last executing test programs: 3.857746236s ago: executing program 3 (id=819): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000700)="ac87f28a0235c25272cd7f0756e1aab4be6c82b7675ff22dd841bb267aea869e5b7e65c13718b842e5f3362de9c5809f33891e0a4411f5c9f15fa0f8fce29640f5682c733c8a235671d1885021760727f7e7285b300a110b9041488a682df550230bc2a858af87faa40177899b85006dc12109c537b618eae25dfc8dc0bf8d0c583499d5bfcfeeb16bf7d7a4e76229927e1433b7a8c028ec4c7d20464ba12032246d5ed790abaffa783084350a642628a89a19361c38", 0xb6}, {&(0x7f0000000800)="027cf23eaf23672c3251d58a5e24195ccabcd8b24432802fef72031cc894945618ff3503241e827336ffc270fa2e72751dfbededa625f483ee9a70dde1ceae7ba0e9775ec205e484c3a9fe85c005c50a4116bf7e6c2ae4a17107c03377b5db30cf7f9d1cb18fdce685c04fc042fa35d08b46abd14a79e0637aa56853ff120f899ef93a00a125dc9ab616c4c7ea1dc43308983a4498b3d2c0d737f144a8929e7a0b924c039ba42177b8b6d4a1535b8045a711a838fd9061219b4560ab8d753bd9784c1d967c607bbda0464f3ed27bc7f625ec8e1cb3b2faceed3bd6e2fd453b", 0xdf}, {&(0x7f0000000100)}], 0x3, 0x0, 0x0, 0x20000000}, 0x24000015) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB='? '], 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 3.531940745s ago: executing program 3 (id=821): socket(0x10, 0x3, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x4f) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x890}, 0x4004c11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x44, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x40}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5c, 0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r2 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000340)="4857e8", 0x3}, {&(0x7f0000000040)="ded37260a6c254790980df15f32e5a9cd5cc0d", 0x13}, {&(0x7f0000000380)="a0da2dfff18ce545cdfe886a205cbe8808effbdfee75f3e20df6cd0c8a69c1da8e8c0548f9ba13e0988f6e5127e0791497e15bce848f82b0a7060ea5bac6a12e62380204866bec481b2250a934776669918f963b67f51125261787c04fd842c5702ab9ba584622efed3ba7a0f6fb525d4906a60eeb9e8f9a522e59f469984690c5cd2e5872ee4cbafd86c932ef7f4e86f5dafd4b5bf358d16736a52dbe1b5841665960999b75d6e7b1532245106514eb131b871e418a8bf20f90cd1fed20d115a4a527dbfcde3f253a75", 0xca}, {&(0x7f00000001c0)="defc9c9d59ba61475acc8741a2409d520a577659be9b30e84891e3747a90323a9f9f3d6fada6bd75ee07895472a844faa709006a16f0c3af", 0x38}, {&(0x7f0000000540)="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", 0x4b1}], 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x10, 0x8}, {}, {0xa, 0x8}}}, 0x24}}, 0x4c800) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000000a060500000000000000000073797a30000000000500010007000087040007000000000000000000", @ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x4008814}, 0x44080) openat$cgroup_procs(r7, 0x0, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.173484228s ago: executing program 3 (id=824): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304000000000000f0ff00000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701001c00128009000100626f6e64000000000c00028008000700", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000044) 2.916678025s ago: executing program 3 (id=825): r0 = socket$kcm(0xa, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'ipvlan1\x00', @random="020000001300"}) (async) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000040)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r2}) 2.773126746s ago: executing program 2 (id=826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) r2 = socket(0x1d, 0x2, 0x6) (async, rerun: 32) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bind$can_j1939(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) (async) write$bt_hci(r5, &(0x7f0000000200)=ANY=[], 0x6) (async, rerun: 64) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.313889181s ago: executing program 4 (id=830): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x500}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000017000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000050005000000000005000600070000160800030001000000"], 0x2c}}, 0x4008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) r10 = accept4$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f00000001c0)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e20, 0x10000, @remote, 0x6}}, 0x0, 0x0, 0x5, 0x0, "2ec16ce3b82a470906dcf95a5647fca2faf44c12b466e56bf119da52888a93b8b1e38f7f17746d145ec0e01824b72ab902ee1b9c415b2133beba40dcc378c925848af68e5f069f27633a62588d4ef58d"}, 0xd8) socket$inet6(0xa, 0x5, 0x0) 2.259629862s ago: executing program 2 (id=831): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=r0, @ANYRES32=r1, @ANYRES8=r0, @ANYRES32, @ANYRES64=r1], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x48081) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x900, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.10974731s ago: executing program 4 (id=833): syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[], 0xb5) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7ff, 0x6e}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x48}}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.8982779s ago: executing program 2 (id=835): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304000000000000f3ff00000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701001c00128009000100626f6e64000000000c00028008000700", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000044) 1.898061387s ago: executing program 3 (id=836): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f0000008f00)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000002980)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000001680)=""/152, 0x98}, {&(0x7f0000001740)=""/184, 0xb8}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/247, 0xf7}, {&(0x7f0000002900)=""/99, 0x63}], 0x7, &(0x7f0000002a00)=""/203, 0xcb}, 0x2}, {{&(0x7f0000002b00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000002b80)=""/94, 0x5e}, {&(0x7f0000002c00)=""/217, 0xd9}, {&(0x7f0000002d00)=""/8, 0x8}, {&(0x7f0000009140)=""/222, 0xde}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/216, 0xd8}, {&(0x7f0000003f40)=""/81, 0x51}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/235, 0xeb}], 0x9, &(0x7f0000005180)=""/90, 0x5a}, 0xffff}], 0x2, 0x45833af92e4b39ff, 0x0) 1.782123588s ago: executing program 1 (id=837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000008c0)={0xa, 0x0, 0x44, @empty, 0x7ff}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000007c0)=""/204, 0xcc}], 0x1}}], 0x1, 0x10000, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0xf, &(0x7f00000007c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r3}, {r4, 0xc000}, {r1, 0x4100}, {r1, 0x180}], 0x4, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000700e6ff9400000000000000"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x300000, @void, @value}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'nicvf0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000002000000000000000000000000000000000000000866806d98a811612b8c1452c6c26e24f2081b1c2fb1b25724eeedeca183f419d5bc41cd0b71a3efd5571f16c10808a275967bf535de1caa6caa0ff55796c3b64cfd938f3e67d936fd7aac841576d2ea66757c9f0f7d639b20d26b22e73b7e4f355dfc330636b774f49a8ec21b6a8a000420cb6c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18005bdc3e57f872992e7267781f00996a2370b900000000000084000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008520000001000000180000000000000000000000018000009500000000000000"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$RDS_FREE_MR(r8, 0x114, 0x3, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000003200090000e20400b094acba1ca6eeb6af215acbfb5094a6b183a7602bd4f24d894de2e7fa664184f74e334603a2511fd604330e7daf1f9b32b7012e208482dbb6e51bec1f0e4f542072ecd77a6c83c46d172983f5dc57810a2194d966ddec57161807f9fca4c4"], 0x14}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000400)=@assoc_value, &(0x7f0000000900)=0x8) r10 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r10, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) connect$netlink(r10, &(0x7f0000000000)=@unspec, 0xc) 1.754501019s ago: executing program 0 (id=838): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x1000000}}}}}}}, 0x0) 1.679773589s ago: executing program 0 (id=839): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', 0x0, 0x2000}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x0, 0x3, 0x0, &(0x7f0000001240)="a28f21", 0x0, 0x7, 0x0, 0x0, 0x54, &(0x7f00000012c0), &(0x7f0000001300)="3235bbaf19b98db0807722f4c0adff8b13f2357a54d0186158aaa30191de8a5de67a470fe5577c35728cc137b17cd793441d6f68c02a25c0ef013469c69ffeb9395e29a40e6cea63d911228956134ce00b13b545", 0x1}, 0x50) r1 = socket(0x2a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x8957) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r6, @ANYBLOB="000126bd7000fddbdf250f000000080003", @ANYRES32=0x0, @ANYBLOB="0c00990004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4364902a12139c5c}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x1b, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4008040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x1d4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xbb, 0x8, 0x9, 0x0, 0x8, 0x9, 0x2}}, {0x8, 0x2, [0x4080, 0xa]}}, {{0x1c, 0x1, {0x9, 0x0, 0x7, 0x2, 0x1, 0x4, 0x1f, 0x4}}, {0xc, 0x2, [0xfff4, 0x7fff, 0x5, 0x9]}}, {{0x1c, 0x1, {0x4, 0x1, 0x4, 0x1, 0x2, 0x8, 0x2, 0x3}}, {0xa, 0x2, [0xc, 0x3, 0x4]}}, {{0x1c, 0x1, {0x7, 0x8, 0xce4, 0x1000, 0x1, 0x56, 0x3, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x8f, 0xb, 0x0, 0x4, 0x1, 0x4, 0x10000, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x2, 0x1, 0x8, 0x4, 0x1, 0x6, 0xfffffff9, 0x4}}, {0xc, 0x2, [0x9, 0x2, 0x401, 0x65]}}, {{0x1c, 0x1, {0x8, 0x5, 0x7, 0xd, 0x0, 0xbdde, 0x40, 0x5}}, {0xe, 0x2, [0x3ff, 0x1, 0x4, 0x4, 0x4]}}, {{0x1c, 0x1, {0x3f, 0x10, 0x1ff, 0x1, 0x1, 0x3, 0x800, 0x4}}, {0xc, 0x2, [0x80, 0x7ff6, 0x4, 0x101]}}, {{0x1c, 0x1, {0x9, 0x0, 0x1c4, 0x20000002, 0x2, 0xf82, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x21, 0x69, 0xe, 0x0, 0x3, 0x800, 0x5}}, {0xe, 0x2, [0x400, 0x6, 0x9, 0x800, 0xc4f]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xe, 0x3, 0x3, 0x1, 0xfff, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x1]}}]}]}, 0x1d4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r8, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xc, 0xe}}]}}]}, 0x3c}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.530343621s ago: executing program 2 (id=840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c290000"], 0x154}}, 0x0) 1.488095849s ago: executing program 1 (id=841): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2a, 0xb, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r5, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="620ac4ff00e44a55571298563c8dc1d30000b87110b700a3a5f874c660281600000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630123000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x26, 0x800, 0x6, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085200000010000009500d80000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="0e936a", 0x3}}, 0x20008040) socketpair(0xf, 0x0, 0x0, &(0x7f00000000c0)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 1.436774774s ago: executing program 4 (id=842): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000200004000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0xe, 0x810, 0xffffffffffffffff, 0xa6891000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004cc0)=[@cred={{0x1c}}], 0x20}, 0x0) 1.34418979s ago: executing program 3 (id=843): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x40020200) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8030, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) socket(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x20000400) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x3e, {0x2, 0x0, @broadcast}, 'veth1_to_bond\x00'}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000100)={&(0x7f00000001c0)=@nl=@unspec, 0x80, 0x0}, 0x20) pipe(0x0) 1.286296796s ago: executing program 4 (id=844): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}}, 0x0) (async) r0 = socket(0x15, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x8, 0x7, 0x4}) openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 1.185361362s ago: executing program 2 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000508000140000000040900010073797a30000000000900020073797a32"], 0x78}}, 0x200080c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), r2) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nfc\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r4, 0x701, 0x0, 0x0, {0x41}}, 0x14}}, 0x0) 1.175430328s ago: executing program 4 (id=846): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=r0, @ANYRES32=r1, @ANYRES8=r0, @ANYRES32, @ANYRES64=r1], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x48081) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0xa00, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.051174819s ago: executing program 4 (id=847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRES16=r0], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000002000800610000000000850020001c000080"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX=0x0, @ANYRESDEC=r5, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000004c0)=""/157) sendmmsg$inet(r8, &(0x7f0000002dc0)=[{{&(0x7f00000027c0)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000002b40)=ANY=[], 0x40}}, {{&(0x7f0000002bc0)={0x2, 0x4e22, @empty}, 0x10, 0x0}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000300)={0x0, 