last executing test programs: 1m6.723521764s ago: executing program 0 (id=1880): unshare(0x24040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xff, 0x9, 0x60, 0x2, 0xffff}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000000000830300072a00443c00030a010101000000000000000000000000ac14140000000000ac14142d000000000000000000000000ac141400000000000000ad8c0721fe54563d9f74e1e27e8400"/144], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xb61, 0x4) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904ff810000000400004b000000000000000001000000", 0x24) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 57.330901069s ago: executing program 2 (id=1820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000001a0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 55.527866463s ago: executing program 0 (id=1880): unshare(0x24040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xff, 0x9, 0x60, 0x2, 0xffff}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000000000830300072a00443c00030a010101000000000000000000000000ac14140000000000ac14142d000000000000000000000000ac141400000000000000ad8c0721fe54563d9f74e1e27e8400"/144], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xb61, 0x4) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904ff810000000400004b000000000000000001000000", 0x24) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 44.655194965s ago: executing program 2 (id=1820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000001a0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 42.902306266s ago: executing program 0 (id=1880): unshare(0x24040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xff, 0x9, 0x60, 0x2, 0xffff}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000000000830300072a00443c00030a010101000000000000000000000000ac14140000000000ac14142d000000000000000000000000ac141400000000000000ad8c0721fe54563d9f74e1e27e8400"/144], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xb61, 0x4) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904ff810000000400004b000000000000000001000000", 0x24) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 33.574174163s ago: executing program 2 (id=1820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000001a0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 31.398629636s ago: executing program 0 (id=1880): unshare(0x24040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xff, 0x9, 0x60, 0x2, 0xffff}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000000000830300072a00443c00030a010101000000000000000000000000ac14140000000000ac14142d000000000000000000000000ac141400000000000000ad8c0721fe54563d9f74e1e27e8400"/144], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xb61, 0x4) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904ff810000000400004b000000000000000001000000", 0x24) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 22.489310125s ago: executing program 2 (id=1820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000001a0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 20.559648422s ago: executing program 0 (id=1880): unshare(0x24040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xff, 0x9, 0x60, 0x2, 0xffff}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000000000830300072a00443c00030a010101000000000000000000000000ac14140000000000ac14142d000000000000000000000000ac141400000000000000ad8c0721fe54563d9f74e1e27e8400"/144], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xb61, 0x4) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904ff810000000400004b000000000000000001000000", 0x24) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 10.883551445s ago: executing program 2 (id=1820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000001a0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8.282355338s ago: executing program 0 (id=1880): unshare(0x24040400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xff, 0x9, 0x60, 0x2, 0xffff}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x82, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000000000830300072a00443c00030a010101000000000000000000000000ac14140000000000ac14142d000000000000000000000000ac141400000000000000ad8c0721fe54563d9f74e1e27e8400"/144], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xb61, 0x4) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904ff810000000400004b000000000000000001000000", 0x24) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 3.179299842s ago: executing program 1 (id=3207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e21, 0x73b0, 0x4e20, 0x0, 0x2, 0xa0, 0x0, 0x2e, 0x0, r6}, {0x3, 0x6, 0x1, 0x5, 0xd553, 0xfffffffffffffff9, 0x6}, {0x0, 0x7, 0x3, 0x1ffc00000}, 0xe, 0x6e6bbf, 0x2, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d5, 0x32}, 0xa, @in=@remote, 0x3502, 0x4, 0x2, 0x7, 0xffffff2c, 0x3, 0xb22}}, 0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0, 0x0}, &(0x7f0000001680)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000016c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0}, &(0x7f0000001740)=0xc) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r11 = getgid() ioctl$TUNSETGROUP(r10, 0x400454ce, r11) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001780)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000001880)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, &(0x7f0000001900)=0xc) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000003800048034000180090001007866726d0000000024000280080001400000000d0500030000000000080004400000008b08000240000000030900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0xc0000}, 0x0) r16 = socket$inet_udplite(0x2, 0x2, 0x88) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001940)={0x0, 0xa7a, 0x10}, 0xc) sendmmsg$unix(r3, &(0x7f0000001a40)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000400)="2031f0920b87a84bf0652cdb4fa4e9a2023b1b89eeff8c171333f4128207b918058c450fe6bfc60acb45a8eab4ca28d373646775e9765614dba59f569f01c0fb94c0dba3b9bda8ae00345fcc9991e4722935a80db6e8ec661d669ef27a81791292518275ea82599cd7d292be4f9d6dc08525ac2297b7bfc59c25e6aff367230487342d12755ff90df061e918e569ac94936a75ee5fcdefb6115964ea7c7b6c660830dc4d168f5dcbcfc734b3e1e94a53a2ae7725ef357973a6191f0a1849d73aab88620d1f955b485fecb96bd49a4b7f50bdbd69291100eced44a414fb6c2ea460674d150dd45aabf54bb63fb8cac6f2cdca4f34332fcf558d922dfbfde613c4e6744328596e0c7b6b49f4d8a69f81a58ec346e88b1cc9d0ccb1eed038653e592a9913e0281d99f97c30ab97f26bafc12ab4e38afdc2df8a56b59e33aaf6abf57adc43e78214ca71eef5df97b3ff08d82e41dfb77548a2da370e5897e133c15a07cdacbda1b09b55f67ba3ce50a01890b9a2e1dcae857616741c391960fa2fe257fb0a33ceb1ca2e0d7c3789db70ac9d0957e8a5aba41e2e75b9f624f52f1bc0c88eeba9a5650a4021c26918b13853e9b8cbc31a345f0336dca4456be70247e02526a94b47b817b96566d14beb81be7520b18f465b3f75e217c27c88043e6a8db9f215f6a93faedf39da9616518841357d30768140bd8d9867b4aa4d611b68d56fc1659d5e4ea1c1cd0e453f878fafc8c0f0f2bcd88361b76a4e80415e6fae2a0902cd26da85e6e007ea4e4bc688ab60bc88431cf1e8d7f3f97b1c041d6ff53b0af0dfb6341813b14216b637d4b35ab16c1e9162a0cbc2175ede5c00fa50bf290a1ed4eb3e1e93924063eaa83ccbd5c49623579abc2dc7af88eb8e25d60ab91d1cfeb1c79c758f415c1d06ede389cea247bf71f3aa25c5a5d3add2d68b9c6c405ee4faa16254531e62d58690b6d9a144f5709ca29192cc28a6bfb4e49a2b4be53b3b40ae9c8efbdb086f63950955c3cd05d2494003067eb4df4c15c4b20f8546aa4dc304a6544d654301db61f2b0d2fdf82fe075c498f5c0389ec41392bdef4a66597d8c119d885c5f9b688c37ac6f0a83e6e655d3d7c247daed195e885eca5a5023fd115134cbc0a423b955dca9eeffe7c76cf637db72d425acff4ab8f42d0bc7099e51f14c94cd3fafbbd4cfe462c2065a2412e6046ea0437012b31de8784026b047ebd1ad462e6053b6039f7cf64dec50065f0707ee60442f33220d7a25005da90380b7562743e03482819185cbe3d20089af8a7b00e5f7fa50b1e48f7e487f8aa6f4087497b39bb34485d693749b823e9c6fea042f8a2dba6c68c37834a912a12d3d522de7c2a3498e0585b2bb04871d17ef3312a570f84189c48f39371bc9100618f1cd348b3016d5f1355fac8f9e93f26fa9c482c31f3a26d0910d719b8be3d885daced81682a2b7764be5a7a8152a73b1ec15d36501a5064f8f7f8d95312d322d0dea9128aeab3805e047d4ea0ce06a5851c616e38320acbe934637a8f1fdbd1536e6baabaebbc350d3f92aaa3b3d8ade0e7ee4fb81eafd1df038bad1836bf8826087c53caf89af9943ccb13930196c206e3264b17ce19514724ea6ff50b977e1e4eee8f64a937bfaabb8dbe188a1c6f5688f4a21bffc39a0f186c0d6d3b1b7bec89d2c43fcae3225653e41eb6610ed46bfca8cf591f7b33fd695bc7eb95629da8e7e9770ed1863a833993ccacd6a3cea6b19dd6fad326f650f3ecfd70339e5b364c254018dfe2f6c4d5edc7eda3a04b03db772083802ed608ea2a00b73983554c3fce3e598a5cadcaa3352670c27866a17a7f67fd6368751a196cae2e355d80f40e7f0dcd5643a10a4524c92677a6d36348b9e7174c470ea14658e7f37cfe510ac9e2c59e45e829e6f66432fd8d17281ae2ca6f34a73ce550dc2439003b8ca9b7c97da4496e97634ca5f423eb86ac0cb5a22cf9f29c9e838f80d27025c2e2bbd5439f309d5363671be604d8dc6bcb0aebc56c30ea249dd33eed8c4a2ea27f2b841fd5c89d07ad109845349c731f7c39dc2363e70b30e61500edd7f679caefbbef405f8ec4948fa53bbcce3a9cfc0b631e27cdedc9f213b7023589a9974d0eaf341935cbda430b400eadb22a2d88de96f2f65a84bfcdeb013fbcca65b09802f0c24d56a0dbb7d88c3f4033d224910081f58f38611a0050e8e54dedd64093a65d897ff6a9ac8653c0c035c9b52fffb440b22e558e81e5e29ca49db6d16a36d925f036917cf874ab5a649c1f42c12293f8ed52f614b930b2e14abe001cf13b1564d508743289501e91a3ab46a59ba776ab6b050fcdcea9d3905b357f4736beb98ceb5ec4a7d4b61cec87fcdf833e2c6867c846a1d762a81f4c9b8f5093e8b83d2e695770271ca6599b02c1983ffe07505003626f8de73ce98c1413f24cc32297a24248772eef962a8a51cbf16b08108ce6af159b675cede5c6da262cb346246a29b1fcb72296f1a1be629ff3a233b3bc653838bb41cbaddd1a587abb2f5538f4bb10d5ca8a5fa2e0415513cb70d6cf6c7eed6b0cbfc056fbc5f59b182f77973eb969df063732903ae412891a9aace4524d1f2756e17cd38ca4c4ad3349f8be4afa9ce76e6e6e74eca7628265a4750a71dd01675714fd275ab4448e9cc68c5477e038ab815f9f05ee7d847fd470df7991b6ef54706195f1d528ab104974eae9386aa9ea12dd14025addd5700ea5ceed921cc5a545dbf42bc4ce22e0e4d3003c7d6331ab0c402d4ac1f632ffc25e10ffe0481123c6a4de599bba77270a986b8ab118197116b8ec7ea026221837ddc36f3f4d546f4279bb7e29aa1b344c172deacc622a4e4628cab04501bcdeff091f112f55ff1e2da14734c4d0abfeda2254a2df30850df1585968be656f9d072e3ed162d0ee74ccc5bb35c7e12f3d1a453bb68b4bbf4cf9d144400c2782b3d5a51b82fa5cd127ccc02956574d29ac22b1e7bb93966644f3213488238b5276c750d2c7554de0e77c2e3c49761c642cf8263c880b342a580832dcd5a399f47850c1678cd67d6f611c9b5fffeec3cb7256250485d72b36d5fe1cf7f9b2956e74d569649f39fa98ff78a4c2f6aeff7b9c5168dc9803824367123e409f86295a3223a605a4356ab627cfb580d03c0ca4431cb3992664b55085564004eceb3f55bddca64fd2262c2d294ed562b01efb6b916f7e8c7cfc1aac1917273fd85aa1a6eab77a33964294a8dc15b8c0d9fce0810d62e7b15c3f98ad6f454a47a0cfc7a2342ed829b4f2d2a2e48be89532f4d28951d9ca50d683b5296593ac5be5c019bd10981265c8ad3a514ab446cf2a16d64daf771bc975bcac49985a53c1db14c9ed1d5e56659410cbcf1196bedf01928bf61da62c89d7826623ab61cbc12c8adb303fadcee598f6e8af3707d889c89ba9250c97d868a636404c75a85f3b9ad4015cd61cf31966d2e6428dc77af0749e774291cece27bf89d6d1f76dd719afae0181d130d6734e7504e9aa7c1f65ab43caa7f708bffa8d846e0647876ecb6f5dc08c88b3fc3d3add5409c0e6fc41da15965faf22b79f784cd0164ff652e7bd9df47b6a472e5c1e99b1bfe1e50b42f4968d829bcdc7b6b0f9844fb51c330392c03fe0536b83e791a440bc64141393d35b46febcdc9a52eacd1c53c9ad7857356916fac12fad398013d8146bef4f1a759fdb4e0937c5fd322ad778a7737ef7043bc3b54ca8962cf8dbabca7749a18886abb0b8b73fa2f934d495d9c079e0279d76f2190d4be50dfca870dae0612d01890dba085a84e98570e4b635a9184c1895f01e5cfab1a35b52f317780945c1a582d7fdbd7f97f4beacfd392b35befbf3140ff0fe19e291958d0d6ace5e25aa109fcc123e79f76d5e7e82af5cf1dd58e51935483308c8704cd0faf3df12e2e75eba331932e2adc8720456142a07edeef5f46f741b25089746c962d5df8ee4b95986ad0980dcc313c66f90dd18c220359ac91df0bfb631c36bec1bbfbc0f6aad133faf7472fd06f4aa4c56f4d612b419008f02b0f4db531c7c7906fa3592af00387630c4b86a4fac2a259acfe13b831f27752736b605837b5c4fc6d3a39e504448f3f4ccd1282459e26c81891b1fc18152585e5df4e78f6967fc17878a65a90f231c600053f2c79cbb81a1c1d67e8ccd02c1a2cacaa06ceaa232bb3600e9efd7763f6c4dcdd4167b29080f4cbfc26d07acba4cb51b1bd5fd98cf78bc4ac1f49e0d95aff60e94367c6927e321062019f6c6ab6afc41ec48ed06555731e664ca672170b25a54cad121167311376977621e7232bb8fff4fe5b72f44eaa891f172de53846bb205d9f33056d0a044dd3d55fe58f7983eeac1a336624b748a7794e185d0ee83c5e7c8663c40e05a21f7336e260c61003bfd36e9442f87a060b5cd1ef5f3162562502792e294c9591d3a2bf586bdc66abc2eff98abbab3e75aa1c636d613bdf2b9d283cd3a2c55c40688cfd163d71923d5103cac0bfb96bd3dfd2f335554ad9f5d0ac181e24435187b4127ee00448c336ac173a0012cdf59c63dc5cda742929cf0c3f2666a1cdd0a23ed7468e6ebb203119a666a4363f4b3d9b3f963e59e487b057c4acedf326d65528cc4b21c2b8497b8f34a7944690198ce11774d2b7fd4557346c6c5ce6deb0b9cdafea0e2fd219f1f55067e2c74199a9940af4917a15a30790f874494641c7e15de50ed75f2538559cbf86b88bd543b6ea302d7768e1519d6a8d23ef1a4e4ead18c44fdc69f0626c6cea038a30d3bd42944da1accd04f8a331eaaff6b48759bca6893ac04fa628a308768ced9bc07af289c2ed55f1d6acffb88e2135f0b5b91002cd1fbd19f31aeb2600447291648157015f36ce4a3868da6c227214658528b8350a14833e4676e94285dee0e5b5b2f4e0de03816768540fbc5011fca36c79f4af1b0e4e51c79d952f6576dc2b9d3a0adb23dc8a1ead07ed449cec05cafe58dcee9757ab64dfc966ffd0ba426db49f4efb825d3d5289b84ebabcae734c61ad37f3c9e345fed229f2013b3b167f119210c76cad62712597f5ce37b71a73483565a5badb6e5d1fe1f4b84e584dd53dcd8c8d7c2eefb0b925983fdf264d4b0a085419ebcf9ae21f9115bb2f1cf35470c16c13646ac1f4751508b919fc15f262e733da0b6f88cff9bdf7982f4521eb0331e3dcbdb71ff995614900a8aa915aa5c5c8c55f21d3e56a599babd2c2875aa7fe608a50e67ccb022f7967ad6308819607a0cb374197945a3b27addbb6b50ddf8b341406fa73b5a09c9becbbb4072c7a468697a0376f5dcd1417ffb6dacda8e2e1241012886f8930f23abd6c3819a288dea397d9391afbb0ea59f00e5cacbe36d237afe2cdadf63dd49a1218eedf85be3c53617963618616bf6465f4bdc04142fd10134fa4586e28a1363228a1dce350b4d0e80dfb1b1d9157b09c34dbee5abe85d1a43cf93453e4d039b8643b4b74ac92f658d99ef0a7fa35b5cde7736dde6596e96b8dbe87972876c682278b02d205298e1cfe739a940d660b5820fcc4578c0b7b3ece9cea9e72014ef00d788b63b2e48fc8eb95174531ebfd08876135679e5baff8f3d68ab43608c428cec2ddd6a8541625d92d4f6c2e6e9b646b3794dc3ed99bee6ce40f9c8cfe6c115cd26b3c669c31be4fc74919dd43a51179a94fc8a76cd04985f529450acccca620ebcb8361f3e4f230cfa262a41c183a02dfca7e23dfdf02cea78352648b577b6323c231e6ef0841c3650bf36c271720f0f8d49437b21d3265fbcacadb257cb577f1602c", 0x1000}, {&(0x7f0000000200)="2c229df51f0bbdd19ba905cd7a1e5a8ff4c49819c9257f9b4c883aa6edb29b7469fce85d131d4ad00973a6a90013fb8e78b517f0796049ef727b5bc0ce8b9d89b34fd2bc59c01a7801bd3d0b136416f1fbc960e5bf2b033442103b6f0d8cf1b0361a3df9097f66ba9c495a4ec9313f720cf7da46d16aca2bdd2ed4ac406ff2749bc78db8aa464bc3f345c2164d9715677b909b21c5823627b461812af6c372b3a65ef5b3095984979b577ebd", 0xac}, {&(0x7f00000002c0)="79ef756ec1df7b26434ebc0a04f48d6f32306a58da949ea5789f69a8467281c27d34d8ac9ba5911e84c59e0b606185c3aa1744653cde8d8b3833321830a2bc1b040f3c371aab900814d3", 0x4a}, {&(0x7f0000000340)="4fdbbe4abd6ad45898def324328f459a430ddf47bfb591272611457b3dd4c3a75559c1f269", 0x25}, {&(0x7f0000001400)="cab37e70aaa935f8ddc0e94a5737aadf9be8b75de8f8522c673c675c08dc179d0739c4afe42f3c9c02cc9cb1d857a741e4faf74da0a39a215bc734fefff6e57e7617dba0691efe952e935e96ed2f4f90dedab81f1fd895cffa5c27984baae7824006209812509bb211d6595e02594e24e0210cceea7f47941c77263166ee2a302f2b8e8e48b126d8b6013fb082434893250aa775", 0x94}, {&(0x7f00000014c0)="e27052fe1264858db4f2cb782ecaaff272a3503c672606f50d109c63ce4762467eeec798e857622819c9142d83effd32e79e3a20b217fb5302c9dcf99d95069d55973feed953d68651f8ee361a8d7d24c1ccbcab07cfb393196265ab99451e5bc8fc36f2d2778f58f4cc422a807d1d9e41ca3539c4c010b131f8550bf9d3ce6c66dfccc82b0ebc429e4bc3ffd84ee1cce6631a599ac103a6e2792cb57a26d59068573978c8d3764cc74ca2cb93f6a571153fb65728c3980faea3f6b32829a3c4ec48ca07c792d58d63ad28aac292c68195e3f5eaa04e629b61e28af592146e11693dae", 0xe3}], 0x6, &(0x7f0000001980)=ANY=[@ANYBLOB="2d17c6de1fa57ec88f00000002000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r14, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x20008000}}], 0x1, 0x8001) r18 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r18, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r18, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 2.207986171s ago: executing program 1 (id=3209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) gettid() 2.13727051s ago: executing program 4 (id=3210): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad070000100000000000000000000500", 0x10) read$alg(r4, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r6, 0xc8036ab6d6cbef07, 0x4000}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="3c61ddc1d8640da0e693d6250015eede19a16b0a091e989e515b86250b7ff42c32974861b0f400bc54ee6705a772feaa0001f9e531542b364eef35f33e0f23cf49083228e04db3329134c4ca8dd08d987f3f2850519fbd714af2538c3cec67b79805c9ae", @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001a00010025bd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00008400140003000700000000000000000000001000000014000100000000000000000001"], 0x44}}, 0x0) 2.109799933s ago: executing program 1 (id=3211): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x18, 0x5, 0x7) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$inet(0x2, 0x2000000000003, 0x2) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r9, &(0x7f0000001a80)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}}}, 0x10) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) write$cgroup_pressure(r8, &(0x7f00000000c0)={'some', 0x20, 0x5, 0x20, 0x2}, 0x2f) bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000300)={0x0, 'ip6erspan0\x00', 0x3}, 0x18) r10 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x94}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) 1.904148851s ago: executing program 4 (id=3212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r6, 0x1}, 0x14}}, 0x44000) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x5, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x7800, 0x7, 0x1000, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r12, 0x4, 0x0, 0x9, 0xa, 0x1, @mcast1, @loopback, 0x8, 0x7, 0x0, 0x3}}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4) close(0xffffffffffffffff) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) sendmsg$NL80211_CMD_START_NAN(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r13, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7db2, 0x6c}}}}, [@NL80211_ATTR_BANDS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800c}, 0x4000004) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r13, 0x600, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x10004}, 0x4001) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mmap(&(0x7f0000206000/0x3000)=nil, 0x3000, 0xe, 0x10010, r14, 0x3eb7a000) r15 = socket$inet6(0xa, 0x800000000000002, 0x0) shutdown(r15, 0x1) connect$inet6(r15, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write(r15, 0x0, 0x0) 1.625651062s ago: executing program 4 (id=3213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000010000000600060000000000c40c0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}, 0x1, 0x0, 0x0, 0x804}, 0x0) 1.40340588s ago: executing program 3 (id=3214): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) close(r0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "ef93cfa9d40e9a3e2c2ab679"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x4048010) close(0x3) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) accept$alg(r0, 0x0, 0x0) (async) close(r0) (async) close(r1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "ef93cfa9d40e9a3e2c2ab679"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x4048010) (async) close(0x3) (async) 1.386512059s ago: executing program 4 (id=3215): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='mm_lru_insertion\x00', r2, 0x0, 0xe86}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 1.172288608s ago: executing program 3 (id=3216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000002c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = epoll_create(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x4}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 885.535389ms ago: executing program 1 (id=3217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601dfc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4004) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a31070000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000170a030c0000000000000000020000000900010073797a30000000000900020073797a30e8"], 0x2c}}, 0x0) 748.287955ms ago: executing program 4 (id=3218): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_crypto(0x10, 0x3, 0x15) gettid() write(r0, &(0x7f0000000000)="2d000000010001", 0x7) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/249, 0xf9}, 0xe}], 0x1, 0x22, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r5, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x14e0, 0x10, 0xd64dd100634da896, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0xb}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x14b0, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9f}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_BASIC_EMATCHES={0x244, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xa13, 0x2, 0x5}, {0x4, 0xa, 0x1, "34807476b30e791eea48"}}}, @TCF_EM_META={0x10, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x80}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_META={0x48, 0x1, 0x0, 0x0, {{0xff01, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x9, 0x1}, {0x6bc, 0x4}}}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="572eeb76749aa876bea4", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='D']}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x8dfa}, {0xb, 0xfffffffd, 0x1, 0x3, 0x4, 0x1, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x936}, [@TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="840849", @TCF_META_TYPE_VAR="5d7106ac3e46", @TCF_META_TYPE_VAR="46f76959a0"]}]}}]}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x40}, {0x8, 0x6, 0x8001, 0x1, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x101}, {0x8, 0x3, 0x401}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x252d, 0x8, 0x6}, {0x4, 0x5, 0x6}}}, @TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x81, 0x0, 0x6}, "9bb3b93fcb529255b897dd91cb7f67eac4b53c2c37b8d50ed186ba43f2d51f529ec45aefcedd8377c7b16db158251dbcbbddd0d3ac47caaa81069658eafb1bf743aea26b9e14aafb997d6e49f8af98bf8f68f3d5a6b503a2825ec1d151e28c34e8fe819361f446c4f93b0841b1e1b2faaee5b314194626cd55ce9f16e9c31bf20ddc2aca80624406f8c5664e04f91c81f14862cbd6"}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x1ff}, {0x8, 0x5, 0x0, 0x0, 0x3, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xbdfa, 0x2, 0xd}, {0x4, 0x3, 0x0, "4123fb"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xff, 0x2, 0xbdc}, {0x2, 0x8, 0x2, "a5aa2c6592a87648"}}}, @TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0xcd8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xd7, 0xb, 0x2}, {0x37e9, 0x0, 0x1}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR="8adb81693dfd5251", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0xd, 0x1}, {0x932a, 0x0, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x4}, {0x2, 0x3, 0xe}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x95f}, {0x4, 0x2, 0x3749, 0x5, 0x3, 0x1, 0x1}}}]}]}, @TCA_BASIC_EMATCHES={0x124c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1010, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0xfff, 0x0, 0x3}, "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"}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x3, 0x0, 0x0, {{0xfbf2, 0x0, 0xdcd2}, "af25016d2abacc83f8f06742015545a6a67fbea11f62dcc70f2aa9f631b90e3d3ac9d12ab3e4ad078ba98ea770400de59510649a2caf2f0a1b4a0f95df31"}}, @TCF_EM_META={0x38, 0x3, 0x0, 0x0, {{0xf4, 0x4, 0x9}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfc, 0x3, 0x1}, {0x7, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x1}, {0xd, 0x1e, 0x1}}}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="462a904aa1", @TCF_META_TYPE_VAR="098b"]}]}}]}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_META={0x7c, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xfff9, 0x6, 0x2}, {0x6110, 0x3, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x0, 0x2}, {0x2f, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="6056ce5d00eb", @TCF_META_TYPE_VAR='\r`', @TCF_META_TYPE_VAR="0450381f", @TCF_META_TYPE_VAR='r']}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="f1868cfdd789", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="0a38a9", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR='@']}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7ff, 0x7, 0x2}, {{0x4, 0x1, 0x1}, {0x2}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x3}, {0x1, 0x3, 0x3}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xc, 0x8, 0x2000}, {0x4, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xfe00}, {0xdbb, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7}, {{0x4}, {0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x4c, 0x2, 0x0, 0x0, {{0x990, 0x0, 0x3}, "87e42ef41318d5af722290f4ff46ae466a3f9f738f98e68f4d2fc9cd4633255ed71ef1c2d31efd1e8bdba013e032b80b9cc578b24e4e99f295a4432971"}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xba4b, 0x2, 0x5}, {0x792, 0xa, 0x1, "678af1cdd26e70f438b4"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0xfff}, {0xffffffffffffffff, 0x6, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x3}, {0x3, 0x80000000, 0xffffffff, 0x922}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x9}, {0x2, 0x6, 0x2, "c0cb1c1ad472"}}}, @TCF_EM_CANID={0x14, 0x4, 0x0, 0x0, {{0x1, 0x7, 0xf11a}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb54}}]}]}}]}, 0x14e0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 347.958264ms ago: executing program 4 (id=3219): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x20004000) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) (async) recvmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20010182, 0x0) shutdown(r0, 0x1) (async) poll(&(0x7f0000000240)=[{r0, 0xd900}], 0x1, 0x4) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) (async) r5 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_int(r5, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000001740)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x9cec, @private1, 0x10000}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @remote}], 0xc0) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7fffffff}, {&(0x7f0000000680)=""/117, 0x75}, &(0x7f0000000580)=[{&(0x7f0000000700)=""/102, 0x66}], 0x1, 0x52, 0x5}}], 0x48, 0x4004000}, 0x0) r8 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0xffffffff, 0x0, {0x2, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0x1}, {0x6, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x40a, 0x2, 0x0, 0x20007e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0xff, 0xc, 0x88, 0x0, 0x0, 0x5}}, {0x4}}]}]}, 0x68}}, 0x0) 265.715531ms ago: executing program 3 (id=3220): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x1, 0x80, 0x6, 0xfffffffb, {{0x4c, 0x4, 0x3, 0x5, 0x130, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @remote, {[@end, @end, @timestamp_prespec={0x44, 0x2c, 0x97, 0x3, 0xc, [{@multicast1, 0x1}, {@broadcast, 0xfffffff9}, {@empty}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @noop, @ssrr={0x89, 0x7, 0x96, [@private=0xa010100]}, @generic={0x82, 0xe, "a48225f2e568a5a26bdd7123"}, @noop, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x68, 0x3, [{0x6, 0xd, "f2d4e49346840f4932d7ba"}, {0x1, 0x5, "b75dc0"}, {0x2, 0x11, "3d7c05b1c008635a31403b8a45919a"}, {0x0, 0xf, "795d0e8e213906446e460f50ff"}, {0x0, 0x11, "a35dab6f65baaf8c1a1fb37c5f02ca"}, {0x7, 0x5, "dce3d4"}, {0x5, 0xc, "063495c2bd6d4fb0755a"}, {0x1, 0xe, "0b6aaa6379c253e226db52fb"}]}, @cipso={0x86, 0x68, 0x2, [{0x1, 0xc, "4bcd34f521f0705d5032"}, {0x0, 0x9, "ac60cfff51e767"}, {0x0, 0xc, "1eea47f748727ab505ae"}, {0x6, 0xb, "77b02631937e1d27be"}, {0x0, 0x11, "869dca9546a2dffa4e89bc8aa62221"}, {0x7, 0x4, "29cd"}, {0x0, 0xa, "01dbbfae051ffa3b"}, {0x2, 0xd, "4d157ac72da6e482da5d26"}, {0x2, 0x7, "6822a5eb0a"}, {0x5, 0x3, '5'}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2, 0x0, 0x2}, 0x18) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x8080) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x101, @remote, 0x771}}, 0x3, 0xdd}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={r3, 0xb3, 0x4}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x18) 181.050188ms ago: executing program 3 (id=3221): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x29) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) gettid() 135.342211ms ago: executing program 1 (id=3222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 63.093961ms ago: executing program 3 (id=3223): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f00000019c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@enum64={0x5, 0x0, 0x0, 0x13, 0x0, 0x4}]}, {0x0, [0x61, 0xadbe431d5353236, 0x10, 0x2e, 0x61, 0x2e]}}, 0x0, 0x2c, 0x0, 0x1, 0x5, 0x0, @void, @value=0x1000000}, 0x28) 15.285327ms ago: executing program 3 (id=3224): socket(0x840000000002, 0x3, 0x7) (async) r0 = socket(0x840000000002, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, 0x0, 0x0) (async) bind$inet6(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000340)) (async) ioctl$SIOCRSGCAUSE(r6, 0x89e0, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x80000001, 0x1, 0x0, 0x6, 0xc, 0x0, 0x1, {0x0, @in6={{0xa, 0x4e21, 0x2, @mcast1, 0x4}}, 0x8, 0xcd2, 0x10000, 0x2, 0xfffffffc}}, &(0x7f0000000480)=0xb0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x80000001, 0x1, 0x0, 0x6, 0xc, 0x0, 0x1, {0x0, @in6={{0xa, 0x4e21, 0x2, @mcast1, 0x4}}, 0x8, 0xcd2, 0x10000, 0x2, 0xfffffffc}}, &(0x7f0000000480)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000004c0)={r7, 0xfc, "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"}, &(0x7f0000000600)=0x104) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)={0x3c, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}]}]}, 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2c8, 0x3, 0x2d0, 0x0, 0x229, 0x240, 0x0, 0x4c000000, 0x238, 0x328, 0x328, 0x238, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00', {}, {0xff}}, 0x0, 0xd8, 0x140, 0x0, {0x0, 0x700}, [@common=@set={{0x40}, {{0x0, [0x6, 0x1, 0x4, 0x4, 0x5], 0x1}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xe, 0x7fff, 0x9, 'pptp\x00', 'syz0\x00'}}}, {{@ip={@remote, @empty, 0x377991ee26dbd98, 0xff, 'dvmrp1\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x6c, 0x3, 0x21}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "e8e9"}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 5.744844ms ago: executing program 2 (id=1820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000100000000000000fe80000000000000ff0300000000000000000000000000000000000000d00000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000001a0010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c00"], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 1 (id=3225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000002000000e27f00000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e1d24b672873bcc68b6ec9b19376b459157596aa01177cffa0fde0be1e277f6e9dae48bc5b25115c31cd1bbd4eb1baa47e2875283b0c10c37286157925d88be86a95d11b34d14594ac0080067e16c0dceec626660c"], 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@private, @broadcast}, &(0x7f0000000100)=0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x22, 0x2, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$tipc(r1, &(0x7f0000000e80)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040000}, 0x44000) (async) sendmsg$tipc(r1, &(0x7f0000000e80)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040000}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100", 0x2a) (async) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100", 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@ifindex, 0xffffffffffffffff, 0x9, 0x20, 0x0, @void, @void, @void, @value}, 0x20) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x32, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'i'}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0xcb4, 0xf77e, {{0x17, 0x4, 0x2, 0x3a, 0x5c, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @loopback, {[@end, @ssrr={0x89, 0x7, 0x6d, [@empty]}, @generic={0x86, 0x3, 'D'}, @end, @timestamp_addr={0x44, 0x3c, 0x4f, 0x1, 0x5, [{@multicast1, 0x800}, {@empty, 0x3}, {@loopback, 0x3}, {@empty, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5a8}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x80000001}]}]}}}}}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) (async) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r10) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r11, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): 2][ T64] bridge_slave_0: left allmulticast mode [ 402.331212][ T64] bridge_slave_0: left promiscuous mode [ 402.337685][ T1336] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 402.346216][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.730066][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.742845][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.753284][ T64] bond0 (unregistering): Released all slaves [ 402.962000][T15560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2887'. [ 402.981535][ T5839] Bluetooth: hci0: command tx timeout [ 403.039846][T15517] chnl_net:caif_netlink_parms(): no params data found [ 403.135686][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.272533][ T64] hsr_slave_0: left promiscuous mode [ 403.286531][ T64] hsr_slave_1: left promiscuous mode [ 403.292550][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.301339][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.310543][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.319072][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.376953][ T64] veth1_macvtap: left promiscuous mode [ 403.382649][ T64] veth0_macvtap: left promiscuous mode [ 403.388697][ T64] veth1_vlan: left promiscuous mode [ 403.394111][ T64] veth0_vlan: left promiscuous mode [ 403.433123][T15581] netlink: 'syz.3.2893': attribute type 5 has an invalid length. [ 403.486225][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 403.857306][ T5839] Bluetooth: hci4: command tx timeout [ 403.943977][ T64] team0 (unregistering): Port device team_slave_1 removed [ 403.994478][ T64] team0 (unregistering): Port device team_slave_0 removed [ 404.175677][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.526734][T15587] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2892'. [ 404.536096][T15587] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2892'. [ 404.587092][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 404.637087][T15517] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.653865][T15517] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.671613][T15517] bridge_slave_0: entered allmulticast mode [ 404.680349][T15517] bridge_slave_0: entered promiscuous mode [ 404.743716][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 404.770580][T15517] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.790156][T15517] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.813339][T15517] bridge_slave_1: entered allmulticast mode [ 404.824218][T15517] bridge_slave_1: entered promiscuous mode [ 404.863244][T15463] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.007223][T15463] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 405.040673][T15517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.056090][ T5839] Bluetooth: hci0: command tx timeout [ 405.146634][T15463] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 405.202792][T15517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.205398][T15610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2899'. [ 405.215761][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 405.243063][T15463] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 405.338635][T15517] team0: Port device team_slave_0 added [ 405.369657][T15517] team0: Port device team_slave_1 added [ 405.427065][T15517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.434626][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.462072][T15517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.480532][T15517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.488236][T15517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.514571][T15595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2895'. [ 405.524635][T15517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.621700][T15517] hsr_slave_0: entered promiscuous mode [ 405.646592][T15517] hsr_slave_1: entered promiscuous mode [ 405.657463][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 405.684648][T15616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2901'. [ 405.703214][T15616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 405.714151][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 405.804858][T15463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.916804][T15463] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.936280][ T5839] Bluetooth: hci4: command tx timeout [ 406.023239][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.030454][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.046886][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.053981][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.147742][T15632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2905'. [ 