last executing test programs: 3.674439846s ago: executing program 4 (id=415): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x57, 0x1, 0x5, 0x7, 0x7, 0x81}) 3.50356726s ago: executing program 4 (id=420): unshare(0x6a040000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 1.438072588s ago: executing program 2 (id=438): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000104000000000000002180aa6d00", @ANYRES32=r4, @ANYBLOB="00000000020000003400128009000100626f6e6400000000240002800800030004000400050006000000000008000f000000000005000d0001000000"], 0x54}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x9}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x44}}, 0x0) 1.146112689s ago: executing program 1 (id=444): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0x2001, 0x880a, 0x8}}}}}, 0x0) 1.033902093s ago: executing program 3 (id=446): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000013c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000013f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000014040)={0x0, 0x0, &(0x7f0000014000)={&(0x7f0000013fc0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044051}, 0x0) 1.000474166s ago: executing program 0 (id=447): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000380), 0x200000000000009e) 964.090949ms ago: executing program 2 (id=448): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 963.591355ms ago: executing program 1 (id=449): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 791.796359ms ago: executing program 3 (id=450): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "640ca6", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}]}}}}}, 0x0) 771.654473ms ago: executing program 0 (id=451): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1a, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0xbc}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 737.755297ms ago: executing program 4 (id=452): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0xffffffff, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/97, 0x61}], 0x1) 645.877938ms ago: executing program 2 (id=453): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000005100)=[{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x20000000000001b1, &(0x7f0000000140)=[@sndrcv={0x2c, 0x84, 0x1, {0x400, 0x8001, 0x206, 0xa, 0x2214, 0x8, 0x7, 0x4}}], 0x2c, 0x20000001}], 0x1, 0x850) 645.689323ms ago: executing program 3 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x64, r1, 0x1, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="985f15e1385b8159b67168b8bef2af10"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8e0f48efbca2759104cb3b4bac20aa5b173db43d8bf3177a95a3147f462c0af5"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000840) 605.251569ms ago: executing program 1 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) 604.723933ms ago: executing program 4 (id=456): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 555.85536ms ago: executing program 0 (id=457): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 476.060129ms ago: executing program 2 (id=458): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 461.135606ms ago: executing program 3 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 415.59875ms ago: executing program 0 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0xc8, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x92, 0xa9, @random="c80d6d4c4b1bce98c9e349befe9174f5873c8ec1fb4646a9a64ecfba32486cc5b7ffab69ed49593c682c12c24f7773da9b29fa19f98e523678d96d9393c4130c11d00b35501b99ad48a806b4082637efbf68d17f89b82c6d1f6b98d8de8da99dbb9e14bb3f48ac9d47359d9c0d7cdd9414d56c19755cc3c4e7df61a21cb3ec7f4eaf7d4d395cd2fce6165f27d300"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x84}, 0x40080) 404.26755ms ago: executing program 1 (id=461): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0xd, 0x0, 0x7}}], 0x10}, 0x40010) 392.012823ms ago: executing program 4 (id=462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) 239.798272ms ago: executing program 0 (id=463): pipe(&(0x7f0000000300)={0xffffffffffffffff}) close(r0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x81) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="47c5245aef819601d8d2a291693a2aa7", 0x10) 239.639286ms ago: executing program 1 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x10) 209.09819ms ago: executing program 2 (id=465): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 177.621953ms ago: executing program 4 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0xac}}, 0xd0) 145.543286ms ago: executing program 3 (id=467): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1a, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}]}}]}, 0xbc}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 55.746398ms ago: executing program 0 (id=468): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffc", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000fc0)="acc84198", 0x4}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 55.508436ms ago: executing program 1 (id=469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8000041) write$bt_hci(r1, &(0x7f0000000300)=ANY=[], 0x6) 51.568024ms ago: executing program 2 (id=470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000006c0)=@ccm_128={{0x304}, "00090000f500", "46cfbd632ebd3ee467c2072be634f11d", "016300", "41d200"}, 0x28) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="987923", 0x3}, {0x0}], 0x2}, 0x40) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "5a2f0f80338fb26f", "6fa237e6034d1ffb2bb5bde6b689eae5", "5feb15d7", "7b5d947b050c2f62"}, 0x28) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 0s ago: executing program 3 (id=471): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 65.913701][ T5818] cgroup: Unknown subsys name 'net' [ 66.045706][ T5818] cgroup: Unknown subsys name 'cpuset' [ 