0x5}, 0x8) close(r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988cafbe863cac5058031c97d70ccd0f76db9", 0x1e}, {&(0x7f0000000100)="e3f4e01bb64d88aff4c99218e5450df5392e79789c3968b1c72fc30961", 0x1d}], 0x2) 994.231639ms ago: executing program 1 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@delneigh={0x30, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0x29, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000002000010000000000000000000a008000000000030000000014000200fc02"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 886.705737ms ago: executing program 2 (id=849): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b04"], 0x20}, 0x200008f6) socket$nl_netfilter(0x10, 0x3, 0xc) 843.602147ms ago: executing program 1 (id=850): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r2}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = epoll_create(0x3ff) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000080005004bda0000060010004e21000006001100000000000a000100aaaaaaaaaa000000"], 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', r6, 0x2f, 0x29, 0x9, 0x8, 0x4c, @remote, @private2, 0x700, 0x0, 0x2cb1, 0x81}}) 702.284114ms ago: executing program 0 (id=851): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0xffffff00}, @mss={0x2, 0x7fff}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0xfffe, 0x4}, @mss={0x2, 0x7}, @mss={0x2, 0x5}], 0x20000000000001d5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600000000010500040001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 592.816466ms ago: executing program 1 (id=852): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = epoll_create1(0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x10000000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x15c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfd7f, 0x6410}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e21}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x64}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x3}, @IFLA_MACSEC_ES={0x5, 0xa, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_AF_SPEC={0xf8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0xd, 0x0, 0x0, 0x4}, {0x8, 0x2, 0x0, 0x0, 0x7}, {0x8, 0x7, 0x0, 0x0, 0x7fffffff}, {0x8, 0x5, 0x0, 0x0, 0x9}, {0x8, 0x12, 0x0, 0x0, 0x7}, {0x8, 0x0, 0x0, 0x0, 0x200}, {0x8, 0x15, 0x0, 0x0, 0x5}]}}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8, 0x1c, 0x0, 0x0, 0x4}, {0x8, 0x18, 0x0, 0x0, 0x9}, {0x8, 0x10, 0x0, 0x0, 0x2}, {0x8, 0x1f, 0x0, 0x0, 0xffff}, {0x8, 0x2, 0x0, 0x0, 0x1}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xc}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}]}, 0x15c}}, 0x40) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r8, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair(0x17, 0x800, 0x6, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) connect$inet6(r9, 0x0, 0x0) 492.960915ms ago: executing program 0 (id=853): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f0000008f00)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000002980)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000001680)=""/152, 0x98}, {&(0x7f0000001740)=""/184, 0xb8}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/247, 0xf7}, {&(0x7f0000002900)=""/99, 0x63}], 0x7, &(0x7f0000002a00)=""/203, 0xcb}, 0x2}, {{&(0x7f0000002b00)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000002b80)=""/94, 0x5e}, {&(0x7f0000002c00)=""/217, 0xd9}, {&(0x7f0000002d00)=""/8, 0x8}, {&(0x7f0000009140)=""/222, 0xde}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/216, 0xd8}, {&(0x7f0000003f40)=""/81, 0x51}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/235, 0xeb}], 0x9, &(0x7f0000005180)=""/90, 0x5a}, 0xffff}], 0x2, 0x45833af92e4b39ff, 0x0) 418.085572ms ago: executing program 1 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000400)=ANY=[@ANYBLOB="000100001600010404000000fcfffffffc0100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000c73a8e77503071ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd9d8fea000000000000000000000000000000000000000000000000000000000004000000000600000000000000000100ffffffffffffffff00000000000000000000000000000000e58dbfe62fd18c3c7533000000000000000000000000000008000000ffffffff08000c00ff070000"], 0x100}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c40)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=@newlink={0x54, 0x10, 0x503, 0x1000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x23211}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}]}}}]}, 0x54}}, 0x44010) socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r5, &(0x7f0000000080)={@val={0x2f3a, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7}}}}, 0x36) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x700, 0x7, 0x7f, 0x7fffffff, {{0x6, 0x4, 0x1, 0x35, 0x18, 0x68, 0x0, 0xf8, 0x2f, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}}}}) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002e0001002abd70000000000008000000", @ANYRES32=r8, @ANYBLOB="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"], 0x24}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in=@local, 0x4e22, 0x0, 0x4e20, 0x2485, 0xa, 0xa0, 0x0, 0x75, r6, r8}, {0x6, 0x1ba, 0x810, 0x8, 0x1, 0x9, 0xb164, 0x2}, {0x2, 0x9, 0x9, 0xb}, 0xff, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x4d3, 0x3c}, 0x2, @in6=@mcast1, 0x3507, 0x0, 0x0, 0x20, 0x8, 0x5, 0x100}}, 0xe8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c0001800900010068617368000000001c000280080002400000000f0800044000008001f5ff064000000001140000001100010000000000000000000000000a"], 0x84}}, 0x0) 123.378175ms ago: executing program 0 (id=855): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="540100001000132700000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0004006a0000000000000048000200656362286369706865725f6e756c6c290000"], 0x154}}, 0x0) 0s ago: executing program 0 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r2, &(0x7f0000000700), 0x0, 0x15, 0x0, 0x0) (async) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/110, 0x6e, 0x40002001, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x78, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x8) (async) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@remote, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xa00, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86fd, 0x8}}}}}}, 0x36) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 71.078972][ T5818] cgroup: Unknown subsys name 'net' [ 71.230558][ T5818] cgroup: Unknown subsys name 'cpuset' [ 71.239022][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.602347][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.608931][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.827285][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.234101][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.255764][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.274725][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.283818][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.292652][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.301247][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.318069][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.334323][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.337924][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.353922][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.357117][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.363943][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.375962][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.376436][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.383832][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.398725][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.399597][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.408982][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.415267][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.420800][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.436204][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.440959][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.450854][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.451933][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.459082][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.472903][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.475166][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.487922][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.495955][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.503614][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.007856][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 76.018626][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 76.069335][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 76.080280][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 76.174909][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 76.260583][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.267907][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.275366][ T5840] bridge_slave_0: entered allmulticast mode [ 76.286870][ T5840] bridge_slave_0: entered promiscuous mode [ 76.335714][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.343041][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.350347][ T5840] bridge_slave_1: entered allmulticast mode [ 76.358078][ T5840] bridge_slave_1: entered promiscuous mode [ 76.386696][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.393829][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.401822][ T5828] bridge_slave_0: entered allmulticast mode [ 76.409202][ T5828] bridge_slave_0: entered promiscuous mode [ 76.418093][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.425196][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.432557][ T5828] bridge_slave_1: entered allmulticast mode [ 76.439711][ T5828] bridge_slave_1: entered promiscuous mode [ 76.488075][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.495197][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.502882][ T5834] bridge_slave_0: entered allmulticast mode [ 76.510244][ T5834] bridge_slave_0: entered promiscuous mode [ 76.527303][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.534426][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.541878][ T5830] bridge_slave_0: entered allmulticast mode [ 76.549548][ T5830] bridge_slave_0: entered promiscuous mode [ 76.571982][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.579521][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.586954][ T5834] bridge_slave_1: entered allmulticast mode [ 76.593716][ T5834] bridge_slave_1: entered promiscuous mode [ 76.621718][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.631388][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.639380][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.647486][ T5830] bridge_slave_1: entered allmulticast mode [ 76.654215][ T5830] bridge_slave_1: entered promiscuous mode [ 76.663224][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.675253][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.709394][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.758932][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.770470][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.792024][ T5828] team0: Port device team_slave_0 added [ 76.838060][ T5828] team0: Port device team_slave_1 added [ 76.846254][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.862223][ T5840] team0: Port device team_slave_0 added [ 76.871162][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.883535][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.891117][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.898968][ T5833] bridge_slave_0: entered allmulticast mode [ 76.905763][ T5833] bridge_slave_0: entered promiscuous mode [ 76.932423][ T5840] team0: Port device team_slave_1 added [ 76.968877][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.976017][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.987900][ T5833] bridge_slave_1: entered allmulticast mode [ 76.995107][ T5833] bridge_slave_1: entered promiscuous mode [ 77.013815][ T5834] team0: Port device team_slave_0 added [ 77.022072][ T5834] team0: Port device team_slave_1 added [ 77.038047][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.045033][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.071593][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.095894][ T5830] team0: Port device team_slave_0 added [ 77.104123][ T5830] team0: Port device team_slave_1 added [ 77.142477][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.150448][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.176800][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.207525][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.217145][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.224121][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.250652][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.268570][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.275603][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.302599][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.323833][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.333540][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.340948][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.367267][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.386036][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.393700][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.420405][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.432179][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.439550][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.465628][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.511892][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.518954][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.528289][ T5832] Bluetooth: hci3: command tx timeout [ 77.550715][ T54] Bluetooth: hci4: command tx timeout [ 77.550738][ T5839] Bluetooth: hci1: command tx timeout [ 77.551168][ T5839] Bluetooth: hci0: command tx timeout [ 77.557817][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.597647][ T5839] Bluetooth: hci2: command tx timeout [ 77.618337][ T5828] hsr_slave_0: entered promiscuous mode [ 77.624733][ T5828] hsr_slave_1: entered promiscuous mode [ 77.635601][ T5834] hsr_slave_0: entered promiscuous mode [ 77.642653][ T5834] hsr_slave_1: entered promiscuous mode [ 77.649321][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.657227][ T5834] Cannot create hsr debugfs directory [ 77.681915][ T5833] team0: Port device team_slave_0 added [ 77.723039][ T5833] team0: Port device team_slave_1 added [ 77.741401][ T5840] hsr_slave_0: entered promiscuous mode [ 77.748498][ T5840] hsr_slave_1: entered promiscuous mode [ 77.754527][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.763055][ T5840] Cannot create hsr debugfs directory [ 77.775871][ T5830] hsr_slave_0: entered promiscuous mode [ 77.782286][ T5830] hsr_slave_1: entered promiscuous mode [ 77.791015][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.798827][ T5830] Cannot create hsr debugfs directory [ 77.882347][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.889533][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.915551][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.928655][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.935627][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.961644][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.119868][ T5833] hsr_slave_0: entered promiscuous mode [ 78.130244][ T5833] hsr_slave_1: entered promiscuous mode [ 78.136344][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.144278][ T5833] Cannot create hsr debugfs directory [ 78.355056][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.367659][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.384399][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.413234][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.498579][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.509318][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.535096][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.545642][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.587435][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.597807][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.620328][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.633103][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.678920][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.735975][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.743301][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.754754][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.789231][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.802268][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.815796][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.823115][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.838652][ T3471] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.845879][ T3471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.934250][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.944667][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.958747][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.981404][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.019372][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.113487][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.153208][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.194459][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.201647][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.214327][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.221497][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.280497][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.348055][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.355203][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.373863][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.391383][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.401029][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.408181][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.460098][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.486136][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.520269][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.527442][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.545052][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.552237][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.591586][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.601661][ T5839] Bluetooth: hci0: command tx timeout [ 79.607395][ T5836] Bluetooth: hci3: command tx timeout [ 79.607550][ T5839] Bluetooth: hci4: command tx timeout [ 79.612808][ T5836] Bluetooth: hci1: command tx timeout [ 79.641820][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.648997][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.661808][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.668978][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.677433][ T5839] Bluetooth: hci2: command tx timeout [ 79.733733][ T5828] veth0_vlan: entered promiscuous mode [ 79.749265][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.780274][ T5828] veth1_vlan: entered promiscuous mode [ 79.801381][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.885328][ T5828] veth0_macvtap: entered promiscuous mode [ 79.958760][ T5828] veth1_macvtap: entered promiscuous mode [ 80.044091][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.114774][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.140958][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.151204][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.160514][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.169945][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.183365][ T5834] veth0_vlan: entered promiscuous mode [ 80.235341][ T5834] veth1_vlan: entered promiscuous mode [ 80.277378][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.302996][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.359217][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.371233][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.385435][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.465106][ T5834] veth0_macvtap: entered promiscuous mode [ 80.475896][ T5834] veth1_macvtap: entered promiscuous mode [ 80.494471][ T3514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.512524][ T3514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.535807][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.556112][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.578582][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.613512][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.633210][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.650032][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.674597][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.723445][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.746968][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.755746][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.782854][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.795395][ T5840] veth0_vlan: entered promiscuous mode [ 80.819769][ T5830] veth0_vlan: entered promiscuous mode [ 80.820247][ T5913] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.843472][ T5840] veth1_vlan: entered promiscuous mode [ 80.862484][ T5830] veth1_vlan: entered promiscuous mode [ 80.927469][ T5914] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.949726][ T5833] veth0_vlan: entered promiscuous mode [ 80.965865][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.971462][ T5840] veth0_macvtap: entered promiscuous mode [ 80.985807][ T5840] veth1_macvtap: entered promiscuous mode [ 81.038660][ T5833] veth1_vlan: entered promiscuous mode [ 81.064793][ T5830] veth0_macvtap: entered promiscuous mode [ 81.076077][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.087612][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.097786][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.109825][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.124045][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.137615][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.153228][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.164192][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.179948][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.195575][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.229025][ T5830] veth1_macvtap: entered promiscuous mode [ 81.245260][ T3471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.254389][ T3471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.268183][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.287745][ T5916] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20002 [ 81.288943][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.307935][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.317741][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.368588][ T5833] veth0_macvtap: entered promiscuous mode [ 81.391934][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.399977][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.408270][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.423417][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.433484][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.444208][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.454142][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.464679][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.475797][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.485503][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.496343][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.506437][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.517098][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.527769][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.540199][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.551199][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.570987][ T5833] veth1_macvtap: entered promiscuous mode [ 81.582432][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.591581][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.600835][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.609889][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.643185][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.654200][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.664238][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.676385][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.686989][ T5839] Bluetooth: hci4: command tx timeout [ 81.687008][ T5832] Bluetooth: hci1: command tx timeout [ 81.692408][ T5839] Bluetooth: hci3: command tx timeout [ 81.698024][ T5836] Bluetooth: hci0: command tx timeout [ 81.710906][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.721453][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.732236][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.742794][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.754180][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.761681][ T5839] Bluetooth: hci2: command tx timeout [ 81.789941][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.801091][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.811081][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.821661][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.832971][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.843976][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.853971][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.864553][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.875621][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.887106][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.895838][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.904711][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.913593][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.042194][ T5922] Bluetooth: MGMT ver 1.23 [ 82.088721][ T5922] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 82.119223][ T5922] netlink: zone id is out of range [ 82.127772][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.135446][ T5922] netlink: zone id is out of range [ 82.135617][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.153661][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.156346][ T5922] netlink: del zone limit has 8 unknown bytes [ 82.161812][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.236827][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.257082][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.282069][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.301354][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.335190][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.370790][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.452267][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.478671][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.503399][ T5926] Zero length message leads to an empty skb [ 83.028896][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 83.167759][ T5949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.274953][ T5949] netlink: 156 bytes leftover after parsing attributes in process `syz.4.13'. [ 83.444686][ T5955] bridge_slave_0: left allmulticast mode [ 83.456955][ T5955] bridge_slave_0: left promiscuous mode [ 83.481913][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.498717][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 83.524320][ T5955] bridge_slave_1: left allmulticast mode [ 83.542315][ T5955] bridge_slave_1: left promiscuous mode [ 83.554016][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.574586][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 83.584257][ T5955] bond0: (slave bond_slave_0): Releasing backup interface [ 83.610682][ T5955] bond0: (slave bond_slave_1): Releasing backup interface [ 83.653180][ T5955] team0: Port device team_slave_0 removed [ 83.675980][ T5955] team0: Port device team_slave_1 removed [ 83.692516][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.701697][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.722037][ T5955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.734929][ T5955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.757869][ T5839] Bluetooth: hci1: command tx timeout [ 83.759811][ T5832] Bluetooth: hci0: command tx timeout [ 83.764112][ T5839] Bluetooth: hci4: command tx timeout [ 83.769654][ T5836] Bluetooth: hci3: command tx timeout [ 83.838345][ T5832] Bluetooth: hci2: command tx timeout [ 83.915160][ T5951] warning: `syz.0.