406.255769][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.410883][T15646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2910'. [ 406.427137][T15642] netem: unknown loss type 0 [ 406.445808][T15642] netem: change failed [ 406.752620][T15517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.773867][T15517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.817139][T15517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.836020][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 406.872072][T15463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.882635][T15517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.013061][T15660] FAULT_INJECTION: forcing a failure. [ 407.013061][T15660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.060243][T15660] CPU: 1 UID: 0 PID: 15660 Comm: syz.4.2915 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 407.060269][T15660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 407.060281][T15660] Call Trace: [ 407.060287][T15660] [ 407.060295][T15660] dump_stack_lvl+0x241/0x360 [ 407.060321][T15660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.060339][T15660] ? __pfx__printk+0x10/0x10 [ 407.060359][T15660] ? __pfx_lock_release+0x10/0x10 [ 407.060389][T15660] should_fail_ex+0x40a/0x550 [ 407.060415][T15660] _copy_from_user+0x2d/0xb0 [ 407.060436][T15660] __sys_bpf+0x1be/0x820 [ 407.060460][T15660] ? __pfx___sys_bpf+0x10/0x10 [ 407.060493][T15660] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 407.060518][T15660] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 407.060542][T15660] ? do_syscall_64+0x100/0x230 [ 407.060567][T15660] __x64_sys_bpf+0x7c/0x90 [ 407.060586][T15660] do_syscall_64+0xf3/0x230 [ 407.060605][T15660] ? clear_bhb_loop+0x35/0x90 [ 407.060627][T15660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.060647][T15660] RIP: 0033:0x7f3d2058cde9 [ 407.060661][T15660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.060680][T15660] RSP: 002b:00007f3d214b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 407.060698][T15660] RAX: ffffffffffffffda RBX: 00007f3d207a5fa0 RCX: 00007f3d2058cde9 [ 407.060710][T15660] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 407.060721][T15660] RBP: 00007f3d214b2090 R08: 0000000000000000 R09: 0000000000000000 [ 407.060733][T15660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.060743][T15660] R13: 0000000000000000 R14: 00007f3d207a5fa0 R15: 00007ffe61755b58 [ 407.060769][T15660] [ 407.087071][T15463] veth0_vlan: entered promiscuous mode [ 407.277171][ T5843] Bluetooth: hci0: command tx timeout [ 407.295699][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.334479][T15463] veth1_vlan: entered promiscuous mode [ 407.369831][T15463] veth0_macvtap: entered promiscuous mode [ 407.392383][T15463] veth1_macvtap: entered promiscuous mode [ 407.402684][T15517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.433063][T15463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.480573][T15463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.510594][T15517] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.545010][T15463] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.564728][T15463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.585675][T15463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.594773][T15463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.641417][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.648636][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.721261][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.728527][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.936955][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.960566][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.962701][T15677] syzkaller1: entered promiscuous mode [ 408.008198][T12220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 408.013220][T15677] syzkaller1: entered allmulticast mode [ 408.022217][ T5843] Bluetooth: hci4: command tx timeout [ 408.077394][T15517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 408.095739][T15677] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 88 [ 408.107324][T15681] netlink: 'syz.3.2924': attribute type 8 has an invalid length. [ 408.126871][T15517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.273121][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.282161][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.335800][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.634054][T15698] 8021q: adding VLAN 0 to HW filter on device bond9 [ 408.714957][T15517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.814101][T15707] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 408.823868][T15517] veth0_vlan: entered promiscuous mode [ 408.860747][T15517] veth1_vlan: entered promiscuous mode [ 408.906396][T15517] veth0_macvtap: entered promiscuous mode [ 408.921869][T15517] veth1_macvtap: entered promiscuous mode [ 408.950011][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.962685][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.974404][T15517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.015008][T15517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.045865][T15517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.049633][T15715] FAULT_INJECTION: forcing a failure. [ 409.049633][T15715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.070439][T15715] CPU: 0 UID: 0 PID: 15715 Comm: syz.1.2934 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 409.070465][T15715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 409.070476][T15715] Call Trace: [ 409.070482][T15715] [ 409.070491][T15715] dump_stack_lvl+0x241/0x360 [ 409.070517][T15715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.070535][T15715] ? __pfx__printk+0x10/0x10 [ 409.070563][T15715] should_fail_ex+0x40a/0x550 [ 409.070591][T15715] _copy_to_user+0x31/0xb0 [ 409.070611][T15715] bpf_test_finish+0x2e6/0x890 [ 409.070644][T15715] ? __pfx_bpf_test_finish+0x10/0x10 [ 409.070672][T15715] ? bpf_test_init+0x15a/0x180 [ 409.070697][T15715] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 409.070726][T15715] ? __pfx_lock_release+0x10/0x10 [ 409.070758][T15715] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 409.070783][T15715] ? __fget_files+0x2a/0x410 [ 409.070816][T15715] ? __fget_files+0x2a/0x410 [ 409.070841][T15715] ? fput+0x21b/0x290 [ 409.070860][T15715] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 409.070885][T15715] bpf_prog_test_run+0x2e4/0x360 [ 409.070911][T15715] __sys_bpf+0x487/0x820 [ 409.070933][T15715] ? __pfx___sys_bpf+0x10/0x10 [ 409.070966][T15715] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 409.070991][T15715] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.071015][T15715] ? do_syscall_64+0x100/0x230 [ 409.071040][T15715] __x64_sys_bpf+0x7c/0x90 [ 409.071060][T15715] do_syscall_64+0xf3/0x230 [ 409.071079][T15715] ? clear_bhb_loop+0x35/0x90 [ 409.071104][T15715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.071125][T15715] RIP: 0033:0x7fd1e338cde9 [ 409.071140][T15715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.071155][T15715] RSP: 002b:00007fd1e4123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.071173][T15715] RAX: ffffffffffffffda RBX: 00007fd1e35a5fa0 RCX: 00007fd1e338cde9 [ 409.071186][T15715] RDX: 0000000000000050 RSI: 0000400000000240 RDI: 000000000000000a [ 409.071197][T15715] RBP: 00007fd1e4123090 R08: 0000000000000000 R09: 0000000000000000 [ 409.071208][T15715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.071219][T15715] R13: 0000000000000000 R14: 00007fd1e35a5fa0 R15: 00007ffde5638518 [ 409.071246][T15715] [ 409.076828][T15517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.151331][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 409.375751][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.422581][T12220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.447198][T15517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.456433][T15517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.465244][T15517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.474479][T15517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.604318][T12220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.635299][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.650294][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.669860][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.678873][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.946913][T12220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.003718][T12220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.096858][T12220] bridge_slave_1: left allmulticast mode [ 410.102573][T12220] bridge_slave_1: left promiscuous mode [ 410.109212][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.118854][T12220] bridge_slave_0: left allmulticast mode [ 410.124526][T12220] bridge_slave_0: left promiscuous mode [ 410.130600][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.415759][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.432972][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 410.551504][T12220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.563044][T12220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.573261][T12220] bond0 (unregistering): Released all slaves [ 410.781075][T12220] hsr_slave_0: left promiscuous mode [ 410.787146][T12220] hsr_slave_1: left promiscuous mode [ 410.792934][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.800863][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.809014][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.817343][T12220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.935472][T12220] veth1_macvtap: left promiscuous mode [ 410.956441][T12220] veth0_macvtap: left promiscuous mode [ 410.962117][T12220] veth1_vlan: left promiscuous mode [ 410.991315][T12220] veth0_vlan: left promiscuous mode [ 411.234105][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.259538][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.272645][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.287851][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.301989][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 411.309700][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.461460][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 411.564557][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 411.707616][T12220] team0 (unregistering): Port device team_slave_1 removed [ 411.757512][T12220] team0 (unregistering): Port device team_slave_0 removed [ 412.418926][T15731] chnl_net:caif_netlink_parms(): no params data found [ 412.471238][T15731] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.478726][T15731] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.486020][T15731] bridge_slave_0: entered allmulticast mode [ 412.492711][T15731] bridge_slave_0: entered promiscuous mode [ 412.501283][T15731] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.505693][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.508980][T15731] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.522656][T15731] bridge_slave_1: entered allmulticast mode [ 412.529526][T15731] bridge_slave_1: entered promiscuous mode [ 412.556863][T15731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.570090][T15731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.603115][T15731] team0: Port device team_slave_0 added [ 412.626837][T15731] team0: Port device team_slave_1 added [ 412.698793][T12220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 412.718033][T15742] __nla_validate_parse: 9 callbacks suppressed [ 412.718050][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 412.719591][T15731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.735874][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2940'. [ 412.746468][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.758436][T15742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2940'. [ 412.817519][T15746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2940'. [ 412.834458][T15731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.876391][T15745] 8021q: adding VLAN 0 to HW filter on device bond13 [ 412.987416][T15752] openvswitch: netlink: IP tunnel dst address not specified [ 413.020059][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.032605][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.041620][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.050078][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.059630][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 413.067262][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.079917][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.108838][T15731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.122484][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.152174][T15731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.227766][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.268940][T15731] hsr_slave_0: entered promiscuous mode [ 413.275444][T15731] hsr_slave_1: entered promiscuous mode [ 413.282674][T15731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.290790][T15731] Cannot create hsr debugfs directory [ 413.376658][ T5839] Bluetooth: hci0: command tx timeout [ 413.414726][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.491037][T15766] vlan2: entered promiscuous mode [ 413.497096][T15766] hsr0: entered promiscuous mode [ 413.504154][T15766] hsr0: left promiscuous mode [ 413.537005][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.601381][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.703535][T15771] netlink: 'syz.3.2949': attribute type 10 has an invalid length. [ 413.735940][T15771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2949'. [ 413.807342][ T1316] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 413.929284][ T62] bridge_slave_1: left allmulticast mode [ 413.935016][ T62] bridge_slave_1: left promiscuous mode [ 413.942114][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.954150][ T62] bridge_slave_0: left allmulticast mode [ 413.961953][ T62] bridge_slave_0: left promiscuous mode [ 413.973946][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.020385][T15782] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2952'. [ 414.030651][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2952'. [ 414.522848][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.536135][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.547459][ T62] bond0 (unregistering): Released all slaves [ 414.579093][T15754] chnl_net:caif_netlink_parms(): no params data found [ 414.586036][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.692400][T15795] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 414.709926][T15792] 8021q: adding VLAN 0 to HW filter on device bond14 [ 414.819591][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2959'. [ 414.848854][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2957'. [ 414.862016][T15802] FAULT_INJECTION: forcing a failure. [ 414.862016][T15802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.886112][T15802] CPU: 1 UID: 0 PID: 15802 Comm: syz.1.2958 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 414.886140][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 414.886151][T15802] Call Trace: [ 414.886158][T15802] [ 414.886167][T15802] dump_stack_lvl+0x241/0x360 [ 414.886193][T15802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.886211][T15802] ? __pfx__printk+0x10/0x10 [ 414.886231][T15802] ? __pfx_lock_release+0x10/0x10 [ 414.886261][T15802] should_fail_ex+0x40a/0x550 [ 414.886287][T15802] _copy_from_user+0x2d/0xb0 [ 414.886307][T15802] __sys_bpf+0x1be/0x820 [ 414.886331][T15802] ? __pfx___sys_bpf+0x10/0x10 [ 414.886364][T15802] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 414.886389][T15802] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 414.886412][T15802] ? do_syscall_64+0x100/0x230 [ 414.886436][T15802] __x64_sys_bpf+0x7c/0x90 [ 414.886457][T15802] do_syscall_64+0xf3/0x230 [ 414.886476][T15802] ? clear_bhb_loop+0x35/0x90 [ 414.886507][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.886528][T15802] RIP: 0033:0x7fd1e338cde9 [ 414.886543][T15802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.886558][T15802] RSP: 002b:00007fd1e4123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.886577][T15802] RAX: ffffffffffffffda RBX: 00007fd1e35a5fa0 RCX: 00007fd1e338cde9 [ 414.886590][T15802] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 414.886605][T15802] RBP: 00007fd1e4123090 R08: 0000000000000000 R09: 0000000000000000 [ 414.886616][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.886627][T15802] R13: 0000000000000000 R14: 00007fd1e35a5fa0 R15: 00007ffde5638518 [ 414.886652][T15802] [ 414.957185][T12220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 415.002356][T15797] 8021q: adding VLAN 0 to HW filter on device bond10 [ 415.121628][T15806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 415.135960][ T5839] Bluetooth: hci4: command tx timeout [ 415.160419][T15807] bond0: entered promiscuous mode [ 415.178737][T15807] bond0: left promiscuous mode [ 415.336974][T15754] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.344131][T15754] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.386804][T15754] bridge_slave_0: entered allmulticast mode [ 415.397413][T15754] bridge_slave_0: entered promiscuous mode [ 415.454803][T15754] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.463013][ T5839] Bluetooth: hci0: command tx timeout [ 415.469006][T15754] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.477514][T15754] bridge_slave_1: entered allmulticast mode [ 415.484861][T15754] bridge_slave_1: entered promiscuous mode [ 415.566602][T15829] lo speed is unknown, defaulting to 1000 [ 415.572437][T15829] lo speed is unknown, defaulting to 1000 [ 415.597309][ T62] hsr_slave_0: left promiscuous mode [ 415.605168][ T62] hsr_slave_1: left promiscuous mode [ 415.615749][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.637286][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.645030][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.657663][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.672107][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.722576][ T62] veth1_macvtap: left promiscuous mode [ 415.734417][ T62] veth0_macvtap: left promiscuous mode [ 415.741329][ T62] veth1_vlan: left promiscuous mode [ 415.750735][ T62] veth0_vlan: left promiscuous mode [ 