66.053806][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.415222][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.631575][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.640110][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.648046][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.656348][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.664240][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.672222][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.679991][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.693619][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.700053][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.700807][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.709084][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.721927][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.729972][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.738933][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.743649][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.746346][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.754045][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.761613][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.767683][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.774854][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.781058][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.788816][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.795260][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.808990][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.809101][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.823572][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.823653][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.830822][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.838008][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.855491][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.190083][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 70.342014][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 70.386320][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 70.424559][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 70.486996][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 70.496837][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.504609][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.511882][ T5842] bridge_slave_0: entered allmulticast mode [ 70.518857][ T5842] bridge_slave_0: entered promiscuous mode [ 70.564797][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.571851][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.579156][ T5842] bridge_slave_1: entered allmulticast mode [ 70.585746][ T5842] bridge_slave_1: entered promiscuous mode [ 70.616792][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.623987][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.631146][ T5829] bridge_slave_0: entered allmulticast mode [ 70.637888][ T5829] bridge_slave_0: entered promiscuous mode [ 70.651117][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.658406][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.665570][ T5836] bridge_slave_0: entered allmulticast mode [ 70.672096][ T5836] bridge_slave_0: entered promiscuous mode [ 70.704448][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.711553][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.718906][ T5829] bridge_slave_1: entered allmulticast mode [ 70.725511][ T5829] bridge_slave_1: entered promiscuous mode [ 70.743576][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.753626][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.760736][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.768060][ T5836] bridge_slave_1: entered allmulticast mode [ 70.775182][ T5836] bridge_slave_1: entered promiscuous mode [ 70.809086][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.874393][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.886842][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.896363][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.903935][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.911157][ T5828] bridge_slave_0: entered allmulticast mode [ 70.917886][ T5828] bridge_slave_0: entered promiscuous mode [ 70.929487][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.941002][ T5842] team0: Port device team_slave_0 added [ 70.948773][ T5842] team0: Port device team_slave_1 added [ 70.968495][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.975663][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.983094][ T5828] bridge_slave_1: entered allmulticast mode [ 70.989637][ T5828] bridge_slave_1: entered promiscuous mode [ 71.012377][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.047248][ T5836] team0: Port device team_slave_0 added [ 71.059346][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.067568][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.074895][ T5840] bridge_slave_0: entered allmulticast mode [ 71.081451][ T5840] bridge_slave_0: entered promiscuous mode [ 71.097001][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.104057][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.130116][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.143083][ T5836] team0: Port device team_slave_1 added [ 71.149242][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.156262][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.182545][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.199976][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.207224][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.214423][ T5840] bridge_slave_1: entered allmulticast mode [ 71.220943][ T5840] bridge_slave_1: entered promiscuous mode [ 71.229888][ T5829] team0: Port device team_slave_0 added [ 71.248517][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.259740][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.287337][ T5829] team0: Port device team_slave_1 added [ 71.301940][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.308986][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.335282][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.347762][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.355286][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.381594][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.392400][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.399041][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.449051][ T5828] team0: Port device team_slave_0 added [ 71.457455][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.485927][ T5842] hsr_slave_0: entered promiscuous mode [ 71.492190][ T5842] hsr_slave_1: entered promiscuous mode [ 71.500040][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.507835][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.534402][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.548364][ T5828] team0: Port device team_slave_1 added [ 71.566507][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.594374][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.601653][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.628571][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.679339][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.686764][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.713078][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.725721][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.732796][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.758729][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.777053][ T5840] team0: Port device team_slave_0 added [ 71.785141][ T5840] team0: Port device team_slave_1 added [ 71.794697][ T5836] hsr_slave_0: entered promiscuous mode [ 71.800780][ T5836] hsr_slave_1: entered promiscuous mode [ 71.806983][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.814779][ T5836] Cannot create hsr debugfs directory [ 71.895222][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.903000][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.923695][ T55] Bluetooth: hci2: command tx timeout [ 71.929478][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.934519][ T5839] Bluetooth: hci4: command tx timeout [ 71.945382][ T5837] Bluetooth: hci3: command tx timeout [ 71.950892][ T5848] Bluetooth: hci1: command tx timeout [ 71.959121][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.961906][ T5144] Bluetooth: hci0: command tx timeout [ 71.974472][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.000973][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.015727][ T5829] hsr_slave_0: entered promiscuous mode [ 72.022019][ T5829] hsr_slave_1: entered promiscuous mode [ 72.029472][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.037581][ T5829] Cannot create hsr debugfs directory [ 72.089761][ T5828] hsr_slave_0: entered promiscuous mode [ 72.096213][ T5828] hsr_slave_1: entered promiscuous mode [ 72.102110][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.109803][ T5828] Cannot create hsr debugfs directory [ 72.206475][ T5840] hsr_slave_0: entered promiscuous mode [ 72.214339][ T5840] hsr_slave_1: entered promiscuous mode [ 72.220206][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.227931][ T5840] Cannot create hsr debugfs directory [ 72.391769][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.402165][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.419326][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.456365][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.516877][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.526505][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.570132][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.588626][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.624999][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.637229][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.647793][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.671166][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.733693][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.757005][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.770664][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.780736][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.819596][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.840236][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.850812][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.872359][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.884895][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.928067][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.959490][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.966658][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.980313][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.987410][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.009567][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.081506][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.103602][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.129749][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.136879][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.164857][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.176173][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.183296][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.213519][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.220614][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.249130][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.263110][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.283374][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.290445][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.322040][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.356554][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.375773][ T4489] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.382895][ T4489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.408096][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.415191][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.425369][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.432444][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.480353][ T4489] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.487487][ T4489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.519261][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.591905][ T5829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.604151][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.645166][ T5842] veth0_vlan: entered promiscuous mode [ 73.663729][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.701719][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.726314][ T5842] veth1_vlan: entered promiscuous mode [ 73.815604][ T5842] veth0_macvtap: entered promiscuous mode [ 73.871435][ T5836] veth0_vlan: entered promiscuous mode [ 73.886487][ T5842] veth1_macvtap: entered promiscuous mode [ 73.898636][ T5836] veth1_vlan: entered promiscuous mode [ 73.967438][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.996468][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.004717][ T5144] Bluetooth: hci3: command tx timeout [ 74.010141][ T5144] Bluetooth: hci0: command tx timeout [ 74.015108][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.022335][ T5848] Bluetooth: hci1: command tx timeout [ 74.023132][ T5837] Bluetooth: hci2: command tx timeout [ 74.033347][ T5839] Bluetooth: hci4: command tx timeout [ 74.046614][ T5836] veth0_macvtap: entered promiscuous mode [ 74.058708][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.067846][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.077283][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.086752][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.104391][ T5836] veth1_macvtap: entered promiscuous mode [ 