last executing test programs: 1m19.300683723s ago: executing program 3 (id=518): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r7, {0xfff2, 0x1}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_ACT={0x64, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0xd6be1b7c9376135e, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc004880}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00050800000000fddbdf2507000000", @ANYRES32=r11, @ANYBLOB="400000060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) unshare(0x20040600) pwritev(r8, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r12, 0x103, 0x4, &(0x7f0000000040), 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x712, 0x0, 0x0) 1m6.707989231s ago: executing program 3 (id=518): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r7, {0xfff2, 0x1}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_ACT={0x64, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0xd6be1b7c9376135e, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc004880}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00050800000000fddbdf2507000000", @ANYRES32=r11, @ANYBLOB="400000060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) unshare(0x20040600) pwritev(r8, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r12, 0x103, 0x4, &(0x7f0000000040), 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x712, 0x0, 0x0) 49.457986514s ago: executing program 3 (id=518): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r7, {0xfff2, 0x1}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_ACT={0x64, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0xd6be1b7c9376135e, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc004880}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00050800000000fddbdf2507000000", @ANYRES32=r11, @ANYBLOB="400000060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) unshare(0x20040600) pwritev(r8, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r12, 0x103, 0x4, &(0x7f0000000040), 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x712, 0x0, 0x0) 35.212203381s ago: executing program 3 (id=518): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r7, {0xfff2, 0x1}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_ACT={0x64, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0xd6be1b7c9376135e, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc004880}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00050800000000fddbdf2507000000", @ANYRES32=r11, @ANYBLOB="400000060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) unshare(0x20040600) pwritev(r8, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r12, 0x103, 0x4, &(0x7f0000000040), 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x712, 0x0, 0x0) 20.258588314s ago: executing program 3 (id=518): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r7, {0xfff2, 0x1}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_ACT={0x64, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0xd6be1b7c9376135e, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc004880}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00050800000000fddbdf2507000000", @ANYRES32=r11, @ANYBLOB="400000060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) unshare(0x20040600) pwritev(r8, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r12, 0x103, 0x4, &(0x7f0000000040), 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x712, 0x0, 0x0) 7.293221032s ago: executing program 4 (id=1465): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x1000000}}}}]}]}, 0x68}}, 0x2000a804) 7.22970119s ago: executing program 1 (id=1466): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x8000, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000b89e73497fa9000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) 7.085363507s ago: executing program 4 (id=1468): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7287da08eb73e144"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5, 0x901, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x8000000) 6.797270656s ago: executing program 4 (id=1471): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe", 0x47, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000800)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000d200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000000000080003"], 0x88}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x800, 0x800004, 0x10001}}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x6}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 6.758889448s ago: executing program 0 (id=1472): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x8000, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000b89e73497fa9000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) 6.303478011s ago: executing program 3 (id=518): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r7, {0xfff2, 0x1}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x68, 0x2, [@TCA_CGROUP_ACT={0x64, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_ctinfo={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0xd6be1b7c9376135e, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc004880}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c00050800000000fddbdf2507000000", @ANYRES32=r11, @ANYBLOB="400000060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40051}, 0x40c0) unshare(0x20040600) pwritev(r8, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r12, 0x103, 0x4, &(0x7f0000000040), 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x712, 0x0, 0x0) 4.079004247s ago: executing program 0 (id=1473): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x0, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb1fe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, 0x0, 0x0) 4.077430856s ago: executing program 1 (id=1474): r0 = socket$inet(0x2, 0x4, 0x3ff) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000100)=0x1) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_getnexthop={0x28, 0x6a, 0x119, 0x70bd2c, 0x25dfdbfe, {}, [@NHA_MASTER={0x8}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 4.075391833s ago: executing program 4 (id=1476): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x410b0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x29, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@mpls_mc={0x8848, {[], @generic="4d64dd0e6c8262db73d71640afeaa9f6d67c8b174d4ebbd869156244cc4f83e2de090186733cb69c79e014fa31661061722ddda1c2a714f1c780f7d3c73b5b0f"}}}}, &(0x7f0000000100)={0x0, 0x4, [0x70f, 0x5be, 0x177, 0xa48]}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x8080}, 0x20000010) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000885000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.904793198s ago: executing program 1 (id=1478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a40)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000010000006a0a00fe00000000850000000d000000bf0000000000000095000000000000005ecefab8f2e85c6c1ca711fc206bb8ad6ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bd04000000000000009c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5f683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891184604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e101d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe151acc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394b9ba1a836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429ba63903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6d6fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f25005798ca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9958fad67ccaba76408da35c9f1534c8bd48bbdf9594e8b4ce73febaefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb3b379e221a5318849b6b0679b5d65ab855fc9f1d10022cc20603480ffb1e3392fad690ce56aaa717e56fd55aec3d9d6671f55d7bc33830a4095497586e8d15c2a32d3176d45b783cb27112a69c14134488b6dd302c3e92a7e659351b610ed5ba022f92d4bf26b0a5c10a3c8eb0fabdf0017995ea0c06b41fe6dda769729328d6ee80ab3b4aeeeee7926575d526431184b2034b5cdacc8eaab03cf45af6ec451f65705d8a4375d559e4c3ad80e942d237616d8f2fdd5afe4fdf21478228d9f6299bf67cf1e62fc11c285e18fb65eeb657bc7375401bb175f6d2625195ce8647945dbdfb7eacc06a24832d155059b0f0c36b9433eff190f4c4c160f0484d4d39f5f92e8bd49ad3df23b961fe7bf9e506c5098ca79deb7906257e4ce9035f3a6b29453ee41640ade8b5916f38d19ab6f2fd51a9fd9a2559411967460952acf5c549e5466ee2d8563397a5f028486220fae69611d9bc0f1a68d31ad1a4e387de687ab1537bd46703e4e5ae0f096f731916628bf743a49ea7b7d22c04d738ca439343aaab682d45dc91187e9ff08005358e1f3d864f36ee590fb0da9c958f15f9105c41add43a7c28874e58c31a7acb0467e0bd97f2ccd78615b5144267772381e7498bb98d9e8a3f98b505e5c9645e19d011dd86a1dc134fa4b21ff8ec2d054ae7e0044b4700cd54ce392c2ee515e86070f2df561c15f331a1babfa60504410fa56a848ba1f501c8eb0bd6856451d150cfaf95d6dc889be27e8915bb3670fc76bcbeb390f3cefb5429c84907a92c6eab2b15758194ece4b1461f622510bcff5c0f8354637856f94d71a0841180e78a3a837ae7847c479f5c9c54859cb85393f190042a5dc31197f2c463be8affe29869d71df330b3466fc79b3488b4a2a3e2aae9af6421cd0902347103f2384bf08e5230b37297b668be11b4428b9a8e8c259afa6c73dd87fcc165b2fea66a180bf048530a5849f849d37aca6874cb1d50defdb90b3da04a575db38825db87f6bb0013a5dabcc0e9783aaac0cbb5d6fc437f1e77bf69cae31a213ca2b90ece8cc70fa320c9ffd05618e7a6e6cf8ada6b3e62557174b6d3516cc0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6b, 0x60000000}, 0xf) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000000c0)="3d88baa49a115239b29b9abfadcdffab5c45ea18995d59125aec0e2e217bad1ead06aa0829959b80ce9a7e98af36a72aa554073f6e67fe439142bd6e50", 0x3d, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x14}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x14, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="1860000007000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001853000006000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000018460000f9ffffff0000000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580), 0x10, 0xaa, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000220001012c"], 0x14}, 0x1, 0x0, 0x0, 0x30}, 0x4044000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000e20a000000000000d500000018110000", @ANYRES32, @ANYBLOB="000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085002100a500008095000000000000001fd907b5b82ebf6ffcc936bc6d478a58c7e7d35dcbd3462aa57caa088a5c3c6b93e46d3243e21423e14d1c633629bde1aa13875a53a8f79a73e5ae604030599e8eef760c0406333d29b7b6bdace071b2d602f7a4"], &(0x7f0000000740)='GPL\x00', 0x1, 0x9c, &(0x7f0000000780)=""/156, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0xf, 0x1000, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000009c0)='fsi_master_gpio_in\x00', r3, 0x0, 0x5}, 0x18) socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r5, 0x0, 0xf, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x6, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x3, 0xbf) 2.980265908s ago: executing program 1 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.948901417s ago: executing program 2 (id=1480): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.823083972s ago: executing program 2 (id=1481): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) epoll_create1(0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0xc0fe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r1, 0x11a, 0x1, 0xffffffffffffffff, 0x0) 2.709290023s ago: executing program 2 (id=1482): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xae}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.695098048s ago: executing program 2 (id=1483): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x2) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x8010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 2.373052709s ago: executing program 1 (id=1484): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x8000, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000b89e73497fa9000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) 2.358058002s ago: executing program 0 (id=1485): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x8000, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000b89e73497fa9000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) 2.356941444s ago: executing program 4 (id=1486): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x8000, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x300, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7d}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4008840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x3c, r5, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000b89e73497fa90000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c) 1.11346076s ago: executing program 2 (id=1487): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401000000000000000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x700, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r6, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r7, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmmsg(r6, &(0x7f0000005480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005180)=""/5, 0x5}}], 0x2, 0x4001058a, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000002740)={&(0x7f0000000140)=@in6={0xa, 0x4e23, 0x7, @local, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000002280)="fdccf2", 0x3}], 0x1, &(0x7f00000026c0), 0x0, 0x1}, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES8=r1, @ANYBLOB="000000000000000008001a"], 0x270}}, 0x44880) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r9, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 769.958166ms ago: executing program 0 (id=1488): syz_emit_ethernet(0xfef3, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000648900fe8000"], 0x0) 584.933205ms ago: executing program 0 (id=1489): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x891, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x300) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001840)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000680)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_pressure(r5, &(0x7f00000006c0)={'full', 0x20, 0x3, 0x20, 0x9}, 0x2f) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000001880)=""/156, &(0x7f0000000140)=0x9c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='netdevsim0\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f0000000700)={{r5}, "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"}) r8 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r8, @ANYBLOB="340000000000000000000000000067c8a17ab741000000000000e2af576cb256a8628a8ffdef8ed0af884f9dee3dff8c4b48efd9c4d77ae8a1611aed4d7578912e2d6efc7327dcb4ef3045bf42350bc0118e7a10e416afa052e0cf5329309e169f574559f87a8a7cca928f236be0ff4e2a5a6d913c6a70bd4cc865a28f8120ca61f46c02a6be43d0fac5388c8da4fe02bdeff06007eedb429e78d495b8e17a069cd59c8f35133cd8f89d679591854dd21076a7a926a3407ff3530f3aaccf3efad33c00221cf0c51679be5b0b2456922e9022ec2cdac4de690143142dd53594ee492967c56802", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="04000000040000000400"/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r8, 0x20, &(0x7f00000004c0)={&(0x7f00000003c0)=""/98, 0x62, 0x0, &(0x7f0000000440)=""/123, 0x7b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x770, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x25, &(0x7f0000000300)=""/37, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1e, r8, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xf, 0x4, 0x5}, 0x10, r10, r8, 0x4, &(0x7f0000000540)=[r8], &(0x7f0000000580)=[{0x3, 0x4, 0xa, 0x6}, {0x2, 0x2, 0x10, 0xc}, {0x4, 0x4, 0xc, 0x2}, {0x5, 0x3, 0x6, 0xb}], 0x10, 0x0, @void, @value}, 0x94) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) 493.265389ms ago: executing program 4 (id=1490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) (fail_nth: 5) 416.507432ms ago: executing program 0 (id=1491): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x427, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x1f, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x1, 0x6, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x14, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040815}, 0x800) 380.270683ms ago: executing program 1 (id=1492): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000640000000002c8d7c1efe8dee10f495bf3758090000007bbf814fed7ce0f21d93f093ef0a4a58eb307052ddf128cddd87d9c996b5211f1bff60a9a9123b797043fcc2d38d867d7469433e1a7940d534677c9781b76bffc49b99311de389d2f84c9fc6e9e433fa0ae4def0c168919c012fb8d5a9e05947d50ffb2ef3f888f7445bc6e2b0c0c846"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="5d79f797163db653574276080a08", 0x0, 0x29b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085000000050000009500000000000000c3492895246348bf79855db116f785cc6b"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xfffffffffffffcc7, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0xfffffffffffffecb, 