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.357080][ T5971] dccp_close: ABORT with 556 bytes unread [ 84.515521][ T5978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.186249][ T6003] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 85.298233][ T6003] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.404560][ T6009] netlink: 'syz.1.28': attribute type 29 has an invalid length. [ 85.453953][ T6011] netlink: 'syz.1.28': attribute type 29 has an invalid length. [ 85.473200][ T5999] netlink: 500 bytes leftover after parsing attributes in process `syz.1.28'. [ 85.518603][ T5999] unsupported nla_type 40 [ 85.674036][ T6030] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 85.710204][ T6030] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 86.680635][ T6086] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.795613][ T6083] dccp_close: ABORT with 516 bytes unread [ 86.983811][ T46] cfg80211: failed to load regulatory.db [ 87.011030][ T6086] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.097004][ T6099] netlink: 40 bytes leftover after parsing attributes in process `syz.3.43'. [ 87.343571][ T6086] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.411608][ T6102] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 87.456737][ T6102] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 87.626214][ T6086] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.637164][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.47'. [ 87.924986][ T6117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.48'. [ 87.976447][ T6086] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.038116][ T6086] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.134535][ T6086] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.209005][ T6086] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.508136][ T6126] syz.0.51 (6126) used obsolete PPPIOCDETACH ioctl [ 89.038613][ T6130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.188998][ T6130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.331284][ T6130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.501055][ T6130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.724110][ T6130] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.806040][ T6139] infiniband syz1: set active [ 89.816628][ T6139] infiniband syz1: added team0 [ 89.844528][ T6130] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.110127][ T6139] RDS/IB: syz1: added [ 90.114912][ T6139] smc: adding ib device syz1 with port count 1 [ 90.137438][ T6139] smc: ib device syz1 port 1 has pnetid [ 90.216168][ T6130] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.254767][ T6130] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.518905][ T6151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.006158][ T6199] veth0_to_team: entered promiscuous mode [ 92.012512][ T6199] veth0_to_team: entered allmulticast mode [ 92.287305][ T6203] netlink: 64 bytes leftover after parsing attributes in process `syz.3.71'. [ 92.500541][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.69'. [ 92.678046][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 92.935404][ T6215] netlink: 'syz.3.74': attribute type 10 has an invalid length. [ 93.045119][ T6215] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.375177][ T6227] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 93.720796][ T6225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.750157][ T6225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.767413][ T6225] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 93.780305][ T6225] bond0 (unregistering): Released all slaves [ 93.802787][ T6227] team0: Device ipvlan1 failed to register rx_handler [ 94.517100][ T6252] netlink: 64 bytes leftover after parsing attributes in process `syz.4.83'. [ 94.845249][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 94.900603][ T6259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 94.953567][ T6259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 95.382859][ T6266] netlink: 'syz.3.86': attribute type 39 has an invalid length. [ 95.699753][ T6278] netlink: 276 bytes leftover after parsing attributes in process `syz.3.91'. [ 95.735744][ T6281] netlink: 'syz.2.90': attribute type 12 has an invalid length. [ 95.923305][ T6286] netlink: 168 bytes leftover after parsing attributes in process `syz.4.92'. [ 96.266261][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.96'. [ 96.407088][ T6308] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 96.749022][ T6314] dccp_close: ABORT with 548 bytes unread [ 96.793379][ T6321] bond0: (slave wlan1): Releasing backup interface [ 97.201983][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 97.290124][ T6335] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20001 [ 97.444184][ T6349] netlink: 'syz.1.105': attribute type 10 has an invalid length. [ 97.534172][ T6349] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.663880][ T6360] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 97.695631][ T6356] veth1_macvtap: left promiscuous mode [ 97.703531][ T6356] macsec0: entered allmulticast mode [ 97.802204][ T6356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.106'. [ 97.901785][ T6356] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 97.919150][ T6371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.980584][ T6371] netlink: 156 bytes leftover after parsing attributes in process `syz.3.111'. [ 98.148969][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 98.302241][ T6380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.314566][ T6380] netlink: 'syz.2.114': attribute type 1 has an invalid length. [ 98.617518][ T6400] netlink: 'syz.1.117': attribute type 11 has an invalid length. [ 98.875510][ T6407] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 98.903874][ T6407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.328059][ T6419] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 99.371915][ T6419] batman_adv: batadv0: Adding interface: team0 [ 99.385935][ T6419] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.417095][ T6419] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 99.475483][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.121'. [ 99.506849][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 99.860105][ T6448] rdma_rxe: rxe_newlink: failed to add team0 [ 99.901787][ T6450] netlink: 32 bytes leftover after parsing attributes in process `syz.4.128'. [ 99.994117][ T6450] tipc: Started in network mode [ 100.006696][ T6450] tipc: Node identity be0507e15765, cluster identity 4711 [ 100.024586][ T6450] tipc: Enabled bearer , priority 0 [ 100.117217][ T6461] sctp: [Deprecated]: syz.4.128 (pid 6461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.117217][ T6461] Use struct sctp_sack_info instead [ 100.273396][ T6468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.299977][ T6464] syzkaller0: entered promiscuous mode [ 100.315816][ T6464] syzkaller0: entered allmulticast mode [ 100.332566][ T6464] tipc: Resetting bearer [ 100.355540][ T6449] tipc: Resetting bearer [ 100.451071][ T6472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 100.577039][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 100.941425][ T6495] ax25_connect(): syz.0.136 uses autobind, please contact jreuter@yaina.de [ 101.096741][ T25] tipc: Node number set to 3915384801 [ 102.300631][ T6449] tipc: Disabling bearer [ 102.315813][ T6472] caif0: Master is either lo or non-ether device [ 103.253676][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 103.292053][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 103.307638][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.150'. [ 103.614896][ T6565] rdma_rxe: rxe_newlink: failed to add team0 [ 104.312934][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 104.344402][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 104.513494][ T6616] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.161'. [ 105.369869][ T6656] rdma_rxe: rxe_newlink: failed to add team0 [ 105.720033][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.170'. [ 105.975444][ T6666] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 106.028138][ T6666] netlink: 224 bytes leftover after parsing attributes in process `syz.2.172'. [ 106.393803][ T6689] netlink: 64 bytes leftover after parsing attributes in process `syz.3.177'. [ 107.357580][ T6728] xt_connbytes: Forcing CT accounting to be enabled [ 107.855120][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 108.281247][ T6763] netlink: 'syz.3.196': attribute type 12 has an invalid length. [ 108.323348][ T6763] netlink: 'syz.3.196': attribute type 13 has an invalid length. [ 108.337958][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 108.377639][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 108.423131][ T6768] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 108.606329][ T6763] gretap0: refused to change device tx_queue_len [ 108.624168][ T6763] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.206088][ T6789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.239957][ T6786] netlink: 64 bytes leftover after parsing attributes in process `syz.2.201'. [ 109.256042][ T6789] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 109.434602][ T6789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 109.499768][ T6792] netlink: 892 bytes leftover after parsing attributes in process `syz.4.204'. [ 109.541156][ T6789] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.566941][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 109.584363][ T6794] trusted_key: syz.4.204 sent an empty control message without MSG_MORE. [ 109.688494][ T6789] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.897671][ T6789] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.928727][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 109.993336][ T6789] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.133612][ T6789] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.174775][ T6789] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.291677][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.210'. [ 110.315543][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 110.334188][ T6789] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.350174][ T6789] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.362216][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 110.371582][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 110.530504][ T942] hid-generic 0005:0C45:0058.0001: item fetching failed at offset 0/1 [ 110.551585][ T942] hid-generic 0005:0C45:0058.0001: probe with driver hid-generic failed with error -22 [ 110.578929][ T6843] netlink: 'syz.4.213': attribute type 2 has an invalid length. [ 110.854888][ T6852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.219586][ T6866] IPVS: set_ctl: invalid protocol: 12 172.30.1.4:20003 [ 112.733353][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 112.927600][ T6923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.056737][ T6933] dvmrp8: entered allmulticast mode [ 113.212078][ T6932] Bluetooth: MGMT ver 1.23 [ 113.219378][ T6933] dvmrp8: left allmulticast mode [ 113.579559][ T6951] __nla_validate_parse: 66 callbacks suppressed [ 113.579581][ T6951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.239'. [ 113.709438][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 114.180285][ T6963] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 114.299103][ T6963] sctp: [Deprecated]: syz.4.244 (pid 6963) Use of int in maxseg socket option. [ 114.299103][ T6963] Use struct sctp_assoc_value