74.141273][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.180977][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.196089][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.207790][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.245483][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.255691][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.266369][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.278453][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.289449][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.298509][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.308206][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.317128][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.349456][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.381518][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.410989][ T5828] veth0_vlan: entered promiscuous mode [ 74.450417][ T5828] veth1_vlan: entered promiscuous mode [ 74.466836][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.482452][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.541275][ T5840] veth0_vlan: entered promiscuous mode [ 74.555163][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.574012][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.580604][ T5828] veth0_macvtap: entered promiscuous mode [ 74.627235][ T5828] veth1_macvtap: entered promiscuous mode [ 74.636536][ T5840] veth1_vlan: entered promiscuous mode [ 74.658118][ T5908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.672462][ T5829] veth0_vlan: entered promiscuous mode [ 74.679650][ T5908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.696858][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.704147][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.726205][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.736982][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.747863][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.758966][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.771208][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.787806][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.797867][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.808754][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.820216][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.849408][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.858604][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.868189][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.877078][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.917504][ T5829] veth1_vlan: entered promiscuous mode [ 74.976999][ T5840] veth0_macvtap: entered promiscuous mode [ 75.018881][ T5919] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 75.024552][ T5840] veth1_macvtap: entered promiscuous mode [ 75.032734][ T5919] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.041535][ T5919] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 75.049991][ T5919] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 75.070350][ T5921] FAULT_INJECTION: forcing a failure. [ 75.070350][ T5921] name failslab, interval 1, probability 0, space 0, times 1 [ 75.075947][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.091679][ T5921] CPU: 1 UID: 0 PID: 5921 Comm: syz.3.4 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 75.091704][ T5921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.091721][ T5921] Call Trace: [ 75.091727][ T5921] [ 75.091735][ T5921] dump_stack_lvl+0x241/0x360 [ 75.091773][ T5921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.091794][ T5921] ? __pfx__printk+0x10/0x10 [ 75.091825][ T5921] should_fail_ex+0x40a/0x550 [ 75.091858][ T5921] should_failslab+0xac/0x100 [ 75.091884][ T5921] ? skb_clone+0x20c/0x390 [ 75.091904][ T5921] kmem_cache_alloc_noprof+0x70/0x380 [ 75.091940][ T5921] skb_clone+0x20c/0x390 [ 75.091983][ T5921] __netlink_deliver_tap+0x3c4/0x7f0 [ 75.092027][ T5921] ? netlink_deliver_tap+0x2e/0x1b0 [ 75.092057][ T5921] netlink_deliver_tap+0x19d/0x1b0 [ 75.092090][ T5921] netlink_unicast+0x7c4/0x990 [ 75.092127][ T5921] ? __pfx_netlink_unicast+0x10/0x10 [ 75.092152][ T5921] ? __virt_addr_valid+0x45f/0x530 [ 75.092175][ T5921] ? __phys_addr_symbol+0x2f/0x70 [ 75.092196][ T5921] ? __check_object_size+0x47a/0x730 [ 75.092231][ T5921] netlink_sendmsg+0x8de/0xcb0 [ 75.092276][ T5921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.092312][ T5921] ? aa_sock_msg_perm+0x91/0x160 [ 75.092351][ T5921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.092381][ T5921] __sock_sendmsg+0x221/0x270 [ 75.092415][ T5921] ____sys_sendmsg+0x53a/0x860 [ 75.092448][ T5921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.092476][ T5921] ? __fget_files+0x2a/0x410 [ 75.092511][ T5921] ? __fget_files+0x2a/0x410 [ 75.092559][ T5921] __sys_sendmsg+0x269/0x350 [ 75.092589][ T5921] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.092628][ T5921] ? do_sys_openat2+0x17a/0x1d0 [ 75.092688][ T5921] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.092724][ T5921] ? do_syscall_64+0x100/0x230 [ 75.092755][ T5921] ? do_syscall_64+0xb6/0x230 [ 75.092785][ T5921] do_syscall_64+0xf3/0x230 [ 75.092812][ T5921] ? clear_bhb_loop+0x35/0x90 [ 75.092847][ T5921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.092882][ T5921] RIP: 0033:0x7f2800d8d169 [ 75.092906][ T5921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.092924][ T5921] RSP: 002b:00007f2801c74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.092947][ T5921] RAX: ffffffffffffffda RBX: 00007f2800fa5fa0 RCX: 00007f2800d8d169 [ 75.092963][ T5921] RDX: 0000000020000014 RSI: 00004000000001c0 RDI: 0000000000000003 [ 75.092977][ T5921] RBP: 00007f2801c74090 R08: 0000000000000000 R09: 0000000000000000 [ 75.092991][ T5921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.093004][ T5921] R13: 0000000000000000 R14: 00007f2800fa5fa0 R15: 00007ffe926e6fe8 [ 75.093037][ T5921] [ 75.228397][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.233490][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.305823][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.316608][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.411955][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.425565][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.436062][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.461706][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.492431][ T5829] veth0_macvtap: entered promiscuous mode [ 