last executing test programs: 3.23482421s ago: executing program 4 (id=1286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 3.055350147s ago: executing program 4 (id=1290): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x1, 0x1}, {0x61}, {0x6}]}) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000240)={'wg1\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x3, 0x1}, 0x6) connect$inet6(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000100)={0x200c}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r5, @ANYRES16=r5], 0x1000f) 2.593951068s ago: executing program 3 (id=1297): unshare(0x20000400) r0 = socket(0x2, 0x80805, 0x0) unshare(0x48060600) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfff00002}, {0x16, 0x0, 0x0, 0x1}]}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="20517194", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0xfb, 0x6, @local}, 0x14) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="8500000013000000350000000000ba00850000000500000095000000000000004cf12aa5cbd56806f81f06a9c7fff5e0a141d524588f32cb447f90ee60b191e2c825cd4d581c45469816b05b61a3cf5fc6dd8442230e7953f911aa1f70351718512c7ae8766b643497cbe593f90a847687a1ef1f83dd6c1023678a1086f7d0f9dce435558fe138d736209ddb7457c14bc34e6bdea4217c4b49377fad08d9a7ab69000000004f0a9c13ecee61c09a701bd5192a9e19b27de967bfb3fe241454a04080bf668ce021879c820f9b80fe233888f07f5ab2667027d4b33729d714e0e205db36aa52281c70e90b9d1615e3a833c63d335d96f51401f6f2f05e469dfd1a8d6e77a6278d708d41af3cacc0afaec2262da46ee302999f76b0e21c2f8f456701b60000bd9ece2df9aac757664062f8b57375ecf693f041aca86e253039c8c7807f298a63f47e9b32d2712250e3ab7f90551b0459ca01571d0a0fb9b47b756f496ba7653d6b267416968d770c85f49866a3e1a41aeb3d81155bb4622e89d9f39dc296f028317e41ea24ed80c61ab29f77d7ff3d068682ef1b32a946be404088f2242644f2543c4ac1e6368c86a37616915197559167a57965e18f0c4890c183aa34a20632243aa140bfb043cf1921c3e07cc9a92e0f96983d40076892d1808962b44cb6643f9ea672d6467af76ff1a0d7a3361035fab1fb467445506267d73770"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) socket(0x11, 0x800000003, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r6], 0x3c}}, 0x0) 1.948403471s ago: executing program 4 (id=1304): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) close(r1) tee(r0, r2, 0x8000000000081, 0x0) close(0xffffffffffffffff) 1.723091388s ago: executing program 2 (id=1309): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10) socket(0x2a, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x100) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000003c0)={0x18, 0x0, {0x2, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 1.700858384s ago: executing program 4 (id=1310): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private0, @in6=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x24}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002900)={0x0, 0x15, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x1411, 0x1}, 0x10}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001228000140070824000a0004009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0xffc2}], 0x1}, 0x0) 1.655495411s ago: executing program 3 (id=1311): syz_emit_ethernet(0x82, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010133}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1}, {@rand_addr, 0xfdffffff}, {@dev}, {@private}]}]}}}}}}}, 0x0) 1.549380388s ago: executing program 2 (id=1312): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000002c0)="240000001a001deb23713f48f97319b528aca4b2d1000050e4088356b1bf4aec", 0x20) 1.549086091s ago: executing program 1 (id=1313): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x3c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x27, 0x6, "7ff3b5bbb5105baf482b6a3ce661ea0fe005a0be0fd416ecc07a6c9235b3fe39cdc9dc"}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) bind$inet6(r0, &(0x7f0000000400)={0x1e, 0xe22, 0x445, @empty, 0x5}, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b500000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.545278843s ago: executing program 3 (id=1314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)=@updsa={0x144, 0x10, 0x1, 0x0, 0x200000, {{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x200000, 0x3, 0x6, 0x4, 0x1400}, {0x200000}, {}, 0x0, 0x3506, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x4}}]}, 0x144}}, 0x80) 1.438888636s ago: executing program 2 (id=1315): unshare(0x20000400) r0 = socket(0x2, 0x80805, 0x0) unshare(0x48060600) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x136, &(0x7f00000007c0)={@broadcast, @dev, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00=$', 0xf8, 0x3a, 0x0, @remote, @empty, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x84f, {0x6, 0x6, "7e82df", 0x7, 0x0, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [@dstopts={0x2f, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @calipso={0x7, 0x10, {0x2, 0x2, 0xa, 0x5, [0x2]}}, @calipso={0x7, 0x48, {0x1, 0x10, 0x1, 0x8000, [0x3, 0x4, 0x5, 0x2, 0x800, 0x4, 0x25c, 0xe6]}}, @calipso={0x7, 0x50, {0x2, 0x12, 0x6, 0x5, [0x60, 0x3, 0x7, 0x3, 0xdd8e, 0x6, 0x1ff, 0x8, 0x3be9]}}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x1, [0x0]}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="8500000013000000350000000000ba00850000000500000095000000000000004cf12aa5cbd56806f81f06a9c7fff5e0a141d524588f32cb447f90ee60b191e2c825cd4d581c45469816b05b61a3cf5fc6dd8442230e7953f911aa1f70351718512c7ae8766b643497cbe593f90a847687a1ef1f83dd6c1023678a1086f7d0f9dce435558fe138d736209ddb7457c14bc34e6bdea4217c4b49377fad08d9a7ab69000000004f0a9c13ecee61c09a701bd5192a9e19b27de967bfb3fe241454a04080bf668ce021879c820f9b80fe233888f07f5ab2667027d4b33729d714e0e205db36aa52281c70e90b9d1615e3a833c63d335d96f51401f6f2f05e469dfd1a8d6e77a6278d708d41af3cacc0afaec2262da46ee302999f76b0e21c2f8f456701b60000bd9ece2df9aac757664062f8b57375ecf693f041aca86e253039c8c7807f298a63f47e9b32d2712250e3ab7f90551b0459ca01571d0a0fb9b47b756f496ba7653d6b267416968d770c85f49866a3e1a41aeb3d81155bb4622e89d9f39dc296f028317e41ea24ed80c61ab29f77d7ff3d068682ef1b32a946be404088f2242644f2543c4ac1e6368c86a37616915197559167a57965e18f0c4890c183aa34a20632243aa140bfb043cf1921c3e07cc9a92e0f96983d40076892d1808962b44cb6643f9ea672d6467af76ff1a0d7a3361035fab1fb467445506267d73770"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) 1.378080234s ago: executing program 4 (id=1316): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0x0, 0xfc, 0x67b}, {0x1, 0x10, 0x8, 0xa}, {0x1, 0x8, 0x9, 0xd0}]}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000e40)="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", 0x1000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r5}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r5, &(0x7f0000002240), 0x20000000}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r4, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xffff}, 0x1c) 1.373985285s ago: executing program 0 (id=1317): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x27, 0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0xfc00000000000000, 0x0, 0x800}, 0x0) 1.317301127s ago: executing program 1 (id=1318): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x28, &(0x7f0000000000)=""/111, &(0x7f0000000080)=0x6f) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc", 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x105, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, 'ip6_vti0\x00'}}, 0x1e) (async) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) 1.282171322s ago: executing program 3 (id=1319): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000120097023dbd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000f2ffffffffff07003d"], 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x0) recvmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 1.151016984s ago: executing program 0 (id=1320): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r4], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000000000002600000000000000"], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfff, 0x64}}}}}, 0x28}}, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe72925ab1a8aa3", 0x17) 1.097379146s ago: executing program 1 (id=1321): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000004000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) 1.097154171s ago: executing program 3 (id=1322): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10) socket(0x2a, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x100) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000003c0)={0x18, 0x0, {0x2, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) 999.223935ms ago: executing program 3 (id=1323): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) close(r2) write$cgroup_int(r3, &(0x7f0000000040)=0x7, 0x12) writev(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)='h', 0x1}], 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0xa, 0x0, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x33) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x8000, 0x7, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x3, 0x18, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@end]}}}}}) r8 = socket$packet(0x11, 0xa, 0x300) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 951.177127ms ago: executing program 1 (id=1324): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000003f00f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 697.358086ms ago: executing program 4 (id=1325): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000002c0)="240000001a001deb23713f48f97319b528aca4b2d1000050e4088356b1bf4aec", 0x20) 663.700298ms ago: executing program 0 (id=1326): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2}, @address_request={0x11, 0x2, 0x0, 0x3}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80, 0x2, 0x8, 0x8, 0x6, 0xafb8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x31c6d6e942e24b9a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a0000000000000005000000140005002001000000000000"], 0x4c}}, 0x0) 564.341623ms ago: executing program 2 (id=1327): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4c000100"], 0x8) 540.518434ms ago: executing program 0 (id=1328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\x00>\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') r2 = socket$inet6(0xa, 0xa, 0x10000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000280)=@hopopts={0x3a, 0x221, '\x00', [@generic={0x5, 0x3a, "53f7287ea83e868ffe858769b71e1e704948234194d375b85feccf529bd67741c5116b058597e3b39756949cdb294182d771fdcd7fe9120e7d7e"}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x5, 0x81, "5885adaeeb6a22340273401bb8520a6c6886ac9050aea316c81def26eab8d6ead418561d438596790c69c1699aadf1c0f990e7d94fa44844a4d579d5b9ccf261f7a7f19c6c8329b67b5c9ffb659aa058332a84e26d21ed3a0999aed1b2c496758b74ccf3c69612c59438670472df3b368a52b78ef2316ffb272638dffe58a415e8"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x9, 0x1000, "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"}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x30, {0x2, 0xa, 0xfc, 0x6, [0x492, 0x0, 0x7, 0x3, 0x3]}}]}, 0x1118) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 413.401097ms ago: executing program 1 (id=1329): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a0104de000000000000000700000708000a40000000000900020073797a30000000000900010073797a3000000000080005400000000e18001280140001800b00010074617267657400000410028008000340000001"], 0xa4}}, 0x20010084) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'pimreg0\x00', @remote}) 358.737699ms ago: executing program 0 (id=1330): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000004000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 307.320796ms ago: executing program 2 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3010000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 133.305855ms ago: executing program 0 (id=1332): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000203600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000000000000800800d809d5e1cace81ed0bffec03b52a9ecbee5de6ccd40dd68adbef3d93452a00000000000000000000000d11e172844014263d95395ae0d63c0a6a2e6baa014e2012ee44", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2000a890) 119.459953ms ago: executing program 2 (id=1333): unshare(0x20000400) r0 = socket(0x2, 0x80805, 0x0) unshare(0x48060600) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x2e, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x1a103e43) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x4, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r3 = epoll_create1(0x0) writev(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r5], 0x3c}}, 0x0) 0s ago: executing program 1 (id=1334): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r1, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x2000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x20, 0x700, 0x39b, 0x0, {{0x15, 0x4, 0x1, 0x34, 0x54, 0x66, 0x0, 0x4d, 0x2b, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @private=0xa010100, {[@noop, @timestamp_addr={0x44, 0x3c, 0x93, 0x1, 0x5, [{@broadcast, 0x200}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0xd, 0x0}, 0x80}, {@multicast1, 0x5}, {@multicast1, 0x70b}, {@remote, 0xffff}, {@empty, 0x3}]}, @noop]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x164, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x134, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7fffffffffffffff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}]}, {0x4c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffffa}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xb}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3a}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xf}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}]}}]}, 0x164}, 0x1, 0x8100000018000000}, 0x0) r9 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) connect$vsock_stream(r9, &(0x7f0000000400)={0x28, 0x0, 0xffffffff}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0xf8, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 59.827113][ T5817] cgroup: Unknown subsys name 'net' [ 59.933404][ T5817] cgroup: Unknown subsys name 'cpuset' [ 59.941073][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.160793][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.174588][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.183468][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.191174][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.199034][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.206645][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.213972][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.286857][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.299152][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.320844][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.342167][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.349918][ T5150] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.357416][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.399982][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.409636][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.419581][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.427136][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.436406][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.450452][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.458451][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.467108][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.475303][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.482982][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.489276][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.498577][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.501874][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.514083][ T5830] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.514576][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.528357][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.529277][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.543455][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.725511][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 63.868686][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.877086][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.886555][ T5827] bridge_slave_0: entered allmulticast mode [ 63.893867][ T5827] bridge_slave_0: entered promiscuous mode [ 63.929265][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.936801][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.944220][ T5827] bridge_slave_1: entered allmulticast mode [ 63.952465][ T5827] bridge_slave_1: entered promiscuous mode [ 64.003480][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 64.043951][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.059507][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 64.071894][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.122903][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 64.190176][ T5827] team0: Port device team_slave_0 added [ 64.200995][ T5827] team0: Port device team_slave_1 added [ 64.238198][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 64.283194][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.290346][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.297594][ T5831] bridge_slave_0: entered allmulticast mode [ 64.304418][ T5831] bridge_slave_0: entered promiscuous mode [ 64.358761][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.366874][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.374254][ T5831] bridge_slave_1: entered allmulticast mode [ 64.381496][ T5831] bridge_slave_1: entered promiscuous mode [ 64.396702][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.403867][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.429890][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.443192][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.450159][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.476555][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.517233][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.525039][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.532502][ T5834] bridge_slave_0: entered allmulticast mode [ 64.538986][ T5834] bridge_slave_0: entered promiscuous mode [ 64.547027][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.554191][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.561733][ T5834] bridge_slave_1: entered allmulticast mode [ 64.568268][ T5834] bridge_slave_1: entered promiscuous mode [ 64.615068][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.622462][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.629608][ T5835] bridge_slave_0: entered allmulticast mode [ 64.636407][ T5835] bridge_slave_0: entered promiscuous mode [ 64.645732][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.678866][ T5827] hsr_slave_0: entered promiscuous mode [ 64.685162][ T5827] hsr_slave_1: entered promiscuous mode [ 64.705723][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.713095][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.720219][ T5835] bridge_slave_1: entered allmulticast mode [ 64.727575][ T5835] bridge_slave_1: entered promiscuous mode [ 64.736071][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.756616][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.767954][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.838043][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.846746][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.855973][ T5836] bridge_slave_0: entered allmulticast mode [ 64.864169][ T5836] bridge_slave_0: entered promiscuous mode [ 64.872879][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.879982][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.887485][ T5836] bridge_slave_1: entered allmulticast mode [ 64.894288][ T5836] bridge_slave_1: entered promiscuous mode [ 64.902673][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.914050][ T5831] team0: Port device team_slave_0 added [ 64.921732][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.963838][ T5831] team0: Port device team_slave_1 added [ 64.977980][ T5835] team0: Port device team_slave_0 added [ 64.986468][ T5834] team0: Port device team_slave_0 added [ 64.994925][ T5834] team0: Port device team_slave_1 added [ 65.015791][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.038210][ T5835] team0: Port device team_slave_1 added [ 65.068475][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.095158][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.102622][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.128632][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.141025][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.147988][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.174303][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.187042][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.194154][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.220118][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.249935][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.257284][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.283569][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.297001][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.300493][ T5843] Bluetooth: hci0: command tx timeout [ 65.304461][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.335816][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.348223][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.355315][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.381296][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.406994][ T5836] team0: Port device team_slave_0 added [ 65.415334][ T5836] team0: Port device team_slave_1 added [ 65.430820][ T5843] Bluetooth: hci1: command tx timeout [ 65.459494][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.466565][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.492578][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.525194][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.532241][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.558453][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.580864][ T54] Bluetooth: hci2: command tx timeout [ 65.580872][ T5150] Bluetooth: hci4: command tx timeout [ 65.592212][ T5835] hsr_slave_0: entered promiscuous mode [ 65.592255][ T5843] Bluetooth: hci3: command tx timeout [ 65.598482][ T5835] hsr_slave_1: entered promiscuous mode [ 65.609858][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.617848][ T5835] Cannot create hsr debugfs directory [ 65.677259][ T5834] hsr_slave_0: entered promiscuous mode [ 65.683693][ T5834] hsr_slave_1: entered promiscuous mode [ 65.689589][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.697333][ T5834] Cannot create hsr debugfs directory [ 65.715370][ T5831] hsr_slave_0: entered promiscuous mode [ 65.724813][ T5831] hsr_slave_1: entered promiscuous mode [ 65.730758][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.738323][ T5831] Cannot create hsr debugfs directory [ 65.867572][ T5836] hsr_slave_0: entered promiscuous mode [ 65.873991][ T5836] hsr_slave_1: entered promiscuous mode [ 65.879899][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.887786][ T5836] Cannot create hsr debugfs directory [ 65.946555][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.986402][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.023242][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.033693][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.171117][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.181607][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.192598][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.218899][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.262827][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.274567][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.285241][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.316056][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.350190][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.362722][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.388521][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.400676][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.453838][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.471144][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.480314][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.519125][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.527327][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.583030][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.632504][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.640802][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.648250][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.681868][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.695326][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.719547][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.726661][ T719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.750303][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.757400][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.773810][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.816559][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.823668][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.836358][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.843439][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.865562][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.885628][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.892729][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.957830][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.999329][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.067930][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.092098][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.115365][ T719] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.122592][ T719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.150519][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.157690][ T719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.186415][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.193611][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.280404][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.303221][ T719] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.310281][ T719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.343405][ T5843] Bluetooth: hci0: command tx timeout [ 67.363947][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.404234][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.501840][ T5843] Bluetooth: hci1: command tx timeout [ 67.529425][ T5835] veth0_vlan: entered promiscuous mode [ 67.589095][ T5835] veth1_vlan: entered promiscuous mode [ 67.629258][ T5827] veth0_vlan: entered promiscuous mode [ 67.661672][ T5843] Bluetooth: hci4: command tx timeout [ 67.667810][ T5843] Bluetooth: hci3: command tx timeout [ 67.672369][ T54] Bluetooth: hci2: command tx timeout [ 67.687210][ T5827] veth1_vlan: entered promiscuous mode [ 67.735527][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.758403][ T5835] veth0_macvtap: entered promiscuous mode [ 67.774727][ T5835] veth1_macvtap: entered promiscuous mode [ 67.791717][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.845774][ T5834] veth0_vlan: entered promiscuous mode [ 67.884080][ T5834] veth1_vlan: entered promiscuous mode [ 67.894981][ T5827] veth0_macvtap: entered promiscuous mode [ 67.904013][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.932092][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.940522][ T5831] veth0_vlan: entered promiscuous mode [ 67.952949][ T5827] veth1_macvtap: entered promiscuous mode [ 67.963938][ T5836] veth0_vlan: entered promiscuous mode [ 67.976651][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.987481][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.996873][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.005700][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.023869][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.035490][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.048013][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.058033][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.069269][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.079992][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.096981][ T5834] veth0_macvtap: entered promiscuous mode [ 68.106632][ T5831] veth1_vlan: entered promiscuous mode [ 68.117882][ T5834] veth1_macvtap: entered promiscuous mode [ 68.127176][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.139181][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.148640][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.158177][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.176212][ T5836] veth1_vlan: entered promiscuous mode [ 68.235026][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.250160][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.260280][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.270983][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.282127][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.297396][ T5836] veth0_macvtap: entered promiscuous mode [ 68.308094][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.320134][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.330006][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.340632][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.352177][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.398924][ T5836] veth1_macvtap: entered promiscuous mode [ 68.407686][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.416967][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.426210][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.435099][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.467844][ T5831] veth0_macvtap: entered promiscuous mode [ 68.481634][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.499271][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.518595][ T5831] veth1_macvtap: entered promiscuous mode [ 