instead [ 114.367089][ T6969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.402227][ T6969] netlink: 156 bytes leftover after parsing attributes in process `syz.0.246'. [ 114.595664][ T6977] rdma_rxe: rxe_newlink: failed to add team0 [ 114.692072][ T6979] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 114.746153][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 115.086910][ T6989] tun0: tun_chr_ioctl cmd 1074025680 [ 115.330551][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 115.594081][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 115.655327][ T7011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.714357][ T7011] netlink: 156 bytes leftover after parsing attributes in process `syz.4.261'. [ 115.974507][ T7020] netlink: 96 bytes leftover after parsing attributes in process `syz.1.263'. [ 116.135486][ T7037] x_tables: duplicate underflow at hook 1 [ 116.274315][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 116.407036][ T7050] tipc: Started in network mode [ 116.423621][ T7050] tipc: Node identity d6b13953246f, cluster identity 4711 [ 116.447976][ T7050] tipc: Enabled bearer , priority 10 [ 116.567728][ T7056] netlink: 'syz.0.271': attribute type 2 has an invalid length. [ 116.793968][ T7062] lo speed is unknown, defaulting to 1000 [ 116.814242][ T7062] lo speed is unknown, defaulting to 1000 [ 116.829301][ T7062] lo speed is unknown, defaulting to 1000 [ 116.850506][ T6055] bond0: (slave bond_slave_0): interface is now down [ 116.851744][ T7062] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 116.861854][ T6055] bond0: (slave bond_slave_1): interface is now down [ 116.885942][ T6055] bond0: (slave wlan1): interface is now down [ 116.904492][ T6055] bond0: now running without any active interface! [ 116.961722][ T7062] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 116.993447][ T7070] Illegal XDP return value 1060437415 on prog (id 104) dev N/A, expect packet loss! [ 117.030184][ T7062] lo speed is unknown, defaulting to 1000 [ 117.055735][ T7062] lo speed is unknown, defaulting to 1000 [ 117.082648][ T7062] lo speed is unknown, defaulting to 1000 [ 117.089690][ T7062] lo speed is unknown, defaulting to 1000 [ 117.112583][ T7062] lo speed is unknown, defaulting to 1000 [ 117.116313][ T7072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.325349][ T7078] bridge1: entered allmulticast mode [ 117.475059][ T5905] tipc: Node number set to 4074649939 [ 117.690971][ T7104] netlink: 'syz.2.286': attribute type 8 has an invalid length. [ 118.039034][ T7127] ip6gretap0: entered promiscuous mode [ 118.211593][ T7127] batadv_slave_0: entered promiscuous mode [ 118.847746][ T7154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.880985][ T7154] __nla_validate_parse: 6 callbacks suppressed [ 118.881007][ T7154] netlink: 156 bytes leftover after parsing attributes in process `syz.1.296'. [ 119.247401][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 119.292400][ T7177] netlink: 'syz.4.300': attribute type 11 has an invalid length. [ 120.039180][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 120.358392][ T7211] Bluetooth: MGMT ver 1.23 [ 120.406307][ T7215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.469290][ T7215] netlink: 156 bytes leftover after parsing attributes in process `syz.1.312'. [ 120.523155][ T7218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.313'. [ 121.194102][ T7246] netlink: 72 bytes leftover after parsing attributes in process `syz.1.320'. [ 121.203441][ T7246] netlink: 44 bytes leftover after parsing attributes in process `syz.1.320'. [ 121.216913][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 121.228678][ T7246] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 121.382935][ T7253] rdma_rxe: rxe_newlink: failed to add team0 [ 121.522742][ T7258] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 121.524480][ T7259] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.599063][ T7258] bond2: entered promiscuous mode [ 121.604663][ T7258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.647721][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'. [ 121.679988][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 121.799687][ T7258] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 121.824986][ T7268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.908860][ T7268] netlink: 156 bytes leftover after parsing attributes in process `syz.3.326'. [ 122.278322][ T7277] netlink: 'syz.4.329': attribute type 5 has an invalid length. [ 122.374702][ T7287] netlink: 'syz.4.329': attribute type 5 has an invalid length. [ 123.409307][ T7334] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.417957][ T7334] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.426186][ T7334] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.434590][ T7334] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.464733][ T7332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.485688][ T7334] vxlan0: entered promiscuous mode [ 123.527801][ T7334] vxlan0: entered allmulticast mode [ 124.234500][ T7352] lo speed is unknown, defaulting to 1000 [ 124.657614][ T7112] Set syz1 is full, maxelem 65536 reached [ 124.678363][ T7327] Cannot find del_set index 2416 as target [ 124.813908][ T7383] __nla_validate_parse: 6 callbacks suppressed [ 124.813931][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.351'. [ 124.969361][ T7391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.972786][ T7388] netlink: 'syz.4.350': attribute type 11 has an invalid length. [ 124.984978][ T7391] netlink: 156 bytes leftover after parsing attributes in process `syz.3.354'. [ 125.004757][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 125.335318][ T7404] netlink: 'syz.1.356': attribute type 10 has an invalid length. [ 125.806935][ T7423] rdma_rxe: rxe_newlink: failed to add team0 [ 125.859325][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 125.885399][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.2.364'. [ 125.922391][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 126.075684][ T7434] netlink: 'syz.3.367': attribute type 2 has an invalid length. [ 126.096184][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 126.107177][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 126.143922][ T7438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.187467][ T7438] netlink: 156 bytes leftover after parsing attributes in process `syz.1.366'. [ 126.218699][ T7441] netlink: 'syz.4.370': attribute type 10 has an invalid length. [ 126.282525][ T7441] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.418996][ T7446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.371'. [ 126.457540][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.466136][ T7446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.493091][ T7446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.513666][ T7446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.554916][ T6068] bond0: (slave bond_slave_0): interface is now down [ 126.557582][ T7450] netlink: 'syz.4.374': attribute type 30 has an invalid length. [ 126.569842][ T6068] bond0: (slave bond_slave_1): interface is now down [ 126.569886][ T6068] bond0: (slave wlan1): interface is now down [ 126.597573][ T6068] bond0: (slave bond_slave_0): interface is now down [ 126.604336][ T6068] bond0: (slave bond_slave_1): interface is now down [ 126.629368][ T6068] bond0: (slave wlan1): interface is now down [ 126.687651][ T6055] bond0: (slave bond_slave_0): interface is now down [ 126.694419][ T6055] bond0: (slave bond_slave_1): interface is now down [ 126.717938][ T6055] bond0: (slave wlan1): interface is now down [ 126.729043][ T6055] bond0: now running without any active interface! [ 127.233021][ T7484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.880261][ T7505] xt_nfacct: accounting object `sy' does not exists [ 128.098946][ T7516] lo speed is unknown, defaulting to 1000 [ 128.122671][ T7516] lo speed is unknown, defaulting to 1000 [ 128.137671][ T7516] lo speed is unknown, defaulting to 1000 [ 128.376938][ T7523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.614406][ T5880] lo speed is unknown, defaulting to 1000 [ 128.627150][ T7516] infiniband syz0: set active [ 128.649414][ T7516] infiniband syz0: added lo [ 128.848706][ T7516] RDS/IB: syz0: added [ 128.852832][ T7516] smc: adding ib device syz0 with port count 1 [ 128.894455][ T7516] smc: ib device syz0 port 1 has pnetid [ 128.913100][ T5880] lo speed is unknown, defaulting to 1000 [ 128.927471][ T7516] lo speed is unknown, defaulting to 1000 [ 129.074718][ T7552] FAULT_INJECTION: forcing a failure. [ 129.074718][ T7552] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.092548][ T7552] CPU: 1 UID: 0 PID: 7552 Comm: syz.0.404 Not tainted 6.13.0-rc3-syzkaller-00684-g3272040790eb #0 [ 129.103221][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.113343][ T7552] Call Trace: [ 129.116656][ T7552] [ 129.119631][ T7552] dump_stack_lvl+0x241/0x360 [ 129.124379][ T7552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.129634][ T7552] ? __pfx__printk+0x10/0x10 [ 129.134285][ T7552] ? __pfx_lock_release+0x10/0x10 [ 129.139356][ T7552] ? tomoyo_path_number_perm+0x679/0x860 [ 129.145062][ T7552] should_fail_ex+0x3b0/0x4e0 [ 129.149784][ T7552] _copy_from_user+0x2f/0xc0 [ 129.154460][ T7552] get_user_ifreq+0xc3/0x200 [ 129.159097][ T7552] sock_do_ioctl+0x1a5/0x460 [ 129.163737][ T7552] ? __pfx_sock_do_ioctl+0x10/0x10 [ 129.168917][ T7552] sock_ioctl+0x626/0x8e0 [ 129.173299][ T7552] ? __pfx_sock_ioctl+0x10/0x10 [ 129.178197][ T7552] ? __fget_files+0x2a/0x410 [ 129.182839][ T7552] ? __fget_files+0x2a/0x410 [ 129.187474][ T7552] ? __pfx_sock_ioctl+0x10/0x10 [ 129.192727][ T7552] __se_sys_ioctl+0xf5/0x170 [ 129.197357][ T7552] do_syscall_64+0xf3/0x230 [ 129.201902][ T7552] ? clear_bhb_loop+0x35/0x90 [ 129.206633][ T7552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.212618][ T7552] RIP: 0033:0x7f80b2185d29 [ 129.217076][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.236725][ T7552] RSP: 002b:00007f80b2fcc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.245317][ T7552] RAX: ffffffffffffffda RBX: 00007f80b2376160 RCX: 00007f80b2185d29 [ 129.253368][ T7552] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000009 [ 129.261390][ T7552] RBP: 00007f80b2fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 129.269409][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.277422][ T7552] R13: 0000000000000000 R14: 00007f80b2376160 R15: 00007fffb49f04e8 [ 129.285453][ T7552] [ 129.292814][ T7551] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 129.317875][ T7516] lo speed is unknown, defaulting to 1000 [ 129.328238][ T7547] lo speed is unknown, defaulting to 1000 [ 129.501883][ T7547] lo speed is unknown, defaulting to 1000 [ 129.517148][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 129.582593][ T7566] netlink: 'syz.4.409': attribute type 6 has an invalid length. [ 129.822172][ T7516] lo speed is unknown, defaulting to 1000 [ 129.928593][ T7572] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.068091][ T7516] lo speed is unknown, defaulting to 1000 [ 130.222333][ T7516] lo speed is unknown, defaulting to 1000 [ 130.383174][ T7560] rdma_rxe: rxe_newlink: failed to add team0 [ 130.488676][ T7572] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.737495][ T7593] __nla_validate_parse: 8 callbacks suppressed [ 130.737517][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 130.758884][ T7572] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.828968][ T7595] rdma_rxe: rxe_newlink: failed to add team0 [ 130.972971][ T7572] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.184538][ T7603] netlink: 3 bytes leftover after parsing attributes in process `syz.2.423'. [ 131.198142][ T7572] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.215168][ T7603] batadv1: entered promiscuous mode [ 131.235296][ T7603] batadv1: entered allmulticast mode [ 131.294134][ T7572] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.316175][ T7572] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.414558][ T7572] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.420327][ T7610] rdma_rxe: rxe_newlink: failed to add team0 [ 131.604948][ T7617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.428'. [ 132.063266][ T7639] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 132.096997][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 132.216661][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 132.296147][ T7644] netlink: 64 bytes leftover after parsing attributes in process `syz.0.438'. [ 132.493536][ T7655] FAULT_INJECTION: forcing a failure. [ 132.493536][ T7655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.536672][ T7655] CPU: 0 UID: 0 PID: 7655 Comm: syz.2.440 Not tainted 6.13.0-rc3-syzkaller-00684-g3272040790eb #0 [ 132.547346][ T7655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.557442][ T7655] Call Trace: [ 132.560752][ T7655] [ 132.563716][ T7655] dump_stack_lvl+0x241/0x360 [ 132.568447][ T7655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.573689][ T7655] ? __pfx__printk+0x10/0x10 [ 132.578327][ T7655] ? snprintf+0xda/0x120 [ 132.582625][ T7655] should_fail_ex+0x3b0/0x4e0 [ 132.587344][ T7655] _copy_to_user+0x31/0xb0 [ 132.591810][ T7655] simple_read_from_buffer+0xca/0x150 [ 132.597242][ T7655] proc_fail_nth_read+0x1e9/0x250 [ 132.602322][ T7655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.607924][ T7655] ? rw_verify_area+0x55e/0x6f0 [ 132.612817][ T7655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.618413][ T7655] vfs_read+0x1fc/0xb70 [ 132.622622][ T7655] ? __pfx___mutex_lock+0x10/0x10 [ 132.627732][ T7655] ? __pfx_vfs_read+0x10/0x10 [ 132.632450][ T7655] ? __fget_files+0x2a/0x410 [ 132.637091][ T7655] ? __fget_files+0x395/0x410 [ 132.641867][ T7655] ? __fget_files+0x2a/0x410 [ 132.646527][ T7655] ksys_read+0x18f/0x2b0 [ 132.650819][ T7655] ? __pfx_ksys_read+0x10/0x10 [ 132.655637][ T7655] ? do_syscall_64+0x100/0x230 [ 132.660456][ T7655] ? do_syscall_64+0xb6/0x230 [ 132.665191][ T7655] do_syscall_64+0xf3/0x230 [ 132.669758][ T7655] ? clear_bhb_loop+0x35/0x90 [ 132.674487][ T7655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.680435][ T7655] RIP: 0033:0x7fc35518473c [ 132.684897][ T7655] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 132.704639][ T7655] RSP: 002b:00007fc356028030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.713113][ T7655] RAX: ffffffffffffffda RBX: 00007fc355376160 RCX: 00007fc35518473c [ 132.721180][ T7655] RDX: 000000000000000f RSI: 00007fc3560280a0 RDI: 0000000000000008 [ 132.729211][ T7655] RBP: 00007fc356028090 R08: 0000000000000000 R09: 0000000000000000 [ 132.737251][ T7655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.745269][ T7655] R13: 0000000000000000 R14: 00007fc355376160 R15: 00007fffbf506e98 [ 132.753304][ T7655] [ 132.941918][ T7666] syz1: rxe_newlink: already configured on team0 [ 132.960398][ T7647] lo speed is unknown, defaulting to 1000 [ 132.993808][ T7647] lo speed is unknown, defaulting to 1000 [ 133.051213][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.507072][ T7691] netlink: 64 bytes leftover after parsing attributes in process `syz.1.453'. [ 133.730161][ T7696] netlink: 'syz.1.456': attribute type 4 has an invalid length. [ 133.903575][ T7680] lo speed is unknown, defaulting to 1000 [ 133.914780][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.458'. [ 133.928965][ T7680] lo speed is unknown, defaulting to 1000 [ 134.035277][ T7706] netlink: 3 bytes leftover after parsing attributes in process `syz.4.459'. [ 134.077806][ T7685] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.089485][ T7706] batadv1: entered promiscuous mode [ 134.103659][ T7706] batadv1: entered allmulticast mode [ 134.133514][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 134.200055][ T7699] rdma_rxe: rxe_newlink: failed to add team0 [ 134.445068][ T7713] netlink: 'syz.3.460': attribute type 33 has an invalid length. [ 134.475164][ T7714] netlink: 46 bytes leftover after parsing attributes in process `syz.3.460'. [ 134.793537][ T7723] netlink: 72 bytes leftover after parsing attributes in process `syz.4.464'. [ 135.441851][ T7758] rdma_rxe: rxe_newlink: failed to add team0 [ 135.467631][ T7752] dccp_close: ABORT with 556 bytes unread [ 135.654297][ T7761] netlink: 'syz.4.474': attribute type 10 has an invalid length. [ 135.718766][ T7768] openvswitch: netlink: IP tunnel dst address not specified [ 135.754688][ T7768] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 135.911914][ T7772] tipc: Started in network mode [ 135.946213][ T7772] tipc: Node identity , cluster identity 4711 [ 135.954351][ T7772] tipc: Failed to set node id, please configure manually [ 135.969254][ T7772] tipc: Enabling of bearer rejected, failed to enable media [ 135.987198][ T7783] xt_socket: unknown flags 0x8 [ 136.550654][ T7810] __nla_validate_parse: 5 callbacks suppressed [ 136.550676][ T7810] netlink: 64 bytes leftover after parsing attributes in process `syz.1.499'. [ 136.825423][ T7817] netlink: 'syz.3.489': attribute type 11 has an invalid length. [ 136.877300][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 137.132466][ T7825] netlink: 'syz.4.491': attribute type 6 has an invalid length. [ 137.147786][ T7825] netlink: 'syz.4.491': attribute type 6 has an invalid length. [ 137.419036][ T7833] veth0_macvtap: left promiscuous mode [ 137.863231][ T7858] xt_socket: unknown flags 0x8 [ 137.878415][ T7857] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 138.107169][ T7865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 138.228461][ T7843] lo speed is unknown, defaulting to 1000 [ 138.254437][ T7843] lo speed is unknown, defaulting to 1000 [ 138.281457][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 138.852131][ T7896] netlink: 64 bytes leftover after parsing attributes in process `syz.3.509'. [ 138.862215][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.510'. [ 139.145697][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.153999][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.155172][ T7903] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 139.181160][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.496'. [ 139.215457][ T7891] infiniband syz1: set down [ 139.343777][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.364552][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.528891][ T7891] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.546556][ T7891] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.554982][ T7891] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.584544][ T7891] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.734173][ T7903] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.982945][ T7910] bridge0: port 3(ipvlan2) entered blocking state [ 140.012417][ T7910] bridge0: port 3(ipvlan2) entered disabled state [ 140.042921][ T7910] ipvlan2: entered allmulticast mode [ 140.070750][ T7910] bridge0: entered allmulticast mode [ 140.087187][ T7924] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 140.105148][ T7910] ipvlan2: left allmulticast mode [ 140.121380][ T7910] bridge0: left allmulticast mode [ 140.154738][ T7929] netlink: 100 bytes leftover after parsing attributes in process `syz.3.517'. [ 140.175515][ T7924] hsr0: entered promiscuous mode [ 140.377666][ T7938] netlink: 96 bytes leftover after parsing attributes in process `syz.3.517'. [ 140.442228][ T7940] netlink: 212148 bytes leftover after parsing attributes in process `syz.1.520'. [ 140.482598][ T7940] netlink: zone id is out of range [ 140.511512][ T7940] netlink: zone id is out of range [ 140.545489][ T7940] netlink: zone id is out of range [ 140.564630][ T7940] netlink: get zone limit has 8 unknown bytes [ 140.729727][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.521'. [ 142.440269][ T8025] __nla_validate_parse: 2 callbacks suppressed [ 142.440290][ T8025] netlink: 32 bytes leftover after parsing attributes in process `syz.4.540'. [ 142.552234][ T8028] netlink: 156 bytes leftover after parsing attributes in process `syz.3.541'. [ 142.566846][ T11] bond0: (slave wlan1): interface is now down [ 142.603186][ T11] bond0: now running without any active interface! [ 143.159785][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.548'. [ 143.162115][ T8019] lo speed is unknown, defaulting to 1000 [ 143.254177][ T8019] lo speed is unknown, defaulting to 1000 [ 143.372672][ T8065] netlink: 36 bytes leftover after parsing attributes in process `syz.3.550'. [ 143.847482][ T5925] hid-generic 0005:0C45:0058.0002: item fetching failed at offset 0/1 [ 143.889535][ T5925] hid-generic 0005:0C45:0058.0002: probe with driver hid-generic failed with error -22 [ 144.371594][ T8092] netlink: 156 bytes leftover after parsing attributes in process `syz.3.554'. [ 144.735416][ T8100] netlink: 64 bytes leftover after parsing attributes in process `syz.4.557'. [ 144.782644][ T8022] lo speed is unknown, defaulting to 1000 [ 144.807732][ T8022] lo speed is unknown, defaulting to 1000 [ 144.985603][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.560'. [ 145.014910][ T8110] netlink: 156 bytes leftover after parsing attributes in process `syz.1.561'. [ 145.427274][ T8119] netlink: 156 bytes leftover after parsing attributes in process `syz.4.565'. [ 145.625484][ T8122] x_tables: duplicate underflow at hook 1 [ 145.893319][ T8137] netlink: 'syz.1.573': attribute type 10 has an invalid length. [ 145.968311][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.574'. [ 146.113626][ T8146] netlink: 'syz.4.576': attribute type 10 has an invalid length. [ 146.335216][ T8154] rdma_rxe: rxe_newlink: failed to add team0 [ 146.742067][ T8172] netlink: 'syz.3.585': attribute type 10 has an invalid length. [ 146.742389][ T8173] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 147.149652][ T8182] netlink: 'syz.3.589': attribute type 6 has an invalid length. [ 147.163272][ T8182] netlink: 'syz.3.589': attribute type 5 has an invalid length. [ 147.419452][ T8200] rdma_rxe: rxe_newlink: failed to add team0 [ 147.603993][ T8209] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 147.751104][ T8214] __nla_validate_parse: 7 callbacks suppressed [ 147.751131][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'. [ 147.782031][ T8216] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 147.897578][ T8219] netlink: 156 bytes leftover after parsing attributes in process `syz.1.601'. [ 147.928161][ T8219] FAULT_INJECTION: forcing a failure. [ 147.928161][ T8219] name failslab, interval 1, probability 0, space 0, times 1 [ 147.949300][ T8219] CPU: 0 UID: 0 PID: 8219 Comm: syz.1.601 Not tainted 6.13.0-rc3-syzkaller-00684-g3272040790eb #0 [ 147.959995][ T8219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.970100][ T8219] Call Trace: [ 147.973428][ T8219] [ 147.976402][ T8219] dump_stack_lvl+0x241/0x360 [ 147.981143][ T8219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.986402][ T8219] ? __pfx__printk+0x10/0x10 [ 147.991140][ T8219] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 147.996158][ T8222] sctp: [Deprecated]: syz.3.602 (pid 8222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.996158][ T8222] Use struct sctp_sack_info instead [ 147.997155][ T8219] ? __pfx___might_resched+0x10/0x10 [ 147.997210][ T8219] should_fail_ex+0x3b0/0x4e0 [ 147.997241][ T8219] should_failslab+0xac/0x100 [ 148.028119][ T8219] kmem_cache_alloc_node_noprof+0x77/0x380 [ 148.033994][ T8219] ? __alloc_skb+0x1c3/0x440 [ 148.038655][ T8219] ? nl80211_parse_mon_options+0x72e/0x970 [ 148.044526][ T8219] __alloc_skb+0x1c3/0x440 [ 148.048999][ T8219] ? __pfx_nl80211_parse_mon_options+0x10/0x10 [ 148.055211][ T8219] ? __pfx___alloc_skb+0x10/0x10 [ 148.060203][ T8219] ? cfg80211_iftype_allowed+0x19e/0x300 [ 148.065887][ T8219] nl80211_new_interface+0x6f8/0x1190 [ 148.071316][ T8219] ? __pfx___cfg80211_rdev_from_attrs+0x10/0x10 [ 148.077623][ T8219] ? __pfx_nl80211_new_interface+0x10/0x10 [ 148.083508][ T8219] genl_rcv_msg+0xb14/0xec0 [ 148.088092][ T8219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.093224][ T8219] ? __pfx_lock_acquire+0x10/0x10 [ 148.098300][ T8219] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 148.103724][ T8219] ? __pfx_nl80211_new_interface+0x10/0x10 [ 148.109578][ T8219] ? __pfx_nl80211_post_doit+0x10/0x10 [ 148.115088][ T8219] ? __pfx___might_resched+0x10/0x10 [ 148.120435][ T8219] netlink_rcv_skb+0x1e3/0x430 [ 148.125253][ T8219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 148.130328][ T8219] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.135675][ T8219] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 148.141190][ T8219] genl_rcv+0x28/0x40 [ 148.145221][ T8219] netlink_unicast+0x7f6/0x990 [ 148.150047][ T8219] ? __pfx_netlink_unicast+0x10/0x10 [ 148.155384][ T8219] ? __virt_addr_valid+0x45f/0x530 [ 148.160533][ T8219] ? __phys_addr_symbol+0x2f/0x70 [ 148.165614][ T8219] ? __check_object_size+0x47a/0x730 [ 148.170967][ T8219] netlink_sendmsg+0x8e4/0xcb0 [ 148.175802][ T8219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.181148][ T8219] ? aa_sock_msg_perm+0x91/0x160 [ 148.186139][ T8219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.191471][ T8219] __sock_sendmsg+0x221/0x270 [ 148.196207][ T8219] ____sys_sendmsg+0x52a/0x7e0 [ 148.201027][ T8219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.206358][ T8219] ? __fget_files+0x2a/0x410 [ 148.211010][ T8219] ? __fget_files+0x2a/0x410 [ 148.215663][ T8219] __sys_sendmsg+0x269/0x350 [ 148.220302][ T8219] ? __pfx_lock_release+0x10/0x10 [ 148.225409][ T8219] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.230618][ T8219] ? __pfx_vfs_write+0x10/0x10 [ 148.235466][ T8219] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.241859][ T8219] ? do_syscall_64+0x100/0x230 [ 148.246686][ T8219] ? do_syscall_64+0xb6/0x230 [ 148.251452][ T8219] do_syscall_64+0xf3/0x230 [ 148.256011][ T8219] ? clear_bhb_loop+0x35/0x90 [ 148.260741][ T8219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.266679][ T8219] RIP: 0033:0x7fb9fc985d29 [ 148.271131][ T8219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.290785][ T8219] RSP: 002b:00007fb9fd6d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.291581][ T8235] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 148.299230][ T8219] RAX: ffffffffffffffda RBX: 00007fb9fcb75fa0 RCX: 00007fb9fc985d29 [ 148.299255][ T8219] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 148.299270][ T8219] RBP: 00007fb9fd6d4090 R08: 0000000000000000 R09: 0000000000000000 [ 148.299284][ T8219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.299298][ T8219] R13: 0000000000000000 R14: 00007fb9fcb75fa0 R15: 00007ffd81d30078 [ 148.299332][ T8219] [ 148.491979][ T8233] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 148.714354][ T8235] netlink: 'syz.2.605': attribute type 4 has an invalid length. [ 148.967894][ T8233] infiniband syz0: set down [ 149.061485][ T8235] infiniband syz0: set active [ 149.082725][ T942] lo speed is unknown, defaulting to 1000 [ 