75.587366][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.600761][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.612386][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.623237][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.633961][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.644577][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.655837][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.668378][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.677287][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.688167][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.697289][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.714735][ T5829] veth1_macvtap: entered promiscuous mode [ 75.736279][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.778037][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.809302][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.839779][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.850181][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.865908][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.879398][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.890771][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.900880][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.913820][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.925030][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.970286][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.989573][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.001638][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.012922][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.033038][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.050551][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.083136][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.094106][ T5839] Bluetooth: hci4: command tx timeout [ 76.099909][ T5839] Bluetooth: hci2: command tx timeout [ 76.105630][ T5839] Bluetooth: hci0: command tx timeout [ 76.111042][ T5839] Bluetooth: hci1: command tx timeout [ 76.116574][ T5837] Bluetooth: hci3: command tx timeout [ 76.123923][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.141051][ T5939] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7'. [ 76.155492][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.187181][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.195309][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.213965][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 76.300842][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.309330][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.312596][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.331859][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.388233][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.410230][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.419215][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.432637][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.828347][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.890613][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.903803][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.929030][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.130229][ T5955] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9'. [ 77.248754][ T5960] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 77.491423][ T5964] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.578654][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 77.642405][ T5968] Bluetooth: MGMT ver 1.23 [ 77.714299][ T5964] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 77.721905][ T5964] netlink: 'syz.1.13': attribute type 4 has an invalid length. [ 77.760090][ T5964] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.13'. [ 77.967017][ T5988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 77.976251][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 77.985357][ T5988] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 78.149211][ T5994] nft_compat: unsupported protocol 0 [ 78.167257][ T5839] Bluetooth: hci1: command tx timeout [ 78.173432][ T5837] Bluetooth: hci3: command tx timeout [ 78.174173][ T55] Bluetooth: hci2: command tx timeout [ 78.178826][ T5837] Bluetooth: hci4: command tx timeout [ 78.189898][ T5848] Bluetooth: hci0: command tx timeout [ 78.355761][ T5988] nbd: socks must be embedded in a SOCK_ITEM attr [ 78.362854][ T5988] block nbd1: shutting down sockets [ 79.442361][ T6024] Zero length message leads to an empty skb [ 79.508277][ T6024] FAULT_INJECTION: forcing a failure. [ 79.508277][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.587802][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.4.31 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 79.587827][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.587838][ T6024] Call Trace: [ 79.587844][ T6024] [ 79.587852][ T6024] dump_stack_lvl+0x241/0x360 [ 79.587879][ T6024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.587900][ T6024] ? __pfx__printk+0x10/0x10 [ 79.587920][ T6024] ? __pfx_lock_release+0x10/0x10 [ 79.587954][ T6024] should_fail_ex+0x40a/0x550 [ 79.587986][ T6024] _copy_from_iter+0x1df/0x1c40 [ 79.588010][ T6024] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 79.588039][ T6024] ? packet_cached_dev_get+0x1c/0x2b0 [ 79.588072][ T6024] ? __pfx__copy_from_iter+0x10/0x10 [ 79.588092][ T6024] ? mark_lock+0x9a/0x360 [ 79.588116][ T6024] ? packet_cached_dev_get+0x1c/0x2b0 [ 79.588146][ T6024] packet_sendmsg+0x3c98/0x6d50 [ 79.588184][ T6024] ? mark_lock+0x9a/0x360 [ 79.588210][ T6024] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 79.588268][ T6024] ? __pfx_packet_sendmsg+0x10/0x10 [ 79.588290][ T6024] ? aa_sk_perm+0x96d/0xab0 [ 79.588326][ T6024] ? __pfx_aa_sk_perm+0x10/0x10 [ 79.588352][ T6024] ? __fget_files+0x2a/0x410 [ 79.588378][ T6024] ? aa_sock_msg_perm+0x91/0x160 [ 79.588409][ T6024] ? __pfx_packet_sendmsg+0x10/0x10 [ 79.588431][ T6024] __sock_sendmsg+0x221/0x270 [ 79.588458][ T6024] __sys_sendto+0x363/0x4c0 [ 79.588480][ T6024] ? __pfx___sys_sendto+0x10/0x10 [ 79.588509][ T6024] ? __fget_files+0x2a/0x410 [ 79.588543][ T6024] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.588572][ T6024] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.588604][ T6024] __x64_sys_sendto+0xde/0x100 [ 79.588625][ T6024] do_syscall_64+0xf3/0x230 [ 79.588647][ T6024] ? clear_bhb_loop+0x35/0x90 [ 79.588676][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.588700][ T6024] RIP: 0033:0x7fbc1418d169 [ 79.588715][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.588730][ T6024] RSP: 002b:00007fbc150bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 79.588748][ T6024] RAX: ffffffffffffffda RBX: 00007fbc143a5fa0 RCX: 00007fbc1418d169 [ 79.588761][ T6024] RDX: 000000000000fc13 RSI: 0000400000000280 RDI: 0000000000000004 [ 79.588772][ T6024] RBP: 00007fbc150bb090 R08: 