68.593575][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.593839][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.603589][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.621926][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.632469][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.650158][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.660278][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.672073][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.682018][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.692516][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.705196][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.718418][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.730445][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.740395][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.752044][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.761941][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.772450][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.782974][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.793503][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.805209][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.819984][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.837070][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.847221][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.858363][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.869638][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.874625][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.885661][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.906456][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.927163][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.936786][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.946515][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.955589][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.974131][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.985922][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.997656][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.026397][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.043134][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.050073][ T5910] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.060368][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.073903][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.084748][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.095968][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.117148][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.133474][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.145969][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.155038][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.176204][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 69.203004][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.214673][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.217381][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.232225][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.273386][ T5912] syz_tun: entered allmulticast mode [ 69.307632][ T5911] syz_tun: left allmulticast mode [ 69.319776][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.334014][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.373911][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.393308][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.421353][ T5150] Bluetooth: hci0: command tx timeout [ 69.470411][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.478556][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.581043][ T5150] Bluetooth: hci1: command tx timeout [ 69.662429][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.670745][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.755375][ T5150] Bluetooth: hci3: command tx timeout [ 69.761672][ T5150] Bluetooth: hci4: command tx timeout [ 69.767103][ T5150] Bluetooth: hci2: command tx timeout [ 69.779477][ T719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.802033][ T719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.839508][ T5923] syz_tun: entered allmulticast mode [ 69.874063][ T5921] syz_tun: left allmulticast mode [ 69.939734][ T5924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.219437][ T5934] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 70.593694][ T5936] infiniband syz!: set active [ 70.637279][ T5936] infiniband syz!: added team_slave_0 [ 70.732255][ T5936] RDS/IB: syz!: added [ 70.751950][ T5936] smc: adding ib device syz! with port count 1 [ 70.801336][ T5936] smc: ib device syz! port 1 has pnetid [ 70.812736][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 71.155466][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 71.502340][ T54] Bluetooth: hci0: command tx timeout [ 71.583937][ T5966] netlink: 3 bytes leftover after parsing attributes in process `syz.4.16'. [ 71.601134][ T5966] batadv1: entered promiscuous mode [ 71.606695][ T5966] batadv1: entered allmulticast mode [ 71.671831][ T54] Bluetooth: hci1: command tx timeout [ 71.756087][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.763004][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.787082][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 71.823583][ T54] Bluetooth: hci2: command tx timeout [ 71.830035][ T5150] Bluetooth: hci4: command tx timeout [ 71.835967][ T5150] Bluetooth: hci3: command tx timeout [ 73.476007][ T5993] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 73.563875][ T5996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.585526][ T5996] Cannot find add_set index 0 as target [ 74.559858][ T6002] netlink: 88 bytes leftover after parsing attributes in process `syz.3.25'. [ 74.591753][ T6003] openvswitch: netlink: IP tunnel dst address not specified [ 74.610246][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'. [ 74.652648][ T6002] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25'. [ 75.305195][ T5974] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.326876][ T5974] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 75.692115][ T6017] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.714638][ T6014] bridge0: port 3(ip6gretap0) entered blocking state [ 75.737076][ T6014] bridge0: port 3(ip6gretap0) entered disabled state [ 75.745461][ T6014] ip6gretap0: entered allmulticast mode [ 75.753352][ T6014] ip6gretap0: entered promiscuous mode [ 75.761997][ T6014] bridge0: port 3(ip6gretap0) entered blocking state [ 75.769082][ T6014] bridge0: port 3(ip6gretap0) entered forwarding state [ 75.860335][ T35] infiniband syz!: set active [ 75.891369][ T6021] netlink: 'syz.1.30': attribute type 21 has an invalid length. [ 76.964304][ T6041] xt_cgroup: invalid path, errno=-2 [ 77.565690][ T6053] FAULT_INJECTION: forcing a failure. [ 77.565690][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.745600][ T6052] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.798116][ T6049] netlink: 'syz.3.40': attribute type 12 has an invalid length. [ 77.848628][ T6055] netlink: 'syz.3.40': attribute type 12 has an invalid length. [ 77.857269][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.4.39 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 77.867828][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 77.878027][ T6053] Call Trace: [ 77.881335][ T6053] [ 77.884282][ T6053] dump_stack_lvl+0x241/0x360 [ 77.889017][ T6053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.894259][ T6053] ? __pfx__printk+0x10/0x10 [ 77.898912][ T6053] ? snprintf+0xda/0x120 [ 77.903190][ T6053] should_fail_ex+0x3b0/0x4e0 [ 77.907895][ T6053] _copy_to_user+0x31/0xb0 [ 77.912350][ T6053] simple_read_from_buffer+0xca/0x150 [ 77.917763][ T6053] proc_fail_nth_read+0x1e9/0x250 [ 77.922838][ T6053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.928424][ T6053] ? rw_verify_area+0x55e/0x6f0 [ 77.933284][ T6053] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.938839][ T6053] vfs_read+0x1fc/0xb70 [ 77.943001][ T6053] ? __pfx___mutex_lock+0x10/0x10 [ 77.948052][ T6053] ? __pfx_vfs_read+0x10/0x10 [ 77.952747][ T6053] ? __fget_files+0x2a/0x410 [ 77.957356][ T6053] ? __fget_files+0x395/0x410 [ 77.962038][ T6053] ? __fget_files+0x2a/0x410 [ 77.966637][ T6053] ksys_read+0x18f/0x2b0 [ 77.970884][ T6053] ? __pfx_ksys_read+0x10/0x10 [ 77.975648][ T6053] ? do_syscall_64+0x100/0x230 [ 77.980417][ T6053] ? do_syscall_64+0xb6/0x230 [ 77.985095][ T6053] do_syscall_64+0xf3/0x230 [ 77.989599][ T6053] ? clear_bhb_loop+0x35/0x90 [ 77.994274][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.000189][ T6053] RIP: 0033:0x7fcd0558473c [ 78.004604][ T6053] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 78.024226][ T6053] RSP: 002b:00007fcd033d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.032650][ T6053] RAX: ffffffffffffffda RBX: 00007fcd05776160 RCX: 00007fcd0558473c [ 78.040636][ T6053] RDX: 000000000000000f RSI: 00007fcd033d50a0 RDI: 000000000000000b [ 78.048610][ T6053] RBP: 00007fcd033d5090 R08: 0000000000000000 R09: 0000000000000000 [ 78.056601][ T6053] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 78.064590][ T6053] R13: 0000000000000000 R14: 00007fcd05776160 R15: 00007ffec5af1598 [ 78.072583][ T6053] [ 78.081676][ T6059] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 78.238368][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 78.375193][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.46'. [ 78.401401][ T6067] netlink: 'syz.4.46': attribute type 1 has an invalid length. [ 78.566292][ T6067] bond1 (unregistering): Released all slaves [ 78.747418][ T6078] xt_bpf: check failed: parse error [ 79.620539][ T6110] FAULT_INJECTION: forcing a failure. [ 79.620539][ T6110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.636353][ T6109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 79.657931][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.4.58 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 79.668493][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.678587][ T6110] Call Trace: [ 79.681893][ T6110] [ 79.684851][ T6110] dump_stack_lvl+0x241/0x360 [ 79.689569][ T6110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.694802][ T6110] ? __pfx__printk+0x10/0x10 [ 79.699427][ T6110] ? __pfx_lock_release+0x10/0x10 [ 79.704485][ T6110] ? __lock_acquire+0x1397/0x2100 [ 79.709542][ T6110] should_fail_ex+0x3b0/0x4e0 [ 79.714234][ T6110] _copy_from_user+0x2f/0xc0 [ 79.718831][ T6110] kstrtouint_from_user+0xc6/0x190 [ 79.723946][ T6110] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 79.729696][ T6110] ? __pfx_lock_acquire+0x10/0x10 [ 79.734726][ T6110] proc_fail_nth_write+0xaa/0x2d0 [ 79.739775][ T6110] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 79.745691][ T6110] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.751341][ T6110] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.756981][ T6110] vfs_write+0x2a3/0xd30 [ 79.761229][ T6110] ? __pfx_vfs_write+0x10/0x10 [ 79.765994][ T6110] ? __fget_files+0x2a/0x410 [ 79.770594][ T6110] ? __fget_files+0x395/0x410 [ 79.775280][ T6110] ? __fget_files+0x2a/0x410 [ 79.779873][ T6110] ksys_write+0x18f/0x2b0 [ 79.784202][ T6110] ? __pfx_ksys_write+0x10/0x10 [ 79.789048][ T6110] ? do_syscall_64+0x100/0x230 [ 79.793819][ T6110] ? do_syscall_64+0xb6/0x230 [ 79.798503][ T6110] do_syscall_64+0xf3/0x230 [ 79.803010][ T6110] ? clear_bhb_loop+0x35/0x90 [ 79.807695][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.813611][ T6110] RIP: 0033:0x7fcd055847df [ 79.818031][ T6110] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 79.837651][ T6110] RSP: 002b:00007fcd062d1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 79.846076][ T6110] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd055847df [ 79.854072][ T6110] RDX: 0000000000000001 RSI: 00007fcd062d10a0 RDI: 0000000000000006 [ 79.862045][ T6110] RBP: 00007fcd062d1090 R08: 0000000000000000 R09: 0000000000000000 [ 79.870013][ T6110] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 79.878009][ T6110] R13: 0000000000000000 R14: 00007fcd05775fa0 R15: 00007ffec5af1598 [ 79.886005][ T6110] [ 80.178192][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 80.317835][ T6129] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 80.339849][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 80.349272][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.4.63'. [ 80.364763][ T6130] syz_tun: entered allmulticast mode [ 80.457370][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 80.656740][ T6138] syz_tun: entered allmulticast mode [ 80.847987][ T6136] syz_tun: left allmulticast mode [ 81.097038][ T6167] tun0: tun_chr_ioctl cmd 1074025675 [ 81.119537][ T6167] tun0: persist disabled [ 81.248753][ T6175] Cannot find add_set index 0 as target [ 81.880218][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.82'. [ 81.938703][ T6203] FAULT_INJECTION: forcing a failure. [ 81.938703][ T6203] name failslab, interval 1, probability 0, space 0, times 0 [ 82.016398][ T6203] CPU: 1 UID: 0 PID: 6203 Comm: syz.1.83 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 82.026976][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 82.037073][ T6203] Call Trace: [ 82.040379][ T6203] [ 82.043338][ T6203] dump_stack_lvl+0x241/0x360 [ 82.048059][ T6203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.053289][ T6203] ? __pfx__printk+0x10/0x10 [ 82.057907][ T6203] ? __kmalloc_noprof+0xb5/0x4c0 [ 82.062867][ T6203] ? __pfx___might_resched+0x10/0x10 [ 82.068164][ T6203] should_fail_ex+0x3b0/0x4e0 [ 82.072852][ T6203] should_failslab+0xac/0x100 [ 82.077536][ T6203] __kmalloc_noprof+0xdd/0x4c0 [ 82.082309][ T6203] ? sctp_send_reset_streams+0x383/0xd70 [ 82.087957][ T6203] sctp_send_reset_streams+0x383/0xd70 [ 82.093445][ T6203] sctp_setsockopt+0x845/0x11c0 [ 82.098335][ T6203] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 82.104245][ T6203] do_sock_setsockopt+0x3af/0x720 [ 82.109291][ T6203] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 82.114869][ T6203] ? __fget_files+0x395/0x410 [ 82.119574][ T6203] ? __fget_files+0x2a/0x410 [ 82.124190][ T6203] __x64_sys_setsockopt+0x1ee/0x280 [ 82.129397][ T6203] do_syscall_64+0xf3/0x230 [ 82.133904][ T6203] ? clear_bhb_loop+0x35/0x90 [ 82.138579][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.144477][ T6203] RIP: 0033:0x7fd6ac785d29 [ 82.148889][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.168517][ T6203] RSP: 002b:00007fd6ad65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.176980][ T6203] RAX: ffffffffffffffda RBX: 00007fd6ac975fa0 RCX: 00007fd6ac785d29 [ 82.185238][ T6203] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000009 [ 82.193242][ T6203] RBP: 00007fd6ad65f090 R08: 000000000001000f R09: 0000000000000000 [ 82.201235][ T6203] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 82.209208][ T6203] R13: 0000000000000000 R14: 00007fd6ac975fa0 R15: 00007ffe24909b38 [ 82.217194][ T6203] [ 82.222124][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 82.297199][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 82.331904][ T6200] syz_tun: entered allmulticast mode [ 82.388492][ T46] cfg80211: failed to load regulatory.db [ 82.523665][ T6223] netlink: 68 bytes leftover after parsing