0x0, 0x0, 0x3, 0x0, 0xf7fffffc}, 0x50) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000440)={@remote, @initdev}, &(0x7f0000000480)=0xc) poll(0x0, 0x0, 0x7) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0xa703, @any, 0x4, 0x1}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf250400000014000600ff010000000000000000000000000001081f02000300000008000800ac14462f"], 0x38}, 0x1, 0x0, 0x0, 0x20008880}, 0x4) r10 = socket$inet(0x2, 0x2, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000580)=0x1e) sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0x700, 0x5, 0x24a6, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@noop, @generic={0x428c715e174be67f, 0x3, "7f"}, @timestamp={0x44, 0xc, 0x44, 0x0, 0x7, [0x8, 0x2]}, @rr={0x7, 0x13, 0xb8, [@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010100, @rand_addr=0x64010102, @private=0xa010102]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0xb, 0xe3, [@loopback, @remote]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000f5b8c691b34708568212adeaa4ade0d009df4df42bac54b80ce659a8bf79f9e762393f45bd8d8ad4f294b0360ae6a1ae16c3d1a18753ef30755ac382e99fc6ba0912ff0b582d0fa7973eee10d8da9714b94a115fe38422a56c4612e8680d8b23dda080976138b3b3f24ea50bdb1a01d7d0c96af7d0a9142e6c32002df0a916fbe61524d836dd2efb36c499647a2711bac2c3b37905b00b8a117511000e40797b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) 0s ago: executing program 2 (id=1493): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0xc, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x12, 0x0, 0x0, 0x400, 0x0, @void, @value}, 0x28) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xb0}}, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) kernel console output (not intermixed with test programs): 212.090862][ T9146] sk_getsockopt+0x1cc/0x38c0 [ 212.090892][ T9146] ? __pfx_sk_getsockopt+0x10/0x10 [ 212.090924][ T9146] ? __lock_acquire+0xad5/0xd80 [ 212.090989][ T9146] do_sock_getsockopt+0x2a0/0x740 [ 212.091016][ T9146] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 212.091033][ T9146] ? __fget_files+0x2a/0x420 [ 212.091051][ T9146] ? __fget_files+0x39d/0x420 [ 212.091066][ T9146] ? __fget_files+0x2a/0x420 [ 212.091089][ T9146] __x64_sys_getsockopt+0x233/0x310 [ 212.091119][ T9146] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 212.091147][ T9146] ? do_syscall_64+0xb6/0x210 [ 212.091169][ T9146] do_syscall_64+0xf3/0x210 [ 212.091185][ T9146] ? clear_bhb_loop+0x45/0xa0 [ 212.091207][ T9146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.091224][ T9146] RIP: 0033:0x7fb6c3f8e169 [ 212.091241][ T9146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.091258][ T9146] RSP: 002b:00007fb6c4d33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 212.091279][ T9146] RAX: ffffffffffffffda RBX: 00007fb6c41b5fa0 RCX: 00007fb6c3f8e169 [ 212.091293][ T9146] RDX: 000000000000000c RSI: 0000000000000001 RDI: 0000000000000003 [ 212.091304][ T9146] RBP: 00007fb6c4d33090 R08: 0000200000000640 R09: 0000000000000000 [ 212.091317][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.091328][ T9146] R13: 0000000000000000 R14: 00007fb6c41b5fa0 R15: 00007ffe57867d18 [ 212.091362][ T9146] [ 212.095546][ T9140] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 212.095546][ T9140] [ 212.712628][ T9166] FAULT_INJECTION: forcing a failure. [ 212.712628][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 212.792718][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.4.818 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 212.792755][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.792768][ T9166] Call Trace: [ 212.792776][ T9166] [ 212.792785][ T9166] dump_stack_lvl+0x241/0x360 [ 212.792823][ T9166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.792852][ T9166] ? __pfx__printk+0x10/0x10 [ 212.792883][ T9166] ? __pfx___might_resched+0x10/0x10 [ 212.792920][ T9166] should_fail_ex+0x424/0x570 [ 212.792949][ T9166] should_failslab+0xac/0x100 [ 212.792973][ T9166] __kmalloc_noprof+0xdf/0x4d0 [ 212.792994][ T9166] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 212.793026][ T9166] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 212.793061][ T9166] genl_start+0x182/0x6d0 [ 212.793094][ T9166] __netlink_dump_start+0x45c/0x790 [ 212.793138][ T9166] genl_rcv_msg+0x8a4/0xf00 [ 212.793173][ T9166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.793194][ T9166] ? stack_trace_save+0x11a/0x1d0 [ 212.793222][ T9166] ? __pfx_stack_trace_save+0x10/0x10 [ 212.793245][ T9166] ? __pfx_genl_start+0x10/0x10 [ 212.793266][ T9166] ? __pfx_genl_dumpit+0x10/0x10 [ 212.793285][ T9166] ? __pfx_genl_done+0x10/0x10 [ 212.793325][ T9166] ? __lock_acquire+0xad5/0xd80 [ 212.793356][ T9166] ? __pfx_ieee802154_dump_iface+0x10/0x10 [ 212.793397][ T9166] netlink_rcv_skb+0x208/0x480 [ 212.793429][ T9166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.793452][ T9166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.793507][ T9166] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.793545][ T9166] genl_rcv+0x28/0x40 [ 212.793566][ T9166] netlink_unicast+0x7f8/0x9a0 [ 212.793606][ T9166] ? __pfx_netlink_unicast+0x10/0x10 [ 212.793637][ T9166] ? skb_put+0x114/0x1f0 [ 212.793673][ T9166] netlink_sendmsg+0x8c3/0xcd0 [ 212.793720][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.793757][ T9166] ? aa_sock_msg_perm+0x91/0x160 [ 212.793790][ T9166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.793818][ T9166] __sock_sendmsg+0x221/0x270 [ 212.793852][ T9166] ____sys_sendmsg+0x523/0x860 [ 212.793886][ T9166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.793908][ T9166] ? __fget_files+0x2a/0x420 [ 212.793931][ T9166] ? __fget_files+0x2a/0x420 [ 212.793962][ T9166] __sys_sendmsg+0x271/0x360 [ 212.793992][ T9166] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.794081][ T9166] ? do_syscall_64+0xb6/0x210 [ 212.794106][ T9166] do_syscall_64+0xf3/0x210 [ 212.794126][ T9166] ? clear_bhb_loop+0x45/0xa0 [ 212.794151][ T9166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.794172][ T9166] RIP: 0033:0x7fb6c3f8e169 [ 212.794191][ T9166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.794208][ T9166] RSP: 002b:00007fb6c4d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.794231][ T9166] RAX: ffffffffffffffda RBX: 00007fb6c41b5fa0 RCX: 00007fb6c3f8e169 [ 212.794246][ T9166] RDX: 0000000000000080 RSI: 0000200000002840 RDI: 0000000000000004 [ 212.794260][ T9166] RBP: 00007fb6c4d33090 R08: 0000000000000000 R09: 0000000000000000 [ 212.794273][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.794285][ T9166] R13: 0000000000000000 R14: 00007fb6c41b5fa0 R15: 00007ffe57867d18 [ 212.794319][ T9166] [ 213.165991][ T8927] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.196946][ T8927] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.322058][ T8927] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.494330][ T8927] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.867776][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 213.894210][ T9194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.823'. [ 214.125574][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 214.780292][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.888342][ T8927] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.938245][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.945542][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.011325][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.018580][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.492249][ T9233] SET target dimension over the limit! [ 215.650518][ T8927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.861132][ T8927] veth0_vlan: entered promiscuous mode [ 215.912302][ T8927] veth1_vlan: entered promiscuous mode [ 216.047303][ T8927] veth0_macvtap: entered promiscuous mode [ 216.075070][ T8927] veth1_macvtap: entered promiscuous mode [ 216.129552][ T8927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.164355][ T8927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.185737][ T8927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.213646][ T8927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.247323][ T8927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.273043][ T8927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.313500][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.358500][ T8927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.391002][ T8927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.415181][ T8927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.429897][ T8927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.472507][ T8927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.496732][ T8927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.518064][ T8927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.567693][ T8927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.576939][ T8927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.597231][ T8927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.629987][ T8927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.705737][ T9274] No such timeout policy "syz0" [ 216.849257][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 216.924440][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 216.946514][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 216.959608][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.985142][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.090377][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.153067][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.398181][ T9284] infiniband : set active [ 217.404347][ T5899] vxcan1 speed is unknown, defaulting to 1000 [ 217.411570][ T9284] infiniband : added vxcan1 [ 217.611462][ T9284] RDS/IB: : added [ 217.615381][ T9284] smc: adding ib device with port count 1 [ 217.640043][ T9284] smc: ib device port 1 has pnetid [ 217.711058][ T9308] SET target dimension over the limit! [ 217.737112][ T5898] vxcan1 speed is unknown, defaulting to 1000 [ 217.750646][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 218.216048][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 218.236675][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'. [ 218.278512][ T3007] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.772319][ T3007] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.883401][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 218.983617][ T3007] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.139716][ T3007] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.508725][ T3007] bridge_slave_1: left allmulticast mode [ 219.524841][ T3007] bridge_slave_1: left promiscuous mode [ 219.561073][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.611704][ T3007] bridge_slave_0: left allmulticast mode [ 219.629788][ T3007] bridge_slave_0: left promiscuous mode [ 219.635657][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.966384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.337413][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.352516][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.361422][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.372779][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.381782][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.750348][ T3007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.773889][ T3007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.798718][ T3007] bond0 (unregistering): Released all slaves [ 220.816049][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 221.669406][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 221.748136][ T9390] FAULT_INJECTION: forcing a failure. [ 221.748136][ T9390] name failslab, interval 1, probability 0, space 0, times 0 [ 221.764360][ T9390] CPU: 0 UID: 0 PID: 9390 Comm: syz.1.853 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 221.764391][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.764405][ T9390] Call Trace: [ 221.764413][ T9390] [ 221.764422][ T9390] dump_stack_lvl+0x241/0x360 [ 221.764459][ T9390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.764493][ T9390] ? __pfx__printk+0x10/0x10 [ 221.764527][ T9390] ? __pfx___might_resched+0x10/0x10 [ 221.764566][ T9390] should_fail_ex+0x424/0x570 [ 221.764596][ T9390] should_failslab+0xac/0x100 [ 221.764619][ T9390] __kmalloc_noprof+0xdf/0x4d0 [ 221.764639][ T9390] ? sock_kmalloc+0xd7/0x160 [ 221.764670][ T9390] sock_kmalloc+0xd7/0x160 [ 221.764697][ T9390] ____sys_sendmsg+0x23b/0x860 [ 221.764741][ T9390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.764763][ T9390] ? __fget_files+0x2a/0x420 [ 221.764786][ T9390] ? __fget_files+0x2a/0x420 [ 221.764815][ T9390] __sys_sendmmsg+0x3a0/0x7b0 [ 221.764853][ T9390] ? __pfx___sys_sendmmsg+0x10/0x10 [ 221.764918][ T9390] ? rcu_read_lock_any_held+0xbb/0x160 [ 221.764941][ T9390] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 221.764967][ T9390] ? vfs_write+0xb29/0xd10 [ 221.765016][ T9390] ? ksys_write+0x24e/0x2d0 [ 221.765048][ T9390] ? __mutex_unlock_slowpath+0x229/0x800 [ 221.765102][ T9390] ? ksys_write+0x275/0x2d0 [ 221.765144][ T9390] __x64_sys_sendmmsg+0xa0/0xb0 [ 221.765172][ T9390] do_syscall_64+0xf3/0x210 [ 221.765193][ T9390] ? clear_bhb_loop+0x45/0xa0 [ 221.765218][ T9390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.765238][ T9390] RIP: 0033:0x7f6d8778e169 [ 221.765258][ T9390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.765276][ T9390] RSP: 002b:00007f6d8853d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 221.765299][ T9390] RAX: ffffffffffffffda RBX: 00007f6d879b5fa0 RCX: 00007f6d8778e169 [ 221.765314][ T9390] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 221.765327][ T9390] RBP: 00007f6d8853d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.765340][ T9390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.765353][ T9390] R13: 0000000000000000 R14: 00007f6d879b5fa0 R15: 00007ffddddbb348 [ 221.765387][ T9390] [ 222.125588][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 222.131487][ T9397] SET target dimension over the limit! [ 222.440115][ T5845] Bluetooth: hci4: command tx timeout [ 222.518840][ T9414] lo: entered promiscuous mode [ 222.602015][ T9420] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.779977][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 222.792437][ T9419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.859'. [ 222.927105][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 223.320904][ T9412] lo: left promiscuous mode [ 223.799093][ T9284] vxcan1 speed is unknown, defaulting to 1000 [ 224.420126][ T9457] lo: entered promiscuous mode [ 224.519620][ T5845] Bluetooth: hci4: command tx timeout [ 224.697584][ T9454] ipvlan2: entered allmulticast mode [ 224.727150][ T9454] macsec0: entered allmulticast mode [ 224.741853][ T9454] veth1_macvtap: entered allmulticast mode [ 224.854998][ T9466] SET target dimension over the limit! [ 224.892940][ T5174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.918820][ T9461] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 225.409730][ T5174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.517735][ T3007] hsr_slave_0: left promiscuous mode [ 225.536720][ T3007] hsr_slave_1: left promiscuous mode [ 225.558589][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.568483][ T3007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.594957][ T3007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.603369][ T3007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.664559][ T3007] veth1_macvtap: left promiscuous mode [ 225.679909][ T3007] veth0_macvtap: left promiscuous mode [ 225.686803][ T3007] veth1_vlan: left promiscuous mode [ 225.695989][ T3007] veth0_vlan: left promiscuous mode [ 226.182744][ T3007] team0 (unregistering): Port device team_slave_1 removed [ 226.226579][ T3007] team0 (unregistering): Port device team_slave_0 removed [ 226.603800][ T5845] Bluetooth: hci4: command tx timeout [ 226.744774][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'. [ 226.757198][ T9503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 226.832728][ T9456] lo: left promiscuous mode [ 226.998351][ T9509] Â: renamed from pim6reg1 [ 227.115713][ T9359] chnl_net:caif_netlink_parms(): no params data found [ 227.911391][ T9534] SET target dimension over the limit! [ 227.956771][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 227.999148][ T9536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.875'. [ 228.068339][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.119956][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.166414][ T9359] bridge_slave_0: entered allmulticast mode [ 228.209211][ T9359] bridge_slave_0: entered promiscuous mode [ 