416.155969][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 416.262263][ T62] team0 (unregistering): Port device team_slave_1 removed [ 416.314386][ T62] team0 (unregistering): Port device team_slave_0 removed [ 416.658947][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.813355][T15829] lo speed is unknown, defaulting to 1000 [ 416.816136][T15754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.834206][T15829] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 416.899245][T15754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.930546][T15829] lo speed is unknown, defaulting to 1000 [ 416.945147][T15731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.972868][T15731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.994829][T15829] lo speed is unknown, defaulting to 1000 [ 417.042976][T15754] team0: Port device team_slave_0 added [ 417.052471][T15731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.073700][T15829] lo speed is unknown, defaulting to 1000 [ 417.081045][T15754] team0: Port device team_slave_1 added [ 417.093814][T15731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.149281][T15848] FAULT_INJECTION: forcing a failure. [ 417.149281][T15848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.162963][T15848] CPU: 0 UID: 0 PID: 15848 Comm: syz.1.2974 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 417.162987][T15848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 417.162999][T15848] Call Trace: [ 417.163005][T15848] [ 417.163012][T15848] dump_stack_lvl+0x241/0x360 [ 417.163038][T15848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.163056][T15848] ? __pfx__printk+0x10/0x10 [ 417.163083][T15848] should_fail_ex+0x40a/0x550 [ 417.163108][T15848] _copy_to_user+0x31/0xb0 [ 417.163130][T15848] bpf_test_finish+0x2e6/0x890 [ 417.163160][T15848] ? __pfx_bpf_test_finish+0x10/0x10 [ 417.163188][T15848] ? bpf_test_init+0x15a/0x180 [ 417.163212][T15848] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 417.163241][T15848] ? __pfx_lock_release+0x10/0x10 [ 417.163268][T15848] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 417.163289][T15848] ? __fget_files+0x2a/0x410 [ 417.163310][T15848] ? __fget_files+0x2a/0x410 [ 417.163331][T15848] ? fput+0x21b/0x290 [ 417.163347][T15848] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 417.163369][T15848] bpf_prog_test_run+0x2e4/0x360 [ 417.163391][T15848] __sys_bpf+0x487/0x820 [ 417.163411][T15848] ? __pfx___sys_bpf+0x10/0x10 [ 417.163439][T15848] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 417.163461][T15848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 417.163481][T15848] ? do_syscall_64+0x100/0x230 [ 417.163503][T15848] __x64_sys_bpf+0x7c/0x90 [ 417.163520][T15848] do_syscall_64+0xf3/0x230 [ 417.163537][T15848] ? clear_bhb_loop+0x35/0x90 [ 417.163559][T15848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.163577][T15848] RIP: 0033:0x7fd1e338cde9 [ 417.163592][T15848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.163605][T15848] RSP: 002b:00007fd1e4123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.163622][T15848] RAX: ffffffffffffffda RBX: 00007fd1e35a5fa0 RCX: 00007fd1e338cde9 [ 417.163633][T15848] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 417.163642][T15848] RBP: 00007fd1e4123090 R08: 0000000000000000 R09: 0000000000000000 [ 417.163651][T15848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.163660][T15848] R13: 0000000000000000 R14: 00007fd1e35a5fa0 R15: 00007ffde5638518 [ 417.163683][T15848] [ 417.403064][ T5839] Bluetooth: hci4: command tx timeout [ 417.413101][T15829] lo speed is unknown, defaulting to 1000 [ 417.421418][T15829] lo speed is unknown, defaulting to 1000 [ 417.458889][T15754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.480650][T15754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.507757][T15850] netlink: 'syz.3.2975': attribute type 2 has an invalid length. [ 417.522704][T15754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.525365][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 417.535688][ T5839] Bluetooth: hci0: command tx timeout [ 417.601264][T15754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.625485][T15754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.653370][T15754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.696466][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.765124][T15754] hsr_slave_0: entered promiscuous mode [ 417.780026][T15754] hsr_slave_1: entered promiscuous mode [ 417.867063][T15731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.007344][T15731] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.020263][T15879] __nla_validate_parse: 2 callbacks suppressed [ 418.020282][T15879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2983'. [ 418.037647][T15878] lo speed is unknown, defaulting to 1000 [ 418.187151][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.194268][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.227063][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.234196][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.311753][T15891] FAULT_INJECTION: forcing a failure. [ 418.311753][T15891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.344566][T15889] 8021q: adding VLAN 0 to HW filter on device bond15 [ 418.356185][T15891] CPU: 0 UID: 0 PID: 15891 Comm: syz.1.2987 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 418.356214][T15891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 418.356225][T15891] Call Trace: [ 418.356232][T15891] [ 418.356240][T15891] dump_stack_lvl+0x241/0x360 [ 418.356267][T15891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.356286][T15891] ? __pfx__printk+0x10/0x10 [ 418.356315][T15891] should_fail_ex+0x40a/0x550 [ 418.356343][T15891] _copy_to_user+0x31/0xb0 [ 418.356365][T15891] bpf_test_finish+0x59c/0x890 [ 418.356398][T15891] ? __pfx_bpf_test_finish+0x10/0x10 [ 418.356437][T15891] ? bpf_test_init+0x15a/0x180 [ 418.356462][T15891] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 418.356492][T15891] ? __pfx_lock_release+0x10/0x10 [ 418.356524][T15891] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.356549][T15891] ? __fget_files+0x2a/0x410 [ 418.356574][T15891] ? __fget_files+0x2a/0x410 [ 418.356598][T15891] ? fput+0x21b/0x290 [ 418.356618][T15891] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.356643][T15891] bpf_prog_test_run+0x2e4/0x360 [ 418.356669][T15891] __sys_bpf+0x487/0x820 [ 418.356693][T15891] ? __pfx___sys_bpf+0x10/0x10 [ 418.356727][T15891] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.356752][T15891] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.356776][T15891] ? do_syscall_64+0x100/0x230 [ 418.356801][T15891] __x64_sys_bpf+0x7c/0x90 [ 418.356822][T15891] do_syscall_64+0xf3/0x230 [ 418.356841][T15891] ? clear_bhb_loop+0x35/0x90 [ 418.356866][T15891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.356886][T15891] RIP: 0033:0x7fd1e338cde9 [ 418.356902][T15891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.356917][T15891] RSP: 002b:00007fd1e4123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.356937][T15891] RAX: ffffffffffffffda RBX: 00007fd1e35a5fa0 RCX: 00007fd1e338cde9 [ 418.356950][T15891] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 418.356961][T15891] RBP: 00007fd1e4123090 R08: 0000000000000000 R09: 0000000000000000 [ 418.356973][T15891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.356983][T15891] R13: 0000000000000000 R14: 00007fd1e35a5fa0 R15: 00007ffde5638518 [ 418.357010][T15891] [ 418.605447][T15731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.624202][T15731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.735794][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 418.820154][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 418.865105][T15901] Bluetooth: MGMT ver 1.23 [ 419.014346][T15731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.077668][T15731] veth0_vlan: entered promiscuous mode [ 419.096110][T15731] veth1_vlan: entered promiscuous mode [ 419.342721][T15731] veth0_macvtap: entered promiscuous mode [ 419.414604][T15731] veth1_macvtap: entered promiscuous mode [ 419.458982][ T5843] Bluetooth: hci4: command tx timeout [ 419.519868][T15731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.531689][T15923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2994'. [ 419.553355][T15754] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 419.564452][T15754] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.584156][T15731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.597627][T15754] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.614919][T15754] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.615963][ T5843] Bluetooth: hci0: command tx timeout [ 419.650471][T15731] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.668885][T15731] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.707478][T15731] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.741611][T15731] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.783491][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.007639][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 420.091327][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.116230][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.138756][T15943] FAULT_INJECTION: forcing a failure. [ 420.138756][T15943] name failslab, interval 1, probability 0, space 0, times 0 [ 420.184397][T15754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.196684][T15943] CPU: 0 UID: 0 PID: 15943 Comm: syz.3.3003 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 420.196713][T15943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 420.196724][T15943] Call Trace: [ 420.196732][T15943] [ 420.196740][T15943] dump_stack_lvl+0x241/0x360 [ 420.196766][T15943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.196784][T15943] ? __pfx__printk+0x10/0x10 [ 420.196804][T15943] ? __kmalloc_noprof+0xb5/0x4c0 [ 420.196826][T15943] ? __pfx___might_resched+0x10/0x10 [ 420.196849][T15943] should_fail_ex+0x40a/0x550 [ 420.196875][T15943] should_failslab+0xac/0x100 [ 420.196898][T15943] __kmalloc_noprof+0xdd/0x4c0 [ 420.196918][T15943] ? __virt_addr_valid+0x183/0x530 [ 420.196940][T15943] ? sk_prot_alloc+0xe0/0x210 [ 420.196965][T15943] sk_prot_alloc+0xe0/0x210 [ 420.196984][T15943] ? sk_alloc+0x26/0x370 [ 420.197006][T15943] sk_alloc+0x38/0x370 [ 420.197024][T15943] ? bpf_test_init+0x15a/0x180 [ 420.197046][T15943] ? bpf_ctx_init+0x162/0x1b0 [ 420.197070][T15943] bpf_prog_test_run_skb+0x3b3/0x1830 [ 420.197093][T15943] ? __pfx_lock_release+0x10/0x10 [ 420.197124][T15943] ? __pfx___might_resched+0x10/0x10 [ 420.197150][T15943] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 420.197171][T15943] ? __fget_files+0x2a/0x410 [ 420.197196][T15943] ? fput+0x21b/0x290 [ 420.197216][T15943] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 420.197238][T15943] bpf_prog_test_run+0x2e4/0x360 [ 420.197263][T15943] __sys_bpf+0x487/0x820 [ 420.197285][T15943] ? __pfx___sys_bpf+0x10/0x10 [ 420.197317][T15943] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.197339][T15943] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 420.197358][T15943] ? do_syscall_64+0x100/0x230 [ 420.197378][T15943] __x64_sys_bpf+0x7c/0x90 [ 420.197394][T15943] do_syscall_64+0xf3/0x230 [ 420.197409][T15943] ? clear_bhb_loop+0x35/0x90 [ 420.197429][T15943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.197446][T15943] RIP: 0033:0x7f0451b8cde9 [ 420.197458][T15943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.197470][T15943] RSP: 002b:00007f0452aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.197486][T15943] RAX: ffffffffffffffda RBX: 00007f0451da5fa0 RCX: 00007f0451b8cde9 [ 420.197496][T15943] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 420.197505][T15943] RBP: 00007f0452aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 420.197513][T15943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.197522][T15943] R13: 0000000000000000 R14: 00007f0451da5fa0 R15: 00007ffe8bc512d8 [ 420.197542][T15943] [ 420.468931][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.482392][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.491970][T15754] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.525294][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.532482][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.543600][T15946] siw: device registration error -23 [ 420.567692][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.574813][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.590993][T15945] lo speed is unknown, defaulting to 1000 [ 420.617637][T15945] lo speed is unknown, defaulting to 1000 [ 420.623700][T15945] lo speed is unknown, defaulting to 1000 [ 420.660343][T15951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3006'. [ 420.669944][T15949] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3005'. [ 420.701812][T15949] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.3005'. [ 420.708151][T15945] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 420.712113][T15949] netlink: zone id is out of range [ 420.724718][T15949] netlink: zone id is out of range [ 420.758509][T15949] netlink: zone id is out of range [ 420.773741][T15949] netlink: zone id is out of range [ 420.788898][T15949] netlink: zone id is out of range [ 420.794684][T15949] netlink: zone id is out of range [ 420.797094][T15945] lo speed is unknown, defaulting to 1000 [ 420.811801][T15949] netlink: zone id is out of range [ 420.817270][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.831967][T15945] lo speed is unknown, defaulting to 1000 [ 420.856755][T15945] lo speed is unknown, defaulting to 1000 [ 420.863557][T15945] lo speed is unknown, defaulting to 1000 [ 420.883702][T15945] lo speed is unknown, defaulting to 1000 [ 420.895930][ T5839] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 421.051830][T15754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.064209][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 421.134191][T15754] veth0_vlan: entered promiscuous mode [ 421.162841][T15754] veth1_vlan: entered promiscuous mode [ 421.233546][T15754] veth0_macvtap: entered promiscuous mode [ 421.252433][T15754] veth1_macvtap: entered promiscuous mode [ 421.290943][T15974] 8021q: adding VLAN 0 to HW filter on device bond16 [ 421.312231][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.340984][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.377961][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 421.399016][T15754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.443034][T15754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.464345][T15754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.482851][T15754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.505269][T15754] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.525734][T15754] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.535963][ T5839] Bluetooth: hci4: command tx timeout [ 421.549544][T15754] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.572475][T15754] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.644978][T15992] macsec0: entered promiscuous mode [ 421.670501][T15992] macsec0 (unregistering): left promiscuous mode [ 421.807245][T12220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.906361][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.914225][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.974918][T12220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.000032][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.008814][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.079305][T12220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.176172][T12220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.272222][T12220] bridge_slave_1: left allmulticast mode [ 422.278200][T12220] bridge_slave_1: left promiscuous mode [ 422.284217][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.294091][T12220] bridge_slave_0: left allmulticast mode [ 422.300096][T12220] bridge_slave_0: left promiscuous mode [ 422.309908][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.526317][ T1336] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 422.697677][T12220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.709500][T12220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.720371][T12220] bond0 (unregistering): Released all slaves [ 422.984012][T12220] hsr_slave_0: left promiscuous mode [ 422.990445][T12220] hsr_slave_1: left promiscuous mode [ 422.998668][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.006653][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.014732][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.022495][T12220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.049697][T12220] veth1_macvtap: left promiscuous mode [ 423.055281][T12220] veth0_macvtap: left promiscuous mode [ 423.061211][T12220] veth1_vlan: left promiscuous mode [ 423.066627][T12220] veth0_vlan: left promiscuous mode [ 423.646024][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 423.729856][T12220] team0 (unregistering): Port device team_slave_1 removed [ 423.794551][T12220] team0 (unregistering): Port device team_slave_0 removed [ 423.806773][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.817964][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.858646][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.879121][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.909764][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 423.930928][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.945691][ C1] net_ratelimit: 255 callbacks suppressed [ 423.945713][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.360824][T15999] lo speed is unknown, defaulting to 1000 [ 424.372853][T15999] lo speed is unknown, defaulting to 1000 [ 424.504485][T15999] chnl_net:caif_netlink_parms(): no params data found [ 424.577501][T15999] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.584659][T15999] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.592348][T15999] bridge_slave_0: entered allmulticast mode [ 424.600568][T15999] bridge_slave_0: entered promiscuous mode [ 424.609256][T15999] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.616626][T15999] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.623797][T15999] bridge_slave_1: entered allmulticast mode [ 424.630863][T15999] bridge_slave_1: entered promiscuous mode [ 424.664270][T15999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.683461][T15999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.713449][T15999] team0: Port device team_slave_0 added [ 424.725434][T15999] team0: Port device team_slave_1 added [ 424.746930][T15999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.753907][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.780032][ T1316] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 424.788184][T15999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.800938][T15999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.811431][T15999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.839658][T15999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.877996][T12220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.922473][T15999] hsr_slave_0: entered promiscuous mode [ 424.929782][T15999] hsr_slave_1: entered promiscuous mode [ 424.936225][T15999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.943796][T15999] Cannot create hsr debugfs directory [ 424.975645][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.988442][T12220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.148662][T12220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.410740][T12220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.477354][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 425.494406][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 425.516192][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.525049][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 425.538283][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 425.553302][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.629931][T16035] sctp: [Deprecated]: syz.1.3027 (pid 16035) Use of int in max_burst socket option. [ 425.629931][T16035] Use struct sctp_assoc_value instead [ 425.773844][T16043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3027'. [ 425.809179][T16043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3027'. [ 425.889152][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 425.910427][T16029] lo speed is unknown, defaulting to 1000 [ 425.969895][T16029] lo speed is unknown, defaulting to 1000 [ 426.006926][ T29] audit: type=1107 audit(1739677567.080:13): pid=16050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 426.019382][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.019520][ T5839] Bluetooth: hci0: command tx timeout [ 426.032581][T12220] bridge_slave_1: left allmulticast mode [ 426.038767][T12220] bridge_slave_1: left promiscuous mode [ 426.044611][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.055078][T12220] bridge_slave_0: left allmulticast mode [ 426.061326][T12220] bridge_slave_0: left promiscuous mode [ 426.067442][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.682500][T12220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.693188][T12220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.704198][T12220] bond0 (unregistering): Released all slaves [ 427.027222][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 427.055760][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 427.072066][T15999] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.114377][T15999] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.182893][T16074] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.206596][T16074] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60154 - 0 [ 427.216996][T16074] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 33016 - 0 [ 427.229242][T16074] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 427.247736][T15999] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.260478][T15999] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.331774][T16074] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.344855][T16074] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60154 - 0 [ 427.355587][T16074] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 33016 - 0 [ 427.365447][T16074] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 427.405710][T12220] hsr_slave_0: left promiscuous mode [ 427.428397][T12220] hsr_slave_1: left promiscuous mode [ 427.434313][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.445217][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.453563][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.461482][T12220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.501984][T12220] veth1_macvtap: left promiscuous mode [ 427.507936][T12220] veth0_macvtap: left promiscuous mode [ 427.513776][T12220] veth1_vlan: left promiscuous mode [ 427.523536][T12220] veth0_vlan: left promiscuous mode [ 427.594167][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 427.616196][ T5839] Bluetooth: hci4: command tx timeout [ 428.098372][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.107963][ T5839] Bluetooth: hci0: command tx timeout [ 428.149764][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 428.191553][T12220] team0 (unregistering): Port device team_slave_1 removed [ 428.251997][T12220] team0 (unregistering): Port device team_slave_0 removed [ 428.729986][T16074] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.740747][T16074] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60154 - 0 [ 428.750855][T16074] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 33016 - 0 [ 428.769199][T16074] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 428.790363][T16029] chnl_net:caif_netlink_parms(): no params data found [ 428.879735][T16074] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.914471][T16074] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60154 - 0 [ 428.924644][T16074] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 33016 - 0 [ 428.935475][T16074] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 428.990124][T16102] xt_CONNSECMARK: invalid mode: 0 [ 429.116863][T16029] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.123996][T16029] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.145666][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.158140][T16029] bridge_slave_0: entered allmulticast mode [ 429.166027][T16029] bridge_slave_0: entered promiscuous mode [ 429.185362][T16029] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.192975][T16029] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.203143][T16029] bridge_slave_1: entered allmulticast mode [ 429.212170][T16029] bridge_slave_1: entered promiscuous mode [ 429.235196][T16074] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.243752][T16074] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.254254][T16074] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 60154 - 0 [ 429.272864][T16074] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 33016 - 0 [ 429.287146][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 429.326541][T16074] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.337112][T16074] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.345332][T16074] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 60154 - 0 [ 429.354677][T16074] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 33016 - 0 [ 429.381159][T16029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.390988][T16112] tun0: tun_chr_ioctl cmd 35108 [ 429.408886][T16074] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.418569][T16074] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.427315][T16074] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 60154 - 0 [ 429.435700][T16074] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 33016 - 0 [ 429.450188][T16029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.490192][T16074] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.500433][T16074] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.509020][T16074] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 60154 - 0 [ 429.517876][T16074] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 33016 - 0 [ 429.535058][T15999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.588291][T16029] team0: Port device team_slave_0 added [ 429.600353][T16029] team0: Port device team_slave_1 added [ 429.643922][T16119] 8021q: adding VLAN 0 to HW filter on device bond11 [ 429.694665][T16123] pim6reg1: entered promiscuous mode [ 429.700508][ T5839] Bluetooth: hci4: command tx timeout [ 429.721964][T16123] pim6reg1: entered allmulticast mode [ 429.739912][T16029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.754738][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.773026][T16129] netlink: 304 bytes leftover after parsing attributes in process `syz.1.3056'. [ 429.781612][T16029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.907046][T16029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.926180][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.955237][T16029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.983524][T15999] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.021139][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.028357][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.043560][T16029] hsr_slave_0: entered promiscuous mode [ 430.051037][T16029] hsr_slave_1: entered promiscuous mode [ 430.065600][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.072723][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.176080][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.183406][ T5839] Bluetooth: hci0: command tx timeout [ 430.304302][T16140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 430.315513][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3060'. [ 430.329369][T16140] netlink: 'syz.3.3060': attribute type 13 has an invalid length. [ 430.340559][T16140] netlink: 'syz.3.3060': attribute type 12 has an invalid length. [ 430.370392][T16148] netlink: 79532 bytes leftover after parsing attributes in process `syz.1.3059'. [ 430.397546][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 430.465886][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'. [ 430.477033][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'. [ 430.681377][T16157] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 430.690544][T16157] IPVS: length: 78 != 422621984 [ 430.781736][T16164] FAULT_INJECTION: forcing a failure. [ 430.781736][T16164] name failslab, interval 1, probability 0, space 0, times 0 [ 430.782642][T15999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.803754][T16164] CPU: 1 UID: 0 PID: 16164 Comm: syz.3.3066 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 430.803780][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 430.803790][T16164] Call Trace: [ 430.803797][T16164] [ 430.803805][T16164] dump_stack_lvl+0x241/0x360 [ 430.803830][T16164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.803845][T16164] ? __pfx__printk+0x10/0x10 [ 430.803863][T16164] ? __kmalloc_noprof+0xb5/0x4c0 [ 430.803885][T16164] ? __pfx___might_resched+0x10/0x10 [ 430.803910][T16164] should_fail_ex+0x40a/0x550 [ 430.803937][T16164] should_failslab+0xac/0x100 [ 430.803957][T16164] __kmalloc_noprof+0xdd/0x4c0 [ 430.803976][T16164] ? kernfs_fop_write_iter+0x15a/0x500 [ 430.804001][T16164] kernfs_fop_write_iter+0x15a/0x500 [ 430.804027][T16164] vfs_write+0xacf/0xd10 [ 430.804048][T16164] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 430.804071][T16164] ? __pfx_vfs_write+0x10/0x10 [ 430.804084][T16164] ? do_sys_openat2+0x17a/0x1d0 [ 430.804105][T16164] ? __fget_files+0x2a/0x410 [ 430.804129][T16164] ? __fget_files+0x2a/0x410 [ 430.804156][T16164] ksys_write+0x18f/0x2b0 [ 430.804174][T16164] ? __pfx_ksys_write+0x10/0x10 [ 430.804190][T16164] ? do_syscall_64+0x100/0x230 [ 430.804237][T16164] ? do_syscall_64+0xb6/0x230 [ 430.804258][T16164] do_syscall_64+0xf3/0x230 [ 430.804277][T16164] ? clear_bhb_loop+0x35/0x90 [ 430.804301][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.804320][T16164] RIP: 0033:0x7f0451b8cde9 [ 430.804335][T16164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.804349][T16164] RSP: 002b:00007f0452aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.804367][T16164] RAX: ffffffffffffffda RBX: 00007f0451da5fa0 RCX: 00007f0451b8cde9 [ 430.804377][T16164] RDX: 0000000000000009 RSI: 0000400000000100 RDI: 0000000000000006 [ 430.804387][T16164] RBP: 00007f0452aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 430.804397][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.804407][T16164] R13: 0000000000000000 R14: 00007f0451da5fa0 R15: 00007ffe8bc512d8 [ 430.804435][T16164] [ 430.858412][T15999] veth0_vlan: entered promiscuous mode [ 431.088956][T15999] veth1_vlan: entered promiscuous mode [ 431.129021][T15999] veth0_macvtap: entered promiscuous mode [ 431.144331][T15999] veth1_macvtap: entered promiscuous mode [ 431.153672][T16169] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3067'. [ 431.198681][T15999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.216001][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 431.227268][T16168] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3067'. [ 431.282256][T16168] netlink: zone id is out of range [ 431.283148][T16172] 8021q: adding VLAN 0 to HW filter on device bond6 [ 431.290421][T16168] netlink: zone id is out of range [ 431.306751][T16168] netlink: zone id is out of range [ 431.311919][T16168] netlink: zone id is out of range [ 431.318763][T15999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.343077][T16168] netlink: zone id is out of range [ 431.364003][T15999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.385071][T16169] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 431.394143][T16168] netlink: zone id is out of range [ 431.408352][T16168] netlink: zone id is out of range [ 431.415455][T15999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.443641][T15999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.453462][T15999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.565517][T16029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.583932][T16029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.596573][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 431.606387][T16185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3074'. [ 431.642476][T16029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.671801][T16029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.744291][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.777335][ T5839] Bluetooth: hci4: command tx timeout [ 431.794859][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.813743][T16193] FAULT_INJECTION: forcing a failure. [ 431.813743][T16193] name failslab, interval 1, probability 0, space 0, times 0 [ 431.864320][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.870686][T16193] CPU: 0 UID: 0 PID: 16193 Comm: syz.1.3077 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 431.870713][T16193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 431.870725][T16193] Call Trace: [ 431.870731][T16193] [ 431.870739][T16193] dump_stack_lvl+0x241/0x360 [ 431.870764][T16193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.870782][T16193] ? __pfx__printk+0x10/0x10 [ 431.870800][T16193] ? kmem_cache_alloc_noprof+0x48/0x380 [ 431.870822][T16193] ? __pfx___might_resched+0x10/0x10 [ 431.870847][T16193] should_fail_ex+0x40a/0x550 [ 431.870872][T16193] should_failslab+0xac/0x100 [ 431.870893][T16193] ? alloc_empty_file+0x9e/0x1d0 [ 431.870913][T16193] kmem_cache_alloc_noprof+0x70/0x380 [ 431.870937][T16193] alloc_empty_file+0x9e/0x1d0 [ 431.870958][T16193] alloc_file_pseudo+0x204/0x320 [ 431.870985][T16193] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 431.871018][T16193] anon_inode_getfd+0xce/0x1e0 [ 431.871040][T16193] btf_new_fd+0x6d8/0xca0 [ 431.871057][T16193] ? apparmor_capable+0x13b/0x1b0 [ 431.871081][T16193] ? __pfx_btf_new_fd+0x10/0x10 [ 431.871102][T16193] ? bpf_btf_load+0xcf/0x1a0 [ 431.871126][T16193] __sys_bpf+0x6f2/0x820 [ 431.871148][T16193] ? __pfx___sys_bpf+0x10/0x10 [ 431.871180][T16193] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 431.871205][T16193] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.871227][T16193] ? do_syscall_64+0x100/0x230 [ 431.871251][T16193] __x64_sys_bpf+0x7c/0x90 [ 431.871278][T16193] do_syscall_64+0xf3/0x230 [ 431.871297][T16193] ? clear_bhb_loop+0x35/0x90 [ 431.871321][T16193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.871341][T16193] RIP: 0033:0x7fd1e338cde9 [ 431.871356][T16193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.871370][T16193] RSP: 002b:00007fd1e4123038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 431.871389][T16193] RAX: ffffffffffffffda RBX: 00007fd1e35a5fa0 RCX: 00007fd1e338cde9 [ 431.871401][T16193] RDX: 0000000000000028 RSI: 0000400000001a40 RDI: 0000000000000012 [ 431.871413][T16193] RBP: 00007fd1e4123090 R08: 0000000000000000 R09: 0000000000000000 [ 431.871423][T16193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.871433][T16193] R13: 0000000000000001 R14: 00007fd1e35a5fa0 R15: 00007ffde5638518 [ 431.871459][T16193] [ 432.114647][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.171598][T16029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.256168][ T5839] Bluetooth: hci0: command tx timeout [ 432.272911][T16029] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.322198][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.329458][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.399900][T16206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3081'. [ 432.414504][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.421690][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.524045][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3081'. [ 432.594530][T16216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3081'. [ 432.727291][ T1336] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 432.884200][T12220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.991731][T16029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.122110][T12220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.156827][T16029] veth0_vlan: entered promiscuous mode [ 433.171994][T16029] veth1_vlan: entered promiscuous mode [ 433.224175][T12220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.262908][T16029] veth0_macvtap: entered promiscuous mode [ 433.271381][T16029] veth1_macvtap: entered promiscuous mode [ 433.297544][T12220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.322312][T16029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.333294][T16029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.344411][T16029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.361139][T16029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.371951][T16029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.385496][T16029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.396899][T16029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.405888][T16029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.414673][T16029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.423954][T16029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.492003][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.504107][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.542106][ T1316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.558176][ T1316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.566711][T12220] bridge_slave_1: left allmulticast mode [ 433.572381][T12220] bridge_slave_1: left promiscuous mode [ 433.578263][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.587720][T12220] bridge_slave_0: left allmulticast mode [ 433.593383][T12220] bridge_slave_0: left promiscuous mode [ 433.599299][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.861393][ T5839] Bluetooth: hci4: command tx timeout [ 433.869232][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 433.967255][T12220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.980214][T12220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.990651][T12220] bond0 (unregistering): Released all slaves [ 434.302543][T12220] hsr_slave_0: left promiscuous mode [ 434.310369][T12220] hsr_slave_1: left promiscuous mode [ 434.316404][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.323918][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.332318][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.339940][T12220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.345807][ C1] net_ratelimit: 15 callbacks suppressed [ 434.345824][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.378009][T12220] veth1_macvtap: left promiscuous mode [ 434.383535][T12220] veth0_macvtap: left promiscuous mode [ 434.389548][T12220] veth1_vlan: left promiscuous mode [ 434.394822][T12220] veth0_vlan: left promiscuous mode [ 434.864037][T16232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3090'. [ 435.006482][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 435.289119][T12220] team0 (unregistering): Port device team_slave_1 removed [ 435.378890][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.392018][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.402762][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.411944][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.421099][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.428837][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 435.439001][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.474953][T12220] team0 (unregistering): Port device team_slave_0 removed [ 435.968449][T16237] lo speed is unknown, defaulting to 1000 [ 435.984430][T16237] lo speed is unknown, defaulting to 1000 [ 436.100871][T16237] chnl_net:caif_netlink_parms(): no params data found [ 436.152146][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 436.226476][T16237] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.233840][T16237] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.241361][T16237] bridge_slave_0: entered allmulticast mode [ 436.248194][T16237] bridge_slave_0: entered promiscuous mode [ 436.255331][T16237] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.263140][T16237] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.270523][T16237] bridge_slave_1: entered allmulticast mode [ 436.277504][T16237] bridge_slave_1: entered promiscuous mode [ 436.302577][T16237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.314261][T16237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.346900][T16237] team0: Port device team_slave_0 added [ 436.360340][T16237] team0: Port device team_slave_1 added [ 436.393152][T12220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.423375][T16237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.430408][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 436.438887][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.465876][T16237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.480254][T16237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.487533][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.513707][T16237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.547416][T16237] hsr_slave_0: entered promiscuous mode [ 436.553583][T16237] hsr_slave_1: entered promiscuous mode [ 436.559756][T16237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.567479][T16237] Cannot create hsr debugfs directory [ 436.854207][T16237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.864001][T16237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.872857][T16237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.892648][T16237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 436.946313][T12220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.133251][T12220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.268571][T12220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.286062][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 437.345880][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 437.465638][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 437.491008][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 437.510832][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 437.520310][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.530594][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 437.530852][T16237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.538382][ T5846] Bluetooth: hci0: command tx timeout [ 437.553352][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 437.561392][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 437.615112][T12220] bridge_slave_1: left allmulticast mode [ 437.622444][T12220] bridge_slave_1: left promiscuous mode [ 437.629729][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.639320][T12220] bridge_slave_0: left allmulticast mode [ 437.645037][T12220] bridge_slave_0: left promiscuous mode [ 437.653227][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.783478][ T8] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 438.139316][T16284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3104'. [ 438.182619][T12220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.193714][T12220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.204593][T12220] bond0 (unregistering): Released all slaves [ 438.215205][T16269] syzkaller1: entered promiscuous mode [ 438.220855][T16269] syzkaller1: entered allmulticast mode [ 438.267060][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 438.282379][T16265] lo speed is unknown, defaulting to 1000 [ 438.290833][T16237] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.320235][T16265] lo speed is unknown, defaulting to 1000 [ 438.386221][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.393416][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.416010][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 438.499166][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.506347][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.513900][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 438.542727][T16290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3107'. [ 438.625003][T16287] lo speed is unknown, defaulting to 1000 [ 438.645110][T16287] lo speed is unknown, defaulting to 1000 [ 438.649919][T16295] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 438.726101][T16298] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3108'. [ 438.733214][T16295] 8021q: adding VLAN 0 to HW filter on device bond7 [ 438.817406][T12220] hsr_slave_0: left promiscuous mode [ 438.817574][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 438.834296][T12220] hsr_slave_1: left promiscuous mode [ 438.840911][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.849788][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.863752][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.871750][T12220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.925527][T12220] veth1_macvtap: left promiscuous mode [ 438.932231][T16303] netlink: 'syz.1.3110': attribute type 2 has an invalid length. [ 438.940953][T12220] veth0_macvtap: left promiscuous mode [ 438.946683][T16303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3110'. [ 438.956126][T12220] veth1_vlan: left promiscuous mode [ 438.961457][T12220] veth0_vlan: left promiscuous mode [ 439.536379][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 439.556170][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 439.628893][ T5846] Bluetooth: hci4: command tx timeout [ 439.631274][ T5839] Bluetooth: hci0: command tx timeout [ 439.724533][T12220] team0 (unregistering): Port device team_slave_1 removed [ 439.778932][T12220] team0 (unregistering): Port device team_slave_0 removed [ 440.390548][T16265] chnl_net:caif_netlink_parms(): no params data found [ 440.585692][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 440.668804][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 440.698540][T16265] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.716601][T16265] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.723850][T16265] bridge_slave_0: entered allmulticast mode [ 440.749092][T16265] bridge_slave_0: entered promiscuous mode [ 440.782693][T16265] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.800400][T16265] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.825883][T16265] bridge_slave_1: entered allmulticast mode [ 440.843186][T16265] bridge_slave_1: entered promiscuous mode [ 440.887321][T16265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.900081][T16265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.963232][T16265] team0: Port device team_slave_0 added [ 441.011092][T16338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3118'. [ 441.061149][T16265] team0: Port device team_slave_1 added [ 441.194434][T16265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.207151][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.424656][T16265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.486260][T16237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.502704][T16358] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3120'. [ 441.512303][T16358] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 441.531927][T16265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.539691][T16265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.615635][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 441.625892][T16265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.695862][ T5839] Bluetooth: hci4: command tx timeout [ 441.695945][ T5846] Bluetooth: hci0: command tx timeout [ 441.715365][T16364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3122'. [ 441.801209][T16265] hsr_slave_0: entered promiscuous mode [ 441.816984][T16265] hsr_slave_1: entered promiscuous mode [ 441.835957][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 441.836143][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 441.899073][T16364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.911376][T16364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.982114][T16237] veth0_vlan: entered promiscuous mode [ 442.013265][T16237] veth1_vlan: entered promiscuous mode [ 442.167678][T16237] veth0_macvtap: entered promiscuous mode [ 442.213035][T16237] veth1_macvtap: entered promiscuous mode [ 442.278469][T16237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.299524][T16237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.329357][T16237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.351713][T16237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.366030][T16237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.374859][T16237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.572841][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.626093][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.665658][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.678536][T16380] netlink: 'syz.3.3127': attribute type 1 has an invalid length. [ 442.763745][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.805717][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.920665][T16381] lo speed is unknown, defaulting to 1000 [ 442.941917][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3129'. [ 442.959332][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 442.977678][T16381] lo speed is unknown, defaulting to 1000 [ 442.980227][T16265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.005475][T16265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 443.059625][T16265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 443.096912][T16265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.188334][ T29] audit: type=1107 audit(1739677584.260:14): pid=16394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='سJw;V[p UJnBOcwOߗ(+e' [ 443.335997][T16265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.350410][T16401] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3133'. [ 443.463114][T16403] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3133'. [ 443.619311][T16265] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.659636][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.666834][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.710911][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.718126][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.842896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.851455][ T5846] Bluetooth: hci4: command tx timeout [ 444.136238][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 444.216045][T12220] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.283400][T16265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.322476][T16265] veth0_vlan: entered promiscuous mode [ 444.334076][T16265] veth1_vlan: entered promiscuous mode [ 444.394950][T12220] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.441735][T16265] veth0_macvtap: entered promiscuous mode [ 444.454428][T16265] veth1_macvtap: entered promiscuous mode [ 444.469831][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.481254][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.492564][T16265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.507894][T16265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.518604][T16265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.530501][T16265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.543603][T16265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.552586][T16265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.561429][T16265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.570275][T16265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.647091][T12220] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.678912][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.678930][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.707319][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.715212][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.828113][T12220] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.905729][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.918771][T12220] bridge_slave_1: left allmulticast mode [ 444.924430][T12220] bridge_slave_1: left promiscuous mode [ 444.931598][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.940922][T12220] bridge_slave_0: left allmulticast mode [ 444.950442][T12220] bridge_slave_0: left promiscuous mode [ 444.956257][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.246903][ T11] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 445.340900][T12220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.354990][T12220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.365507][T12220] bond0 (unregistering): Released all slaves [ 445.556330][T12220] hsr_slave_0: left promiscuous mode [ 445.562090][T12220] hsr_slave_1: left promiscuous mode [ 445.568384][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.576229][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.585259][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.593397][T12220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.635961][T12220] veth1_macvtap: left promiscuous mode [ 445.641528][T12220] veth0_macvtap: left promiscuous mode [ 445.647316][T12220] veth1_vlan: left promiscuous mode [ 445.652629][T12220] veth0_vlan: left promiscuous mode [ 445.943066][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 446.086970][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 446.097324][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 446.110359][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 446.121652][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 446.134571][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 446.142078][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 446.327355][T12220] team0 (unregistering): Port device team_slave_1 removed [ 446.381601][T12220] team0 (unregistering): Port device team_slave_0 removed [ 446.388989][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 446.859632][T16412] lo speed is unknown, defaulting to 1000 [ 446.869086][T16412] lo speed is unknown, defaulting to 1000 [ 446.985685][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.015533][T16412] chnl_net:caif_netlink_parms(): no params data found [ 447.084300][T16412] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.092018][T16412] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.102576][T16412] bridge_slave_0: entered allmulticast mode [ 447.109567][T16412] bridge_slave_0: entered promiscuous mode [ 447.118342][T16412] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.125509][T16412] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.132850][T16412] bridge_slave_1: entered allmulticast mode [ 447.139601][T16412] bridge_slave_1: entered promiscuous mode [ 447.170166][T16412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.182975][T16412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.219342][T16412] team0: Port device team_slave_0 added [ 447.253109][T12220] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.275182][T16412] team0: Port device team_slave_1 added [ 447.295187][T16412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.302359][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.328778][T16412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.342484][T16412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.349545][T16412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.376634][T16412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.409366][T16412] hsr_slave_0: entered promiscuous mode [ 447.415505][T16412] hsr_slave_1: entered promiscuous mode [ 447.421580][T16412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 447.429237][T16412] Cannot create hsr debugfs directory [ 447.527538][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 447.577177][T16426] openvswitch: netlink: Message has 8 unknown bytes. [ 447.590989][T16426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 447.604577][T16426] netlink: 'syz.3.3136': attribute type 12 has an invalid length. [ 447.711143][T16430] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.751010][T16430] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.798609][T16430] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 60154 - 0 [ 447.838119][T16430] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 33016 - 0 [ 447.962705][T16430] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.972963][T16430] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.993937][T16430] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 60154 - 0 [ 448.014689][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.015748][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 448.026297][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.038381][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.048068][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.057455][T16430] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 33016 - 0 [ 448.058242][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 448.078818][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.175991][ T5839] Bluetooth: hci0: command tx timeout [ 448.189125][T12220] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.250915][T16430] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.305268][T16430] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.328834][T16430] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 60154 - 0 [ 448.339859][T16430] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 33016 - 0 [ 448.412120][T12220] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.490116][T16430] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.519874][T16430] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.538954][T16430] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 60154 - 0 [ 448.567669][T16430] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 33016 - 0 [ 448.641228][T16438] lo speed is unknown, defaulting to 1000 [ 448.672112][T12220] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.696631][T16438] lo speed is unknown, defaulting to 1000 [ 448.697226][T16448] lo speed is unknown, defaulting to 1000 [ 448.717953][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 448.758426][T16448] lo speed is unknown, defaulting to 1000 [ 448.770188][T16430] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.800603][T16430] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.832604][T16430] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 60154 - 0 [ 448.841517][T16430] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 33016 - 0 [ 448.882807][T16430] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.914297][T16430] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.923975][T16430] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 60154 - 0 [ 448.935798][T16430] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 33016 - 0 [ 448.945527][T16412] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.960021][T16457] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3142'. [ 448.962460][T16412] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.982887][T16457] netlink: 'syz.4.3142': attribute type 2 has an invalid length. [ 449.013079][T16430] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.021785][T16430] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.030660][T16430] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 60154 - 0 [ 449.039611][T16430] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 33016 - 0 [ 449.054424][T16430] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.055771][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.063173][T16430] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.078067][T16430] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 60154 - 0 [ 449.086568][T16430] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 33016 - 0 [ 449.095273][T16412] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.121395][T16412] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.221553][T12220] bridge_slave_1: left allmulticast mode [ 449.227451][T12220] bridge_slave_1: left promiscuous mode [ 449.233197][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.251221][T12220] bridge_slave_0: left allmulticast mode [ 449.257001][T12220] bridge_slave_0: left promiscuous mode [ 449.262759][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.525066][T16470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3144'. [ 449.816451][T12220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.829951][T12220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.841135][T12220] bond0 (unregistering): Released all slaves [ 449.847647][T16477] netlink: 'syz.4.3148': attribute type 3 has an invalid length. [ 449.866487][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 450.044072][T16481] netlink: zone id is out of range [ 450.074937][T16481] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3149'. [ 450.095750][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.102975][ T5839] Bluetooth: hci4: command tx timeout [ 450.233892][T16438] chnl_net:caif_netlink_parms(): no params data found [ 450.256512][ T5839] Bluetooth: hci0: command tx timeout [ 450.375250][T12220] hsr_slave_0: left promiscuous mode [ 450.396138][T12220] hsr_slave_1: left promiscuous mode [ 450.411547][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.433042][T12220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.455512][T12220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.476086][T12220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.574809][T12220] veth1_macvtap: left promiscuous mode [ 450.587007][T12220] veth0_macvtap: left promiscuous mode [ 450.598008][T12220] veth1_vlan: left promiscuous mode [ 450.603508][T12220] veth0_vlan: left promiscuous mode [ 450.977303][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 451.136550][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.809696][T12220] team0 (unregistering): Port device team_slave_1 removed [ 451.868954][T12220] team0 (unregistering): Port device team_slave_0 removed [ 452.111490][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 452.175700][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.186360][ T5839] Bluetooth: hci4: command tx timeout [ 452.337360][ T5839] Bluetooth: hci0: command tx timeout [ 452.425355][T16412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.492116][T16438] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.522383][T16438] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.530264][T16438] bridge_slave_0: entered allmulticast mode [ 452.577685][T16438] bridge_slave_0: entered promiscuous mode [ 452.613618][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3163'. [ 452.634627][T16412] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.656322][T16438] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.685936][T16438] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.703508][T16438] bridge_slave_1: entered allmulticast mode [ 452.728241][T16438] bridge_slave_1: entered promiscuous mode [ 452.758166][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.765342][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.855211][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.862396][ T5957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.905874][T16545] Bluetooth: MGMT ver 1.23 [ 452.932241][T16438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.954233][T16438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.033014][T16547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3167'. [ 453.055386][T16438] team0: Port device team_slave_0 added [ 453.098075][T16438] team0: Port device team_slave_1 added [ 453.190932][T16549] hsr0: entered promiscuous mode [ 453.206285][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 453.215779][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.233091][T16551] xt_ecn: cannot match TCP bits for non-tcp packets [ 453.243040][T16438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.256830][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 453.271617][T16438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.325876][T16438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.344069][T16412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.373795][T16552] hsr_slave_0: left promiscuous mode [ 453.380129][T16552] hsr_slave_1: left promiscuous mode [ 453.434326][T16552] hsr0 (unregistering): left promiscuous mode [ 453.442680][T16438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.458150][T16438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.515458][T16438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.553933][T16559] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20001 [ 453.561769][T16559] netlink: 'syz.1.3170': attribute type 3 has an invalid length. [ 453.690660][T16438] hsr_slave_0: entered promiscuous mode [ 453.726923][T16438] hsr_slave_1: entered promiscuous mode [ 453.757254][T16569] netlink: 'syz.3.3173': attribute type 4 has an invalid length. [ 453.782767][T16569] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3173'. [ 453.798244][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 453.823648][T16569] wlan1: mtu less than device minimum [ 453.921941][T16412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.080923][T16412] veth0_vlan: entered promiscuous mode [ 454.121346][T16412] veth1_vlan: entered promiscuous mode [ 454.201460][T16412] veth0_macvtap: entered promiscuous mode [ 454.237437][T16412] veth1_macvtap: entered promiscuous mode [ 454.255709][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.256689][ T5839] Bluetooth: hci4: command tx timeout [ 454.282664][T16412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.308292][T16412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.338739][T16412] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.350649][T16412] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.364250][T16412] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.377175][T16412] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.425861][ T5839] Bluetooth: hci0: command tx timeout [ 454.427705][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 454.624986][T16438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.643064][T16438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.669710][T16438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.680479][T12220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.680546][T16438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.700954][T12220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.767531][T12220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.785021][T12220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.918311][T16438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.985394][T16438] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.123631][T16606] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 455.135257][T16606] vlan2: entered promiscuous mode [ 455.156355][T16606] bond0: entered promiscuous mode [ 455.160806][T16601] sctp: [Deprecated]: syz.1.3183 (pid 16601) Use of int in max_burst socket option. [ 455.160806][T16601] Use struct sctp_assoc_value instead [ 455.177780][T16606] bond0: left promiscuous mode [ 455.185097][T16606] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 455.237192][T16609] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3184'. [ 455.283397][T16609] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 455.291824][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.295803][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.298992][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.328909][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.336133][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.586289][ T1336] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 455.644967][ T5957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.760494][T16619] lo speed is unknown, defaulting to 1000 [ 455.775749][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 455.844768][ T5957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.877243][T16438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.896235][T16619] lo speed is unknown, defaulting to 1000 [ 455.977601][ T5957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.037873][T16438] veth0_vlan: entered promiscuous mode [ 456.052693][T16438] veth1_vlan: entered promiscuous mode [ 456.094731][T16438] veth0_macvtap: entered promiscuous mode [ 456.116162][T16438] veth1_macvtap: entered promiscuous mode [ 456.143768][ T5957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.163383][T16619] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.3187'. [ 456.168763][T16438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.173047][T16619] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.184165][T16438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.204788][T16438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.237377][T16438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.248666][T16438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.262678][T16438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.274799][T16438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.283810][T16438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.293044][T16438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.302456][T16438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.335749][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 456.336500][ T5839] Bluetooth: hci4: command tx timeout [ 456.430729][ T5957] bridge_slave_1: left allmulticast mode [ 456.437625][ T5957] bridge_slave_1: left promiscuous mode [ 456.443351][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.452499][ T5957] bridge_slave_0: left allmulticast mode [ 456.458824][ T5957] bridge_slave_0: left promiscuous mode [ 456.464494][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.747007][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 456.837934][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.848633][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.859824][ T5957] bond0 (unregistering): Released all slaves [ 456.880277][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.894965][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.934644][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.952648][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.160743][ T5957] hsr_slave_0: left promiscuous mode [ 457.171132][ T5957] hsr_slave_1: left promiscuous mode [ 457.177186][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.184594][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.195397][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.202955][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.227194][ T5957] veth1_macvtap: left promiscuous mode [ 457.232829][ T5957] veth0_macvtap: left promiscuous mode [ 457.238467][ T5957] veth1_vlan: left promiscuous mode [ 457.243730][ T5957] veth0_vlan: left promiscuous mode [ 457.375811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 457.847399][ T64] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 457.863682][ T5957] team0 (unregistering): Port device team_slave_1 removed [ 457.942552][T16642] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3190'. [ 457.960471][T16636] can: request_module (can-proto-3) failed. [ 457.987609][ T5957] team0 (unregistering): Port device team_slave_0 removed [ 458.264149][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 458.288585][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 458.305300][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 458.321003][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 458.330792][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 458.346110][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 458.415707][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 458.959059][T16644] lo speed is unknown, defaulting to 1000 [ 458.968292][ T53] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 458.988713][T16644] lo speed is unknown, defaulting to 1000 [ 459.155253][T16644] chnl_net:caif_netlink_parms(): no params data found [ 459.204080][T16644] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.212035][T16644] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.219876][T16644] bridge_slave_0: entered allmulticast mode [ 459.227629][T16644] bridge_slave_0: entered promiscuous mode [ 459.235417][T16644] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.242751][T16644] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.250178][T16644] bridge_slave_1: entered allmulticast mode [ 459.257202][T16644] bridge_slave_1: entered promiscuous mode [ 459.284350][T16644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.300317][T16644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.333110][T16644] team0: Port device team_slave_0 added [ 459.340689][T16644] team0: Port device team_slave_1 added [ 459.364482][T16644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.372169][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.398563][T16644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.439079][ T5957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.456060][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 459.465925][T16644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.473114][T16644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.499304][T16644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.531505][T16644] hsr_slave_0: entered promiscuous mode [ 459.537941][T16644] hsr_slave_1: entered promiscuous mode [ 459.543888][T16644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.551687][T16644] Cannot create hsr debugfs directory [ 459.831903][T16644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.840864][T16644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.860034][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 