0000000000000000 R09: 000000000000002f [ 79.588786][ T6024] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 79.588797][ T6024] R13: 0000000000000000 R14: 00007fbc143a5fa0 R15: 00007fff67229a58 [ 79.588822][ T6024] [ 79.692700][ T5144] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 80.242942][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.435511][ T6048] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.471241][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.969265][ T6061] __nla_validate_parse: 6 callbacks suppressed [ 80.969284][ T6061] netlink: 56 bytes leftover after parsing attributes in process `syz.4.41'. [ 81.040504][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 82.030798][ T6085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.48'. [ 82.131934][ T6087] netlink: 'syz.2.49': attribute type 4 has an invalid length. [ 82.174409][ T6087] netlink: 'syz.2.49': attribute type 1 has an invalid length. [ 82.207125][ T6087] netlink: 224 bytes leftover after parsing attributes in process `syz.2.49'. [ 82.229149][ T6089] netlink: 'syz.4.51': attribute type 7 has an invalid length. [ 82.272603][ T6089] netlink: 'syz.4.51': attribute type 5 has an invalid length. [ 82.353685][ T6094] syz.1.50 (6094) used obsolete PPPIOCDETACH ioctl [ 82.391124][ T6091] xt_time: unknown flags 0x4 [ 82.550559][ T6096] netlink: 56 bytes leftover after parsing attributes in process `syz.4.53'. [ 82.588247][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 82.683889][ T6102] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.545777][ T6129] syzkaller0: entered promiscuous mode [ 83.556232][ T6129] syzkaller0: entered allmulticast mode [ 85.353698][ T6146] syzkaller0: entered promiscuous mode [ 85.359247][ T6146] syzkaller0: entered allmulticast mode [ 86.736096][ T975] cfg80211: failed to load regulatory.db [ 88.306721][ T6230] syzkaller0: entered promiscuous mode [ 88.312262][ T6230] syzkaller0: entered allmulticast mode [ 88.353578][ T6236] ±ÿ: renamed from bond_slave_0 (while UP) [ 88.720313][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 90.333311][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 90.517783][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 90.585950][ T6295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.131'. [ 91.771735][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.650324][ T6395] syzkaller0: entered promiscuous mode [ 93.657265][ T6395] syzkaller0: entered allmulticast mode [ 93.721000][ T6401] veth3: entered promiscuous mode [ 93.733001][ T6401] veth3: entered allmulticast mode [ 94.160827][ T6427] netlink: 'syz.3.183': attribute type 27 has an invalid length. [ 95.198254][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.206277][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.369537][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.401866][ T6427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.521043][ T6427] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.531423][ T6427] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.547859][ T6427] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.567016][ T6427] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.719517][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.744310][ T6428] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.760388][ T6428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.861095][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 96.536090][ T6469] wireguard0: entered promiscuous mode [ 96.541713][ T6469] wireguard0: entered allmulticast mode [ 96.622307][ T6476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 96.672632][ T6478] xt_bpf: check failed: parse error [ 96.993131][ T6488] netlink: 'syz.2.209': attribute type 8 has an invalid length. [ 97.250942][ T6494] sch_fq: defrate 0 ignored. [ 97.332920][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 97.351844][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.393456][ T6497] batadv_slave_0: entered promiscuous mode [ 97.752910][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.224'. [ 101.267247][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 102.864374][ T6681] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 103.420595][ T6711] sock: sock_timestamping_bind_phc: sock not bind to device [ 104.816976][ T6775] syzkaller1: entered promiscuous mode [ 104.837412][ T6775] syzkaller1: entered allmulticast mode [ 105.350630][ T6798] xt_hashlimit: size too large, truncated to 1048576 [ 105.767373][ T6814] syzkaller1: entered promiscuous mode [ 105.783597][ T6814] syzkaller1: entered allmulticast mode [ 105.866580][ T6820] vxcan1: entered promiscuous mode [ 105.963219][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 106.063554][ T6828] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.373107][ T6844] macvlan0: entered allmulticast mode [ 106.439983][ T6851] xt_hashlimit: size too large, truncated to 1048576 [ 106.469903][ T6853] netlink: 128 bytes leftover after parsing attributes in process `syz.3.362'. [ 106.620560][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 107.249996][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 107.635820][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 107.657630][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 107.877665][ T6940] xt_hashlimit: size too large, truncated to 1048576 [ 108.257962][ T6958] batman_adv: batadv0: Adding interface: dummy0 [ 108.264576][ T6958] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.326108][ T6958] batman_adv: batadv0: Interface activated: dummy0 [ 108.349148][ T6962] xt_hashlimit: size too large, truncated to 1048576 [ 108.710963][ T6978] vlan0: entered promiscuous mode [ 109.283912][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 109.292902][ T7001] netlink: 'syz.0.408': attribute type 3 has an invalid length. [ 109.314831][ T7006] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.410'. [ 109.334702][ T7003] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 109.350957][ T7009] Driver unsupported XDP return value 0 on prog (id 109) dev N/A, expect packet loss! [ 109.375780][ T7006] openvswitch: netlink: Message has 44053 unknown bytes. [ 109.394732][ T7003] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 110.465217][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.430'. [ 110.746282][ T7067] netlink: 'syz.3.434': attribute type 32 has an invalid length. [ 111.728011][ T7074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 111.870502][ T7082] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 111.879865][ T7077] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 