228.312741][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.386616][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.450874][ T9359] bridge_slave_1: entered allmulticast mode [ 228.485716][ T9359] bridge_slave_1: entered promiscuous mode [ 228.669202][ T9359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.681131][ T5845] Bluetooth: hci4: command tx timeout [ 228.721233][ T9359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.864690][ T9359] team0: Port device team_slave_0 added [ 228.892815][ T9359] team0: Port device team_slave_1 added [ 229.067417][ T9359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.085780][ T9359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.152295][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 229.241481][ T9569] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 229.270624][ T9359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.292666][ T9359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.299761][ T9359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.326281][ T9359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.412806][ T9573] lo: entered promiscuous mode [ 229.711188][ T9359] hsr_slave_0: entered promiscuous mode [ 229.717981][ T9359] hsr_slave_1: entered promiscuous mode [ 229.748585][ T9359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.772822][ T9359] Cannot create hsr debugfs directory [ 230.238652][ T9572] lo: left promiscuous mode [ 230.401969][ T9597] SET target dimension over the limit! [ 230.773107][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 230.837586][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 231.756279][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 231.775603][ T9639] netlink: 20 bytes leftover after parsing attributes in process `syz.4.897'. [ 232.322365][ T9359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.536378][ T9359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.630610][ T9359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.679081][ T9359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.106986][ T9359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.127603][ T9660] SET target dimension over the limit! [ 233.207994][ T9359] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.257341][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.264608][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.278390][ T9667] FAULT_INJECTION: forcing a failure. [ 233.278390][ T9667] name failslab, interval 1, probability 0, space 0, times 0 [ 233.294854][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.302086][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.327839][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.4.904 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 233.327872][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.327885][ T9667] Call Trace: [ 233.327893][ T9667] [ 233.327903][ T9667] dump_stack_lvl+0x241/0x360 [ 233.327943][ T9667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.327973][ T9667] ? __pfx__printk+0x10/0x10 [ 233.328007][ T9667] ? __pfx___might_resched+0x10/0x10 [ 233.328045][ T9667] should_fail_ex+0x424/0x570 [ 233.328075][ T9667] should_failslab+0xac/0x100 [ 233.328098][ T9667] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 233.328122][ T9667] ? alloc_vfsmnt+0xea/0x490 [ 233.328145][ T9667] ? do_raw_spin_unlock+0x13c/0x8b0 [ 233.328173][ T9667] kstrdup+0x42/0x100 [ 233.328206][ T9667] alloc_vfsmnt+0xea/0x490 [ 233.328235][ T9667] clone_mnt+0x6b/0xc90 [ 233.328259][ T9667] ? do_raw_spin_unlock+0x13c/0x8b0 [ 233.328291][ T9667] copy_tree+0x482/0x940 [ 233.328328][ T9667] ? copy_mnt_ns+0x185/0x960 [ 233.328361][ T9667] copy_mnt_ns+0x185/0x960 [ 233.328393][ T9667] ? kmem_cache_alloc_noprof+0x237/0x390 [ 233.328421][ T9667] create_new_namespaces+0xd3/0x7b0 [ 233.328458][ T9667] ? bpf_lsm_capable+0x9/0x10 [ 233.328487][ T9667] ? security_capable+0x7e/0x2d0 [ 233.328520][ T9667] unshare_nsproxy_namespaces+0x124/0x180 [ 233.328556][ T9667] ksys_unshare+0x5e2/0xad0 [ 233.328590][ T9667] ? __pfx_ksys_unshare+0x10/0x10 [ 233.328630][ T9667] __x64_sys_unshare+0x38/0x40 [ 233.328652][ T9667] do_syscall_64+0xf3/0x210 [ 233.328673][ T9667] ? clear_bhb_loop+0x45/0xa0 [ 233.328698][ T9667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.328718][ T9667] RIP: 0033:0x7fb6c3f8e169 [ 233.328747][ T9667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.328765][ T9667] RSP: 002b:00007fb6c4d33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 233.328788][ T9667] RAX: ffffffffffffffda RBX: 00007fb6c41b5fa0 RCX: 00007fb6c3f8e169 [ 233.328803][ T9667] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020480 [ 233.328816][ T9667] RBP: 00007fb6c4d33090 R08: 0000000000000000 R09: 0000000000000000 [ 233.328829][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.328842][ T9667] R13: 0000000000000000 R14: 00007fb6c41b5fa0 R15: 00007ffe57867d18 [ 233.328877][ T9667] [ 233.445339][ T9359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.716311][ T9359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.940646][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.900'. [ 233.991660][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 234.023612][ T9676] netlink: 'syz.4.907': attribute type 4 has an invalid length. [ 234.527628][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 234.548443][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.910'. [ 234.663039][ T9359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.759953][ T9652] vxcan1 speed is unknown, defaulting to 1000 [ 234.986908][ T9359] veth0_vlan: entered promiscuous mode [ 235.042748][ T9359] veth1_vlan: entered promiscuous mode [ 235.232412][ T9359] veth0_macvtap: entered promiscuous mode [ 235.268505][ T9359] veth1_macvtap: entered promiscuous mode [ 235.310135][ T9724] SET target dimension over the limit! [ 235.387170][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.445764][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.489964][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.520169][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.547217][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.572473][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.623905][ T9359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.773351][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.809698][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.850851][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.872160][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.883676][ T9359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.894571][ T9359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.918885][ T9359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.956329][ T9359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.975458][ T9359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.994929][ T9359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.017625][ T9359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.512145][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.532939][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.611771][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.630629][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.774663][ T9732] vxcan1 speed is unknown, defaulting to 1000 [ 236.903918][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 236.939196][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.917'. [ 237.179317][ T4531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.301794][ T4531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.451424][ T4531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.552026][ T4531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.817487][ T4531] bridge_slave_1: left allmulticast mode [ 237.826620][ T4531] bridge_slave_1: left promiscuous mode [ 237.833038][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.844420][ T4531] bridge_slave_0: left allmulticast mode [ 237.851736][ T4531] bridge_slave_0: left promiscuous mode [ 237.858559][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.416253][ T9774] SET target dimension over the limit! [ 238.623393][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.639389][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.651188][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.659417][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.669077][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 238.676752][ T4531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.702134][ T4531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.715337][ T4531] bond0 (unregistering): Released all slaves [ 238.733876][ T9767] lo: entered promiscuous mode [ 239.055593][ T9765] lo: left promiscuous mode [ 239.112959][ T9790] bridge0: port 1(vlan2) entered blocking state [ 239.120888][ T9790] bridge0: port 1(vlan2) entered disabled state [ 239.127400][ T9790] vlan2: entered allmulticast mode [ 239.166042][ T9790] bridge0: entered allmulticast mode [ 239.262272][ T9790] vlan2: left allmulticast mode [ 239.290026][ T9790] bridge0: left allmulticast mode [ 239.750681][ T9779] vxcan1 speed is unknown, defaulting to 1000 [ 240.623806][ T9835] SET target dimension over the limit! [ 240.760021][ T5856] Bluetooth: hci4: command tx timeout [ 240.945107][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 241.048415][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.941'. [ 241.057012][ T9817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'. [ 242.058708][ T4531] hsr_slave_0: left promiscuous mode [ 242.093544][ T4531] hsr_slave_1: left promiscuous mode [ 242.110039][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.117497][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.138478][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.151661][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.208283][ T4531] veth1_macvtap: left promiscuous mode [ 242.244436][ T4531] veth0_macvtap: left promiscuous mode [ 242.437089][ T4531] veth1_vlan: left promiscuous mode [ 242.446337][ T4531] veth0_vlan: left promiscuous mode [ 242.843350][ T5856] Bluetooth: hci4: command tx timeout [ 243.055334][ T4531] team0 (unregistering): Port device team_slave_1 removed [ 243.096187][ T4531] team0 (unregistering): Port device team_slave_0 removed [ 243.420817][ T9822] vxcan1 speed is unknown, defaulting to 1000 [ 243.540469][ T9779] chnl_net:caif_netlink_parms(): no params data found [ 244.087183][ T9779] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.102966][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.115580][ T9779] bridge_slave_0: entered allmulticast mode [ 244.125649][ T9779] bridge_slave_0: entered promiscuous mode [ 244.169680][ T9779] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.187324][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.199753][ T9779] bridge_slave_1: entered allmulticast mode [ 244.207658][ T9779] bridge_slave_1: entered promiscuous mode [ 244.365903][ T9779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.377546][ T9938] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 244.402890][ T9779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.506611][ T9779] team0: Port device team_slave_0 added [ 244.536538][ T9779] team0: Port device team_slave_1 added [ 244.751644][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.957'. [ 244.929560][ T5856] Bluetooth: hci4: command tx timeout [ 245.640442][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.647455][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.720183][ T9951] netlink: 'syz.1.958': attribute type 10 has an invalid length. [ 245.863442][ T9779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.922994][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.966577][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.074666][ T9779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.365834][ T9977] SET target dimension over the limit! [ 246.640949][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 246.659717][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.960'. [ 246.848411][ T9779] hsr_slave_0: entered promiscuous mode [ 246.873758][ T9779] hsr_slave_1: entered promiscuous mode [ 246.904855][ T9779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.939538][ T9779] Cannot create hsr debugfs directory [ 247.000035][ T5845] Bluetooth: hci4: command tx timeout [ 247.596682][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.965'. [ 247.649616][T10005] nbd: device at index 64 is going down [ 248.412583][T10017] netlink: 'syz.4.968': attribute type 1 has an invalid length. [ 248.569922][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.970'. [ 249.613070][T10035] SET target dimension over the limit! [ 249.696339][ T9779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.798604][ T9779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.855532][ T9779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.877648][ T9779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.146516][ T9779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.340897][ T9779] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.387986][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.395217][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.409369][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.416627][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.747149][ T9779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.837907][ T9779] veth0_vlan: entered promiscuous mode [ 250.881776][ T9779] veth1_vlan: entered promiscuous mode [ 251.009415][ T9779] veth0_macvtap: entered promiscuous mode [ 251.045483][ T9779] veth1_macvtap: entered promiscuous mode [ 251.317562][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.360940][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.378439][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.392322][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.406394][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.420613][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.436208][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.457999][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.473349][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.485042][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.496110][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.525902][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.536659][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.554576][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.601749][ T9779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.615627][ T9779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.659725][ T9779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.688848][ T9779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.712308][T10080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.984'. [ 252.049988][ T2137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.066779][ T2137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.194757][T10074] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 252.215542][ T2137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.308130][T10090] SET target dimension over the limit! [ 252.310171][ T2137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.438274][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.988'. [ 252.945913][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 253.479969][ T5845] Bluetooth: hci0: command 0x0401 tx timeout [ 253.890617][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 253.926731][T10132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.997'. [ 254.231184][ T7042] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.128051][ T7042] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.213583][ T7042] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.273967][ T7042] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.382968][ T7042] bridge_slave_1: left allmulticast mode [ 255.392564][ T7042] bridge_slave_1: left promiscuous mode [ 255.398345][ T7042] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.408436][ T7042] bridge_slave_0: left allmulticast mode [ 255.414786][ T7042] bridge_slave_0: left promiscuous mode [ 255.421502][ T7042] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.592732][T10142] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1001'. [ 255.864597][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.879075][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.895771][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.907525][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.925344][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.964573][ T7042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.975732][ T7042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.988571][ T7042] bond0 (unregistering): Released all slaves [ 256.221011][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 256.431575][T10161] netlink: 'syz.2.1005': attribute type 10 has an invalid length. [ 256.940919][T10144] vxcan1 speed is unknown, defaulting to 1000 [ 257.961373][ T5856] Bluetooth: hci4: command tx timeout [ 258.078506][T10197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 258.284877][T10144] chnl_net:caif_netlink_parms(): no params data found [ 258.523428][T10206] SET target dimension over the limit! [ 258.598792][ T7042] hsr_slave_0: left promiscuous mode [ 258.710799][ T7042] hsr_slave_1: left promiscuous mode [ 258.718515][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.730154][ T7042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.735872][T10211] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 258.750181][T10211] netlink: 'syz.0.1020': attribute type 3 has an invalid length. [ 258.754574][ T7042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.758193][T10211] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1020'. [ 258.774129][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 258.807838][T10214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1017'. [ 259.369890][ T7042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.446835][ T7042] veth1_macvtap: left promiscuous mode [ 259.452799][ T7042] veth0_macvtap: left promiscuous mode [ 259.464020][ T7042] veth1_vlan: left promiscuous mode [ 259.504818][ T7042] veth0_vlan: left promiscuous mode [ 260.039867][ T5856] Bluetooth: hci4: command tx timeout [ 260.074124][ T7042] team0 (unregistering): Port device team_slave_1 removed [ 260.112157][ T7042] team0 (unregistering): Port device team_slave_0 removed [ 260.478372][T10211] netlink: 'syz.0.1020': attribute type 3 has an invalid length. [ 260.699763][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.707006][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.729355][T10144] bridge_slave_0: entered allmulticast mode [ 260.748841][T10144] bridge_slave_0: entered promiscuous mode [ 260.775464][T10144] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.800206][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.807506][T10144] bridge_slave_1: entered allmulticast mode [ 260.842331][T10144] bridge_slave_1: entered promiscuous mode [ 261.000573][T10249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1023'. [ 261.008204][T10240] bridge0: port 1(vlan0) entered blocking state [ 261.036659][T10240] bridge0: port 1(vlan0) entered disabled state [ 261.057599][T10240] vlan0: entered allmulticast mode [ 261.079326][T10240] bridge0: entered allmulticast mode [ 261.261762][T10240] vlan0: left allmulticast mode [ 261.291269][T10240] bridge0: left allmulticast mode [ 261.471208][T10256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1028'. [ 261.610899][T10144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.713063][T10144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.892642][T10144] team0: Port device team_slave_0 added [ 261.913065][T10144] team0: Port device team_slave_1 added [ 261.977716][T10263] SET target dimension over the limit! [ 262.116030][T10144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.128919][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.129782][ T5856] Bluetooth: hci4: command tx timeout [ 262.237154][T10144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.295420][T10265] lo: entered promiscuous mode [ 262.368340][T10268] lo: entered promiscuous mode [ 262.374300][T10144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.385287][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.425880][T10144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.562777][T10144] hsr_slave_0: entered promiscuous mode [ 262.578255][T10144] hsr_slave_1: entered promiscuous mode [ 262.591768][T10144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.609858][T10144] Cannot create hsr debugfs directory [ 262.875354][T10264] lo: left promiscuous mode [ 262.965948][T10266] lo: left promiscuous mode [ 263.405579][T10144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.432051][T10144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.460651][T10144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.479087][T10289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'. [ 263.489684][T10144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.653310][T10293] SET target dimension over the limit! [ 263.689422][T10144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.747856][T10144] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.777921][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.785206][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.836364][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.843619][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.978932][T10144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.012816][T10144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.091627][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'. [ 264.199759][ T5856] Bluetooth: hci4: command tx timeout [ 265.064561][T10144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.142399][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 265.202728][T10304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 265.271980][T10144] veth0_vlan: entered promiscuous mode [ 265.318619][T10144] veth1_vlan: entered promiscuous mode [ 265.379681][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 265.415764][T10144] veth0_macvtap: entered promiscuous mode [ 265.447791][T10144] veth1_macvtap: entered promiscuous mode [ 265.467847][T10307] vxcan1 speed is unknown, defaulting to 1000 [ 265.481875][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1048'. [ 265.538053][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.548982][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.565768][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.580161][T10333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1048'. [ 265.615249][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.641811][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.662968][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.684709][T10144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.713503][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.739770][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.765155][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.795564][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.825531][T10144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.857358][T10144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.928561][T10144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.019199][T10144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.061076][T10144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.097065][T10144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.133381][T10144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.487672][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1052'. [ 266.752042][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.762441][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 266.805242][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.864751][T10349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'. [ 266.868866][ T4531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.903959][ T4531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.581455][T10356] lo: entered promiscuous mode [ 268.232496][ T4531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.360918][T10355] lo: left promiscuous mode [ 268.474165][ T4531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.804616][ T4531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.917463][ T4531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.146601][ T4531] bridge_slave_1: left allmulticast mode [ 269.154697][ T4531] bridge_slave_1: left promiscuous mode [ 269.162454][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.175172][ T4531] bridge_slave_0: left allmulticast mode [ 269.181005][ T4531] bridge_slave_0: left promiscuous mode [ 269.186809][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.491140][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 269.820095][ T4531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.842974][ T4531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.872476][ T4531] bond0 (unregistering): Released all slaves [ 270.018749][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.027168][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.035549][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.054892][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.065571][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.251004][T10394] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1066'. [ 270.290102][T10394] unsupported nlmsg_type 40 [ 270.921573][T10416] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 271.007001][T10382] vxcan1 speed is unknown, defaulting to 1000 [ 271.043381][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 271.797960][T10431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 272.202145][ T5845] Bluetooth: hci4: command tx timeout [ 272.237553][T10438] bridge0: port 1(vlan0) entered blocking state [ 272.245383][T10438] bridge0: port 1(vlan0) entered disabled state [ 272.265519][T10438] vlan0: entered allmulticast mode [ 272.290304][T10438] bridge0: entered allmulticast mode [ 272.394377][T10438] vlan0: left allmulticast mode [ 272.399312][T10438] bridge0: left allmulticast mode [ 272.564945][T10448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1079'. [ 272.656109][ T4531] hsr_slave_0: left promiscuous mode [ 272.675209][ T4531] hsr_slave_1: left promiscuous mode [ 272.681866][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.697593][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.706307][T10452] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1080'. [ 272.725217][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 272.734885][ T4531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.742850][ T4531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.788114][ T4531] veth1_macvtap: left promiscuous mode [ 272.794785][ T4531] veth0_macvtap: left promiscuous mode [ 272.808070][ T4531] veth1_vlan: left promiscuous mode [ 272.814750][ T4531] veth0_vlan: left promiscuous mode [ 272.869230][T10461] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.245183][ T4531] team0 (unregistering): Port device team_slave_1 removed [ 273.288682][ T4531] team0 (unregistering): Port device team_slave_0 removed [ 273.859181][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 273.872900][T10470] lo: entered promiscuous mode [ 274.011449][T10382] chnl_net:caif_netlink_parms(): no params data found [ 274.134630][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1089'. [ 274.275480][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.282966][ T5845] Bluetooth: hci4: command tx timeout [ 274.300043][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.307495][T10382] bridge_slave_0: entered allmulticast mode [ 274.321735][T10382] bridge_slave_0: entered promiscuous mode [ 274.331485][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.339331][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.346803][T10382] bridge_slave_1: entered allmulticast mode [ 274.355000][T10382] bridge_slave_1: entered promiscuous mode [ 274.405019][T10382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.423012][T10382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.483048][T10382] team0: Port device team_slave_0 added [ 274.492256][T10382] team0: Port device team_slave_1 added [ 274.538885][T10382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.549421][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.578921][T10382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.595905][T10382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.604499][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.657682][T10382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.685340][T10469] lo: left promiscuous mode [ 274.859821][T10382] hsr_slave_0: entered promiscuous mode [ 274.866549][T10382] hsr_slave_1: entered promiscuous mode [ 274.879359][T10382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.889259][T10382] Cannot create hsr debugfs directory [ 274.915785][T10491] bridge0: port 3(vlan2) entered blocking state [ 274.928495][T10491] bridge0: port 3(vlan2) entered disabled state [ 274.936244][T10491] vlan2: entered allmulticast mode [ 274.944600][T10491] bridge0: entered allmulticast mode [ 274.963665][T10491] vlan2: left allmulticast mode [ 274.968587][T10491] bridge0: left allmulticast mode [ 275.080547][T10499] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 275.387281][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 275.470986][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 275.532022][T10511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1096'. [ 276.005113][T10516] netlink: 'syz.4.1100': attribute type 1 has an invalid length. [ 276.132064][T10382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.292321][T10382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.346090][T10382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.359830][ T5845] Bluetooth: hci4: command tx timeout [ 276.383842][T10382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.625537][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 276.684246][T10531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1104'. [ 276.814422][T10382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.906862][T10382] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.084464][ T2137] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.091840][ T2137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.254624][ T2137] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.261850][ T2137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.340796][T10535] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 277.421854][T10535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1105'. [ 277.465536][T10382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.926217][T10382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.979049][T10552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.108664][T10382] veth0_vlan: entered promiscuous mode [ 278.166225][T10382] veth1_vlan: entered promiscuous mode [ 278.253645][T10382] veth0_macvtap: entered promiscuous mode [ 278.301288][T10382] veth1_macvtap: entered promiscuous mode [ 278.334867][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.356493][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.389292][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.408376][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.438245][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.439569][ T5845] Bluetooth: hci4: command tx timeout [ 278.456567][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.494346][T10382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.525315][T10567] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 278.626148][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.676772][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.690680][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.703323][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.736634][T10382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.759402][T10382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.786353][T10382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.795868][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 278.875917][T10549] vxcan1 speed is unknown, defaulting to 1000 [ 278.884918][T10382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.908694][T10382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.928256][T10382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.940763][T10382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.976999][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 279.098006][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 279.193339][T10555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.212674][T10555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.253129][T10555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.269761][T10555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.460386][T10555] batadv0 (unregistering): left promiscuous mode [ 279.617736][ T7042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.629185][ T7042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.848430][ T7044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.879762][ T7044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.365031][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 280.400911][T10596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'. [ 280.886914][ T2137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.048491][ T2137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.291247][ T2137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.403237][ T2137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.611335][ T2137] bridge_slave_1: left allmulticast mode [ 281.617060][ T2137] bridge_slave_1: left promiscuous mode [ 281.623118][ T2137] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.632756][ T2137] bridge_slave_0: left allmulticast mode [ 281.638407][ T2137] bridge_slave_0: left promiscuous mode [ 281.644413][ T2137] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.916656][ T2137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.927688][ T2137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.937847][ T2137] bond0 (unregistering): Released all slaves [ 282.607091][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 282.682004][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1131'. [ 283.810160][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 283.822050][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.833896][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.841878][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.854858][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.905289][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 283.915478][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.057633][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 284.092667][T10657] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1141'. [ 284.146029][ T2137] hsr_slave_0: left promiscuous mode [ 284.260517][ T2137] hsr_slave_1: left promiscuous mode [ 284.305596][ T2137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.975078][T10687] SET target dimension over the limit! [ 284.988469][ T2137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.080110][ T2137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.118814][ T2137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.237600][ T2137] veth1_macvtap: left promiscuous mode [ 285.251997][ T2137] veth0_macvtap: left promiscuous mode [ 285.258946][ T2137] veth1_vlan: left promiscuous mode [ 285.265641][ T2137] veth0_vlan: left promiscuous mode [ 285.280408][T10693] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.732349][ T2137] team0 (unregistering): Port device team_slave_1 removed [ 285.769579][ T2137] team0 (unregistering): Port device team_slave_0 removed [ 286.042352][ T5845] Bluetooth: hci4: command tx timeout [ 286.842951][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 286.856389][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1155'. [ 287.578170][T10647] vxcan1 speed is unknown, defaulting to 1000 [ 287.667327][T10722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1160'. [ 287.858121][T10728] SET target dimension over the limit! [ 287.875146][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'. [ 288.119989][ T5845] Bluetooth: hci4: command tx timeout [ 288.426781][T10746] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 288.463847][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 288.506084][T10750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1166'. [ 288.984629][T10647] chnl_net:caif_netlink_parms(): no params data found [ 289.335606][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.355294][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.375391][T10647] bridge_slave_0: entered allmulticast mode [ 289.407292][T10647] bridge_slave_0: entered promiscuous mode [ 289.432324][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.443557][T10647] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.459778][T10647] bridge_slave_1: entered allmulticast mode [ 289.471600][T10647] bridge_slave_1: entered promiscuous mode [ 289.597521][T10647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.638629][T10647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.714778][T10767] SET target dimension over the limit! [ 289.774193][T10647] team0: Port device team_slave_0 added [ 289.789886][T10647] team0: Port device team_slave_1 added [ 289.889909][T10647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.908035][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.938683][T10647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.965160][T10647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.973186][T10647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.999767][T10647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.173357][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 290.199989][ T5845] Bluetooth: hci4: command tx timeout [ 290.217996][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1176'. [ 290.369015][T10647] hsr_slave_0: entered promiscuous mode [ 290.405905][T10647] hsr_slave_1: entered promiscuous mode [ 290.430399][T10647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.449048][T10647] Cannot create hsr debugfs directory [ 290.561894][T10796] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 291.630827][T10811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1185'. [ 291.661198][T10808] team0 (unregistering): Port device team_slave_0 removed [ 291.691607][T10808] team0 (unregistering): Port device team_slave_1 removed [ 291.786428][T10813] SET target dimension over the limit! [ 291.965383][T10815] bond0: (slave wlan1): Releasing backup interface [ 292.223864][T10824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1191'. [ 292.280126][T10647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.280416][ T5845] Bluetooth: hci4: command tx timeout [ 292.312066][T10647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.386831][T10647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.553612][T10647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.658765][T10839] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1197'. [ 292.800151][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 292.821542][T10647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.844208][T10647] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.867890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.875192][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.933592][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.940841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.962686][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1196'. [ 293.698673][T10859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1201'. [ 294.002964][T10647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.115652][T10647] veth0_vlan: entered promiscuous mode [ 294.143188][T10647] veth1_vlan: entered promiscuous mode [ 294.196133][T10647] veth0_macvtap: entered promiscuous mode [ 294.232023][T10647] veth1_macvtap: entered promiscuous mode [ 294.278015][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.295012][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.314333][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.342615][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.363626][T10647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.387796][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.430082][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.455252][T10647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.474137][T10647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.504207][T10647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.620521][T10647] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.667497][T10647] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.715921][T10647] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.724919][T10647] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.981974][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.020936][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.116542][ T7044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.144522][ T7044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.388252][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 295.413389][T10905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1213'. [ 296.853297][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 296.879967][T10922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1217'. [ 297.752110][T10937] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 298.066143][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.330577][T10942] pim6reg: entered allmulticast mode [ 298.356457][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.403734][T10938] pim6reg: left allmulticast mode [ 298.505571][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.587486][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.714127][ T36] bridge_slave_1: left allmulticast mode [ 298.722272][ T36] bridge_slave_1: left promiscuous mode [ 298.728698][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.738384][ T36] bridge_slave_0: left allmulticast mode [ 298.745214][ T36] bridge_slave_0: left promiscuous mode [ 298.751195][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.006432][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.017926][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.028081][ T36] bond0 (unregistering): Released all slaves [ 299.480986][ T36] hsr_slave_0: left promiscuous mode [ 299.487127][ T36] hsr_slave_1: left promiscuous mode [ 299.498101][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.522407][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.540519][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.589112][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.652196][ T36] veth1_macvtap: left promiscuous mode [ 299.657826][ T36] veth0_macvtap: left promiscuous mode [ 299.680267][ T36] veth1_vlan: left promiscuous mode [ 299.685731][ T36] veth0_vlan: left promiscuous mode [ 300.072514][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.085636][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.094940][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.106632][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.116536][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.361648][ T36] team0 (unregistering): Port device team_slave_1 removed [ 300.400382][ T36] team0 (unregistering): Port device team_slave_0 removed [ 301.192795][T10987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1234'. [ 301.367907][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 301.406912][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 301.645607][T10962] vxcan1 speed is unknown, defaulting to 1000 [ 302.244835][ T5856] Bluetooth: hci4: command tx timeout [ 302.399753][T10999] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 303.022747][T10962] chnl_net:caif_netlink_parms(): no params data found [ 303.253762][T10962] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.276179][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.296264][T10962] bridge_slave_0: entered allmulticast mode [ 303.321315][T10962] bridge_slave_0: entered promiscuous mode [ 303.378379][T10962] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.411005][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.438920][T10962] bridge_slave_1: entered allmulticast mode [ 303.505076][T11039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.580803][T10962] bridge_slave_1: entered promiscuous mode [ 303.608906][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 303.656795][T11042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1246'. [ 303.940772][T10962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.983910][T10962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.150306][T10962] team0: Port device team_slave_0 added [ 304.293388][ T5856] Bluetooth: hci4: command tx timeout [ 304.333649][T10962] team0: Port device team_slave_1 added [ 304.702979][T10962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.714143][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 304.749476][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.786994][T11056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1250'. [ 304.851621][T11054] netlink: 'syz.0.1252': attribute type 5 has an invalid length. [ 304.946602][T10962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.057213][T10962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.106372][T10962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.217176][T10962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.492063][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1243'. [ 305.537038][T11054] ip6erspan0: entered promiscuous mode [ 305.557257][T11067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.804391][T10962] hsr_slave_0: entered promiscuous mode [ 305.811213][T10962] hsr_slave_1: entered promiscuous mode [ 305.824894][T10962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.839849][T10962] Cannot create hsr debugfs directory [ 305.845766][T11027] vxcan1 speed is unknown, defaulting to 1000 [ 306.098915][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1254'. [ 306.132636][T11078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1254'. [ 306.359722][ T5856] Bluetooth: hci4: command tx timeout [ 306.818767][T11089] syz_tun: entered allmulticast mode [ 306.861120][T11089] dvmrp8: entered allmulticast mode [ 306.970083][T11094] __nla_validate_parse: 1 callbacks suppressed [ 306.970105][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1257'. [ 306.995526][T11091] syz_tun: left allmulticast mode [ 307.008299][T11091] dvmrp8: left allmulticast mode [ 307.645897][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1263'. [ 307.716353][T11109] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 307.766492][T11109] macsec1: entered allmulticast mode [ 307.795220][T11109] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 307.840761][T11109] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 307.855574][T11109] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 307.972765][T10962] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 308.002004][T10962] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 308.061542][T10962] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 308.083295][T10962] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 308.348027][T10962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.376030][T10962] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.449592][ T5856] Bluetooth: hci4: command tx timeout [ 308.498442][T10962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.509107][T10962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.554780][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.562043][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.614094][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.621453][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.885947][T11136] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1271'. [ 309.133643][T10962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.272370][T10962] veth0_vlan: entered promiscuous mode [ 309.318383][T10962] veth1_vlan: entered promiscuous mode [ 309.405818][T11152] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 309.455846][T10962] veth0_macvtap: entered promiscuous mode [ 309.483313][T10962] veth1_macvtap: entered promiscuous mode [ 309.545764][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.561778][T11158] FAULT_INJECTION: forcing a failure. [ 309.561778][T11158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.580061][T11158] CPU: 1 UID: 0 PID: 11158 Comm: syz.4.1280 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 309.580093][T11158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.580118][T11158] Call Trace: [ 309.580126][T11158] [ 309.580135][T11158] dump_stack_lvl+0x241/0x360 [ 309.580174][T11158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.580203][T11158] ? __pfx__printk+0x10/0x10 [ 309.580246][T11158] should_fail_ex+0x424/0x570 [ 309.580275][T11158] _copy_from_user+0x2d/0xb0 [ 309.580308][T11158] copy_msghdr_from_user+0xb3/0x580 [ 309.580345][T11158] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 309.580372][T11158] ? __fget_files+0x2a/0x420 [ 309.580395][T11158] ? __fget_files+0x2a/0x420 [ 309.580425][T11158] __sys_sendmsg+0x20a/0x360 [ 309.580455][T11158] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.580539][T11158] ? do_syscall_64+0xb6/0x210 [ 309.580563][T11158] do_syscall_64+0xf3/0x210 [ 309.580583][T11158] ? clear_bhb_loop+0x45/0xa0 [ 309.580607][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.580628][T11158] RIP: 0033:0x7fb6c3f8e169 [ 