? __check_object_size+0x48e/0x900 [ 191.380905][ T8901] bt_skb_sendmsg+0x3a7/0x720 [ 191.385649][ T8901] ? __pfx_bt_skb_sendmsg+0x10/0x10 [ 191.390916][ T8901] rfcomm_sock_sendmsg+0x1ed/0x440 [ 191.396087][ T8901] ? __pfx_rfcomm_sock_sendmsg+0x10/0x10 [ 191.401765][ T8901] __sock_sendmsg+0x221/0x270 [ 191.406515][ T8901] ____sys_sendmsg+0x52a/0x7e0 [ 191.411338][ T8901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.416668][ T8901] ? __fget_files+0x2a/0x410 [ 191.421317][ T8901] ? __fget_files+0x2a/0x410 [ 191.425973][ T8901] __sys_sendmmsg+0x36a/0x720 [ 191.430730][ T8901] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.435992][ T8901] ? __pfx_lock_release+0x10/0x10 [ 191.441067][ T8901] ? kstrtouint_from_user+0x128/0x190 [ 191.446569][ T8901] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 191.452522][ T8901] ? ksys_write+0x22a/0x2b0 [ 191.457077][ T8901] ? __pfx_lock_release+0x10/0x10 [ 191.462159][ T8901] ? vfs_write+0x730/0xd30 [ 191.466632][ T8901] ? __mutex_unlock_slowpath+0x21e/0x790 [ 191.472371][ T8901] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 191.478422][ T8901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.484803][ T8901] ? do_syscall_64+0x100/0x230 [ 191.489629][ T8901] __x64_sys_sendmmsg+0xa0/0xb0 [ 191.494546][ T8901] do_syscall_64+0xf3/0x230 [ 191.499111][ T8901] ? clear_bhb_loop+0x35/0x90 [ 191.503844][ T8901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.509806][ T8901] RIP: 0033:0x7f9c8cb7fed9 [ 191.514267][ T8901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.533929][ T8901] RSP: 002b:00007f9c8d9f8058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.542410][ T8901] RAX: ffffffffffffffda RBX: 00007f9c8cd46080 RCX: 00007f9c8cb7fed9 [ 191.550431][ T8901] RDX: 0000000000000001 RSI: 0000000020002c40 RDI: 0000000000000004 [ 191.558454][ T8901] RBP: 00007f9c8d9f80a0 R08: 0000000000000000 R09: 0000000000000000 [ 191.566475][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.574501][ T8901] R13: 0000000000000001 R14: 00007f9c8cd46080 R15: 00007ffe46e1fa28 [ 191.582623][ T8901] [ 191.826545][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.143870][ T8915] syzkaller0: entered promiscuous mode [ 192.159033][ T8915] syzkaller0: entered allmulticast mode [ 192.242992][ T8925] netlink: 'syz.1.1067': attribute type 2 has an invalid length. [ 192.251467][ T8925] netlink: 'syz.1.1067': attribute type 9 has an invalid length. [ 192.285116][ T8925] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1067'. [ 192.325973][ T8925] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1067'. [ 194.339473][ T8933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1072'. [ 194.371881][ T8939] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 194.584093][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.591725][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.958636][ T8953] bridge0: port 1(hsr0) entered blocking state [ 194.965478][ T8953] bridge0: port 1(hsr0) entered disabled state [ 194.973920][ T8953] hsr0: entered allmulticast mode [ 194.979266][ T8953] hsr_slave_0: entered allmulticast mode [ 194.985198][ T8953] hsr_slave_1: entered allmulticast mode [ 194.994336][ T8953] hsr0: entered promiscuous mode [ 195.003356][ T8953] bridge0: port 1(hsr0) entered blocking state [ 195.010098][ T8953] bridge0: port 1(hsr0) entered forwarding state [ 195.091890][ T8956] netlink: set zone limit has 8 unknown bytes [ 195.229923][ T8961] xt_hashlimit: max too large, truncated to 1048576 [ 195.269956][ T8962] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1079'. [ 195.543284][ T35] [ 195.545736][ T35] ============================================ [ 195.551923][ T35] WARNING: possible recursive locking detected [ 195.558110][ T35] 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 Not tainted [ 195.565228][ T35] -------------------------------------------- [ 195.571412][ T35] kworker/u8:2/35 is trying to acquire lock: [ 195.577390][ T35] ffff888061054f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 195.586474][ T35] [ 195.586474][ T35] but task is already holding lock: [ 195.593873][ T35] ffff88804b028f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 195.602997][ T35] [ 195.602997][ T35] other info that might help us debug this: [ 195.611086][ T35] Possible unsafe locking scenario: [ 195.611086][ T35] [ 195.618566][ T35] CPU0 [ 195.621876][ T35] ---- [ 195.625275][ T35] lock(&hsr->seqnr_lock); [ 195.629906][ T35] lock(&hsr->seqnr_lock); [ 195.634457][ T35] [ 195.634457][ T35] *** DEADLOCK *** [ 195.634457][ T35] [ 195.642626][ T35] May be due to missing lock nesting notation [ 195.642626][ T35] [ 195.650980][ T35] 11 locks held by kworker/u8:2/35: [ 195.656198][ T35] #0: ffff888030dbf948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 195.667878][ T35] #1: ffffc90000ab7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 195.680688][ T35] #2: ffffffff8fcafc08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xd0/0x16f0 [ 195.690165][ T35] #3: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x563/0x1450 [ 195.699729][ T35] #4: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x63a/0x17b0 [ 195.709631][ T35] #5: ffffffff8e937b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f4/0x3f50 [ 195.719575][ T35] #6: ffff88804b028f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x18a/0x210 [ 195.729103][ T35] #7: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb6/0x2b50 [ 195.738610][ T35] #8: ffffffff8e937b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f4/0x3f50 [ 195.748569][ T35] #9: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x21d/0x1b40 [ 195.757858][ T35] #10: ffffffff8e937b00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2f4/0x3f50 [ 195.767910][ T35] [ 195.767910][ T35] stack backtrace: [ 195.773817][ T35] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 195.784497][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.794651][ T35] Workqueue: ipv6_addrconf addrconf_dad_work [ 195.800672][ T35] Call Trace: [ 195.803971][ T35] [ 195.806939][ T35] dump_stack_lvl+0x241/0x360 [ 195.811654][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.816883][ T35] ? __pfx__printk+0x10/0x10 [ 195.821490][ T35] ? lockdep_unlock+0x16a/0x300 [ 195.826353][ T35] print_deadlock_bug+0x483/0x620 [ 195.831393][ T35] validate_chain+0x15e2/0x5920 [ 195.836284][ T35] ? __pfx_validate_chain+0x10/0x10 [ 195.841553][ T35] ? validate_chain+0x11e/0x5920 [ 195.846509][ T35] ? validate_chain+0x11e/0x5920 [ 195.851565][ T35] ? deref_stack_reg+0x17c/0x210 [ 195.856531][ T35] ? __pfx_validate_chain+0x10/0x10 [ 195.861747][ T35] ? __pfx_validate_chain+0x10/0x10 [ 195.866963][ T35] ? unwind_next_frame+0x18e6/0x22d0 [ 195.872259][ T35] ? hlock_conflict+0x59/0x1e0 [ 195.877055][ T35] ? mark_lock+0x9a/0x360 [ 195.881393][ T35] __lock_acquire+0x1397/0x2100 [ 195.886256][ T35] lock_acquire+0x1ed/0x550 [ 195.890773][ T35] ? hsr_dev_xmit+0x18a/0x210 [ 195.895467][ T35] ? __pfx_lock_acquire+0x10/0x10 [ 195.900517][ T35] ? hsr_dev_xmit+0x18a/0x210 [ 195.905228][ T35] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 195.911071][ T35] ? netif_skb_features+0x8b6/0xc90 [ 195.916293][ T35] ? hsr_dev_xmit+0x18a/0x210 [ 195.920978][ T35] _raw_spin_lock_bh+0x35/0x50 [ 195.925975][ T35] ? hsr_dev_xmit+0x18a/0x210 [ 195.930675][ T35] hsr_dev_xmit+0x18a/0x210 [ 195.935283][ T35] dev_hard_start_xmit+0x27a/0x7d0 [ 195.940442][ T35] __dev_queue_xmit+0x1b73/0x3f50 [ 195.945511][ T35] ? __dev_queue_xmit+0x2f4/0x3f50 [ 195.950646][ T35] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.957008][ T35] ? __pfx___dev_queue_xmit+0x10/0x10 [ 195.962402][ T35] ? __local_bh_enable_ip+0x168/0x200 [ 195.967790][ T35] ? lockdep_hardirqs_on+0x99/0x150 [ 195.973025][ T35] ? __local_bh_enable_ip+0x168/0x200 [ 195.978441][ T35] ? ebt_do_table+0x2840/0x2a40 [ 195.983332][ T35] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 195.989069][ T35] ? ebt_do_table+0x2840/0x2a40 [ 195.993952][ T35] ? skb_push+0x97/0x100 [ 195.998220][ T35] br_dev_queue_push_xmit+0x726/0x900 [ 196.003610][ T35] ? __pfx_lock_release+0x10/0x10 [ 196.008648][ T35] ? ebt_do_table+0x2840/0x2a40 [ 196.013522][ T35] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 196.019467][ T35] NF_HOOK+0x3a7/0x460 [ 196.023549][ T35] ? NF_HOOK+0x9f/0x460 [ 196.027738][ T35] ? __pfx_NF_HOOK+0x10/0x10 [ 196.032337][ T35] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 196.038238][ T35] ? __pfx_lock_release+0x10/0x10 [ 196.043308][ T35] br_forward_finish+0xd8/0x130 [ 196.048219][ T35] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 196.054162][ T35] NF_HOOK+0x3a7/0x460 [ 196.058283][ T35] ? NF_HOOK+0x9f/0x460 [ 196.062448][ T35] ? __pfx_NF_HOOK+0x10/0x10 [ 196.067044][ T35] ? br_multicast_count+0xf8/0xcd0 [ 196.072179][ T35] ? __pfx_br_forward_finish+0x10/0x10 [ 196.077668][ T35] __br_forward+0x489/0x660 [ 196.082189][ T35] ? __pfx_br_forward_finish+0x10/0x10 [ 196.087836][ T35] ? __pfx___br_forward+0x10/0x10 [ 196.092902][ T35] ? br_flood+0x40d/0x660 [ 196.097275][ T35] br_dev_xmit+0x1202/0x1b40 [ 196.101902][ T35] ? br_dev_xmit+0x21d/0x1b40 [ 196.106746][ T35] ? __pfx_br_dev_xmit+0x10/0x10 [ 196.111707][ T35] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 196.117273][ T35] ? netif_skb_features+0x8b6/0xc90 [ 196.122492][ T35] ? validate_xmit_skb+0x9b8/0xff0 [ 196.127616][ T35] dev_hard_start_xmit+0x27a/0x7d0 [ 196.132745][ T35] __dev_queue_xmit+0x1b73/0x3f50 [ 196.137788][ T35] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 196.143175][ T35] ? __dev_queue_xmit+0x2f4/0x3f50 [ 196.148297][ T35] ? __build_skb_around+0x245/0x3d0 [ 196.153509][ T35] ? __pfx___dev_queue_xmit+0x10/0x10 [ 196.158900][ T35] ? __alloc_skb+0x28f/0x440 [ 196.163520][ T35] ? __copy_skb_header+0x437/0x5b0 [ 196.168642][ T35] ? __asan_memcpy+0x40/0x70 [ 196.173269][ T35] ? __copy_skb_header+0x437/0x5b0 [ 196.178413][ T35] ? __pskb_copy_fclone+0x9a1/0x10c0 [ 196.183756][ T35] ? hsr_create_tagged_frame+0x4df/0xef0 [ 196.189407][ T35] ? __asan_memmove+0x40/0x70 [ 196.194099][ T35] ? hsr_addr_subst_dest+0x30a/0xac0 [ 196.199418][ T35] hsr_forward_skb+0x179d/0x2b50 [ 196.204409][ T35] ? hsr_forward_skb+0xb6/0x2b50 [ 196.209402][ T35] ? __pfx_hsr_forward_skb+0x10/0x10 [ 196.214702][ T35] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 196.220105][ T35] ? netif_skb_features+0x8b6/0xc90 [ 196.225313][ T35] hsr_dev_xmit+0x195/0x210 [ 196.229840][ T35] dev_hard_start_xmit+0x27a/0x7d0 [ 196.234994][ T35] __dev_queue_xmit+0x1b73/0x3f50 [ 196.240063][ T35] ? __dev_queue_xmit+0x2f4/0x3f50 [ 196.245256][ T35] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.251275][ T35] ? __pfx___dev_queue_xmit+0x10/0x10 [ 196.256707][ T35] ? neigh_connected_output+0x1d5/0x450 [ 196.262278][ T35] ? read_seqbegin+0x157/0x2b0 [ 196.267064][ T35] ? lockdep_hardirqs_on+0x99/0x150 [ 196.272299][ T35] ? read_seqbegin+0x208/0x2b0 [ 196.277076][ T35] ? __pfx_read_seqbegin+0x10/0x10 [ 196.282204][ T35] ? eth_header+0x11c/0x1f0 [ 196.286731][ T35] ? __asan_memcpy+0x40/0x70 [ 196.291328][ T35] ? eth_header+0x11c/0x1f0 [ 196.295838][ T35] ? __pfx_eth_header+0x10/0x10 [ 196.300718][ T35] ? neigh_connected_output+0x3a7/0x450 [ 196.306331][ T35] ip6_finish_output2+0x12c7/0x17b0 [ 196.311554][ T35] ? ip6_mtu+0x81/0x3f0 [ 196.315727][ T35] ? ip6_finish_output2+0x63a/0x17b0 [ 196.321061][ T35] ? __pfx_ip6_finish_output2+0x10/0x10 [ 196.326719][ T35] ? ip6_mtu+0x81/0x3f0 [ 196.330889][ T35] ip6_finish_output+0x41e/0x840 [ 196.335837][ T35] ndisc_send_skb+0xb30/0x1450 [ 196.340612][ T35] ? ndisc_send_skb+0x563/0x1450 [ 196.345577][ T35] ? __pfx_ndisc_send_skb+0x10/0x10 [ 196.350842][ T35] ? __pfx_dst_output+0x10/0x10 [ 196.355740][ T35] ? __pfx_ndisc_ns_create+0x10/0x10 [ 196.361062][ T35] ndisc_send_ns+0xcc/0x160 [ 196.365581][ T35] ? __pfx_ndisc_send_ns+0x10/0x10 [ 196.370740][ T35] addrconf_dad_work+0xb45/0x16f0 [ 196.375794][ T35] ? __pfx_addrconf_dad_work+0x10/0x10 [ 196.381349][ T35] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.387687][ T35] ? process_scheduled_works+0x976/0x1840 [ 196.393411][ T35] process_scheduled_works+0xa66/0x1840 [ 196.398986][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 196.405011][ T35] ? assign_work+0x364/0x3d0 [ 196.409656][ T35] worker_thread+0x870/0xd30 [ 196.414253][ T35] ? __kthread_parkme+0x169/0x1d0 [ 196.419304][ T35] ? __pfx_worker_thread+0x10/0x10 [ 196.424499][ T35] kthread+0x2f0/0x390 [ 196.428572][ T35] ? __pfx_worker_thread+0x10/0x10 [ 196.433683][ T35] ? __pfx_kthread+0x10/0x10 [ 196.438279][ T35] ret_from_fork+0x4b/0x80 [ 196.442710][ T35] ? __pfx_kthread+0x10/0x10 [ 196.447314][ T35] ret_from_fork_asm+0x1a/0x30 [ 196.452098][ T35] Connection to 10.128.10.5 closed by remote host.