attributes in process `syz.2.88'. [ 82.596127][ T6199] syz_tun: left allmulticast mode [ 82.931534][ T6243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.947427][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 85.647442][ T6305] syz_tun: entered allmulticast mode [ 85.654217][ T6305] syz_tun: left allmulticast mode [ 85.870961][ T6324] netlink: 'syz.3.107': attribute type 2 has an invalid length. [ 85.879194][ T6324] netlink: 'syz.3.107': attribute type 4 has an invalid length. [ 86.062684][ T6332] bond_slave_0: entered promiscuous mode [ 86.069479][ T6332] bond_slave_1: entered promiscuous mode [ 86.102616][ T6332] vlan2: entered promiscuous mode [ 86.120056][ T6332] bond0: entered promiscuous mode [ 86.166786][ T6332] vlan2: entered allmulticast mode [ 86.172228][ T6332] bond0: entered allmulticast mode [ 86.177467][ T6332] bond_slave_0: entered allmulticast mode [ 86.192556][ T6332] bond_slave_1: entered allmulticast mode [ 86.212637][ T6332] bond0: left allmulticast mode [ 86.217784][ T6332] bond_slave_0: left allmulticast mode [ 86.223460][ T6332] bond_slave_1: left allmulticast mode [ 86.229007][ T6332] bond0: left promiscuous mode [ 86.241515][ T6332] bond_slave_0: left promiscuous mode [ 86.246994][ T6332] bond_slave_1: left promiscuous mode [ 86.378382][ T6333] netlink: 'syz.4.109': attribute type 13 has an invalid length. [ 86.386360][ T6333] __nla_validate_parse: 4 callbacks suppressed [ 86.386374][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.109'. [ 86.438544][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 86.525970][ T6349] netlink: 'syz.3.114': attribute type 1 has an invalid length. [ 86.600330][ T6349] batadv_slave_1: entered promiscuous mode [ 86.625544][ T6349] batadv_slave_0: entered promiscuous mode [ 86.696413][ T6348] batadv_slave_0: left promiscuous mode [ 86.712208][ T6348] batadv_slave_1: left promiscuous mode [ 87.081837][ T6369] b: renamed from lo (while UP) [ 87.483385][ T6392] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 87.505304][ T6392] netlink: 324 bytes leftover after parsing attributes in process `syz.0.123'. [ 87.639821][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 87.753053][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 87.959630][ T6403] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 88.012907][ T6403] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.101551][ T6406] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 88.522386][ T6425] netlink: 'syz.1.136': attribute type 7 has an invalid length. [ 88.570985][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 88.592659][ T6425] netlink: 'syz.1.136': attribute type 7 has an invalid length. [ 88.604024][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 89.182135][ T6450] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (5) [ 89.221203][ T6452] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 89.476628][ T6462] netlink: 68 bytes leftover after parsing attributes in process `syz.0.151'. [ 89.582151][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 89.600875][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 90.431404][ T6501] FAULT_INJECTION: forcing a failure. [ 90.431404][ T6501] name failslab, interval 1, probability 0, space 0, times 0 [ 90.452147][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz.4.163 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 90.462810][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 90.472898][ T6501] Call Trace: [ 90.476209][ T6501] [ 90.479161][ T6501] dump_stack_lvl+0x241/0x360 [ 90.483882][ T6501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.489122][ T6501] ? __pfx__printk+0x10/0x10 [ 90.493764][ T6501] should_fail_ex+0x3b0/0x4e0 [ 90.498488][ T6501] should_failslab+0xac/0x100 [ 90.503199][ T6501] ? skb_clone+0x20c/0x390 [ 90.507651][ T6501] kmem_cache_alloc_noprof+0x70/0x380 [ 90.513063][ T6501] skb_clone+0x20c/0x390 [ 90.517348][ T6501] __netlink_deliver_tap+0x3cc/0x7f0 [ 90.522692][ T6501] ? netlink_deliver_tap+0x2e/0x1b0 [ 90.527926][ T6501] netlink_deliver_tap+0x19d/0x1b0 [ 90.533078][ T6501] netlink_unicast+0x7c4/0x990 [ 90.537887][ T6501] ? __pfx_netlink_unicast+0x10/0x10 [ 90.543201][ T6501] ? __virt_addr_valid+0x45f/0x530 [ 90.548342][ T6501] ? __phys_addr_symbol+0x2f/0x70 [ 90.553389][ T6501] ? __check_object_size+0x47a/0x730 [ 90.558684][ T6501] netlink_sendmsg+0x8e4/0xcb0 [ 90.563472][ T6501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.568770][ T6501] ? aa_sock_msg_perm+0x91/0x160 [ 90.573720][ T6501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.579007][ T6501] __sock_sendmsg+0x221/0x270 [ 90.583687][ T6501] ____sys_sendmsg+0x52a/0x7e0 [ 90.588456][ T6501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 90.593741][ T6501] ? __fget_files+0x2a/0x410 [ 90.598337][ T6501] ? __sys_sendmmsg+0x392/0x720 [ 90.603187][ T6501] ? __might_fault+0xaa/0x120 [ 90.607861][ T6501] __sys_sendmmsg+0x36a/0x720 [ 90.612549][ T6501] ? __pfx___sys_sendmmsg+0x10/0x10 [ 90.617753][ T6501] ? __pfx_lock_release+0x10/0x10 [ 90.622778][ T6501] ? kstrtouint_from_user+0x128/0x190 [ 90.628169][ T6501] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 90.634063][ T6501] ? ksys_write+0x22a/0x2b0 [ 90.638563][ T6501] ? __pfx_lock_release+0x10/0x10 [ 90.643592][ T6501] ? vfs_write+0x730/0xd30 [ 90.648009][ T6501] ? __mutex_unlock_slowpath+0x21e/0x790 [ 90.653659][ T6501] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.659639][ T6501] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.665965][ T6501] ? do_syscall_64+0x100/0x230 [ 90.670740][ T6501] __x64_sys_sendmmsg+0xa0/0xb0 [ 90.675608][ T6501] do_syscall_64+0xf3/0x230 [ 90.680112][ T6501] ? clear_bhb_loop+0x35/0x90 [ 90.684797][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.690691][ T6501] RIP: 0033:0x7fcd05585d29 [ 90.695105][ T6501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.714708][ T6501] RSP: 002b:00007fcd062d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 90.723120][ T6501] RAX: ffffffffffffffda RBX: 00007fcd05775fa0 RCX: 00007fcd05585d29 [ 90.731087][ T6501] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 90.739053][ T6501] RBP: 00007fcd062d1090 R08: 0000000000000000 R09: 0000000000000000 [ 90.747019][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 90.754983][ T6501] R13: 0000000000000000 R14: 00007fcd05775fa0 R15: 00007ffec5af1598 [ 90.762965][ T6501] [ 90.811023][ T6501] Zero length message leads to an empty skb [ 90.923782][ T6489] delete_channel: no stack [ 91.291258][ T6521] b: renamed from lo (while UP) [ 91.617922][ T6536] raw_sendmsg: syz.3.174 forgot to set AF_INET. Fix it! [ 92.011863][ T6545] xt_TCPMSS: Only works on TCP SYN packets [ 92.122851][ T6550] __nla_validate_parse: 4 callbacks suppressed [ 92.122870][ T6550] netlink: 9 bytes leftover after parsing attributes in process `syz.2.179'. [ 92.237697][ T6553] netlink: 'syz.4.180': attribute type 2 has an invalid length. [ 92.245838][ T6553] netlink: 'syz.4.180': attribute type 4 has an invalid length. [ 93.716387][ T6550] 0·: renamed from hsr_slave_1 (while UP) [ 93.732431][ T6550] 0·: entered allmulticast mode [ 93.759037][ T6550] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 93.951287][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 93.981827][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.184'. [ 94.108368][ T6573] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.672833][ T6589] FAULT_INJECTION: forcing a failure. [ 94.672833][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 94.689822][ T6589] CPU: 1 UID: 0 PID: 6589 Comm: syz.1.190 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 94.700470][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 94.710557][ T6589] Call Trace: [ 94.713866][ T6589] [ 94.716822][ T6589] dump_stack_lvl+0x241/0x360 [ 94.721535][ T6589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.726772][ T6589] ? __pfx__printk+0x10/0x10 [ 94.731403][ T6589] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 94.737432][ T6589] ? __pfx___might_resched+0x10/0x10 [ 94.742758][ T6589] should_fail_ex+0x3b0/0x4e0 [ 94.747485][ T6589] should_failslab+0xac/0x100 [ 94.752245][ T6589] kmem_cache_alloc_node_noprof+0x77/0x380 [ 94.758090][ T6589] ? __alloc_skb+0x1c3/0x440 [ 94.762720][ T6589] __alloc_skb+0x1c3/0x440 [ 94.767176][ T6589] ? __pfx___alloc_skb+0x10/0x10 [ 94.772156][ T6589] ? netlink_autobind+0xd6/0x2f0 [ 94.777141][ T6589] ? netlink_autobind+0x2b0/0x2f0 [ 94.782230][ T6589] netlink_sendmsg+0x638/0xcb0 [ 94.787049][ T6589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.792384][ T6589] ? aa_sock_msg_perm+0x91/0x160 [ 94.797377][ T6589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.802709][ T6589] __sock_sendmsg+0x221/0x270 [ 94.807435][ T6589] ____sys_sendmsg+0x52a/0x7e0 [ 94.812246][ T6589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 94.817568][ T6589] ? __fget_files+0x2a/0x410 [ 94.822221][ T6589] ? __fget_files+0x2a/0x410 [ 94.826853][ T6589] __sys_sendmsg+0x269/0x350 [ 94.831485][ T6589] ? __pfx_lock_release+0x10/0x10 [ 94.836515][ T6589] ? __pfx___sys_sendmsg+0x10/0x10 [ 94.841648][ T6589] ? __pfx_vfs_write+0x10/0x10 [ 94.846451][ T6589] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.852790][ T6589] ? do_syscall_64+0x100/0x230 [ 94.857561][ T6589] ? do_syscall_64+0xb6/0x230 [ 94.862249][ T6589] do_syscall_64+0xf3/0x230 [ 94.866766][ T6589] ? clear_bhb_loop+0x35/0x90 [ 94.871461][ T6589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.877390][ T6589] RIP: 0033:0x7fd6ac785d29 [ 94.881831][ T6589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.901467][ T6589] RSP: 002b:00007fd6ad65f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.909926][ T6589] RAX: ffffffffffffffda RBX: 00007fd6ac975fa0 RCX: 00007fd6ac785d29 [ 94.917935][ T6589] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 94.925937][ T6589] RBP: 00007fd6ad65f090 R08: 0000000000000000 R09: 0000000000000000 [ 94.933939][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.941940][ T6589] R13: 0000000000000000 R14: 00007fd6ac975fa0 R15: 00007ffe24909b38 [ 94.949963][ T6589] [ 95.227547][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 95.304447][ T6597] netlink: 'syz.1.191': attribute type 9 has an invalid length. [ 95.338755][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 95.364960][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 95.373406][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 95.378985][ T6600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.192'. [ 95.391474][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 95.401339][ T6597] netlink: 44 bytes leftover after parsing attributes in process `syz.1.191'. [ 95.473369][ T6604] b: entered allmulticast mode [ 95.484311][ T6596] b: left allmulticast mode [ 95.815055][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.860421][ T6620] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.944957][ T6621] bridge_slave_0 (unregistering): left allmulticast mode [ 95.968911][ T6621] bridge_slave_0 (unregistering): left promiscuous mode [ 95.997449][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.088027][ T6629] bond0: (slave wlan1): Releasing backup interface [ 96.314146][ T6631] FAULT_INJECTION: forcing a failure. [ 96.314146][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 96.327152][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.1.202 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 96.337781][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 96.347868][ T6631] Call Trace: [ 96.351170][ T6631] [ 96.354119][ T6631] dump_stack_lvl+0x241/0x360 [ 96.358830][ T6631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.364065][ T6631] ? __pfx__printk+0x10/0x10 [ 96.368700][ T6631] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 96.374729][ T6631] ? __pfx___might_resched+0x10/0x10 [ 96.380054][ T6631] should_fail_ex+0x3b0/0x4e0 [ 96.384775][ T6631] should_failslab+0xac/0x100 [ 96.389494][ T6631] kmem_cache_alloc_node_noprof+0x77/0x380 [ 96.395340][ T6631] ? __alloc_skb+0x1c3/0x440 [ 96.399969][ T6631] __alloc_skb+0x1c3/0x440 [ 96.404427][ T6631] ? __pfx___alloc_skb+0x10/0x10 [ 96.409409][ T6631] ? netlink_ack_tlv_len+0x6e/0x200 [ 96.414645][ T6631] netlink_ack+0x145/0xa50 [ 96.419096][ T6631] netlink_rcv_skb+0x262/0x430 [ 96.423887][ T6631] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.429377][ T6631] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.434708][ T6631] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.439930][ T6631] netlink_unicast+0x7f6/0x990 [ 96.444729][ T6631] ? __pfx_netlink_unicast+0x10/0x10 [ 96.450053][ T6631] ? __virt_addr_valid+0x45f/0x530 [ 96.455203][ T6631] ? __phys_addr_symbol+0x2f/0x70 [ 96.460253][ T6631] ? __check_object_size+0x47a/0x730 [ 96.465582][ T6631] netlink_sendmsg+0x8e4/0xcb0 [ 96.470388][ T6631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.475711][ T6631] ? aa_sock_msg_perm+0x91/0x160 [ 96.480684][ T6631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.486000][ T6631] __sock_sendmsg+0x221/0x270 [ 96.490709][ T6631] ____sys_sendmsg+0x52a/0x7e0 [ 96.495506][ T6631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.500815][ T6631] ? __fget_files+0x2a/0x410 [ 96.505447][ T6631] ? __fget_files+0x2a/0x410 [ 96.510068][ T6631] __sys_sendmsg+0x269/0x350 [ 96.514686][ T6631] ? __pfx_lock_release+0x10/0x10 [ 96.519748][ T6631] ? __pfx___sys_sendmsg+0x10/0x10 [ 96.524907][ T6631] ? __pfx_vfs_write+0x10/0x10 [ 96.529730][ T6631] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.536095][ T6631] ? do_syscall_64+0x100/0x230 [ 96.540894][ T6631] ? do_syscall_64+0xb6/0x230 [ 96.545607][ T6631] do_syscall_64+0xf3/0x230 [ 96.550142][ T6631] ? clear_bhb_loop+0x35/0x90 [ 96.554847][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.560773][ T6631] RIP: 0033:0x7fd6ac785d29 [ 96.565216][ T6631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.584863][ T6631] RSP: 002b:00007fd6ad65f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.593318][ T6631] RAX: ffffffffffffffda RBX: 00007fd6ac975fa0 RCX: 00007fd6ac785d29 [ 96.601328][ T6631] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 96.609331][ T6631] RBP: 00007fd6ad65f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.617341][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.625348][ T6631] R13: 0000000000000000 R14: 00007fd6ac975fa0 R15: 00007ffe24909b38 [ 96.633411][ T6631] [ 96.652342][ T6640] netlink: 'syz.4.205': attribute type 3 has an invalid length. [ 96.660039][ T6640] netlink: 'syz.4.205': attribute type 3 has an invalid length. [ 96.699686][ T6645] b: entered allmulticast mode [ 96.793769][ T6643] b: left allmulticast mode [ 96.869686][ T6656] netlink: 'syz.4.209': attribute type 1 has an invalid length. [ 96.910698][ T6630] delete_channel: no stack [ 96.983217][ T6660] xt_hashlimit: Unknown mode mask 11E, kernel too old? [ 97.156583][ T6670] trusted_key: syz.2.213 sent an empty control message without MSG_MORE. [ 97.258789][ T6677] openvswitch: netlink: IP tunnel dst address not specified [ 97.296077][ T6680] netlink: 'syz.1.218': attribute type 4 has an invalid length. [ 97.306136][ T6680] __nla_validate_parse: 138 callbacks suppressed [ 97.306154][ T6680] netlink: 17 bytes leftover after parsing attributes in process `syz.1.218'. [ 97.573371][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.222'. [ 97.648546][ T6698] b: entered allmulticast mode [ 97.750091][ T6690] b: left allmulticast mode [ 98.081248][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 98.338814][ T6725] netlink: 'syz.2.228': attribute type 39 has an invalid length. [ 98.347779][ T5907] IPVS: starting estimator thread 0... [ 98.362360][ T6673] netlink: 'syz.4.216': attribute type 4 has an invalid length. [ 98.381282][ T6673] netlink: 17 bytes leftover after parsing attributes in process `syz.4.216'. [ 98.397167][ T6738] FAULT_INJECTION: forcing a failure. [ 98.397167][ T6738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.442902][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: syz.1.230 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 98.453564][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.463679][ T6738] Call Trace: [ 98.466978][ T6738] [ 98.469923][ T6738] dump_stack_lvl+0x241/0x360 [ 98.474648][ T6738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.479885][ T6738] ? __pfx__printk+0x10/0x10 [ 98.484514][ T6738] ? __pfx_lock_release+0x10/0x10 [ 98.489579][ T6738] should_fail_ex+0x3b0/0x4e0 [ 98.494288][ T6738] _copy_from_user+0x2f/0xc0 [ 98.498913][ T6738] copy_msghdr_from_user+0xae/0x680 [ 98.504145][ T6738] ? __pfx___might_resched+0x10/0x10 [ 98.509455][ T6738] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 98.515283][ T6738] ? __fget_files+0x2a/0x410 [ 98.519909][ T6738] ? __sys_sendmmsg+0x392/0x720 [ 98.524788][ T6738] ? __might_fault+0xaa/0x120 [ 98.529469][ T6738] __sys_sendmmsg+0x32b/0x720 [ 98.534180][ T6738] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.539403][ T6738] ? __pfx_lock_release+0x10/0x10 [ 98.544436][ T6738] ? kstrtouint_from_user+0x128/0x190 [ 98.549833][ T6738] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 98.555745][ T6738] ? ksys_write+0x22a/0x2b0 [ 98.560248][ T6738] ? __pfx_lock_release+0x10/0x10 [ 98.565282][ T6738] ? vfs_write+0x730/0xd30 [ 98.569700][ T6738] ? __mutex_unlock_slowpath+0x21e/0x790 [ 98.575352][ T6738] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.581332][ T6738] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.587660][ T6738] ? do_syscall_64+0x100/0x230 [ 98.592428][ T6738] __x64_sys_sendmmsg+0xa0/0xb0 [ 98.597282][ T6738] do_syscall_64+0xf3/0x230 [ 98.601784][ T6738] ? clear_bhb_loop+0x35/0x90 [ 98.606479][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.612375][ T6738] RIP: 0033:0x7fd6ac785d29 [ 98.616786][ T6738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.636407][ T6738] RSP: 002b:00007fd6ad65f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.644831][ T6738] RAX: ffffffffffffffda RBX: 00007fd6ac975fa0 RCX: 00007fd6ac785d29 [ 98.652813][ T6738] RDX: 0000000004000190 RSI: 0000000020000180 RDI: 0000000000000003 [ 98.660792][ T6738] RBP: 00007fd6ad65f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.668788][ T6738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.676796][ T6738] R13: 0000000000000000 R14: 00007fd6ac975fa0 R15: 00007ffe24909b38 [ 98.684795][ T6738] [ 98.741029][ T6735] IPVS: using max 22 ests per chain, 52800 per kthread [ 98.888346][ T6747] b: entered allmulticast mode [ 98.901292][ T6751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.233'. [ 98.911098][ T6741] FAULT_INJECTION: forcing a failure. [ 98.911098][ T6741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.930909][ T6751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.233'. [ 98.939999][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.0.231 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 98.950620][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.960707][ T6741] Call Trace: [ 98.964016][ T6741] [ 98.966970][ T6741] dump_stack_lvl+0x241/0x360 [ 98.971689][ T6741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.976934][ T6741] ? __pfx__printk+0x10/0x10 [ 98.981564][ T6741] ? snprintf+0xda/0x120 [ 98.985850][ T6741] should_fail_ex+0x3b0/0x4e0 [ 98.990560][ T6741] _copy_to_user+0x31/0xb0 [ 98.995020][ T6741] simple_read_from_buffer+0xca/0x150 [ 99.000440][ T6741] proc_fail_nth_read+0x1e9/0x250 [ 99.005506][ T6741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.011117][ T6741] ? rw_verify_area+0x55e/0x6f0 [ 99.016000][ T6741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.021585][ T6741] vfs_read+0x1fc/0xb70 [ 99.025783][ T6741] ? __pfx___mutex_lock+0x10/0x10 [ 99.030845][ T6741] ? __pfx_vfs_read+0x10/0x10 [ 99.035541][ T6741] ? __fget_files+0x2a/0x410 [ 99.040155][ T6741] ? __fget_files+0x395/0x410 [ 99.044854][ T6741] ? __fget_files+0x2a/0x410 [ 99.049492][ T6741] ksys_read+0x18f/0x2b0 [ 99.053737][ T6741] ? __pfx_ksys_read+0x10/0x10 [ 99.058501][ T6741] ? do_syscall_64+0x100/0x230 [ 99.063283][ T6741] ? do_syscall_64+0xb6/0x230 [ 99.067972][ T6741] do_syscall_64+0xf3/0x230 [ 99.072509][ T6741] ? clear_bhb_loop+0x35/0x90 [ 99.077186][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.083087][ T6741] RIP: 0033:0x7fc0fdd8473c [ 99.087504][ T6741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.107112][ T6741] RSP: 002b:00007fc0fec99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.115528][ T6741] RAX: ffffffffffffffda RBX: 00007fc0fdf75fa0 RCX: 00007fc0fdd8473c [ 99.123501][ T6741] RDX: 000000000000000f RSI: 00007fc0fec990a0 RDI: 0000000000000005 [ 99.131474][ T6741] RBP: 00007fc0fec99090 R08: 0000000000000000 R09: 0000000000000000 [ 99.139444][ T6741] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 99.147414][ T6741] R13: 0000000000000000 R14: 00007fc0fdf75fa0 R15: 00007ffd1265f878 [ 99.155410][ T6741] [ 99.170432][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 99.308407][ T6740] b: left allmulticast mode [ 99.643013][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.243'. [ 99.659512][ T6777] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.669907][ T6780] xt_bpf: check failed: parse error [ 99.855008][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 99.912730][ T6783] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 99.983088][ T6786] vlan2: entered promiscuous mode [ 100.009299][ T6786] team0: entered promiscuous mode [ 100.010300][ T6791] netlink: 'syz.3.248': attribute type 1 has an invalid length. [ 100.022966][ T6791] netlink: 300 bytes leftover after parsing attributes in process `syz.3.248'. [ 100.051119][ T6786] team_slave_0: entered promiscuous mode [ 100.057361][ T6786] team_slave_1: entered promiscuous mode [ 100.099963][ T6786] team0: left promiscuous mode [ 100.114884][ T6786] team_slave_0: left promiscuous mode [ 100.121343][ T6786] team_slave_1: left promiscuous mode [ 100.739981][ T6823] syz_tun: entered allmulticast mode [ 100.777926][ T6815] syz_tun: left allmulticast mode [ 101.430502][ T6859] vlan2: entered promiscuous mode [ 101.439893][ T6859] team0: entered promiscuous mode [ 101.448082][ T6859] team_slave_0: entered promiscuous mode [ 101.466562][ T6859] team_slave_1: entered promiscuous mode [ 101.487592][ T6859] team0: left promiscuous mode [ 101.497022][ T6859] team_slave_0: left promiscuous mode [ 101.517963][ T6859] team_slave_1: left promiscuous mode [ 101.542285][ T6866] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 102.471547][ T6899] netlink: 'syz.1.288': attribute type 39 has an invalid length. [ 102.505032][ T974] IPVS: starting estimator thread 0... [ 102.601038][ T6909] IPVS: using max 25 ests per chain, 60000 per kthread [ 102.731962][ T6923] __nla_validate_parse: 12 callbacks suppressed [ 102.731981][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.292'. [ 102.758473][ T6923] bridge_slave_1: left allmulticast mode [ 102.764354][ T6923] bridge_slave_1: left promiscuous mode [ 102.770226][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.774067][ T6926] netlink: 1292 bytes leftover after parsing attributes in process `syz.0.296'. [ 102.843534][ T6923] bridge_slave_0: left allmulticast mode [ 102.850044][ T6923] bridge_slave_0: left promiscuous mode [ 102.856099][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.906312][ T6931] xt_hashlimit: Unknown mode mask 1158, kernel too old? [ 103.034808][ T6937] netlink: 104 bytes leftover after parsing attributes in process `syz.1.301'. [ 103.099995][ T6939] netlink: 32 bytes leftover after parsing attributes in process `syz.0.302'. [ 103.490021][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.310'. [ 103.638244][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.311'. [ 103.736199][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 103.847707][ T6936] delete_channel: no stack [ 104.294147][ T6982] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 104.325633][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 104.452948][ T6992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.321'. [ 104.597039][ T6999] ipt_rpfilter: unknown options [ 106.217819][ T6993] infiniband syz!: set down [ 106.224070][ T6993] team0 (unregistering): Port device team_slave_0 removed [ 106.243760][ T6993] team0 (unregistering): Port device team_slave_1 removed [ 106.788402][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'. [ 106.857780][ T7043] syzkaller1: entered promiscuous mode [ 106.877118][ T7043] syzkaller1: entered allmulticast mode [ 106.895075][ T7050] Bluetooth: MGMT ver 1.23 [ 107.392393][ T7067] ipt_rpfilter: unknown options [ 107.975412][ T7087] __nla_validate_parse: 2 callbacks suppressed [ 107.975433][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.351'. [ 108.010904][ T7087] netlink: 28 bytes leftover after parsing attributes in process `syz.4.351'. [ 108.072624][ T7087] team0: entered promiscuous mode [ 108.090677][ T7087] team_slave_0: entered promiscuous mode [ 108.105086][ T7087] team_slave_1: entered promiscuous mode [ 108.134311][ T7087] team0: left promiscuous mode [ 108.141126][ T7087] team_slave_0: left promiscuous mode [ 108.163173][ T7087] team_slave_1: left promiscuous mode [ 108.214549][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 108.264328][ T7096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.280085][ T7091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.353'. [ 108.290028][ T7091] netlink: 88 bytes leftover after parsing attributes in process `syz.2.353'. [ 108.331054][ T7096] netlink: 'syz.0.355': attribute type 10 has an invalid length. [ 108.338926][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.355'. [ 108.511532][ T7096] bridge0: port 3(macvlan1) entered blocking state [ 108.528861][ T7096] bridge0: port 3(macvlan1) entered disabled state [ 108.557872][ T7096] macvlan1: entered allmulticast mode [ 108.566464][ T7096] veth1_vlan: entered allmulticast mode [ 108.576626][ T7096] macvlan1: entered promiscuous mode [ 108.583843][ T7096] bridge0: port 3(macvlan1) entered blocking state [ 108.590516][ T7096] bridge0: port 3(macvlan1) entered forwarding state [ 108.809158][ T7118] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.009229][ T7125] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 109.017769][ T7125] bridge0: port 3(ip6gretap0) entered disabled state [ 109.024818][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.032398][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.033183][ T7129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.361'. [ 109.046101][ T7125] bridge0: port 3(ip6gretap0) entered blocking state [ 109.055281][ T7125] bridge0: port 3(ip6gretap0) entered forwarding state [ 109.062774][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.066357][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.363'. [ 109.069951][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.085371][ T7132] sctp: [Deprecated]: syz.3.362 (pid 7132) Use of int in max_burst socket option deprecated. [ 109.085371][ T7132] Use struct sctp_assoc_value instead [ 109.086204][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.108547][ T7125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.125019][ T7125] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.155429][ T7130] ip6gretap0: left allmulticast mode [ 109.168271][ T7130] ip6gretap0: left promiscuous mode [ 109.173964][ T7130] bridge0: port 3(ip6gretap0) entered disabled state [ 109.239756][ T7130] bridge_slave_1: left allmulticast mode [ 109.257911][ T7130] bridge_slave_1: left promiscuous mode [ 109.278742][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.292105][ T7130] bridge_slave_0: left allmulticast mode [ 109.305499][ T7130] bridge_slave_0: left promiscuous mode [ 109.312342][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.393991][ T7130] bond0: (slave bridge0): Releasing backup interface [ 109.494813][ T7137] FAULT_INJECTION: forcing a failure. [ 109.494813][ T7137] name failslab, interval 1, probability 0, space 0, times 0 [ 109.527436][ T7137] CPU: 1 UID: 0 PID: 7137 Comm: syz.2.365 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 109.538093][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 109.548180][ T7137] Call Trace: [ 109.551491][ T7137] [ 109.554449][ T7137] dump_stack_lvl+0x241/0x360 [ 109.559167][ T7137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.564409][ T7137] ? __pfx__printk+0x10/0x10 [ 109.569041][ T7137] should_fail_ex+0x3b0/0x4e0 [ 109.573746][ T7137] should_failslab+0xac/0x100 [ 109.578457][ T7137] ? skb_clone+0x20c/0x390 [ 109.582919][ T7137] kmem_cache_alloc_noprof+0x70/0x380 [ 109.588501][ T7137] skb_clone+0x20c/0x390 [ 109.592777][ T7137] __netlink_deliver_tap+0x3cc/0x7f0 [ 109.598104][ T7137] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.603329][ T7137] netlink_deliver_tap+0x19d/0x1b0 [ 109.608471][ T7137] netlink_unicast+0x7c4/0x990 [ 109.613269][ T7137] ? __pfx_netlink_unicast+0x10/0x10 [ 109.618573][ T7137] ? __virt_addr_valid+0x45f/0x530 [ 109.623718][ T7137] ? __phys_addr_symbol+0x2f/0x70 [ 109.628774][ T7137] ? __check_object_size+0x47a/0x730 [ 109.634097][ T7137] netlink_sendmsg+0x8e4/0xcb0 [ 109.638906][ T7137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.644239][ T7137] ? aa_sock_msg_perm+0x91/0x160 [ 109.649226][ T7137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.654557][ T7137] __sock_sendmsg+0x221/0x270 [ 109.659281][ T7137] ____sys_sendmsg+0x52a/0x7e0 [ 109.664099][ T7137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.669428][ T7137] ? __fget_files+0x2a/0x410 [ 109.674069][ T7137] ? __sys_sendmmsg+0x392/0x720 [ 109.678963][ T7137] ? __might_fault+0xaa/0x120 [ 109.683691][ T7137] __sys_sendmmsg+0x36a/0x720 [ 109.688426][ T7137] ? __pfx___sys_sendmmsg+0x10/0x10 [ 109.693682][ T7137] ? __pfx_lock_release+0x10/0x10 [ 109.698745][ T7137] ? kstrtouint_from_user+0x128/0x190 [ 109.704186][ T7137] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 109.710132][ T7137] ? ksys_write+0x22a/0x2b0 [ 109.714671][ T7137] ? __pfx_lock_release+0x10/0x10 [ 109.719731][ T7137] ? vfs_write+0x730/0xd30 [ 109.724180][ T7137] ? __mutex_unlock_slowpath+0x21e/0x790 [ 109.729876][ T7137] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 109.735896][ T7137] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.742271][ T7137] ? do_syscall_64+0x100/0x230 [ 109.747076][ T7137] __x64_sys_sendmmsg+0xa0/0xb0 [ 109.751966][ T7137] do_syscall_64+0xf3/0x230 [ 109.756507][ T7137] ? clear_bhb_loop+0x35/0x90 [ 109.761218][ T7137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.767150][ T7137] RIP: 0033:0x7fba02385d29 [ 109.771593][ T7137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.791236][ T7137] RSP: 002b:00007fba0313b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 109.799689][ T7137] RAX: ffffffffffffffda RBX: 00007fba02575fa0 RCX: 00007fba02385d29 [ 109.807694][ T7137] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 109.815699][ T7137] RBP: 00007fba0313b090 R08: 0000000000000000 R09: 0000000000000000 [ 109.823703][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.831709][ T7137] R13: 0000000000000000 R14: 00007fba02575fa0 R15: 00007ffd0dd24e68 [ 109.839732][ T7137] [ 110.222686][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 110.238823][ T7166] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 110.349345][ T7171] netlink: 188 bytes leftover after parsing attributes in process `syz.0.377'. [ 110.716373][ T7180] b: renamed from lo (while UP) [ 110.768211][ T7183] Cannot find add_set index 0 as target [ 111.437598][ T7214] bond1: entered promiscuous mode [ 111.450826][ T7214] bond1: entered allmulticast mode [ 111.456683][ T7214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.626291][ T7214] bond1 (unregistering): Released all slaves [ 112.735853][ T7260] netlink: 'syz.3.407': attribute type 10 has an invalid length. [ 113.917809][ T7246] netlink: 'syz.2.405': attribute type 4 has an invalid length. [ 113.926028][ T7246] __nla_validate_parse: 8 callbacks suppressed [ 113.926046][ T7246] netlink: 17 bytes leftover after parsing attributes in process `syz.2.405'. [ 113.988426][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 113.989516][ T7260] syz_tun: entered promiscuous mode [ 114.025748][ T7260] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 114.714414][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 114.762971][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.422'. [ 114.775876][ T7290] macvlan1: left allmulticast mode [ 114.792790][ T7290] veth1_vlan: left allmulticast mode [ 114.823312][ T7290] macvlan1: left promiscuous mode [ 114.853435][ T7290] bridge0: port 3(macvlan1) entered disabled state [ 114.888517][ T7290] bridge_slave_1: left allmulticast mode [ 114.894455][ T7290] bridge_slave_1: left promiscuous mode [ 114.901202][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.922115][ T7290] bridge_slave_0: left allmulticast mode [ 114.938215][ T7290] bridge_slave_0: left promiscuous mode [ 114.949631][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.005106][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 115.058130][ T7318] netlink: zone id is out of range [ 115.065668][ T7318] netlink: zone id is out of range [ 115.073708][ T7318] netlink: zone id is out of range [ 115.079039][ T7318] netlink: zone id is out of range [ 115.090878][ T7318] netlink: zone id is out of range [ 115.095935][ T7316] dvmrp5: entered allmulticast mode [ 115.099805][ T7318] netlink: zone id is out of range [ 115.120224][ T7318] netlink: zone id is out of range [ 115.126841][ T7314] dvmrp5: left allmulticast mode [ 115.127297][ T7318] netlink: set zone limit has 8 unknown bytes [ 115.414199][ T7324] Bluetooth: MGMT ver 1.23 [ 115.624867][ T7338] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 115.653762][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 115.709535][ T5150] Bluetooth: hci3: link tx timeout [ 115.717062][ T5150] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.752369][ T7342] xt_bpf: check failed: parse error [ 115.976278][ T7349] netlink: 'syz.3.439': attribute type 10 has an invalid length. [ 116.013106][ T7349] netlink: 2 bytes leftover after parsing attributes in process `syz.3.439'. [ 116.083848][ T7349] team0: entered promiscuous mode [ 116.088943][ T7349] team_slave_0: entered promiscuous mode [ 116.131924][ T7349] team_slave_1: entered promiscuous mode [ 116.459369][ T7370] openvswitch: netlink: IP tunnel dst address not specified [ 116.595047][ T7346] netlink: 'syz.4.440': attribute type 4 has an invalid length. [ 116.602985][ T7346] netlink: 17 bytes leftover after parsing attributes in process `syz.4.440'. [ 116.859355][ T7385] netlink: 'syz.4.448': attribute type 10 has an invalid length. [ 116.885891][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.893436][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.917570][ T7385] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.924851][ T7385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.932371][ T7385] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.939536][ T7385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.949372][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 117.000193][ T7385] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.026935][ T7389] bridge_slave_1: left allmulticast mode [ 117.044363][ T7389] bridge_slave_1: left promiscuous mode [ 117.060396][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.130211][ T7389] bridge_slave_0: left allmulticast mode [ 117.160403][ T7389] bridge_slave_0: left promiscuous mode [ 117.198072][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.296052][ T7389] bond0: (slave bridge0): Releasing backup interface [ 117.521513][ T7399] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.452'. [ 117.549437][ T7399] openvswitch: netlink: Missing key (keys=40, expected=80) [ 117.741607][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 117.774304][ T7390] netlink: 'syz.1.449': attribute type 4 has an invalid length. [ 118.232349][ T7421] sctp: [Deprecated]: syz.4.459 (pid 7421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.232349][ T7421] Use struct sctp_sack_info instead [ 118.343059][ T7432] netlink: 'syz.4.459': attribute type 1 has an invalid length. [ 118.721947][ T7446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.034147][ T7459] netlink: 'syz.4.464': attribute type 3 has an invalid length. [ 119.043555][ T7459] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 119.365282][ T7469] __nla_validate_parse: 1 callbacks suppressed [ 119.365304][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 119.432474][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 119.722003][ T7481] ipt_rpfilter: unknown options [ 120.251721][ T7508] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 120.381860][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.479'. [ 120.532373][ T7520] x_tables: unsorted entry at hook 3 [ 120.790212][ T7535] openvswitch: netlink: Missing key (keys=40, expected=100) [ 120.796248][ T7534] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 121.066901][ T5205] udevd[5205]: worker [5991] terminated by signal 33 (Unknown signal 33) [ 121.084349][ T7543] netlink: 104 bytes leftover after parsing attributes in process `syz.2.487'. [ 121.107263][ T7546] b: entered allmulticast mode [ 121.166126][ T7544] b: left allmulticast mode [ 121.449890][ T7574] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 121.697427][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 121.735436][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.498'. [ 121.799470][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.1.500'. [ 121.928833][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 122.297272][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 122.601333][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 122.731130][ T7650] netlink: 'syz.0.514': attribute type 4 has an invalid length. [ 122.758092][ T7650] FAULT_INJECTION: forcing a failure. [ 122.758092][ T7650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.776397][ T7653] set match dimension is over the limit! [ 122.784416][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.0.514 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 122.795070][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 122.805160][ T7650] Call Trace: [ 122.808457][ T7650] [ 122.811412][ T7650] dump_stack_lvl+0x241/0x360 [ 122.816115][ T7650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.821336][ T7650] ? __pfx__printk+0x10/0x10 [ 122.825937][ T7650] ? snprintf+0xda/0x120 [ 122.830182][ T7650] should_fail_ex+0x3b0/0x4e0 [ 122.834861][ T7650] _copy_to_user+0x31/0xb0 [ 122.839285][ T7650] simple_read_from_buffer+0xca/0x150 [ 122.844663][ T7650] proc_fail_nth_read+0x1e9/0x250 [ 122.849686][ T7650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.855237][ T7650] ? rw_verify_area+0x55e/0x6f0 [ 122.860083][ T7650] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 122.865629][ T7650] vfs_read+0x1fc/0xb70 [ 122.869791][ T7650] ? __pfx___mutex_lock+0x10/0x10 [ 122.874818][ T7650] ? __pfx_vfs_read+0x10/0x10 [ 122.879491][ T7650] ? __fget_files+0x2a/0x410 [ 122.884084][ T7650] ? __fget_files+0x395/0x410 [ 122.888761][ T7650] ? __fget_files+0x2a/0x410 [ 122.893363][ T7650] ksys_read+0x18f/0x2b0 [ 122.897606][ T7650] ? __pfx_ksys_read+0x10/0x10 [ 122.902367][ T7650] ? do_syscall_64+0x100/0x230 [ 122.907132][ T7650] ? do_syscall_64+0xb6/0x230 [ 122.911811][ T7650] do_syscall_64+0xf3/0x230 [ 122.916312][ T7650] ? clear_bhb_loop+0x35/0x90 [ 122.920991][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.926891][ T7650] RIP: 0033:0x7fc0fdd8473c [ 122.931306][ T7650] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 122.950927][ T7650] RSP: 002b:00007fc0fec99030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 122.959370][ T7650] RAX: ffffffffffffffda RBX: 00007fc0fdf75fa0 RCX: 00007fc0fdd8473c [ 122.967345][ T7650] RDX: 000000000000000f RSI: 00007fc0fec990a0 RDI: 0000000000000004 [ 122.975319][ T7650] RBP: 00007fc0fec99090 R08: 0000000000000000 R09: 0000000000000000 [ 122.983288][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 122.991359][ T7650] R13: 0000000000000000 R14: 00007fc0fdf75fa0 R15: 00007ffd1265f878 [ 122.999361][ T7650] [ 123.059002][ T7653] pim6reg: entered allmulticast mode [ 123.311257][ T7660] ipt_rpfilter: unknown options [ 123.426326][ T7671] b: entered allmulticast mode [ 123.477341][ T7670] b: left allmulticast mode [ 123.584685][ T7682] rdma_op ffff88804cdd79f0 conn xmit_rdma 0000000000000000 [ 124.262553][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.270418][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.295685][ T7725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.310289][ T7725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.354254][ T7729] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 124.466414][ T7723] bridge_slave_1: left allmulticast mode [ 124.472489][ T7723] bridge_slave_1: left promiscuous mode [ 124.495856][ T7723] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.633345][ T7743] __nla_validate_parse: 7 callbacks suppressed [ 124.633363][ T7743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 124.934770][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 124.978934][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'. [ 125.013891][ T7746] netlink: 44 bytes leftover after parsing attributes in process `syz.1.537'. [ 125.055886][ T7746] nbd: must specify at least one socket [ 125.109465][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.540'. [ 125.328178][ T7769] netlink: 88 bytes leftover after parsing attributes in process `syz.2.543'. [ 125.364579][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 125.407796][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.2.543'. [ 125.535919][ T7783] netlink: 48 bytes leftover after parsing attributes in process `syz.0.546'. [ 125.608349][ T7786] FAULT_INJECTION: forcing a failure. [ 125.608349][ T7786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.644792][ T7779] sctp: [Deprecated]: syz.3.545 (pid 7779) Use of int in max_burst socket option deprecated. [ 125.644792][ T7779] Use struct sctp_assoc_value instead [ 125.678839][ T7786] CPU: 1 UID: 0 PID: 7786 Comm: syz.1.547 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 125.689495][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.699605][ T7786] Call Trace: [ 125.702915][ T7786] [ 125.705869][ T7786] dump_stack_lvl+0x241/0x360 [ 125.710579][ T7786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.715806][ T7786] ? __pfx__printk+0x10/0x10 [ 125.720437][ T7786] should_fail_ex+0x3b0/0x4e0 [ 125.725138][ T7786] _copy_to_user+0x31/0xb0 [ 125.729583][ T7786] bpf_test_finish+0x59c/0x890 [ 125.734380][ T7786] ? __pfx_bpf_test_finish+0x10/0x10 [ 125.739696][ T7786] ? _copy_from_user+0x99/0xc0 [ 125.744498][ T7786] ? bpf_test_init+0x15a/0x180 [ 125.749312][ T7786] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 125.754733][ T7786] ? __pfx_lock_release+0x10/0x10 [ 125.759805][ T7786] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.765657][ T7786] ? __fget_files+0x2a/0x410 [ 125.770291][ T7786] ? __fget_files+0x2a/0x410 [ 125.774929][ T7786] ? fput+0x21b/0x290 [ 125.778954][ T7786] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 125.784806][ T7786] bpf_prog_test_run+0x2e4/0x360 [ 125.789787][ T7786] __sys_bpf+0x48d/0x810 [ 125.794064][ T7786] ? __pfx___sys_bpf+0x10/0x10 [ 125.798869][ T7786] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.805010][ T7786] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.811382][ T7786] ? do_syscall_64+0x100/0x230 [ 125.816184][ T7786] __x64_sys_bpf+0x7c/0x90 [ 125.820659][ T7786] do_syscall_64+0xf3/0x230 [ 125.825188][ T7786] ? clear_bhb_loop+0x35/0x90 [ 125.829893][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.835859][ T7786] RIP: 0033:0x7fd6ac785d29 [ 125.840306][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.859944][ T7786] RSP: 002b:00007fd6ad63e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.868386][ T7786] RAX: ffffffffffffffda RBX: 00007fd6ac976080 RCX: 00007fd6ac785d29 [ 125.876380][ T7786] RDX: 000000000000000c RSI: 0000000020000500 RDI: 000000000000000a [ 125.884373][ T7786] RBP: 00007fd6ad63e090 R08: 0000000000000000 R09: 0000000000000000 [ 125.892377][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.900383][ T7786] R13: 0000000000000000 R14: 00007fd6ac976080 R15: 00007ffe24909b38 [ 125.908407][ T7786] [ 126.277950][ T7806] set match dimension is over the limit! [ 126.386897][ T7806] pim6reg: entered allmulticast mode [ 126.438782][ T7817] netlink: 68 bytes leftover after parsing attributes in process `syz.4.557'. [ 126.852064][ T7832] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 0, id = 0 [ 127.041266][ T7839] openvswitch: netlink: IP tunnel dst address not specified [ 127.158391][ T7846] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 127.612197][ T7873] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 127.618658][ T7870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.683144][ T7873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.936170][ T7902] bond_slave_0: entered promiscuous mode [ 129.941979][ T7902] bond_slave_1: entered promiscuous mode [ 129.947888][ T7902] vlan2: entered promiscuous mode [ 129.953428][ T7902] bond0: entered promiscuous mode [ 129.958897][ T7902] vlan2: entered allmulticast mode [ 129.970432][ T7902] bond0: entered allmulticast mode [ 129.976025][ T7902] bond_slave_0: entered allmulticast mode [ 129.984121][ T7902] bond_slave_1: entered allmulticast mode [ 129.993254][ T7902] bond0: left allmulticast mode [ 129.998153][ T7902] bond_slave_0: left allmulticast mode [ 130.007079][ T7902] bond_slave_1: left allmulticast mode [ 130.013729][ T7902] bond0: left promiscuous mode [ 130.019834][ T7902] bond_slave_0: left promiscuous mode [ 130.025332][ T7902] bond_slave_1: left promiscuous mode [ 130.059538][ T7916] tipc: Started in network mode [ 130.065304][ T7916] tipc: Node identity 7, cluster identity 4711 [ 130.077734][ T7916] tipc: Node number set to 7 [ 130.083890][ T7916] tipc: Cannot configure node identity twice [ 130.215494][ T7927] team_slave_0: entered promiscuous mode [ 130.221612][ T7927] team_slave_1: entered promiscuous mode [ 130.243537][ T7927] vlan2: entered promiscuous mode [ 130.248639][ T7927] team0: entered promiscuous mode [ 130.311231][ T7927] team0: left promiscuous mode [ 130.316593][ T7927] team_slave_0: left promiscuous mode [ 130.322177][ T7927] team_slave_1: left promiscuous mode [ 130.338252][ T7937] __nla_validate_parse: 11 callbacks suppressed [ 130.338273][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.598'. [ 130.449913][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 130.472434][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 130.647211][ T7948] netlink: 'syz.4.601': attribute type 21 has an invalid length. [ 130.707532][ T7954] openvswitch: netlink: IP tunnel dst address not specified [ 131.507958][ T7978] openvswitch: netlink: IP tunnel dst address not specified [ 131.655417][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 131.729722][ T7985] vlan2: entered promiscuous mode [ 131.746151][ T7985] team0: entered promiscuous mode [ 131.753387][ T7985] team_slave_0: entered promiscuous mode [ 131.759365][ T7985] team_slave_1: entered promiscuous mode [ 131.768925][ T7985] team0: left promiscuous mode [ 131.773981][ T7985] team_slave_0: left promiscuous mode [ 131.810804][ T7985] team_slave_1: left promiscuous mode [ 131.877212][ T7987] netlink: 'syz.3.616': attribute type 4 has an invalid length. [ 131.894181][ T7987] netlink: 17 bytes leftover after parsing attributes in process `syz.3.616'. [ 131.992315][ T7999] netlink: 68 bytes leftover after parsing attributes in process `syz.4.621'. [ 132.409167][ T8015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.628'. [ 132.424438][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.626'. [ 132.695599][ T8025] set match dimension is over the limit! [ 133.127265][ T8037] Bluetooth: MGMT ver 1.23 [ 133.186888][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.226034][ T8044] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 133.455174][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.640'. [ 133.490662][ T8053] netlink: 32 bytes leftover after parsing attributes in process `syz.4.640'. [ 134.757734][ T8098] xt_l2tp: v2 tid > 0xffff: 150994944 [ 135.269257][ T8122] vlan3: entered promiscuous mode [ 135.580476][ T8135] team_slave_0: entered promiscuous mode [ 135.586270][ T8135] team_slave_1: entered promiscuous mode [ 135.611284][ T8135] vlan2: entered promiscuous mode [ 135.644772][ T8135] team0: entered promiscuous mode [ 135.684303][ T8135] team0: left promiscuous mode [ 135.711100][ T8135] team_slave_0: left promiscuous mode [ 135.717769][ T8135] team_slave_1: left promiscuous mode [ 135.887541][ T8152] b: entered allmulticast mode [ 135.906253][ T8143] b: left allmulticast mode [ 136.054857][ T8164] openvswitch: netlink: IP tunnel dst address not specified [ 136.106904][ T8167] __nla_validate_parse: 6 callbacks suppressed [ 136.106924][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.678'. [ 136.126964][ T8167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.678'. [ 136.150284][ T8167] team0: entered promiscuous mode [ 136.155628][ T8167] team_slave_0: entered promiscuous mode [ 136.162541][ T8167] team_slave_1: entered promiscuous mode [ 136.183445][ T8167] team0: left promiscuous mode [ 136.188470][ T8167] team_slave_0: left promiscuous mode [ 136.194517][ T8167] team_slave_1: left promiscuous mode [ 136.335457][ T8179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.681'. [ 136.489337][ T8189] xt_bpf: check failed: parse error [ 136.984981][ T8202] xt_hashlimit: Unknown mode mask 1E010000, kernel too old? [ 139.164584][ T8223] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 139.831027][ T8266] openvswitch: netlink: IP tunnel dst address not specified [ 140.244693][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 140.610007][ T8295] FAULT_INJECTION: forcing a failure. [ 140.610007][ T8295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.640974][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.1.709 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 140.651636][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.661727][ T8295] Call Trace: [ 140.665035][ T8295] [ 140.667987][ T8295] dump_stack_lvl+0x241/0x360 [ 140.672701][ T8295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.677935][ T8295] ? __pfx__printk+0x10/0x10 [ 140.682582][ T8295] ? vfs_write+0x730/0xd30 [ 140.687035][ T8295] should_fail_ex+0x3b0/0x4e0 [ 140.691745][ T8295] _copy_from_user+0x2f/0xc0 [ 140.696378][ T8295] move_addr_to_kernel+0x82/0x150 [ 140.701445][ T8295] __sys_connect+0xb6/0x2d0 [ 140.705983][ T8295] ? __fget_files+0x2a/0x410 [ 140.710614][ T8295] ? __pfx___sys_connect+0x10/0x10 [ 140.715787][ T8295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.722156][ T8295] ? do_syscall_64+0x100/0x230 [ 140.726968][ T8295] __x64_sys_connect+0x7a/0x90 [ 140.731775][ T8295] do_syscall_64+0xf3/0x230 [ 140.736321][ T8295] ? clear_bhb_loop+0x35/0x90 [ 140.741037][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.746975][ T8295] RIP: 0033:0x7fd6ac785d29 [ 140.751426][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.757741][ T8298] netlink: 88 bytes leftover after parsing attributes in process `syz.3.710'. [ 140.771047][ T8295] RSP: 002b:00007fd6ad65f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 140.771080][ T8295] RAX: ffffffffffffffda RBX: 00007fd6ac975fa0 RCX: 00007fd6ac785d29 [ 140.771093][ T8295] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 140.771105][ T8295] RBP: 00007fd6ad65f090 R08: 0000000000000000 R09: 0000000000000000 [ 140.771116][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.771126][ T8295] R13: 0000000000000000 R14: 00007fd6ac975fa0 R15: 00007ffe24909b38 [ 140.771153][ T8295] [ 141.081183][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.712'. [ 141.416903][ T8321] team_slave_0: entered promiscuous mode [ 141.422710][ T8321] team_slave_1: entered promiscuous mode [ 141.454727][ T8321] vlan2: entered promiscuous mode [ 141.459824][ T8321] team0: entered promiscuous mode [ 141.485209][ T8326] netlink: 'syz.2.719': attribute type 4 has an invalid length. [ 141.505599][ T8321] team0: left promiscuous mode [ 141.518805][ T8321] team_slave_0: left promiscuous mode [ 141.524345][ T8321] team_slave_1: left promiscuous mode [ 141.732169][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'. [ 141.755696][ T8331] vlan3: entered promiscuous mode [ 141.896082][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.2.723'. [ 141.919237][ T8334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.723'. [ 141.938945][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.2.723'. [ 141.952696][ T8334] netlink: 36 bytes leftover after parsing attributes in process `syz.2.723'. [ 142.478604][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 142.499248][ T8351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.522509][ T8349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 142.727818][ T8363] xt_bpf: check failed: parse error [ 142.812572][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 142.821637][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 142.879240][ T8372] openvswitch: netlink: IP tunnel dst address not specified [ 142.949483][ T8374] netlink: 104 bytes leftover after parsing attributes in process `syz.3.739'. [ 143.315028][ T8390] netlink: 'syz.4.744': attribute type 10 has an invalid length. [ 143.767389][ T8373] delete_channel: no stack [ 143.907973][ T8414] tc_dump_action: action bad kind [ 143.939272][ T8425] netlink: 'syz.3.758': attribute type 2 has an invalid length. [ 143.987187][ T8425] : entered promiscuous mode [ 144.863683][ T8458] FAULT_INJECTION: forcing a failure. [ 144.863683][ T8458] name failslab, interval 1, probability 0, space 0, times 0 [ 144.901466][ T8458] CPU: 0 UID: 0 PID: 8458 Comm: syz.4.768 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 144.912122][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.922205][ T8458] Call Trace: [ 144.925486][ T8458] [ 144.928417][ T8458] dump_stack_lvl+0x241/0x360 [ 144.933102][ T8458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.938325][ T8458] ? __pfx__printk+0x10/0x10 [ 144.942969][ T8458] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 144.948377][ T8458] ? __pfx___might_resched+0x10/0x10 [ 144.953670][ T8458] should_fail_ex+0x3b0/0x4e0 [ 144.958380][ T8458] should_failslab+0xac/0x100 [ 144.963086][ T8458] __kmalloc_node_noprof+0xe1/0x4d0 [ 144.968300][ T8458] ? apparmor_capable+0x13b/0x1b0 [ 144.973330][ T8458] ? __kvmalloc_node_noprof+0x72/0x190 [ 144.978791][ T8458] __kvmalloc_node_noprof+0x72/0x190 [ 144.984076][ T8458] xt_alloc_table_info+0x3d/0xa0 [ 144.989015][ T8458] do_ipt_set_ctl+0xb97/0x1250 [ 144.993784][ T8458] ? __pfx___mutex_trylock_common+0x10/0x10 [ 144.999676][ T8458] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 145.004901][ T8458] ? __pfx_lock_release+0x10/0x10 [ 145.009949][ T8458] ? rcu_is_watching+0x15/0xb0 [ 145.014730][ T8458] ? trace_contention_end+0x3c/0x120 [ 145.020036][ T8458] ? __mutex_unlock_slowpath+0x21e/0x790 [ 145.025674][ T8458] ? __pfx___mutex_lock+0x10/0x10 [ 145.030703][ T8458] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.036691][ T8458] ? aa_sk_perm+0x96d/0xab0 [ 145.041215][ T8458] ? __pfx_aa_sk_perm+0x10/0x10 [ 145.046073][ T8458] nf_setsockopt+0x295/0x2c0 [ 145.050687][ T8458] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 145.056605][ T8458] do_sock_setsockopt+0x3af/0x720 [ 145.061668][ T8458] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 145.067256][ T8458] ? __fget_files+0x395/0x410 [ 145.071980][ T8458] ? __fget_files+0x2a/0x410 [ 145.076581][ T8458] __x64_sys_setsockopt+0x1ee/0x280 [ 145.081791][ T8458] do_syscall_64+0xf3/0x230 [ 145.086298][ T8458] ? clear_bhb_loop+0x35/0x90 [ 145.090985][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.096879][ T8458] RIP: 0033:0x7fcd05585d29 [ 145.101302][ T8458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.120911][ T8458] RSP: 002b:00007fcd062d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.129326][ T8458] RAX: ffffffffffffffda RBX: 00007fcd05775fa0 RCX: 00007fcd05585d29 [ 145.137315][ T8458] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 145.145306][ T8458] RBP: 00007fcd062d1090 R08: 0000000000000450 R09: 0000000000000000 [ 145.153295][ T8458] R10: 0000000020000b00 R11: 0000000000000246 R12: 0000000000000001 [ 145.161265][ T8458] R13: 0000000000000000 R14: 00007fcd05775fa0 R15: 00007ffec5af1598 [ 145.169266][ T8458] [ 145.203214][ T8460] openvswitch: netlink: IP tunnel dst address not specified [ 145.301842][ T8466] vlan2: entered promiscuous mode [ 145.307151][ T8466] team0: entered promiscuous mode [ 145.317425][ T8466] team_slave_0: entered promiscuous mode [ 145.323572][ T8466] team_slave_1: entered promiscuous mode [ 145.360055][ T8466] team0: left promiscuous mode [ 145.368830][ T8466] team_slave_0: left promiscuous mode [ 145.374999][ T8466] team_slave_1: left promiscuous mode [ 145.667134][ T8481] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 145.790761][ T8488] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 146.025298][ T8496] bond_slave_0: entered promiscuous mode [ 146.031117][ T8496] bond_slave_1: entered promiscuous mode [ 146.057398][ T8496] vlan2: entered promiscuous mode [ 146.070692][ T8496] bond0: entered promiscuous mode [ 146.086395][ T8496] vlan2: entered allmulticast mode [ 146.109051][ T8496] bond0: entered allmulticast mode [ 146.130759][ T8496] bond_slave_0: entered allmulticast mode [ 146.153821][ T8496] bond_slave_1: entered allmulticast mode [ 146.194905][ T8496] bond0: left allmulticast mode [ 146.210714][ T8496] bond_slave_0: left allmulticast mode [ 146.225250][ T8496] bond_slave_1: left allmulticast mode [ 146.239888][ T8496] bond0: left promiscuous mode [ 146.251947][ T8496] bond_slave_0: left promiscuous mode [ 146.257466][ T8496] bond_slave_1: left promiscuous mode [ 147.608219][ T8537] set match dimension is over the limit! [ 147.618220][ T8538] __nla_validate_parse: 18 callbacks suppressed [ 147.618239][ T8538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.792'. [ 147.633902][ T8538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.792'. [ 147.642896][ T8538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.792'. [ 147.670202][ T8538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.792'. [ 147.713981][ T8537] pim6reg: entered allmulticast mode [ 147.977954][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.796'. [ 148.016775][ T8554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 148.045002][ T8554] vlan3: entered promiscuous mode [ 148.419096][ T8574] netlink: 'syz.0.806': attribute type 1 has an invalid length. [ 148.738064][ T8568] netlink: 'syz.3.804': attribute type 4 has an invalid length. [ 148.747165][ T8568] netlink: 17 bytes leftover after parsing attributes in process `syz.3.804'. [ 149.232160][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 149.396300][ T8615] netlink: 'syz.4.821': attribute type 8 has an invalid length. [ 149.691205][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.827'. [ 149.811143][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 150.158486][ T8651] b: entered allmulticast mode [ 150.264728][ T8666] Cannot find set identified by id 0 to match [ 150.266262][ T8650] b: left allmulticast mode [ 151.271577][ T8706] b: entered allmulticast mode [ 151.442304][ T8699] b: left allmulticast mode [ 151.471012][ T8714] netlink: 'syz.2.852': attribute type 10 has an invalid length. [ 151.646613][ T8717] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 151.900432][ T8737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.137121][ T8757] netlink: 'syz.3.866': attribute type 2 has an invalid length. [ 152.161474][ T8757] netlink: 'syz.3.866': attribute type 4 has an invalid length. [ 152.232651][ T8764] netlink: 'syz.4.867': attribute type 10 has an invalid length. [ 152.451187][ T8772] nftables ruleset with unbound chain [ 152.505803][ T8774] team_slave_0: entered promiscuous mode [ 152.511597][ T8774] team_slave_1: entered promiscuous mode [ 152.518634][ T8772] xt_CT: No such helper "snmp" [ 152.523468][ T8774] vlan2: entered promiscuous mode [ 152.523493][ T8774] team0: entered promiscuous mode [ 152.536426][ T8774] team0: left promiscuous mode [ 152.549579][ T8774] team_slave_0: left promiscuous mode [ 152.555116][ T8774] team_slave_1: left promiscuous mode [ 152.613625][ T8781] netlink: 'syz.2.873': attribute type 4 