149.082769][ T8244] lo speed is unknown, defaulting to 1000 [ 149.095437][ T5882] lo speed is unknown, defaulting to 1000 [ 149.120295][ T8244] lo speed is unknown, defaulting to 1000 [ 149.126313][ T942] lo speed is unknown, defaulting to 1000 [ 149.149989][ T8255] sctp: [Deprecated]: syz.1.612 (pid 8255) Use of int in max_burst socket option deprecated. [ 149.149989][ T8255] Use struct sctp_assoc_value instead [ 149.207386][ T8259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.615'. [ 149.418682][ T8269] netlink: 148 bytes leftover after parsing attributes in process `syz.0.615'. [ 149.428497][ T8269] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 149.543890][ T8276] netlink: 1292 bytes leftover after parsing attributes in process `syz.4.619'. [ 149.576002][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 149.620848][ T8277] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.619'. [ 149.648855][ T8277] openvswitch: netlink: Flow actions attr not present in new flow. [ 150.018811][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 150.214690][ T8294] netlink: 156 bytes leftover after parsing attributes in process `syz.0.624'. [ 150.552789][ T8310] netlink: 452 bytes leftover after parsing attributes in process `syz.3.628'. [ 150.790622][ T8321] rdma_rxe: rxe_newlink: failed to add team0 [ 151.485266][ T8353] validate_nla: 2 callbacks suppressed [ 151.485289][ T8353] netlink: 'syz.4.644': attribute type 10 has an invalid length. [ 151.670656][ T8361] syz1: rxe_newlink: already configured on team0 [ 151.732870][ T8362] ksmbd: Unknown IPC event: 4, ignore. [ 151.883403][ T8369] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 151.982994][ T8370] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 151.995149][ T8370] netlink: 'syz.1.651': attribute type 2 has an invalid length. [ 152.006855][ T8374] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 152.023131][ T8374] netlink: 'syz.1.651': attribute type 2 has an invalid length. [ 152.237552][ T8381] netlink: 'syz.0.656': attribute type 10 has an invalid length. [ 153.128107][ T8424] lo speed is unknown, defaulting to 1000 [ 153.137760][ T8424] lo speed is unknown, defaulting to 1000 [ 153.211066][ T8432] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 153.574345][ T8441] __nla_validate_parse: 4 callbacks suppressed [ 153.574365][ T8441] netlink: 156 bytes leftover after parsing attributes in process `syz.4.672'. [ 153.597945][ T8438] netlink: 156 bytes leftover after parsing attributes in process `syz.0.671'. [ 154.054725][ T8462] netlink: 64 bytes leftover after parsing attributes in process `syz.3.678'. [ 154.541013][ T8483] netlink: 156 bytes leftover after parsing attributes in process `syz.2.686'. [ 155.079367][ T8498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 155.349756][ T8507] bridge_slave_0: left allmulticast mode [ 155.378524][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.389933][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.691'. [ 155.443925][ T8507] bridge_slave_1: left allmulticast mode [ 155.452311][ T8507] bridge_slave_1: left promiscuous mode [ 155.460036][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.504407][ T8507] bond0: (slave bond_slave_0): Releasing backup interface [ 155.582579][ T8507] bond0: (slave bond_slave_1): Releasing backup interface [ 155.700895][ T8507] team0: Port device team_slave_0 removed [ 155.844067][ T8507] team0: Port device team_slave_1 removed [ 155.894429][ T8507] bond0: (slave wlan1): Releasing backup interface [ 155.923913][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.691'. [ 155.924403][ T8538] netlink: 8376 bytes leftover after parsing attributes in process `syz.2.693'. [ 156.114821][ T8543] netlink: 156 bytes leftover after parsing attributes in process `syz.2.693'. [ 156.185018][ T8538] openvswitch: netlink: Flow actions attr not present in new flow. [ 156.288191][ T8534] netlink: 156 bytes leftover after parsing attributes in process `syz.3.694'. [ 156.386124][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 156.524868][ T8558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.709868][ T8566] ip6gretap0: entered promiscuous mode [ 156.750870][ T8573] rdma_rxe: rxe_newlink: failed to add team0 [ 157.093938][ T8586] SET target dimension over the limit! [ 157.100918][ T8587] batadv_slave_0: entered promiscuous mode [ 157.120691][ T8587] batadv_slave_1: entered promiscuous mode [ 157.163306][ T8583] batadv_slave_1: left promiscuous mode [ 157.177245][ T8583] batadv_slave_0: left promiscuous mode [ 157.195551][ T8590] FAULT_INJECTION: forcing a failure. [ 157.195551][ T8590] name failslab, interval 1, probability 0, space 0, times 0 [ 157.236691][ T8590] CPU: 0 UID: 0 PID: 8590 Comm: syz.0.714 Not tainted 6.13.0-rc3-syzkaller-00684-g3272040790eb #0 [ 157.247379][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.257482][ T8590] Call Trace: [ 157.260799][ T8590] [ 157.263765][ T8590] dump_stack_lvl+0x241/0x360 [ 157.268508][ T8590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.268746][ T8580] lo speed is unknown, defaulting to 1000 [ 157.273739][ T8590] ? __pfx__printk+0x10/0x10 [ 157.273777][ T8590] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 157.273812][ T8590] ? __pfx___might_resched+0x10/0x10 [ 157.284316][ T8580] lo speed is unknown, defaulting to 1000 [ 157.290092][ T8590] should_fail_ex+0x3b0/0x4e0 [ 157.290132][ T8590] should_failslab+0xac/0x100 [ 157.290164][ T8590] kmem_cache_alloc_node_noprof+0x77/0x380 [ 157.290197][ T8590] ? __alloc_skb+0x1c3/0x440 [ 157.321082][ T8590] __alloc_skb+0x1c3/0x440 [ 157.325526][ T8590] ? __pfx___alloc_skb+0x10/0x10 [ 157.330483][ T8590] ? netlink_ack_tlv_len+0x6e/0x200 [ 157.335696][ T8590] netlink_ack+0x145/0xa50 [ 157.340124][ T8590] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 157.345515][ T8590] ? __pfx_nl80211_post_doit+0x10/0x10 [ 157.350998][ T8590] ? __pfx___might_resched+0x10/0x10 [ 157.356313][ T8590] netlink_rcv_skb+0x262/0x430 [ 157.361098][ T8590] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.366147][ T8590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.371460][ T8590] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 157.377035][ T8590] genl_rcv+0x28/0x40 [ 157.381035][ T8590] netlink_unicast+0x7f6/0x990 [ 157.385818][ T8590] ? __pfx_netlink_unicast+0x10/0x10 [ 157.391116][ T8590] ? __virt_addr_valid+0x45f/0x530 [ 157.396247][ T8590] ? __phys_addr_symbol+0x2f/0x70 [ 157.401292][ T8590] ? __check_object_size+0x47a/0x730 [ 157.406600][ T8590] netlink_sendmsg+0x8e4/0xcb0 [ 157.411389][ T8590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.416694][ T8590] ? aa_sock_msg_perm+0x91/0x160 [ 157.421673][ T8590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.426998][ T8590] __sock_sendmsg+0x221/0x270 [ 157.431720][ T8590] ____sys_sendmsg+0x52a/0x7e0 [ 157.436527][ T8590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.441837][ T8590] ? __fget_files+0x2a/0x410 [ 157.446455][ T8590] ? __fget_files+0x2a/0x410 [ 157.451085][ T8590] __sys_sendmsg+0x269/0x350 [ 157.455697][ T8590] ? __pfx_lock_release+0x10/0x10 [ 157.460743][ T8590] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.465880][ T8590] ? __pfx_vfs_write+0x10/0x10 [ 157.470677][ T8590] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.477105][ T8590] ? do_syscall_64+0x100/0x230 [ 157.481923][ T8590] ? do_syscall_64+0xb6/0x230 [ 157.486625][ T8590] do_syscall_64+0xf3/0x230 [ 157.491147][ T8590] ? clear_bhb_loop+0x35/0x90 [ 157.495845][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.501774][ T8590] RIP: 0033:0x7f80b2185d29 [ 157.506205][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.525832][ T8590] RSP: 002b:00007f80b300e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.534296][ T8590] RAX: ffffffffffffffda RBX: 00007f80b2375fa0 RCX: 00007f80b2185d29 [ 157.542298][ T8590] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 157.550285][ T8590] RBP: 00007f80b300e090 R08: 0000000000000000 R09: 0000000000000000 [ 157.558282][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.566285][ T8590] R13: 0000000000000000 R14: 00007f80b2375fa0 R15: 00007fffb49f04e8 [ 157.574302][ T8590] [ 157.971670][ T8610] rdma_rxe: rxe_newlink: failed to add team0 [ 158.238057][ T8624] atomic_op ffff888028620198 conn xmit_atomic 0000000000000000 [ 158.401613][ T8628] FAULT_INJECTION: forcing a failure. [ 158.401613][ T8628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.475409][ T8628] CPU: 0 UID: 0 PID: 8628 Comm: syz.4.728 Not tainted 6.13.0-rc3-syzkaller-00684-g3272040790eb #0 [ 158.486118][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.496223][ T8628] Call Trace: [ 158.499560][ T8628] [ 158.502543][ T8628] dump_stack_lvl+0x241/0x360 [ 158.507288][ T8628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.512546][ T8628] ? __pfx__printk+0x10/0x10 [ 158.517197][ T8628] ? __pfx_lock_release+0x10/0x10 [ 158.522371][ T8628] ? __lock_acquire+0x1397/0x2100 [ 158.527469][ T8628] should_fail_ex+0x3b0/0x4e0 [ 158.532207][ T8628] _copy_from_user+0x2f/0xc0 [ 158.536873][ T8628] kstrtouint_from_user+0xc6/0x190 [ 158.542046][ T8628] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 158.547853][ T8628] ? __pfx_lock_acquire+0x10/0x10 [ 158.552948][ T8628] proc_fail_nth_write+0xaa/0x2d0 [ 158.558127][ T8628] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 158.564124][ T8628] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 158.569995][ T8628] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 158.575688][ T8628] vfs_write+0x2a3/0xd30 [ 158.579996][ T8628] ? __pfx_vfs_write+0x10/0x10 [ 158.584824][ T8628] ? __fget_files+0x2a/0x410 [ 158.589488][ T8628] ? __fget_files+0x395/0x410 [ 158.594249][ T8628] ? __fget_files+0x2a/0x410 [ 158.598935][ T8628] ksys_write+0x18f/0x2b0 [ 158.603403][ T8628] ? __pfx_ksys_write+0x10/0x10 [ 158.608365][ T8628] ? do_syscall_64+0x100/0x230 [ 158.613200][ T8628] ? do_syscall_64+0xb6/0x230 [ 158.617937][ T8628] do_syscall_64+0xf3/0x230 [ 158.622584][ T8628] ? clear_bhb_loop+0x35/0x90 [ 158.627366][ T8628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.633332][ T8628] RIP: 0033:0x7f0e2bb847df [ 158.637889][ T8628] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 158.657895][ T8628] RSP: 002b:00007f0e2c976030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 158.666374][ T8628] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e2bb847df [ 158.674399][ T8628] RDX: 0000000000000001 RSI: 00007f0e2c9760a0 RDI: 0000000000000007 [ 158.682432][ T8628] RBP: 00007f0e2c976090 R08: 0000000000000000 R09: 0000000000000000 [ 158.690457][ T8628] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 158.698482][ T8628] R13: 0000000000000000 R14: 00007f0e2bd75fa0 R15: 00007fffd0b64a68 [ 158.706523][ T8628] [ 158.821004][ T8638] xt_cgroup: invalid path, errno=-2 [ 159.004318][ T8648] __nla_validate_parse: 9 callbacks suppressed [ 159.004338][ T8648] netlink: 156 bytes leftover after parsing attributes in process `syz.4.734'. [ 159.039145][ T8649] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.409909][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.737'. [ 159.420818][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.429208][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 159.497638][ T8658] netlink: 6233 bytes leftover after parsing attributes in process `syz.0.738'. [ 159.517441][ T8658] netlink: 156 bytes leftover after parsing attributes in process `syz.0.738'. [ 159.632525][ T8665] netlink: 64 bytes leftover after parsing attributes in process `syz.1.739'. [ 159.685394][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.947472][ T8677] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 160.169191][ T8685] syzkaller0: entered promiscuous mode [ 160.186341][ T8685] syzkaller0: entered allmulticast mode [ 160.195577][ T8682] tipc: Enabled bearer , priority 0 [ 160.309540][ T8688] syzkaller0: entered promiscuous mode [ 160.325811][ T8688] syzkaller0: entered allmulticast mode [ 160.334186][ T8688] tipc: Resetting bearer [ 160.343636][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 160.354833][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.744'. [ 160.365908][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 161.249359][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 161.260059][ T8697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.170852][ T8681] tipc: Resetting bearer [ 162.297871][ T8700] FAULT_INJECTION: forcing a failure. [ 162.297871][ T8700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.321471][ T8700] CPU: 1 UID: 0 PID: 8700 Comm: syz.2.751 Not tainted 6.13.0-rc3-syzkaller-00684-g3272040790eb #0 [ 162.332146][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.342251][ T8700] Call Trace: [ 162.345577][ T8700] [ 162.348547][ T8700] dump_stack_lvl+0x241/0x360 [ 162.353290][ T8700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.358552][ T8700] ? __pfx__printk+0x10/0x10 [ 162.363296][ T8700] ? __pfx_lock_release+0x10/0x10 [ 162.368475][ T8700] should_fail_ex+0x3b0/0x4e0 [ 162.373563][ T8700] _copy_from_user+0x2f/0xc0 [ 162.378208][ T8700] sctp_getsockopt_enable_strreset+0xd8/0x5b0 [ 162.384338][ T8700] ? __local_bh_enable_ip+0x168/0x200 [ 162.389779][ T8700] ? __pfx_sctp_getsockopt_enable_strreset+0x10/0x10 [ 162.396547][ T8700] sctp_getsockopt+0x884/0xbb0 [ 162.401370][ T8700] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 162.407333][ T8700] do_sock_getsockopt+0x3c4/0x7e0 [ 162.412407][ T8700] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 162.417983][ T8700] ? __fget_files+0x2a/0x410 [ 162.422706][ T8700] ? __fget_files+0x395/0x410 [ 162.427418][ T8700] ? __fget_files+0x2a/0x410 [ 162.432096][ T8700] __x64_sys_getsockopt+0x2a1/0x370 [ 162.437338][ T8700] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 162.443096][ T8700] ? do_syscall_64+0x100/0x230 [ 162.447891][ T8700] ? do_syscall_64+0xb6/0x230 [ 162.452625][ T8700] do_syscall_64+0xf3/0x230 [ 162.457184][ T8700] ? clear_bhb_loop+0x35/0x90 [ 162.461908][ T8700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.467880][ T8700] RIP: 0033:0x7fc355185d29 [ 162.472449][ T8700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.492335][ T8700] RSP: 002b:00007fc35606a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 162.500875][ T8700] RAX: ffffffffffffffda RBX: 00007fc355375fa0 RCX: 00007fc355185d29 [ 162.508988][ T8700] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000004 [ 162.517009][ T8700] RBP: 00007fc35606a090 R08: 00000000200000c0 R09: 0000000000000000 [ 162.525015][ T8700] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.533007][ T8700] R13: 0000000000000000 R14: 00007fc355375fa0 R15: 00007fffbf506e98 [ 162.541632][ T8700] [ 164.315594][ T8681] tipc: Disabling bearer [ 164.335874][ T8705] dvmrp5: entered allmulticast mode [ 164.366811][ T8705] dvmrp5: left allmulticast mode [ 164.505932][ T8716] __nla_validate_parse: 3 callbacks suppressed [ 164.505954][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'. [ 164.710729][ T8731] syz1: rxe_newlink: already configured on team0 [ 164.724656][ T8733] rdma_rxe: rxe_newlink: failed to add team0 [ 164.889537][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 164.904085][ T8739] syz.4.762 uses old SIOCAX25GETINFO [ 164.905822][ T8738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.944351][ T8738] netlink: 156 bytes leftover after parsing attributes in process `syz.1.763'. [ 164.955063][ T8739] syzkaller1: entered promiscuous mode [ 164.964241][ T8739] syzkaller1: entered allmulticast mode [ 164.984931][ T8739] netlink: 80 bytes leftover after parsing attributes in process `syz.4.762'. [ 165.050755][ T8735] pim6reg1: entered promiscuous mode [ 165.057351][ T8735] pim6reg1: entered allmulticast mode [ 165.228922][ T8746] syz1: rxe_newlink: already configured on team0 [ 165.241665][ T8745] : renamed from bond0 (while UP) [ 165.435220][ T8748] netlink: 'syz.4.766': attribute type 21 has an invalid length. [ 165.459176][ T8748] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.612857][ T8754] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 165.655389][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.683146][ T8760] netlink: 64 bytes leftover after parsing attributes in process `syz.4.770'. [ 165.783976][ T8764] netlink: 156 bytes leftover after parsing attributes in process `syz.3.772'. [ 165.819250][ T8765] rdma_rxe: rxe_newlink: failed to add team0 [ 165.923664][ T8768] netlink: 6233 bytes leftover after parsing attributes in process `syz.4.774'. [ 165.944405][ T8768] netlink: 156 bytes leftover after parsing attributes in process `syz.4.774'. [ 166.081853][ T8774] netlink: 996 bytes leftover after parsing attributes in process `syz.1.776'. [ 166.172264][ T8778] sch_fq: defrate 0 ignored. [ 166.418119][ T8789] sctp: [Deprecated]: syz.2.779 (pid 8789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.418119][ T8789] Use struct sctp_sack_info instead [ 166.604158][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 166.702758][ T8799] macsec0: entered promiscuous mode [ 167.137361][ T8803] netlink: 'syz.1.783': attribute type 2 has an invalid length. [ 167.538419][ T8793] macsec0: left promiscuous mode [ 167.805429][ T8836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.374766][ T8864] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 168.503455][ T8869] xt_CT: No such helper "netbios-ns" [ 168.946158][ T8888] tc_dump_action: action bad kind [ 169.945109][ T8917] netlink: 'syz.4.806': attribute type 2 has an invalid length. [ 170.049427][ T8925] rdma_rxe: rxe_newlink: failed to add team0 [ 170.484762][ T8943] __nla_validate_parse: 10 callbacks suppressed [ 170.484786][ T8943] netlink: 64 bytes leftover after parsing attributes in process `syz.1.811'. [ 170.710085][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.813'. [ 170.736001][ T8937] lo speed is unknown, defaulting to 1000 [ 170.760883][ T8937] lo speed is unknown, defaulting to 1000 [ 170.939789][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 171.146873][ T8973] syz1: rxe_newlink: already configured on team0 [ 171.210366][ T8965] netlink: 'syz.3.819': attribute type 10 has an invalid length. [ 171.418582][ T8975] netlink: 'syz.2.820': attribute type 10 has an invalid length. [ 171.483533][ T8987] TCP: TCP_TX_DELAY enabled [ 171.553953][ T8975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.820'. [ 171.573742][ T8975] batman_adv: batadv0: Adding interface: virt_wifi0 [ 171.582371][ T8975] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.627696][ T8975] batman_adv: batadv0: Interface activated: virt_wifi0 [ 171.635324][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.4.823'. [ 171.761133][ T8995] erspan0: entered promiscuous mode [ 171.788882][ T8995] erspan0: left promiscuous mode [ 172.454958][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 172.662523][ T9033] netlink: 64 bytes leftover after parsing attributes in process `syz.2.831'. [ 172.782788][ T9036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.798671][ T9036] netlink: 'syz.4.833': attribute type 10 has an invalid length. [ 173.009908][ T9044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 173.026655][ T9044] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'. [ 173.345864][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.840'. [ 173.438047][ T9074] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 173.453850][ T9074] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 173.481008][ T9074] ieee802154 phy1 wpan1: encryption failed: -22 [ 173.939285][ T9092] tipc: Enabled bearer , priority 0 [ 174.005869][ T9092] syzkaller0: entered promiscuous mode [ 174.014186][ T9092] syzkaller0: entered allmulticast mode [ 174.020408][ T9092] tipc: Resetting bearer [ 174.084613][ T9089] tipc: Resetting bearer [ 174.934994][ T9121] [ 174.937379][ T9121] ====================================================== [ 174.944439][ T9121] WARNING: possible circular locking dependency detected [ 174.951460][ T9121] 6.13.0-rc3-syzkaller-00684-g3272040790eb #0 Not tainted [ 174.958567][ T9121] ------------------------------------------------------ [ 174.965579][ T9121] syz.0.856/9121 is trying to acquire lock: [ 174.971478][ T9121] ffff88807b3a0aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x35/0xd90 [ 174.982207][ T9121] [ 174.982207][ T9121] but task is already holding lock: [ 174.989686][ T9121] ffff88807b3a0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 174.998501][ T9121] [ 174.998501][ T9121] which lock already depends on the new lock. [ 174.998501][ T9121] [ 175.008909][ T9121] [ 175.008909][ T9121] the existing dependency chain (in reverse order) is: [ 175.017928][ T9121] [ 175.017928][ T9121] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 175.025588][ T9121] lock_acquire+0x1ed/0x550 [ 175.030638][ T9121] lock_sock_nested+0x48/0x100 [ 175.035937][ T9121] do_ip_setsockopt+0x1a2d/0x3cd0 [ 175.041495][ T9121] ip_setsockopt+0x63/0x100 [ 175.046533][ T9121] do_sock_setsockopt+0x3af/0x720 [ 175.052085][ T9121] __x64_sys_setsockopt+0x1ee/0x280 [ 175.057808][ T9121] do_syscall_64+0xf3/0x230 [ 175.062834][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.069280][ T9121] [ 175.069280][ T9121] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 175.076587][ T9121] lock_acquire+0x1ed/0x550 [ 175.081638][ T9121] __mutex_lock+0x1ac/0xee0 [ 175.086709][ T9121] do_ip_setsockopt+0x127d/0x3cd0 [ 175.092311][ T9121] ip_setsockopt+0x63/0x100 [ 175.097390][ T9121] smc_setsockopt+0x275/0xe50 [ 175.102597][ T9121] do_sock_setsockopt+0x3af/0x720 [ 175.108152][ T9121] __x64_sys_setsockopt+0x1ee/0x280 [ 175.113893][ T9121] do_syscall_64+0xf3/0x230 [ 175.118963][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.125658][ T9121] [ 175.125658][ T9121] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 175.134273][ T9121] validate_chain+0x18ef/0x5920 [ 175.139662][ T9121] __lock_acquire+0x1397/0x2100 [ 175.145050][ T9121] lock_acquire+0x1ed/0x550 [ 175.150116][ T9121] __mutex_lock+0x1ac/0xee0 [ 175.155157][ T9121] smc_switch_to_fallback+0x35/0xd90 [ 175.161029][ T9121] smc_sendmsg+0x11f/0x530 [ 175.166074][ T9121] __sock_sendmsg+0x221/0x270 [ 175.171300][ T9121] __sys_sendto+0x363/0x4c0 [ 175.176338][ T9121] __x64_sys_sendto+0xde/0x100 [ 175.181637][ T9121] do_syscall_64+0xf3/0x230 [ 175.186699][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.193168][ T9121] [ 175.193168][ T9121] other info that might help us debug this: [ 175.193168][ T9121] [ 175.203420][ T9121] Chain exists of: [ 175.203420][ T9121] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 175.203420][ T9121] [ 175.217001][ T9121] Possible unsafe locking scenario: [ 175.217001][ T9121] [ 175.224467][ T9121] CPU0 CPU1 [ 175.229926][ T9121] ---- ---- [ 175.235303][ T9121] lock(sk_lock-AF_INET); [ 175.239790][ T9121] lock(rtnl_mutex); [ 175.246314][ T9121] lock(sk_lock-AF_INET); [ 175.253283][ T9121] lock(&smc->clcsock_release_lock); [ 175.258667][ T9121] [ 175.258667][ T9121] *** DEADLOCK *** [ 175.258667][ T9121] [ 175.266810][ T9121] 1 lock held by syz.0.856/9121: [ 175.271741][ T9121] #0: ffff88807b3a0258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 175.281009][ T9121] [ 175.281009][ T9121] stack backtrace: [ 175.286926][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.0.856 Not tainted 6.13.0-rc3-syzkaller-00684-g3272040790eb #0 [ 175.297538][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.307606][ T9121] Call Trace: [ 175.310888][ T9121] [ 175.313820][ T9121] dump_stack_lvl+0x241/0x360 [ 175.318526][ T9121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.323738][ T9121] ? __pfx__printk+0x10/0x10 [ 175.328366][ T9121] print_circular_bug+0x13a/0x1b0 [ 175.333437][ T9121] check_noncircular+0x36a/0x4a0 [ 175.338411][ T9121] ? __pfx_check_noncircular+0x10/0x10 [ 175.343900][ T9121] ? lockdep_lock+0x123/0x2b0 [ 175.348587][ T9121] ? __lock_acquire+0x1397/0x2100 [ 175.353629][ T9121] validate_chain+0x18ef/0x5920 [ 175.358497][ T9121] ? __pfx_validate_chain+0x10/0x10 [ 175.363707][ T9121] ? validate_chain+0x11e/0x5920 [ 175.368656][ T9121] ? validate_chain+0x11e/0x5920 [ 175.373601][ T9121] ? look_up_lock_class+0x77/0x170 [ 175.378724][ T9121] ? register_lock_class+0x102/0x980 [ 175.384024][ T9121] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.390372][ T9121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 175.395577][ T9121] ? __pfx_register_lock_class+0x10/0x10 [ 175.401243][ T9121] ? mark_lock+0x9a/0x360 [ 175.405583][ T9121] ? __pfx_validate_chain+0x10/0x10 [ 175.410807][ T9121] __lock_acquire+0x1397/0x2100 [ 175.415674][ T9121] lock_acquire+0x1ed/0x550 [ 175.420249][ T9121] ? smc_switch_to_fallback+0x35/0xd90 [ 175.425745][ T9121] ? __pfx_lock_acquire+0x10/0x10 [ 175.430806][ T9121] ? __pfx___might_resched+0x10/0x10 [ 175.436106][ T9121] ? __lock_acquire+0x1397/0x2100 [ 175.441144][ T9121] __mutex_lock+0x1ac/0xee0 [ 175.445668][ T9121] ? smc_switch_to_fallback+0x35/0xd90 [ 175.451147][ T9121] ? mark_lock+0x9a/0x360 [ 175.455492][ T9121] ? smc_switch_to_fallback+0x35/0xd90 [ 175.460960][ T9121] ? __pfx___mutex_lock+0x10/0x10 [ 175.466004][ T9121] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.472341][ T9121] ? __local_bh_enable_ip+0x168/0x200 [ 175.477730][ T9121] ? lockdep_hardirqs_on+0x99/0x150 [ 175.482936][ T9121] ? __local_bh_enable_ip+0x168/0x200 [ 175.488342][ T9121] smc_switch_to_fallback+0x35/0xd90 [ 175.493678][ T9121] ? do_raw_spin_unlock+0x13c/0x8b0 [ 175.498891][ T9121] smc_sendmsg+0x11f/0x530 [ 175.503380][ T9121] ? __pfx_smc_sendmsg+0x10/0x10 [ 175.508338][ T9121] __sock_sendmsg+0x221/0x270 [ 175.513059][ T9121] __sys_sendto+0x363/0x4c0 [ 175.517579][ T9121] ? __pfx___sys_sendto+0x10/0x10 [ 175.522609][ T9121] ? do_futex+0x33b/0x560 [ 175.526949][ T9121] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.532935][ T9121] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.539300][ T9121] __x64_sys_sendto+0xde/0x100 [ 175.544105][ T9121] do_syscall_64+0xf3/0x230 [ 175.548621][ T9121] ? clear_bhb_loop+0x35/0x90 [ 175.553304][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.559202][ T9121] RIP: 0033:0x7f80b2185d29 [ 175.563696][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.583322][ T9121] RSP: 002b:00007f80b2fed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 175.592097][ T9121] RAX: ffffffffffffffda RBX: 00007f80b2376080 RCX: 00007f80b2185d29 [ 175.600078][ T9121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 175.608454][ T9121] RBP: 00007f80b2201aa8 R08: 0000000020000040 R09: 0000000000000010 [ 175.616433][ T9121] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 175.624413][ T9121] R13: 0000000000000000 R14: 00007f80b2376080 R15: 00007fffb49f04e8 [ 175.632419][ T9121] [ 176.782600][ T9089] tipc: Disabling bearer [ 176.790175][ T9078] lo speed is unknown, defaulting to 1000 [ 176.800302][ T9112] ip6tnl4: entered allmulticast mode [ 176.864214][ T9078] lo speed is unknown, defaulting to 1000 [ 176.953331][ T9087] lo speed is unknown, defaulting to 1000 [ 176.979894][ T9087] lo speed is unknown, defaulting to 1000