111.917273][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.924841][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.987926][ T7086] tipc: Can't bind to reserved service type 1 [ 111.993023][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.001366][ T7082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.009392][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.016550][ T7082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.054293][ T7082] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 112.091201][ T7077] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 112.306040][ T7099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 112.693555][ T7116] netlink: 'syz.4.456': attribute type 8 has an invalid length. [ 112.836756][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 112.846904][ T7119] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.458'. [ 112.854354][ T7123] netlink: 16 bytes leftover after parsing attributes in process `syz.3.459'. [ 112.877504][ T7119] openvswitch: netlink: Message has 44053 unknown bytes. [ 112.922931][ T7123] gretap0: entered promiscuous mode [ 113.156135][ T7136] ------------[ cut here ]------------ [ 113.161646][ T7136] RTNL: assertion failed at net/core/dev.c (1770) [ 113.214455][ T7136] WARNING: CPU: 1 PID: 7136 at net/core/dev.c:1770 dev_setup_tc+0x315/0x360 [ 113.223587][ T7136] Modules linked in: [ 113.227523][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.4.466 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 113.231627][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 113.238329][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.257544][ T7136] RIP: 0010:dev_setup_tc+0x315/0x360 [ 113.263178][ T7136] Code: cc 49 89 ee e8 5c d5 f7 f7 c6 05 40 24 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba ea 06 00 00 e8 bc 91 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff [ 113.283408][ T7136] RSP: 0018:ffffc900037965d0 EFLAGS: 00010246 [ 113.289522][ T7136] RAX: 984cb21063bf6600 RBX: 0000000000000000 RCX: 0000000000080000 [ 113.298500][ T7136] RDX: ffffc9000ccba000 RSI: 000000000000435a RDI: 000000000000435b [ 113.306598][ T7136] RBP: ffff88807d140008 R08: ffffffff81819e32 R09: fffffbfff1d3a67c [ 113.314695][ T7136] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffffc900037968b0 [ 113.322765][ T7136] R13: ffffffff8cced600 R14: ffff88807d140008 R15: ffff88807d140000 [ 113.330784][ T7136] FS: 00007fbc150bb6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 113.339775][ T7136] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.346430][ T7136] CR2: 00005555949c0808 CR3: 0000000031762000 CR4: 00000000003526f0 [ 113.354455][ T7136] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 113.362491][ T7136] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 113.370702][ T7136] Call Trace: [ 113.374548][ T7136] [ 113.377509][ T7136] ? __warn+0x165/0x4d0 [ 113.381687][ T7136] ? dev_setup_tc+0x315/0x360 [ 113.386432][ T7136] ? report_bug+0x2b3/0x500 [ 113.390962][ T7136] ? dev_setup_tc+0x315/0x360 [ 113.395719][ T7136] ? handle_bug+0x60/0x90 [ 113.400087][ T7136] ? exc_invalid_op+0x1a/0x50 [ 113.404879][ T7136] ? asm_exc_invalid_op+0x1a/0x20 [ 113.409968][ T7136] ? __warn_printk+0x292/0x360 [ 113.414831][ T7136] ? dev_setup_tc+0x315/0x360 [ 113.419554][ T7136] nft_chain_offload_cmd+0x2b9/0x8b0 [ 113.424915][ T7136] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 113.430757][ T7136] ? mark_lock+0x9a/0x360 [ 113.435168][ T7136] ? __lock_acquire+0x1397/0x2100 [ 113.440266][ T7136] ? __pfx_lock_release+0x10/0x10 [ 113.445392][ T7136] ? nft_pernet+0x45/0x270 [ 113.449841][ T7136] nft_flow_rule_offload_commit+0x98d/0x1e80 [ 113.455910][ T7136] ? __pfx_lock_acquire+0x10/0x10 [ 113.460980][ T7136] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 113.467520][ T7136] ? mark_lock+0x9a/0x360 [ 113.472112][ T7136] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.478722][ T7136] ? smp_call_function_many_cond+0x17bc/0x2d30 [ 113.484968][ T7136] ? lockdep_hardirqs_on+0x99/0x150 [ 113.490196][ T7136] ? __pfx_validate_chain+0x10/0x10 [ 113.495476][ T7136] ? smp_call_function_many_cond+0x2602/0x2d30 [ 113.501668][ T7136] ? mark_lock+0x9a/0x360 [ 113.506076][ T7136] ? __lock_acquire+0x1397/0x2100 [ 113.511163][ T7136] ? __pfx_lock_acquire+0x10/0x10 [ 113.516263][ T7136] ? nft_pernet+0x23/0x240 [ 113.520704][ T7136] ? __pfx_lock_release+0x10/0x10 [ 113.526003][ T7136] ? nft_pernet+0x23/0x240 [ 113.530467][ T7136] ? nft_pernet+0x1ef/0x240 [ 113.535032][ T7136] ? nf_tables_validate+0x3e4/0x440 [ 113.540267][ T7136] ? nft_pernet+0x23/0x240 [ 113.544746][ T7136] ? __pfx_lock_release+0x10/0x10 [ 113.549807][ T7136] ? __pfx_nf_tables_validate+0x10/0x10 [ 113.555430][ T7136] ? cpus_read_unlock+0xa6/0x140 [ 113.560413][ T7136] nf_tables_commit+0x7f2/0x9170 [ 113.565432][ T7136] ? nf_tables_register_hook+0x287/0x300 [ 113.571096][ T7136] ? nf_tables_newchain+0x2ca7/0x3310 [ 113.576784][ T7136] ? __pfx_nf_tables_commit+0x10/0x10 [ 113.582225][ T7136] ? __pfx_lock_acquire+0x10/0x10 [ 113.587516][ T7136] ? nfnl_pernet+0x23/0x240 [ 113.592096][ T7136] ? __nla_parse+0x40/0x60 [ 113.596589][ T7136] nfnetlink_rcv+0xc77/0x2ab0 [ 113.601321][ T7136] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 113.606759][ T7136] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.612002][ T7136] ? skb_clone+0x240/0x390 [ 113.616492][ T7136] ? __pfx_lock_release+0x10/0x10 [ 113.621570][ T7136] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.626842][ T7136] netlink_unicast+0x7f6/0x990 [ 113.631641][ T7136] ? __pfx_netlink_unicast+0x10/0x10 [ 113.637071][ T7136] ? __virt_addr_valid+0x45f/0x530 [ 113.642239][ T7136] ? __phys_addr_symbol+0x2f/0x70 [ 113.647375][ T7136] ? __check_object_size+0x47a/0x730 [ 113.652780][ T7136] netlink_sendmsg+0x8de/0xcb0 [ 113.657607][ T7136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.662993][ T7136] ? aa_sock_msg_perm+0x91/0x160 [ 113.667970][ T7136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.673335][ T7136] __sock_sendmsg+0x221/0x270 [ 113.678174][ T7136] ____sys_sendmsg+0x53a/0x860 [ 113.683374][ T7136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.688686][ T7136] ? __fget_files+0x2a/0x410 [ 113.693377][ T7136] ? __fget_files+0x2a/0x410 [ 113.697997][ T7136] __sys_sendmsg+0x269/0x350 [ 113.702692][ T7136] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.707899][ T7136] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.714296][ T7136] ? do_syscall_64+0x100/0x230 [ 113.719083][ T7136] ? do_syscall_64+0xb6/0x230 [ 113.723827][ T7136] do_syscall_64+0xf3/0x230 [ 113.728361][ T7136] ? clear_bhb_loop+0x35/0x90 [ 113.733129][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.739082][ T7136] RIP: 0033:0x7fbc1418d169 [ 113.743571][ T7136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.763430][ T7136] RSP: 002b:00007fbc150bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.771871][ T7136] RAX: ffffffffffffffda RBX: 00007fbc143a5fa0 RCX: 00007fbc1418d169 [ 113.780090][ T7136] RDX: 00000000000000d0 RSI: 000040000000c2c0 RDI: 0000000000000003 [ 113.788314][ T7136] RBP: 00007fbc1420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.796369][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.804398][ T7136] R13: 0000000000000000 R14: 00007fbc143a5fa0 R15: 00007fff67229a58 [ 113.812421][ T7136] [ 113.815568][ T7136] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.822871][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.4.466 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 113.833479][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.843556][ T7136] Call Trace: [ 113.846846][ T7136] [ 113.849802][ T7136] dump_stack_lvl+0x241/0x360 [ 113.854483][ T7136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.859699][ T7136] ? __pfx__printk+0x10/0x10 [ 113.864322][ T7136] ? vscnprintf+0x5d/0x90 [ 113.868678][ T7136] panic+0x349/0x880 [ 113.872589][ T7136] ? __warn+0x174/0x4d0 [ 113.876763][ T7136] ? __pfx_panic+0x10/0x10 [ 113.881197][ T7136] __warn+0x344/0x4d0 [ 113.885196][ T7136] ? dev_setup_tc+0x315/0x360 [ 113.889894][ T7136] report_bug+0x2b3/0x500 [ 113.894228][ T7136] ? dev_setup_tc+0x315/0x360 [ 113.898916][ T7136] handle_bug+0x60/0x90 [ 113.903078][ T7136] exc_invalid_op+0x1a/0x50 [ 113.907600][ T7136] asm_exc_invalid_op+0x1a/0x20 [ 113.912460][ T7136] RIP: 0010:dev_setup_tc+0x315/0x360 [ 113.917776][ T7136] Code: cc 49 89 ee e8 5c d5 f7 f7 c6 05 40 24 5d 06 01 90 48 c7 c7 a0 5e 2e 8d 48 c7 c6 80 5e 2e 8d ba ea 06 00 00 e8 bc 91 b7 f7 90 <0f> 0b 90 90 e9 66 fd ff ff 89 d1 80 e1 07 38 c1 0f 8c aa fd ff ff [ 113.937377][ T7136] RSP: 0018:ffffc900037965d0 EFLAGS: 00010246 [ 113.943446][ T7136] RAX: 984cb21063bf6600 RBX: 0000000000000000 RCX: 0000000000080000 [ 113.951418][ T7136] RDX: ffffc9000ccba000 RSI: 000000000000435a RDI: 000000000000435b [ 113.959392][ T7136] RBP: ffff88807d140008 R08: ffffffff81819e32 R09: fffffbfff1d3a67c [ 113.967360][ T7136] R10: dffffc0000000000 R11: fffffbfff1d3a67c R12: ffffc900037968b0 [ 113.975328][ T7136] R13: ffffffff8cced600 R14: ffff88807d140008 R15: ffff88807d140000 [ 113.983304][ T7136] ? __warn_printk+0x292/0x360 [ 113.988075][ T7136] nft_chain_offload_cmd+0x2b9/0x8b0 [ 113.993369][ T7136] ? __pfx_nft_chain_offload_cmd+0x10/0x10 [ 113.999183][ T7136] ? mark_lock+0x9a/0x360 [ 114.003518][ T7136] ? __lock_acquire+0x1397/0x2100 [ 114.008571][ T7136] ? __pfx_lock_release+0x10/0x10 [ 114.013610][ T7136] ? nft_pernet+0x45/0x270 [ 114.018026][ T7136] nft_flow_rule_offload_commit+0x98d/0x1e80 [ 114.024005][ T7136] ? __pfx_lock_acquire+0x10/0x10 [ 114.029048][ T7136] ? __pfx_nft_flow_rule_offload_commit+0x10/0x10 [ 114.035469][ T7136] ? mark_lock+0x9a/0x360 [ 114.039805][ T7136] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.046140][ T7136] ? smp_call_function_many_cond+0x17bc/0x2d30 [ 114.052299][ T7136] ? lockdep_hardirqs_on+0x99/0x150 [ 114.057508][ T7136] ? __pfx_validate_chain+0x10/0x10 [ 114.062710][ T7136] ? smp_call_function_many_cond+0x2602/0x2d30 [ 114.068875][ T7136] ? mark_lock+0x9a/0x360 [ 114.073218][ T7136] ? __lock_acquire+0x1397/0x2100 [ 114.078275][ T7136] ? __pfx_lock_acquire+0x10/0x10 [ 114.083300][ T7136] ? nft_pernet+0x23/0x240 [ 114.087712][ T7136] ? __pfx_lock_release+0x10/0x10 [ 114.092770][ T7136] ? nft_pernet+0x23/0x240 [ 114.097200][ T7136] ? nft_pernet+0x1ef/0x240 [ 114.101698][ T7136] ? nf_tables_validate+0x3e4/0x440 [ 114.106901][ T7136] ? nft_pernet+0x23/0x240 [ 114.111311][ T7136] ? __pfx_lock_release+0x10/0x10 [ 114.116346][ T7136] ? __pfx_nf_tables_validate+0x10/0x10 [ 114.121893][ T7136] ? cpus_read_unlock+0xa6/0x140 [ 114.126837][ T7136] nf_tables_commit+0x7f2/0x9170 [ 114.131781][ T7136] ? nf_tables_register_hook+0x287/0x300 [ 114.137412][ T7136] ? nf_tables_newchain+0x2ca7/0x3310 [ 114.142813][ T7136] ? __pfx_nf_tables_commit+0x10/0x10 [ 114.148210][ T7136] ? __pfx_lock_acquire+0x10/0x10 [ 114.153235][ T7136] ? nfnl_pernet+0x23/0x240 [ 114.157751][ T7136] ? __nla_parse+0x40/0x60 [ 114.162178][ T7136] nfnetlink_rcv+0xc77/0x2ab0 [ 114.166883][ T7136] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.172064][ T7136] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.177292][ T7136] ? skb_clone+0x240/0x390 [ 114.181711][ T7136] ? __pfx_lock_release+0x10/0x10 [ 114.186751][ T7136] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.191961][ T7136] netlink_unicast+0x7f6/0x990 [ 114.196754][ T7136] ? __pfx_netlink_unicast+0x10/0x10 [ 114.202045][ T7136] ? __virt_addr_valid+0x45f/0x530 [ 114.207160][ T7136] ? __phys_addr_symbol+0x2f/0x70 [ 114.212184][ T7136] ? __check_object_size+0x47a/0x730 [ 114.217484][ T7136] netlink_sendmsg+0x8de/0xcb0 [ 114.222263][ T7136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.227562][ T7136] ? aa_sock_msg_perm+0x91/0x160 [ 114.232519][ T7136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.237813][ T7136] __sock_sendmsg+0x221/0x270 [ 114.242506][ T7136] ____sys_sendmsg+0x53a/0x860 [ 114.247283][ T7136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.252567][ T7136] ? __fget_files+0x2a/0x410 [ 114.257170][ T7136] ? __fget_files+0x2a/0x410 [ 114.261766][ T7136] __sys_sendmsg+0x269/0x350 [ 114.266354][ T7136] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.271494][ T7136] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.277826][ T7136] ? do_syscall_64+0x100/0x230 [ 114.282595][ T7136] ? do_syscall_64+0xb6/0x230 [ 114.287287][ T7136] do_syscall_64+0xf3/0x230 [ 114.291804][ T7136] ? clear_bhb_loop+0x35/0x90 [ 114.296504][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.302405][ T7136] RIP: 0033:0x7fbc1418d169 [ 114.306824][ T7136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.326427][ T7136] RSP: 002b:00007fbc150bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.335280][ T7136] RAX: ffffffffffffffda RBX: 00007fbc143a5fa0 RCX: 00007fbc1418d169 [ 114.343262][ T7136] RDX: 00000000000000d0 RSI: 000040000000c2c0 RDI: 0000000000000003 [ 114.351230][ T7136] RBP: 00007fbc1420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.359200][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.367170][ T7136] R13: 0000000000000000 R14: 00007fbc143a5fa0 R15: 00007fff67229a58 [ 114.375157][ T7136] [ 114.378496][ T7136] Kernel Offset: disabled [ 114.382878][ T7136] Rebooting in 86400 seconds..