309.580646][T11158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.580664][T11158] RSP: 002b:00007fb6c4d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.580687][T11158] RAX: ffffffffffffffda RBX: 00007fb6c41b5fa0 RCX: 00007fb6c3f8e169 [ 309.580701][T11158] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 0000000000000004 [ 309.580712][T11158] RBP: 00007fb6c4d33090 R08: 0000000000000000 R09: 0000000000000000 [ 309.580722][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.580732][T11158] R13: 0000000000000000 R14: 00007fb6c41b5fa0 R15: 00007ffe57867d18 [ 309.580765][T11158] [ 309.583361][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.678685][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 309.704741][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.795128][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.806846][T10962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.820350][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 309.850234][T11119] vxcan1 speed is unknown, defaulting to 1000 [ 309.901661][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.952715][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.977897][T10962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.993303][T11167] FAULT_INJECTION: forcing a failure. [ 309.993303][T11167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.008082][T10962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.034234][T10962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.050284][T11169] ip6t_rpfilter: unknown options [ 310.067208][T10962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.078995][T11167] CPU: 1 UID: 0 PID: 11167 Comm: syz.4.1284 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 310.079027][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 310.079039][T11167] Call Trace: [ 310.079048][T11167] [ 310.079056][T11167] dump_stack_lvl+0x241/0x360 [ 310.079092][T11167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.079121][T11167] ? __pfx__printk+0x10/0x10 [ 310.079164][T11167] should_fail_ex+0x424/0x570 [ 310.079194][T11167] _copy_from_user+0x2d/0xb0 [ 310.079226][T11167] copy_msghdr_from_user+0xb3/0x580 [ 310.079265][T11167] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 310.079292][T11167] ? __fget_files+0x2a/0x420 [ 310.079315][T11167] ? __fget_files+0x2a/0x420 [ 310.079344][T11167] __sys_sendmsg+0x20a/0x360 [ 310.079374][T11167] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.079461][T11167] ? do_syscall_64+0xb6/0x210 [ 310.079487][T11167] do_syscall_64+0xf3/0x210 [ 310.079508][T11167] ? clear_bhb_loop+0x45/0xa0 [ 310.079534][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.079554][T11167] RIP: 0033:0x7fb6c3f8e169 [ 310.079573][T11167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.079591][T11167] RSP: 002b:00007fb6c4d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.079613][T11167] RAX: ffffffffffffffda RBX: 00007fb6c41b5fa0 RCX: 00007fb6c3f8e169 [ 310.079629][T11167] RDX: 0000000004008800 RSI: 0000200000000100 RDI: 0000000000000003 [ 310.079643][T11167] RBP: 00007fb6c4d33090 R08: 0000000000000000 R09: 0000000000000000 [ 310.079656][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.079668][T11167] R13: 0000000000000000 R14: 00007fb6c41b5fa0 R15: 00007ffe57867d18 [ 310.079712][T11167] [ 310.101864][T10962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.101906][T10962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.310516][T11174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1286'. [ 310.320231][T10962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.589753][ T2137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.597698][ T2137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.680516][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.702080][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.847808][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'. [ 311.045006][T11187] netlink: 'syz.4.1291': attribute type 1 has an invalid length. [ 311.278872][T11195] FAULT_INJECTION: forcing a failure. [ 311.278872][T11195] name failslab, interval 1, probability 0, space 0, times 0 [ 311.296237][T11195] CPU: 1 UID: 0 PID: 11195 Comm: syz.1.1295 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 311.296269][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.296282][T11195] Call Trace: [ 311.296291][T11195] [ 311.296299][T11195] dump_stack_lvl+0x241/0x360 [ 311.296337][T11195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.296366][T11195] ? __pfx__printk+0x10/0x10 [ 311.296400][T11195] ? __pfx___might_resched+0x10/0x10 [ 311.296437][T11195] should_fail_ex+0x424/0x570 [ 311.296466][T11195] should_failslab+0xac/0x100 [ 311.296489][T11195] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 311.296511][T11195] ? __alloc_skb+0x1c2/0x480 [ 311.296537][T11195] __alloc_skb+0x1c2/0x480 [ 311.296564][T11195] ? __pfx___alloc_skb+0x10/0x10 [ 311.296588][T11195] ? netlink_autobind+0xd6/0x2f0 [ 311.296606][T11195] ? netlink_autobind+0x2b0/0x2f0 [ 311.296630][T11195] netlink_sendmsg+0x638/0xcd0 [ 311.296671][T11195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.296707][T11195] ? aa_sock_msg_perm+0x91/0x160 [ 311.296739][T11195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.296768][T11195] __sock_sendmsg+0x221/0x270 [ 311.296800][T11195] ____sys_sendmsg+0x523/0x860 [ 311.296834][T11195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.296855][T11195] ? __fget_files+0x2a/0x420 [ 311.296879][T11195] ? __fget_files+0x2a/0x420 [ 311.296916][T11195] __sys_sendmsg+0x271/0x360 [ 311.296947][T11195] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.297032][T11195] ? do_syscall_64+0xb6/0x210 [ 311.297057][T11195] do_syscall_64+0xf3/0x210 [ 311.297077][T11195] ? clear_bhb_loop+0x45/0xa0 [ 311.297103][T11195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.297123][T11195] RIP: 0033:0x7f6d8778e169 [ 311.297141][T11195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.297160][T11195] RSP: 002b:00007f6d8853d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.297183][T11195] RAX: ffffffffffffffda RBX: 00007f6d879b5fa0 RCX: 00007f6d8778e169 [ 311.297198][T11195] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 311.297211][T11195] RBP: 00007f6d8853d090 R08: 0000000000000000 R09: 0000000000000000 [ 311.297224][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.297237][T11195] R13: 0000000000000000 R14: 00007f6d879b5fa0 R15: 00007ffddddbb348 [ 311.297270][T11195] [ 311.654343][T11198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1296'. [ 311.665510][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1296'. [ 311.927080][T11202] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.243383][ T7044] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.954844][ T7044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.004982][ T7044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.098039][ T7044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.213776][ T7044] bridge_slave_1: left allmulticast mode [ 313.223530][ T7044] bridge_slave_1: left promiscuous mode [ 313.229302][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.238657][ T7044] bridge_slave_0: left allmulticast mode [ 313.250411][ T7044] bridge_slave_0: left promiscuous mode [ 313.256159][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.528105][ T7044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.539116][ T7044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.551662][ T7044] bond0 (unregistering): Released all slaves [ 313.812239][T11218] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 314.434578][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1308'. [ 315.080203][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 315.091065][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 315.100316][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 315.110447][ T7044] hsr_slave_0: left promiscuous mode [ 315.117333][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 315.134097][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 315.143805][ T7044] hsr_slave_1: left promiscuous mode [ 315.150539][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.158123][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.191776][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.200225][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.659623][ T7044] veth1_macvtap: left promiscuous mode [ 315.665234][ T7044] veth0_macvtap: left promiscuous mode [ 315.709098][ T7044] veth1_vlan: left promiscuous mode [ 315.730681][ T7044] veth0_vlan: left promiscuous mode [ 315.751027][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 315.971591][T11264] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 317.118958][ T7044] team0 (unregistering): Port device team_slave_1 removed [ 317.154053][ T7044] team0 (unregistering): Port device team_slave_0 removed [ 317.253096][ T5856] Bluetooth: hci4: command tx timeout [ 317.499200][T11254] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 317.873934][T11304] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1320'. [ 317.949844][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'. [ 318.048046][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1317'. [ 318.060301][T11311] veth0_macvtap: left promiscuous mode [ 318.542884][T11241] vxcan1 speed is unknown, defaulting to 1000 [ 318.940961][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1326'. [ 318.970449][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1326'. [ 318.999830][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1326'. [ 319.030052][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 319.203301][T11336] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 319.321868][ T5856] Bluetooth: hci4: command tx timeout [ 319.402579][T11241] chnl_net:caif_netlink_parms(): no params data found [ 319.534218][T11349] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 319.546638][T11349] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1332'. [ 319.584190][T11350] bridge0: port 3(vlan2) entered blocking state [ 319.602401][T11350] bridge0: port 3(vlan2) entered disabled state [ 319.620790][T11350] vlan2: entered allmulticast mode [ 319.648878][T11350] bridge0: entered allmulticast mode [ 319.660206][T11350] vlan2: left allmulticast mode [ 319.665277][T11350] bridge0: left allmulticast mode [ 319.778605][T11361] vxcan3: entered allmulticast mode [ 319.828379][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 319.865983][T11363] netlink: 'syz.2.1335': attribute type 2 has an invalid length. [ 319.936972][T11370] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1338'. [ 320.002928][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.019675][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.026979][T11241] bridge_slave_0: entered allmulticast mode [ 320.057163][T11376] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 320.061714][T11241] bridge_slave_0: entered promiscuous mode [ 320.097838][T11241] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.113121][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.123703][T11241] bridge_slave_1: entered allmulticast mode [ 320.171676][T11241] bridge_slave_1: entered promiscuous mode [ 320.335069][T11393] netlink: 'syz.0.1343': attribute type 298 has an invalid length. [ 320.362533][T11241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.388806][T11241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.584395][T11241] team0: Port device team_slave_0 added [ 320.608322][T11241] team0: Port device team_slave_1 added [ 320.672315][T11402] bond0: (slave bond_slave_0): Releasing backup interface [ 320.675834][T11396] netlink: 'syz.2.1344': attribute type 10 has an invalid length. [ 320.714370][T11402] bond_slave_0: left promiscuous mode [ 320.742599][T11402] bond0: (slave bond_slave_1): Releasing backup interface [ 320.795281][T11402] bond_slave_1: left promiscuous mode [ 320.895108][ T5897] vxcan1 speed is unknown, defaulting to 1000 [ 320.988276][T11396] bond0: (slave wlan1): refused to change device type [ 321.052982][T11241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.060621][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.130330][T11241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.151828][T11241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.158869][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.219943][T11241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.403658][ T5856] Bluetooth: hci4: command tx timeout [ 321.442380][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 321.456329][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 321.492482][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'. [ 321.509331][T11241] hsr_slave_0: entered promiscuous mode [ 321.532275][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 321.567381][T11433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1351'. [ 321.569159][T11241] hsr_slave_1: entered promiscuous mode [ 321.576646][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1351'. [ 321.590387][T11241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.602679][T11438] netlink: 'syz.2.1352': attribute type 1 has an invalid length. [ 321.654070][T11241] Cannot create hsr debugfs directory [ 321.825981][T11444] bridge0: port 3(vlan2) entered blocking state [ 321.849873][T11444] bridge0: port 3(vlan2) entered disabled state [ 321.856401][T11444] vlan2: entered allmulticast mode [ 321.883572][T11444] bridge0: entered allmulticast mode [ 321.943272][T11444] vlan2: left allmulticast mode [ 321.951550][T11444] bridge0: left allmulticast mode [ 321.995822][T11412] vxcan1 speed is unknown, defaulting to 1000 [ 322.362921][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 323.324770][T11472] bridge0: port 3(vlan2) entered blocking state [ 323.364900][T11472] bridge0: port 3(vlan2) entered disabled state [ 323.380688][T11472] vlan2: entered allmulticast mode [ 323.391845][T11472] bridge0: entered allmulticast mode [ 323.404055][T11472] vlan2: left allmulticast mode [ 323.409112][T11472] bridge0: left allmulticast mode [ 323.480462][ T5856] Bluetooth: hci4: command tx timeout [ 323.575596][T11241] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 323.607017][T11241] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 323.659293][T11241] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 323.875480][T11241] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.566432][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.595960][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.620418][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.627678][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.666391][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.673691][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.838076][T11241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.202772][T11241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.315562][T11241] veth0_vlan: entered promiscuous mode [ 325.348470][T11241] veth1_vlan: entered promiscuous mode [ 325.365495][T11516] xt_TPROXY: Can be used only with -p tcp or -p udp [ 325.424971][T11516] __nla_validate_parse: 3 callbacks suppressed [ 325.424993][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1373'. [ 325.425361][T11241] veth0_macvtap: entered promiscuous mode [ 325.462971][T11516] netlink: 'syz.1.1373': attribute type 5 has an invalid length. [ 325.465042][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 325.471991][T11516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1373'. [ 325.499160][T11241] veth1_macvtap: entered promiscuous mode [ 325.585579][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.603902][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.614204][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.645778][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.668540][T11241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.707723][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.749544][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.781963][T11241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.805067][T11241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.827024][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1371'. [ 325.859253][T11241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.918904][T11241] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.938154][T11241] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.959050][T11241] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.977103][T11241] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.176543][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.219331][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.291551][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.299975][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.175343][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.307344][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 