459.869499][T16644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.881150][T16644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.902225][T16644] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.909390][T16644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.916812][T16644] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.923884][T16644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.937645][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.947842][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.981046][ T5957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.026699][T16644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.053939][ T5957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.073419][T16644] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.084825][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.091959][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.100511][ T1316] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 460.114215][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.121378][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.152911][ T5957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.265884][ T5957] bridge_slave_1: left allmulticast mode [ 460.271651][ T5957] bridge_slave_1: left promiscuous mode [ 460.277605][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.288755][ T5957] bridge_slave_0: left allmulticast mode [ 460.294427][ T5957] bridge_slave_0: left promiscuous mode [ 460.300468][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.383103][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 460.407929][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 460.426468][ T5839] Bluetooth: hci0: command tx timeout [ 460.495713][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 460.630411][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3197'. [ 460.859426][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.881600][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.904040][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.928910][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.961902][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 460.969739][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.136799][ T5957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.148886][ T5957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.159414][ T5957] bond0 (unregistering): Released all slaves [ 461.172508][T16660] rose3: entered allmulticast mode [ 461.206173][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 461.269916][T16671] lo speed is unknown, defaulting to 1000 [ 461.324285][T16644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.377035][T16671] lo speed is unknown, defaulting to 1000 [ 461.535747][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 461.550112][T16679] lo speed is unknown, defaulting to 1000 [ 461.682703][T16679] lo speed is unknown, defaulting to 1000 [ 461.684691][T16644] veth0_vlan: entered promiscuous mode [ 461.818961][T16685] lo speed is unknown, defaulting to 1000 [ 461.918989][T16691] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 461.919911][T16644] veth1_vlan: entered promiscuous mode [ 461.935849][T16691] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3201'. [ 461.970801][T16685] lo speed is unknown, defaulting to 1000 [ 462.080501][ T5957] hsr_slave_0: left promiscuous mode [ 462.088679][ T5957] hsr_slave_1: left promiscuous mode [ 462.106182][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.126248][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.142585][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.162046][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3202'. [ 462.167253][ T5957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.227436][ T5957] veth1_macvtap: left promiscuous mode [ 462.233199][ T5957] veth0_macvtap: left promiscuous mode [ 462.243807][ T5957] veth1_vlan: left promiscuous mode [ 462.250709][ T5957] veth0_vlan: left promiscuous mode [ 462.357921][ T35] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 462.527882][ T5839] Bluetooth: hci0: command tx timeout [ 462.575709][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.056082][ T5839] Bluetooth: hci4: command tx timeout [ 463.421304][ T5957] team0 (unregistering): Port device team_slave_1 removed [ 463.469693][ T5957] team0 (unregistering): Port device team_slave_0 removed [ 463.615672][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 463.637318][ T1336] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 464.118306][T16671] chnl_net:caif_netlink_parms(): no params data found [ 464.139387][T16644] veth0_macvtap: entered promiscuous mode [ 464.172314][T16644] veth1_macvtap: entered promiscuous mode [ 464.291946][T16728] netlink: 'syz.4.3210': attribute type 3 has an invalid length. [ 464.306215][T16731] netlink: 'syz.1.3211': attribute type 1 has an invalid length. [ 464.332480][T16644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.388455][T16644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.487259][T16671] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.494409][T16671] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.526106][T16671] bridge_slave_0: entered allmulticast mode [ 464.533112][T16671] bridge_slave_0: entered promiscuous mode [ 464.550741][T16671] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.576245][ T5839] Bluetooth: hci0: command tx timeout [ 464.583285][T16671] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.614701][T16671] bridge_slave_1: entered allmulticast mode [ 464.640822][T16671] bridge_slave_1: entered promiscuous mode [ 464.655637][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 464.776998][T12220] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 464.786972][T16644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.815933][T16644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.824764][T16644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.855928][T16644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.882001][T16671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.928082][T16671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.033473][T16671] team0: Port device team_slave_0 added [ 465.086313][T16671] team0: Port device team_slave_1 added [ 465.150679][ T5839] Bluetooth: hci4: command tx timeout [ 465.411203][T16671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.433918][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.493420][T16671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.564260][T16671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.579297][T16671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.612072][T16671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.695786][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 465.734708][T16671] hsr_slave_0: entered promiscuous mode [ 465.742439][T16671] hsr_slave_1: entered promiscuous mode [ 465.751650][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.775768][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.797963][T16757] lo speed is unknown, defaulting to 1000 [ 465.804877][T16761] Bluetooth: MGMT ver 1.23 [ 465.808282][T16757] lo speed is unknown, defaulting to 1000 [ 465.863788][T16758] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 465.881501][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'. [ 465.883744][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.891725][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3217'. [ 465.909121][ T5957] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 465.924110][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3218'. [ 465.926353][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.105473][T16767] rdma_op ffff88803035a1f0 conn xmit_rdma 0000000000000000 [ 466.414337][T16780] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 466.461133][T16780] 8021q: adding VLAN 0 to HW filter on device bond13 [ 466.536313][T16781] xt_ecn: cannot match TCP bits for non-tcp packets [ 466.662722][T16782] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 466.673428][T16782] ------------[ cut here ]------------ [ 466.679041][T16782] WARNING: CPU: 0 PID: 16782 at net/core/dev.c:9832 unregister_netdevice_many_notify+0x1b5c/0x2070 [ 466.690046][T16782] Modules linked in: [ 466.693967][T16782] CPU: 0 UID: 0 PID: 16782 Comm: syz.1.3225 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 466.704835][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 466.715006][T16782] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 466.722834][T16782] Code: f5 f7 90 0f 0b 90 e9 49 ff ff ff e8 8e 1d f5 f7 90 0f 0b 90 eb 97 e8 83 1d f5 f7 90 0f 0b 90 e9 99 f0 ff ff e8 75 1d f5 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 67 1d f5 f7 90 0f 0b 90 e9 71 f3 ff ff [ 466.735668][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 466.742705][T16782] RSP: 0018:ffffc90003e1efa0 EFLAGS: 00010293 [ 466.755718][T16782] RAX: ffffffff89cc99eb RBX: 00000000ffffffa1 RCX: ffff88807a9e5a00 [ 466.763723][T16782] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000 [ 466.771934][T16782] RBP: ffffc90003e1f190 R08: ffffffff89cc8bf0 R09: fffffbfff1d3a614 [ 466.780056][T16782] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90003347000 [ 466.788131][T16782] R13: 1ffff1100bb11186 R14: ffff88805d888c30 R15: ffff88805d888c28 [ 466.796195][T16782] FS: 00007fd1e41026c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 466.805144][T16782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.811782][T16782] CR2: 00007f0452a8cfb8 CR3: 00000000255a4000 CR4: 00000000003526f0 [ 466.819984][T16782] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 466.828073][T16782] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 466.836128][T16782] Call Trace: [ 466.839437][T16782] [ 466.842385][T16782] ? __warn+0x165/0x4d0 [ 466.846632][T16782] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 466.853260][T16782] ? report_bug+0x2b3/0x500 [ 466.857846][T16782] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 466.864467][T16782] ? handle_bug+0x60/0x90 [ 466.868850][T16782] ? exc_invalid_op+0x1a/0x50 [ 466.873548][T16782] ? asm_exc_invalid_op+0x1a/0x20 [ 466.878658][T16782] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 466.885190][T16782] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 466.891886][T16782] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 466.898641][T16782] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 466.905453][T16782] ? rtnl_dellink+0x394/0x8d0 [ 466.910307][T16782] ? unregister_netdevice_queue+0x26b/0x370 [ 466.916290][T16782] ? __nla_parse+0x40/0x60 [ 466.920743][T16782] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 466.927091][T16782] rtnl_dellink+0x52b/0x8d0 [ 466.931630][T16782] ? __pfx_rtnl_dellink+0x10/0x10 [ 466.936754][T16782] ? validate_chain+0x11e/0x5920 [ 466.941721][T16782] ? __pfx_lock_acquire+0x10/0x10 [ 466.946839][T16782] ? __pfx_lock_release+0x10/0x10 [ 466.951973][T16782] ? __pfx_rtnl_dellink+0x10/0x10 [ 466.957097][T16782] rtnetlink_rcv_msg+0x791/0xcf0 [ 466.962051][T16782] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 466.967240][T16782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.972718][T16782] netlink_rcv_skb+0x206/0x480 [ 466.977571][T16782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 466.983040][T16782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.988407][T16782] ? netlink_deliver_tap+0x2e/0x1b0 [ 466.993626][T16782] netlink_unicast+0x7f6/0x990 [ 466.998534][T16782] ? __pfx_netlink_unicast+0x10/0x10 [ 467.003828][T16782] ? __virt_addr_valid+0x45f/0x530 [ 467.009021][T16782] ? __phys_addr_symbol+0x2f/0x70 [ 467.014151][T16782] ? __check_object_size+0x47a/0x730 [ 467.019493][T16782] netlink_sendmsg+0x8de/0xcb0 [ 467.024260][T16782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.029602][T16782] ? aa_sock_msg_perm+0x91/0x160 [ 467.034580][T16782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.039931][T16782] __sock_sendmsg+0x221/0x270 [ 467.044603][T16782] ____sys_sendmsg+0x53a/0x860 [ 467.049424][T16782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.054722][T16782] ? __fget_files+0x2a/0x410 [ 467.059440][ T1336] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 467.059449][T16782] ? __fget_files+0x2a/0x410 [ 467.071857][T16782] __sys_sendmsg+0x269/0x350 [ 467.077048][T16782] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.082197][T16782] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.088575][T16782] ? do_syscall_64+0x100/0x230 [ 467.093359][T16782] ? do_syscall_64+0xb6/0x230 [ 467.098078][T16782] do_syscall_64+0xf3/0x230 [ 467.102582][T16782] ? clear_bhb_loop+0x35/0x90 [ 467.107345][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.113260][T16782] RIP: 0033:0x7fd1e338cde9 [ 467.117749][T16782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.138986][T16782] RSP: 002b:00007fd1e4102038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.147473][T16782] RAX: ffffffffffffffda RBX: 00007fd1e35a6080 RCX: 00007fd1e338cde9 [ 467.155487][T16782] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 000000000000000d [ 467.163508][T16782] RBP: 00007fd1e340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 467.171524][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.179577][T16782] R13: 0000000000000000 R14: 00007fd1e35a6080 R15: 00007ffde5638518 [ 467.187663][T16782] [ 467.190718][T16782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 467.198006][T16782] CPU: 0 UID: 0 PID: 16782 Comm: syz.1.3225 Not tainted 6.14.0-rc2-syzkaller-00474-g0784d83df3bf #0 [ 467.208772][T16782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 467.218840][T16782] Call Trace: [ 467.222112][T16782] [ 467.225031][T16782] dump_stack_lvl+0x241/0x360 [ 467.229892][T16782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.235103][T16782] ? __pfx__printk+0x10/0x10 [ 467.239685][T16782] ? _printk+0xd5/0x120 [ 467.243850][T16782] ? __init_begin+0x41000/0x41000 [ 467.248913][T16782] ? vscnprintf+0x5d/0x90 [ 467.253288][T16782] panic+0x349/0x880 [ 467.257203][T16782] ? __warn+0x174/0x4d0 [ 467.261455][T16782] ? __pfx_panic+0x10/0x10 [ 467.265907][T16782] __warn+0x344/0x4d0 [ 467.269897][T16782] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 467.276504][T16782] report_bug+0x2b3/0x500 [ 467.280834][T16782] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 467.287431][T16782] handle_bug+0x60/0x90 [ 467.291671][T16782] exc_invalid_op+0x1a/0x50 [ 467.296171][T16782] asm_exc_invalid_op+0x1a/0x20 [ 467.301019][T16782] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 467.308218][T16782] Code: f5 f7 90 0f 0b 90 e9 49 ff ff ff e8 8e 1d f5 f7 90 0f 0b 90 eb 97 e8 83 1d f5 f7 90 0f 0b 90 e9 99 f0 ff ff e8 75 1d f5 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 67 1d f5 f7 90 0f 0b 90 e9 71 f3 ff ff [ 467.327822][T16782] RSP: 0018:ffffc90003e1efa0 EFLAGS: 00010293 [ 467.333889][T16782] RAX: ffffffff89cc99eb RBX: 00000000ffffffa1 RCX: ffff88807a9e5a00 [ 467.341857][T16782] RDX: 0000000000000000 RSI: 00000000ffffffa1 RDI: 0000000000000000 [ 467.349825][T16782] RBP: ffffc90003e1f190 R08: ffffffff89cc8bf0 R09: fffffbfff1d3a614 [ 467.357804][T16782] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90003347000 [ 467.365778][T16782] R13: 1ffff1100bb11186 R14: ffff88805d888c30 R15: ffff88805d888c28 [ 467.373769][T16782] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 467.380276][T16782] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 467.386879][T16782] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 467.393646][T16782] ? rtnl_dellink+0x394/0x8d0 [ 467.398320][T16782] ? unregister_netdevice_queue+0x26b/0x370 [ 467.404218][T16782] ? __nla_parse+0x40/0x60 [ 467.408635][T16782] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 467.414880][T16782] rtnl_dellink+0x52b/0x8d0 [ 467.419390][T16782] ? __pfx_rtnl_dellink+0x10/0x10 [ 467.424409][T16782] ? validate_chain+0x11e/0x5920 [ 467.429358][T16782] ? __pfx_lock_acquire+0x10/0x10 [ 467.434384][T16782] ? __pfx_lock_release+0x10/0x10 [ 467.439455][T16782] ? __pfx_rtnl_dellink+0x10/0x10 [ 467.444472][T16782] rtnetlink_rcv_msg+0x791/0xcf0 [ 467.449400][T16782] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 467.454509][T16782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.459972][T16782] netlink_rcv_skb+0x206/0x480 [ 467.464734][T16782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 467.470187][T16782] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.475491][T16782] ? netlink_deliver_tap+0x2e/0x1b0 [ 467.480693][T16782] netlink_unicast+0x7f6/0x990 [ 467.485462][T16782] ? __pfx_netlink_unicast+0x10/0x10 [ 467.490742][T16782] ? __virt_addr_valid+0x45f/0x530 [ 467.495860][T16782] ? __phys_addr_symbol+0x2f/0x70 [ 467.500967][T16782] ? __check_object_size+0x47a/0x730 [ 467.506251][T16782] netlink_sendmsg+0x8de/0xcb0 [ 467.511015][T16782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.516388][T16782] ? aa_sock_msg_perm+0x91/0x160 [ 467.521332][T16782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.526612][T16782] __sock_sendmsg+0x221/0x270 [ 467.531289][T16782] ____sys_sendmsg+0x53a/0x860 [ 467.536058][T16782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.541342][T16782] ? __fget_files+0x2a/0x410 [ 467.545935][T16782] ? __fget_files+0x2a/0x410 [ 467.550527][T16782] __sys_sendmsg+0x269/0x350 [ 467.555118][T16782] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.560255][T16782] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.566622][T16782] ? do_syscall_64+0x100/0x230 [ 467.571392][T16782] ? do_syscall_64+0xb6/0x230 [ 467.576069][T16782] do_syscall_64+0xf3/0x230 [ 467.580580][T16782] ? clear_bhb_loop+0x35/0x90 [ 467.585258][T16782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.591147][T16782] RIP: 0033:0x7fd1e338cde9 [ 467.595558][T16782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.615175][T16782] RSP: 002b:00007fd1e4102038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.623589][T16782] RAX: ffffffffffffffda RBX: 00007fd1e35a6080 RCX: 00007fd1e338cde9 [ 467.631565][T16782] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 000000000000000d [ 467.639538][T16782] RBP: 00007fd1e340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 467.647504][T16782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.655466][T16782] R13: 0000000000000000 R14: 00007fd1e35a6080 R15: 00007ffde5638518 [ 467.663446][T16782] [ 467.666733][T16782] Kernel Offset: disabled [ 467.671050][T16782] Rebooting in 86400 seconds..