327.365762][T11590] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 327.494529][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.786612][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.853501][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.974023][ T71] bridge_slave_1: left allmulticast mode [ 327.982362][ T71] bridge_slave_1: left promiscuous mode [ 327.988132][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.000086][ T71] bridge_slave_0: left allmulticast mode [ 328.005867][ T71] bridge_slave_0: left promiscuous mode [ 328.012564][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.279300][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.292795][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.303671][ T71] bond0 (unregistering): Released all slaves [ 328.895642][ T71] hsr_slave_0: left promiscuous mode [ 328.902923][T11610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1399'. [ 328.920272][ T71] hsr_slave_1: left promiscuous mode [ 328.928681][T11610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1399'. [ 328.928707][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.950652][T11611] netlink: 'syz.1.1398': attribute type 2 has an invalid length. [ 328.964503][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.969618][T11611] netlink: 'syz.1.1398': attribute type 1 has an invalid length. [ 328.989315][T11611] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1398'. [ 329.000723][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.018440][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.065712][ T71] veth1_macvtap: left promiscuous mode [ 329.076831][ T71] veth0_macvtap: left promiscuous mode [ 329.085450][ T71] veth1_vlan: left promiscuous mode [ 329.091185][ T71] veth0_vlan: left promiscuous mode [ 329.334963][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.346573][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.354700][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.367644][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.377820][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.618993][ T71] team0 (unregistering): Port device team_slave_1 removed [ 329.656348][ T71] team0 (unregistering): Port device team_slave_0 removed [ 330.173000][T11625] FAULT_INJECTION: forcing a failure. [ 330.173000][T11625] name failslab, interval 1, probability 0, space 0, times 0 [ 330.225942][T11625] CPU: 0 UID: 0 PID: 11625 Comm: syz.0.1404 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 330.225976][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.225989][T11625] Call Trace: [ 330.225997][T11625] [ 330.226007][T11625] dump_stack_lvl+0x241/0x360 [ 330.226045][T11625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.226075][T11625] ? __pfx__printk+0x10/0x10 [ 330.226109][T11625] ? __pfx___might_resched+0x10/0x10 [ 330.226147][T11625] should_fail_ex+0x424/0x570 [ 330.226177][T11625] should_failslab+0xac/0x100 [ 330.226201][T11625] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 330.226224][T11625] ? __alloc_skb+0x1c2/0x480 [ 330.226250][T11625] __alloc_skb+0x1c2/0x480 [ 330.226278][T11625] ? __pfx___alloc_skb+0x10/0x10 [ 330.226302][T11625] ? netlink_autobind+0xd6/0x2f0 [ 330.226320][T11625] ? netlink_autobind+0x2b0/0x2f0 [ 330.226345][T11625] netlink_sendmsg+0x638/0xcd0 [ 330.226392][T11625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.226429][T11625] ? aa_sock_msg_perm+0x91/0x160 [ 330.226462][T11625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.226492][T11625] __sock_sendmsg+0x221/0x270 [ 330.226525][T11625] ____sys_sendmsg+0x523/0x860 [ 330.226559][T11625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.226580][T11625] ? __fget_files+0x2a/0x420 [ 330.226604][T11625] ? __fget_files+0x2a/0x420 [ 330.226634][T11625] __sys_sendmsg+0x271/0x360 [ 330.226664][T11625] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.226757][T11625] ? do_syscall_64+0xb6/0x210 [ 330.226784][T11625] do_syscall_64+0xf3/0x210 [ 330.226805][T11625] ? clear_bhb_loop+0x45/0xa0 [ 330.226830][T11625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.226852][T11625] RIP: 0033:0x7f23fb38e169 [ 330.226871][T11625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.226889][T11625] RSP: 002b:00007f23fc280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.226912][T11625] RAX: ffffffffffffffda RBX: 00007f23fb5b5fa0 RCX: 00007f23fb38e169 [ 330.226929][T11625] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 330.226942][T11625] RBP: 00007f23fc280090 R08: 0000000000000000 R09: 0000000000000000 [ 330.226956][T11625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.226968][T11625] R13: 0000000000000000 R14: 00007f23fb5b5fa0 R15: 00007ffd46708268 [ 330.227001][T11625] [ 330.723869][T11637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1406'. [ 330.889161][T11619] vxcan1 speed is unknown, defaulting to 1000 [ 330.988451][T11640] xt_CT: No such helper "pptp" [ 331.401181][ T5856] Bluetooth: hci4: command tx timeout [ 331.785632][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'. [ 331.998180][T11675] ipt_ECN: cannot use operation on non-tcp rule [ 332.005038][T11619] chnl_net:caif_netlink_parms(): no params data found [ 332.117548][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 332.251010][T11619] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.258618][T11619] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.266085][T11619] bridge_slave_0: entered allmulticast mode [ 332.283456][T11619] bridge_slave_0: entered promiscuous mode [ 332.302164][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.317536][T11619] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.339207][T11619] bridge_slave_1: entered allmulticast mode [ 332.365785][T11619] bridge_slave_1: entered promiscuous mode [ 332.472736][T11619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.487546][T11619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.563222][T11619] team0: Port device team_slave_0 added [ 332.592511][T11619] team0: Port device team_slave_1 added [ 332.699734][T11705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1421'. [ 332.752303][T11619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.768159][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.828436][T11619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.864799][T11619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.884493][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.957072][T11619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.414286][T11716] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1427'. [ 333.475748][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 333.487321][ T5856] Bluetooth: hci4: command tx timeout [ 333.513219][T11619] hsr_slave_0: entered promiscuous mode [ 333.532919][T11619] hsr_slave_1: entered promiscuous mode [ 333.550460][T11619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.558198][T11619] Cannot create hsr debugfs directory [ 334.082027][T11724] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 334.424113][T11733] veth1_macvtap: left promiscuous mode [ 334.492851][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 334.513106][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1432'. [ 334.784121][T11739] netlink: 'syz.1.1434': attribute type 1 has an invalid length. [ 334.871801][T11749] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1434'. [ 335.131491][T11751] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1434'. [ 335.157975][T11739] bond1: entered promiscuous mode [ 335.204755][T11739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.247476][T11754] netlink: 'syz.2.1436': attribute type 10 has an invalid length. [ 335.282246][T11754] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 335.383221][T11749] batadv0: entered promiscuous mode [ 335.388575][T11749] batadv0: entered allmulticast mode [ 335.560021][ T5856] Bluetooth: hci4: command tx timeout [ 335.755281][T11619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 335.790444][T11619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 335.914779][T11619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 335.934758][T11768] __nla_validate_parse: 2 callbacks suppressed [ 335.934780][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 335.976493][T11619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 335.979257][T11770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1441'. [ 336.001552][T11771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1438'. [ 336.030524][T11774] FAULT_INJECTION: forcing a failure. [ 336.030524][T11774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.131177][T11774] CPU: 0 UID: 0 PID: 11774 Comm: syz.4.1442 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 336.131211][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.131225][T11774] Call Trace: [ 336.131233][T11774] [ 336.131242][T11774] dump_stack_lvl+0x241/0x360 [ 336.131281][T11774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.131311][T11774] ? __pfx__printk+0x10/0x10 [ 336.131354][T11774] should_fail_ex+0x424/0x570 [ 336.131385][T11774] _copy_from_user+0x2d/0xb0 [ 336.131419][T11774] copy_msghdr_from_user+0xb3/0x580 [ 336.131458][T11774] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 336.131486][T11774] ? __fget_files+0x2a/0x420 [ 336.131509][T11774] ? __fget_files+0x2a/0x420 [ 336.131539][T11774] __sys_sendmsg+0x20a/0x360 [ 336.131570][T11774] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.131655][T11774] ? do_syscall_64+0xb6/0x210 [ 336.131682][T11774] do_syscall_64+0xf3/0x210 [ 336.131702][T11774] ? clear_bhb_loop+0x45/0xa0 [ 336.131728][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.131749][T11774] RIP: 0033:0x7fb6c3f8e169 [ 336.131768][T11774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.131786][T11774] RSP: 002b:00007fb6c4d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.131809][T11774] RAX: ffffffffffffffda RBX: 00007fb6c41b5fa0 RCX: 00007fb6c3f8e169 [ 336.131825][T11774] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 336.131838][T11774] RBP: 00007fb6c4d33090 R08: 0000000000000000 R09: 0000000000000000 [ 336.131852][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.131865][T11774] R13: 0000000000000000 R14: 00007fb6c41b5fa0 R15: 00007ffe57867d18 [ 336.131899][T11774] [ 336.683884][T11619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.741248][T11619] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.773747][ T7042] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.780987][ T7042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.803927][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.811158][ T4531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.951052][T11791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 337.298094][T11619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.360322][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1452'. [ 337.381918][T11808] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1452'. [ 337.445121][T11619] veth0_vlan: entered promiscuous mode [ 337.459069][T11619] veth1_vlan: entered promiscuous mode [ 337.521873][T11619] veth0_macvtap: entered promiscuous mode [ 337.533228][T11619] veth1_macvtap: entered promiscuous mode [ 337.555007][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.566659][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.588220][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.599054][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.615750][T11619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.641070][ T5856] Bluetooth: hci4: command tx timeout [ 337.708731][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.714643][T11820] FAULT_INJECTION: forcing a failure. [ 337.714643][T11820] name failslab, interval 1, probability 0, space 0, times 0 [ 337.743819][T11820] CPU: 0 UID: 0 PID: 11820 Comm: syz.0.1456 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 337.743854][T11820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.743867][T11820] Call Trace: [ 337.743876][T11820] [ 337.743886][T11820] dump_stack_lvl+0x241/0x360 [ 337.743924][T11820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.743955][T11820] ? __pfx__printk+0x10/0x10 [ 337.743996][T11820] ? __pfx___might_resched+0x10/0x10 [ 337.744036][T11820] should_fail_ex+0x424/0x570 [ 337.744066][T11820] should_failslab+0xac/0x100 [ 337.744090][T11820] kmem_cache_alloc_noprof+0x78/0x390 [ 337.744111][T11820] ? skb_clone+0x20c/0x390 [ 337.744142][T11820] skb_clone+0x20c/0x390 [ 337.744172][T11820] pfkey_sendmsg+0x48d/0x1140 [ 337.744203][T11820] ? __pfx___might_resched+0x10/0x10 [ 337.744244][T11820] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.744293][T11820] ? __pfx_aa_sk_perm+0x10/0x10 [ 337.744319][T11820] ? __import_iovec+0x585/0x830 [ 337.744352][T11820] ? aa_sock_msg_perm+0x91/0x160 [ 337.744384][T11820] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.744406][T11820] __sock_sendmsg+0x221/0x270 [ 337.744437][T11820] ____sys_sendmsg+0x523/0x860 [ 337.744470][T11820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.744491][T11820] ? __fget_files+0x2a/0x420 [ 337.744514][T11820] ? __fget_files+0x2a/0x420 [ 337.744542][T11820] __sys_sendmsg+0x271/0x360 [ 337.744569][T11820] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.744654][T11820] ? do_syscall_64+0xb6/0x210 [ 337.744676][T11820] do_syscall_64+0xf3/0x210 [ 337.744697][T11820] ? clear_bhb_loop+0x45/0xa0 [ 337.744722][T11820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.744742][T11820] RIP: 0033:0x7f23fb38e169 [ 337.744761][T11820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.744782][T11820] RSP: 002b:00007f23fc280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.744803][T11820] RAX: ffffffffffffffda RBX: 00007f23fb5b5fa0 RCX: 00007f23fb38e169 [ 337.744818][T11820] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 337.744832][T11820] RBP: 00007f23fc280090 R08: 0000000000000000 R09: 0000000000000000 [ 337.744845][T11820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.744857][T11820] R13: 0000000000000000 R14: 00007f23fb5b5fa0 R15: 00007ffd46708268 [ 337.744914][T11820] [ 337.985888][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.995863][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.006485][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.018082][T11619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.029760][T11619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.038531][T11619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.047861][T11619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.056632][T11619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.401961][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.446471][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.504366][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.625392][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.748834][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 338.823446][T11832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1458'. [ 339.098142][T11829] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 339.923757][T11855] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 340.445049][T11874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'. [ 340.855129][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1472'. [ 340.899779][T11889] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 341.012911][T11888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1472'. [ 341.182368][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 341.606915][ T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.801580][ T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.954560][ T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.071378][ T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.316896][ T71] bridge_slave_1: left allmulticast mode [ 342.330012][ T71] bridge_slave_1: left promiscuous mode [ 342.341111][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.363174][ T71] bridge_slave_0: left allmulticast mode [ 342.379495][ T71] bridge_slave_0: left promiscuous mode [ 342.385295][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.696881][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.710534][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.723103][ T71] bond0 (unregistering): Released all slaves [ 343.231247][ T71] hsr_slave_0: left promiscuous mode [ 343.237121][ T71] hsr_slave_1: left promiscuous mode [ 343.243838][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.254876][ T71] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.266992][ T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.309653][ T71] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.385670][ T71] veth1_macvtap: left promiscuous mode [ 343.403992][ T71] veth0_macvtap: left promiscuous mode [ 343.413693][ T71] veth1_vlan: left promiscuous mode [ 343.419095][ T71] veth0_vlan: left promiscuous mode [ 343.921946][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.932393][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.944545][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.964323][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.972835][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.279113][ T71] team0 (unregistering): Port device team_slave_1 removed [ 344.320097][ T71] team0 (unregistering): Port device team_slave_0 removed [ 344.533513][T11926] netlink: 'syz.1.1479': attribute type 10 has an invalid length. [ 345.342723][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1484'. [ 345.530674][T11960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 346.058992][ T5845] Bluetooth: hci4: command tx timeout [ 346.336518][T11923] vxcan1 speed is unknown, defaulting to 1000 [ 346.991847][T11974] FAULT_INJECTION: forcing a failure. [ 346.991847][T11974] name failslab, interval 1, probability 0, space 0, times 0 [ 347.018467][T11974] CPU: 1 UID: 0 PID: 11974 Comm: syz.4.1490 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 347.018501][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.018514][T11974] Call Trace: [ 347.018522][T11974] [ 347.018530][T11974] dump_stack_lvl+0x241/0x360 [ 347.018568][T11974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.018597][T11974] ? __pfx__printk+0x10/0x10 [ 347.018631][T11974] ? __pfx___might_resched+0x10/0x10 [ 347.018670][T11974] should_fail_ex+0x424/0x570 [ 347.018700][T11974] should_failslab+0xac/0x100 [ 347.018724][T11974] __kmalloc_noprof+0xdf/0x4d0 [ 347.018744][T11974] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 347.018769][T11974] ? apparmor_capable+0x13b/0x1b0 [ 347.018806][T11974] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 347.018840][T11974] genl_rcv_msg+0x819/0xf00 [ 347.018875][T11974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.018896][T11974] ? stack_trace_save+0x11a/0x1d0 [ 347.018938][T11974] ? __pfx_stack_trace_save+0x10/0x10 [ 347.018965][T11974] ? stack_depot_save_flags+0x44/0x940 [ 347.018987][T11974] ? __pfx_stack_trace_save+0x1/0x10 [ 347.019027][T11974] ? __lock_acquire+0xad5/0xd80 [ 347.019057][T11974] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 347.019100][T11974] netlink_rcv_skb+0x208/0x480 [ 347.019133][T11974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.019159][T11974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.019214][T11974] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.019254][T11974] genl_rcv+0x28/0x40 [ 347.019275][T11974] netlink_unicast+0x7f8/0x9a0 [ 347.019313][T11974] ? __pfx_netlink_unicast+0x10/0x10 [ 347.019344][T11974] ? skb_put+0x114/0x1f0 [ 347.019372][T11974] netlink_sendmsg+0x8c3/0xcd0 [ 347.019422][T11974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.019458][T11974] ? aa_sock_msg_perm+0x91/0x160 [ 347.019490][T11974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.019519][T11974] __sock_sendmsg+0x221/0x270 [ 347.019551][T11974] ____sys_sendmsg+0x523/0x860 [ 347.019586][T11974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.019607][T11974] ? __fget_files+0x2a/0x420 [ 347.019629][T11974] ? __fget_files+0x2a/0x420 [ 347.019660][T11974] __sys_sendmsg+0x271/0x360 [ 347.019690][T11974] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.019778][T11974] ? do_syscall_64+0xb6/0x210 [ 347.019804][T11974] do_syscall_64+0xf3/0x210 [ 347.019825][T11974] ? clear_bhb_loop+0x45/0xa0 [ 347.019851][T11974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.019871][T11974] RIP: 0033:0x7fb6c3f8e169 [ 347.019890][T11974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.019909][T11974] RSP: 002b:00007fb6c4d33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.019941][T11974] RAX: ffffffffffffffda RBX: 00007fb6c41b5fa0 RCX: 00007fb6c3f8e169 [ 347.019957][T11974] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 347.019971][T11974] RBP: 00007fb6c4d33090 R08: 0000000000000000 R09: 0000000000000000 [ 347.019986][T11974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.019999][T11974] R13: 0000000000000000 R14: 00007fb6c41b5fa0 R15: 00007ffe57867d18 [ 347.020036][T11974] [ 347.378245][T11923] ------------[ cut here ]------------ [ 347.383857][T11923] WARNING: CPU: 0 PID: 11923 at ./include/net/netdev_lock.h:17 netdev_nl_dev_fill+0x6bc/0x860 [ 347.394326][T11923] Modules linked in: [ 347.399131][T11923] CPU: 0 UID: 0 PID: 11923 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 347.411529][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.422257][T11923] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 347.428116][T11923] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 65 4e c4 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 57 4e c4 f7 90 0f 0b 90 42 80 3c 3b 00 [ 347.448207][T11923] RSP: 0000:ffffc9000416eac0 EFLAGS: 00010293 [ 347.454845][T11923] RAX: ffffffff89fe6c5b RBX: 0000000000000000 RCX: ffff888026593c00 [ 347.462930][T11923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 347.470977][T11923] RBP: ffffc9000416ebf0 R08: ffffffff89fe667c R09: 1ffff1100f5121dc [ 347.479076][T11923] R10: dffffc0000000000 R11: ffffed100f5121dd R12: ffff88805b770000 [ 347.487454][T11923] R13: ffff888079cd2640 R14: ffff888079cd2640 R15: ffffc9000416ec40 [ 347.495633][T11923] FS: 000055556c3df500(0000) GS:ffff888124fab000(0000) knlGS:0000000000000000 [ 347.504624][T11923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.511346][T11923] CR2: 000000110c2c5b09 CR3: 00000000315ec000 CR4: 00000000003526f0 [ 347.519358][T11923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.527480][T11923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 347.535831][T11923] Call Trace: [ 347.541284][T11923] [ 347.544298][T11923] ? __build_skb_around+0x247/0x3d0 [ 347.549595][T11923] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 347.555733][T11923] ? __alloc_skb+0x298/0x480 [ 347.560457][T11923] ? __pfx___alloc_skb+0x10/0x10 [ 347.566145][T11923] netdev_genl_dev_notify+0x1fb/0x450 [ 347.571702][T11923] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 347.577645][T11923] ? dev_map_notification+0x14d/0x9a0 [ 347.583139][T11923] ? ip_vs_dst_event+0x508/0x6a0 [ 347.588123][T11923] netdev_genl_netdevice_event+0x81/0xa0 [ 347.593867][T11923] notifier_call_chain+0x1a5/0x3f0 [ 347.599036][T11923] register_netdevice+0x16c0/0x1b80 [ 347.604391][T11923] ? __pfx_register_netdevice+0x10/0x10 [ 347.610012][T11923] ? dev_addr_mod+0xf4/0x430 [ 347.614644][T11923] ? __asan_memset+0x23/0x50 [ 347.619286][T11923] ip6gre_newlink_common+0x4b8/0x6d0 [ 347.624690][T11923] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 347.630602][T11923] ? lockdep_rtnl_is_held+0x26/0x40 [ 347.635838][T11923] ? ip6gre_tunnel_find+0x55c/0x600 [ 347.637048][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1492'. [ 347.641436][T11923] ip6gre_newlink+0x251/0x380 [ 347.655654][T11923] ? __pfx_ip6gre_newlink+0x10/0x10 [ 347.660980][T11923] rtnl_newlink_create+0x3a1/0xc30 [ 347.666126][T11923] ? __mutex_lock+0x380/0x10c0 [ 347.670977][T11923] ? __pfx_aa_get_newest_label+0x10/0x10 [ 347.676652][T11923] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 347.682395][T11923] ? __pfx___mutex_lock+0x10/0x10 [ 347.687459][T11923] ? nla_strscpy+0x102/0x180 [ 347.692214][T11923] ? full_name_hash+0x93/0xe0 [ 347.696938][T11923] rtnl_newlink+0x18b0/0x1fe0 [ 347.701751][T11923] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.706843][T11923] ? __lock_acquire+0xad5/0xd80 [ 347.711782][T11923] ? __lock_acquire+0xad5/0xd80 [ 347.716778][T11923] ? is_bpf_text_address+0x26/0x2a0 [ 347.722433][T11923] ? 0xffffffffa0000958 [ 347.726623][T11923] ? is_bpf_text_address+0x288/0x2a0 [ 347.731990][T11923] ? is_bpf_text_address+0x26/0x2a0 [ 347.737227][T11923] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 347.743491][T11923] ? kernel_text_address+0xa7/0xe0 [ 347.748649][T11923] ? __kernel_text_address+0xd/0x40 [ 347.753969][T11923] ? unwind_get_return_address+0x4d/0x90 [ 347.760088][T11923] ? aa_get_newest_label+0x101/0x6f0 [ 347.765418][T11923] ? __lock_acquire+0xad5/0xd80 [ 347.770384][T11923] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.775465][T11923] rtnetlink_rcv_msg+0x80f/0xd70 [ 347.780523][T11923] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 347.785681][T11923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.791240][T11923] ? __lock_acquire+0xad5/0xd80 [ 347.796153][T11923] netlink_rcv_skb+0x208/0x480 [ 347.801087][T11923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.806598][T11923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.811999][T11923] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.817339][T11923] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.822659][T11923] netlink_unicast+0x7f8/0x9a0 [ 347.827567][T11923] ? __pfx_netlink_unicast+0x10/0x10 [ 347.832961][T11923] ? skb_put+0x114/0x1f0 [ 347.837248][T11923] netlink_sendmsg+0x8c3/0xcd0 [ 347.842292][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.847700][T11923] ? aa_sock_msg_perm+0x91/0x160 [ 347.852917][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.858238][T11923] __sock_sendmsg+0x221/0x270 [ 347.863500][T11923] __sys_sendto+0x365/0x4c0 [ 347.868045][T11923] ? __pfx___sys_sendto+0x10/0x10 [ 347.873295][T11923] __x64_sys_sendto+0xde/0x100 [ 347.878094][T11923] do_syscall_64+0xf3/0x210 [ 347.882732][T11923] ? clear_bhb_loop+0x45/0xa0 [ 347.887447][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.893420][T11923] RIP: 0033:0x7f2d5d38fffc [ 347.897878][T11923] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 347.917620][T11923] RSP: 002b:00007ffd06d1e450 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 347.926116][T11923] RAX: ffffffffffffffda RBX: 00007f2d5e0e4620 RCX: 00007f2d5d38fffc [ 347.934244][T11923] RDX: 0000000000000044 RSI: 00007f2d5e0e4670 RDI: 0000000000000003 [ 347.942300][T11923] RBP: 0000000000000000 R08: 00007ffd06d1e4a4 R09: 000000000000000c [ 347.950361][T11923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 347.958363][T11923] R13: 0000000000000000 R14: 00007f2d5e0e4670 R15: 0000000000000000 [ 347.972791][T11923] [ 347.975868][T11923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 347.983326][T11923] CPU: 0 UID: 0 PID: 11923 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 347.995613][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.005706][T11923] Call Trace: [ 348.009008][T11923] [ 348.011959][T11923] dump_stack_lvl+0x241/0x360 [ 348.016677][T11923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.021910][T11923] ? __pfx__printk+0x10/0x10 [ 348.026538][T11923] ? vscnprintf+0x5d/0x90 [ 348.030886][T11923] panic+0x349/0x880 [ 348.034904][T11923] ? __warn+0x174/0x4d0 [ 348.039070][T11923] ? __pfx_panic+0x10/0x10 [ 348.043514][T11923] __warn+0x344/0x4d0 [ 348.047593][T11923] ? netdev_nl_dev_fill+0x6bc/0x860 [ 348.052812][T11923] report_bug+0x2b3/0x500 [ 348.057273][T11923] ? netdev_nl_dev_fill+0x6bc/0x860 [ 348.062486][T11923] ? netdev_nl_dev_fill+0x6bc/0x860 [ 348.067701][T11923] ? netdev_nl_dev_fill+0x6be/0x860 [ 348.073000][T11923] handle_bug+0x89/0x170 [ 348.077251][T11923] exc_invalid_op+0x1a/0x50 [ 348.081764][T11923] asm_exc_invalid_op+0x1a/0x20 [ 348.086619][T11923] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 348.092560][T11923] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 65 4e c4 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 57 4e c4 f7 90 0f 0b 90 42 80 3c 3b 00 [ 348.112608][T11923] RSP: 0000:ffffc9000416eac0 EFLAGS: 00010293 [ 348.118687][T11923] RAX: ffffffff89fe6c5b RBX: 0000000000000000 RCX: ffff888026593c00 [ 348.126933][T11923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.134918][T11923] RBP: ffffc9000416ebf0 R08: ffffffff89fe667c R09: 1ffff1100f5121dc [ 348.142897][T11923] R10: dffffc0000000000 R11: ffffed100f5121dd R12: ffff88805b770000 [ 348.150878][T11923] R13: ffff888079cd2640 R14: ffff888079cd2640 R15: ffffc9000416ec40 [ 348.158870][T11923] ? netdev_nl_dev_fill+0xdc/0x860 [ 348.163996][T11923] ? netdev_nl_dev_fill+0x6bb/0x860 [ 348.169223][T11923] ? __build_skb_around+0x247/0x3d0 [ 348.174522][T11923] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 348.180086][T11923] ? __alloc_skb+0x298/0x480 [ 348.184690][T11923] ? __pfx___alloc_skb+0x10/0x10 [ 348.189641][T11923] netdev_genl_dev_notify+0x1fb/0x450 [ 348.195026][T11923] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 348.200938][T11923] ? dev_map_notification+0x14d/0x9a0 [ 348.206325][T11923] ? ip_vs_dst_event+0x508/0x6a0 [ 348.211275][T11923] netdev_genl_netdevice_event+0x81/0xa0 [ 348.216915][T11923] notifier_call_chain+0x1a5/0x3f0 [ 348.222050][T11923] register_netdevice+0x16c0/0x1b80 [ 348.227277][T11923] ? __pfx_register_netdevice+0x10/0x10 [ 348.232833][T11923] ? dev_addr_mod+0xf4/0x430 [ 348.237431][T11923] ? __asan_memset+0x23/0x50 [ 348.242038][T11923] ip6gre_newlink_common+0x4b8/0x6d0 [ 348.247349][T11923] ? __pfx_ip6gre_newlink_common+0x10/0x10 [ 348.253196][T11923] ? lockdep_rtnl_is_held+0x26/0x40 [ 348.258416][T11923] ? ip6gre_tunnel_find+0x55c/0x600 [ 348.263648][T11923] ip6gre_newlink+0x251/0x380 [ 348.268340][T11923] ? __pfx_ip6gre_newlink+0x10/0x10 [ 348.273554][T11923] rtnl_newlink_create+0x3a1/0xc30 [ 348.278703][T11923] ? __mutex_lock+0x380/0x10c0 [ 348.283474][T11923] ? __pfx_aa_get_newest_label+0x10/0x10 [ 348.289121][T11923] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 348.294849][T11923] ? __pfx___mutex_lock+0x10/0x10 [ 348.299971][T11923] ? nla_strscpy+0x102/0x180 [ 348.304581][T11923] ? full_name_hash+0x93/0xe0 [ 348.309265][T11923] rtnl_newlink+0x18b0/0x1fe0 [ 348.313990][T11923] ? __pfx_rtnl_newlink+0x10/0x10 [ 348.319091][T11923] ? __lock_acquire+0xad5/0xd80 [ 348.324009][T11923] ? __lock_acquire+0xad5/0xd80 [ 348.328901][T11923] ? is_bpf_text_address+0x26/0x2a0 [ 348.334120][T11923] ? 0xffffffffa0000958 [ 348.338364][T11923] ? is_bpf_text_address+0x288/0x2a0 [ 348.343663][T11923] ? is_bpf_text_address+0x26/0x2a0 [ 348.348882][T11923] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 348.355053][T11923] ? kernel_text_address+0xa7/0xe0 [ 348.360175][T11923] ? __kernel_text_address+0xd/0x40 [ 348.365380][T11923] ? unwind_get_return_address+0x4d/0x90 [ 348.371027][T11923] ? aa_get_newest_label+0x101/0x6f0 [ 348.376334][T11923] ? __lock_acquire+0xad5/0xd80 [ 348.381221][T11923] ? __pfx_rtnl_newlink+0x10/0x10 [ 348.386262][T11923] rtnetlink_rcv_msg+0x80f/0xd70 [ 348.391214][T11923] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 348.396342][T11923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.401899][T11923] ? __lock_acquire+0xad5/0xd80 [ 348.406776][T11923] netlink_rcv_skb+0x208/0x480 [ 348.411581][T11923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.417069][T11923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.422386][T11923] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.427624][T11923] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.432841][T11923] netlink_unicast+0x7f8/0x9a0 [ 348.437628][T11923] ? __pfx_netlink_unicast+0x10/0x10 [ 348.442929][T11923] ? skb_put+0x114/0x1f0 [ 348.447182][T11923] netlink_sendmsg+0x8c3/0xcd0 [ 348.451969][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.457273][T11923] ? aa_sock_msg_perm+0x91/0x160 [ 348.462225][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.467523][T11923] __sock_sendmsg+0x221/0x270 [ 348.472395][T11923] __sys_sendto+0x365/0x4c0 [ 348.476916][T11923] ? __pfx___sys_sendto+0x10/0x10 [ 348.481987][T11923] __x64_sys_sendto+0xde/0x100 [ 348.486763][T11923] do_syscall_64+0xf3/0x210 [ 348.491283][T11923] ? clear_bhb_loop+0x45/0xa0 [ 348.496110][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.502037][T11923] RIP: 0033:0x7f2d5d38fffc [ 348.506459][T11923] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 348.526208][T11923] RSP: 002b:00007ffd06d1e450 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 348.534654][T11923] RAX: ffffffffffffffda RBX: 00007f2d5e0e4620 RCX: 00007f2d5d38fffc [ 348.542673][T11923] RDX: 0000000000000044 RSI: 00007f2d5e0e4670 RDI: 0000000000000003 [ 348.550677][T11923] RBP: 0000000000000000 R08: 00007ffd06d1e4a4 R09: 000000000000000c [ 348.558653][T11923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 348.566628][T11923] R13: 0000000000000000 R14: 00007f2d5e0e4670 R15: 0000000000000000 [ 348.574631][T11923] [ 348.577942][T11923] Kernel Offset: disabled [ 348.582301][T11923] Rebooting in 86400 seconds..