has an invalid length. [ 152.646512][ T8781] netlink: 'syz.2.873': attribute type 4 has an invalid length. [ 152.907118][ T8799] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 152.928126][ T8799] macsec1: entered allmulticast mode [ 152.951953][ T8799] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 152.979346][ T8809] netlink: 'syz.1.879': attribute type 10 has an invalid length. [ 152.991282][ T8803] __nla_validate_parse: 10 callbacks suppressed [ 152.991302][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 153.009675][ T8809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 153.368673][ T8830] netlink: 244 bytes leftover after parsing attributes in process `syz.1.887'. [ 153.588533][ T8841] openvswitch: netlink: IP tunnel dst address not specified [ 153.753486][ T8847] netlink: 'syz.3.893': attribute type 10 has an invalid length. [ 153.767397][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 153.976331][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 154.197828][ T8873] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 154.282271][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.901'. [ 154.297815][ T8877] netlink: 16 bytes leftover after parsing attributes in process `syz.0.901'. [ 154.328323][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.901'. [ 154.348039][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.901'. [ 154.641368][ T8888] syzkaller1: entered promiscuous mode [ 154.648847][ T8891] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 154.650061][ T8888] syzkaller1: entered allmulticast mode [ 154.769392][ T8892] netlink: 'syz.1.907': attribute type 10 has an invalid length. [ 154.792858][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 155.089216][ T8914] geneve1: entered promiscuous mode [ 155.099159][ T8914] macvlan4: entered allmulticast mode [ 155.108018][ T8914] geneve1: entered allmulticast mode [ 155.123043][ T8914] geneve1: left promiscuous mode [ 155.350876][ T8927] bond_slave_0: entered promiscuous mode [ 155.356726][ T8927] bond_slave_1: entered promiscuous mode [ 155.362931][ T8927] vlan2: entered promiscuous mode [ 155.368153][ T8927] bond0: entered promiscuous mode [ 155.374138][ T8927] vlan2: entered allmulticast mode [ 155.380087][ T8927] bond0: entered allmulticast mode [ 155.387782][ T8927] bond_slave_0: entered allmulticast mode [ 155.393874][ T8927] bond_slave_1: entered allmulticast mode [ 155.402902][ T8927] bond0: left allmulticast mode [ 155.408008][ T8927] bond_slave_0: left allmulticast mode [ 155.414396][ T8927] bond_slave_1: left allmulticast mode [ 155.420053][ T8927] bond0: left promiscuous mode [ 155.425653][ T8927] bond_slave_0: left promiscuous mode [ 155.431213][ T8927] bond_slave_1: left promiscuous mode [ 155.453795][ T8930] b: entered allmulticast mode [ 155.466871][ T8929] b: left allmulticast mode [ 155.667632][ T8939] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 156.226923][ T8966] netlink: 'syz.1.933': attribute type 4 has an invalid length. [ 156.542066][ T8979] syz_tun: entered allmulticast mode [ 156.657001][ T8987] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 156.718574][ T8973] syz_tun: left allmulticast mode [ 156.787452][ T8988] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 156.788400][ T8990] Cannot find add_set index 32768 as target [ 156.850133][ T8988] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 156.907123][ T8988] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 157.173905][ T9003] vlan2: entered promiscuous mode [ 157.178985][ T9003] team0: entered promiscuous mode [ 157.186017][ T9003] team_slave_0: entered promiscuous mode [ 157.204449][ T9003] team_slave_1: entered promiscuous mode [ 157.228194][ T9003] team0: left promiscuous mode [ 157.237606][ T9003] team_slave_0: left promiscuous mode [ 157.243549][ T9003] team_slave_1: left promiscuous mode [ 157.938138][ T9030] netlink: 'syz.1.954': attribute type 10 has an invalid length. [ 158.381215][ T9050] __nla_validate_parse: 13 callbacks suppressed [ 158.381237][ T9050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.959'. [ 158.407758][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.959'. [ 158.420888][ T9050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.959'. [ 158.430178][ T9050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.959'. [ 158.478003][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 158.487160][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 158.621435][ T9060] netlink: 'syz.0.963': attribute type 4 has an invalid length. [ 158.681931][ T9062] SET target dimension over the limit! [ 158.903499][ T9068] set match dimension is over the limit! [ 159.077607][ T9072] netlink: 'syz.1.967': attribute type 10 has an invalid length. [ 159.128557][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 159.508138][ T9092] Cannot find set identified by id 0 to match [ 159.584754][ T9096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.975'. [ 159.664521][ T9099] netlink: 'syz.2.976': attribute type 2 has an invalid length. [ 159.683045][ T9103] set match dimension is over the limit! [ 159.695003][ T9099] netlink: 'syz.2.976': attribute type 4 has an invalid length. [ 159.865131][ T9108] openvswitch: netlink: IP tunnel dst address not specified [ 159.964803][ T9115] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 159.983217][ T9117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.982'. [ 159.999429][ T9117] openvswitch: netlink: Flow key attr not present in new flow. [ 160.006642][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 160.343737][ T9129] vlan2: entered promiscuous mode [ 160.348838][ T9129] team0: entered promiscuous mode [ 160.355268][ T9129] team_slave_0: entered promiscuous mode [ 160.361920][ T9129] team_slave_1: entered promiscuous mode [ 160.369784][ T9129] team0: left promiscuous mode [ 160.374883][ T9129] team_slave_0: left promiscuous mode [ 160.380488][ T9129] team_slave_1: left promiscuous mode [ 160.783559][ T9142] netlink: 'syz.0.990': attribute type 1 has an invalid length. [ 160.938080][ T9150] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 161.282072][ T9165] set match dimension is over the limit! [ 161.604197][ T9186] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 161.867183][ T9202] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 162.466531][ T9237] team_slave_0: entered promiscuous mode [ 162.472317][ T9237] team_slave_1: entered promiscuous mode [ 162.478400][ T9237] vlan2: entered promiscuous mode [ 162.483607][ T9237] team0: entered promiscuous mode [ 162.503991][ T9237] team0: left promiscuous mode [ 162.529427][ T9237] team_slave_0: left promiscuous mode [ 162.534980][ T9237] team_slave_1: left promiscuous mode [ 163.551545][ T9270] __nla_validate_parse: 12 callbacks suppressed [ 163.551568][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1033'. [ 163.589918][ T9272] openvswitch: netlink: IP tunnel dst address not specified [ 163.798243][ T9276] bond0: (slave syz_tun): Releasing backup interface [ 163.999382][ T9281] Cannot find set identified by id 0 to match [ 164.572379][ T9291] netlink: ct family unspecified [ 164.577425][ T9291] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.678070][ T9296] netlink: 'syz.1.1040': attribute type 14 has an invalid length. [ 164.715461][ T9293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.757510][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 164.787330][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 164.789994][ T9293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.915465][ T9293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.174485][ T9315] veth3: entered promiscuous mode [ 165.262883][ T9323] set match dimension is over the limit! [ 165.402086][ T9327] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1049'. [ 165.581056][ T9334] openvswitch: netlink: IP tunnel dst address not specified [ 165.658559][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'. [ 166.217507][ T9356] xt_bpf: check failed: parse error [ 166.348996][ T9362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1061'. [ 166.515637][ T9366] xt_cgroup: invalid path, errno=-2 [ 166.687418][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1064'. [ 166.777406][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 166.862074][ T9377] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1068'. [ 166.887636][ T9377] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 167.161732][ T9394] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 167.306755][ T9399] Cannot find set identified by id 0 to match [ 167.571203][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 167.776549][ T9422] IPv6: syztnl0: Disabled Multicast RS [ 167.964265][ T9431] Cannot find set identified by id 0 to match [ 168.089794][ T9431] pim6reg: entered allmulticast mode [ 168.647292][ T9466] netlink: 'syz.2.1098': attribute type 16 has an invalid length. [ 168.657184][ T9466] netlink: 'syz.2.1098': attribute type 3 has an invalid length. [ 168.669112][ T9466] __nla_validate_parse: 5 callbacks suppressed [ 168.669131][ T9466] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1098'. [ 168.919344][ T9478] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1100'. [ 169.017854][ T9483] xt_bpf: check failed: parse error [ 169.086700][ T9487] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1104'. [ 169.159995][ T9493] set match dimension is over the limit! [ 169.230401][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'. [ 169.233809][ T9495] b: entered allmulticast mode [ 169.391360][ T9486] b: left allmulticast mode [ 169.458725][ T9507] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 169.984240][ T9528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.999439][ T9528] rdma_op ffff88807ebbb9f0 conn xmit_rdma 0000000000000000 [ 170.022705][ T9532] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1120'. [ 170.357129][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1124'. [ 170.481896][ T9546] b: entered allmulticast mode [ 170.530183][ T9543] b: left allmulticast mode [ 170.670102][ T9559] openvswitch: netlink: IP tunnel dst address not specified [ 170.785503][ T9565] set match dimension is over the limit! [ 170.849082][ T9536] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 171.063666][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1135'. [ 171.094495][ T9578] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 171.147652][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 171.199629][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'. [ 171.418476][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'. [ 171.452777][ T9596] ipt_rpfilter: unknown options [ 171.608877][ T9605] xt_hashlimit: overflow, try lower: 0/0 [ 172.032698][ T9625] sctp: [Deprecated]: syz.0.1154 (pid 9625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.032698][ T9625] Use struct sctp_sack_info instead [ 172.142936][ T9638] openvswitch: netlink: IP tunnel dst address not specified [ 172.177208][ T9637] bond0: (slave bond_slave_0): Releasing backup interface [ 172.225930][ T9637] bond0: (slave bond_slave_1): Releasing backup interface [ 172.254244][ T9646] netlink: 'syz.0.1159': attribute type 2 has an invalid length. [ 172.269420][ T9637] team0: Port device team_slave_0 removed [ 172.276158][ T9646] netlink: 'syz.0.1159': attribute type 4 has an invalid length. [ 172.295869][ T9637] team0: Port device team_slave_1 removed [ 172.311698][ T9637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.324078][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.336964][ T9650] Cannot find set identified by id 0 to match [ 172.338275][ T9637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.355494][ T9637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.850023][ T9670] vlan0: entered promiscuous mode [ 173.926692][ T9716] __nla_validate_parse: 4 callbacks suppressed [ 173.926711][ T9716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1187'. [ 173.978103][ T9716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1187'. [ 174.213238][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 174.297045][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 174.351026][ T9734] sctp: [Deprecated]: syz.1.1193 (pid 9734) Use of int in max_burst socket option. [ 174.351026][ T9734] Use struct sctp_assoc_value instead [ 174.727223][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1203'. [ 174.868093][ T9748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.895112][ T9748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.913824][ T9748] bond0 (unregistering): Released all slaves [ 174.947624][ T9769] xt_cgroup: invalid path, errno=-2 [ 174.951783][ T9762] syzkaller1: entered promiscuous mode [ 174.979963][ T9762] syzkaller1: entered allmulticast mode [ 175.875279][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1218'. [ 177.534359][ T9822] netlink: 'syz.1.1221': attribute type 4 has an invalid length. [ 177.552272][ T9822] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1221'. [ 177.675532][ T9825] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1222'. [ 178.143798][ T9852] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1232'. [ 178.241965][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1231'. [ 178.622876][ T9861] netlink: 'syz.4.1236': attribute type 1 has an invalid length. [ 178.879576][ T9867] netlink: 'syz.1.1239': attribute type 2 has an invalid length. [ 178.905318][ T9867] netlink: 'syz.1.1239': attribute type 4 has an invalid length. [ 179.122987][ T9859] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 179.158670][ T9881] __nla_validate_parse: 4 callbacks suppressed [ 179.158689][ T9881] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1242'. [ 179.394174][ T9886] Cannot find set identified by id 0 to match [ 179.528492][ T9886] pim6reg: entered allmulticast mode [ 179.670797][ T9895] Cannot find set identified by id 0 to match [ 179.758005][ T9899] b: renamed from lo (while UP) [ 180.220749][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 180.322777][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1256'. [ 180.325968][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 180.378830][ T9925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1256'. [ 180.490310][ T9922] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 180.761581][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 181.293590][ T9953] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 181.306118][ T9953] netlink: 'syz.3.1268': attribute type 1 has an invalid length. [ 181.421772][ T9956] xt_cgroup: invalid path, errno=-2 [ 181.955782][ T9985] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1280'. [ 181.965213][ T9985] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 182.002217][ T9987] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 182.010752][ T9987] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 182.088298][ T9989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.459858][T10013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1289'. [ 182.490194][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1283'. [ 182.657149][T10020] netlink: 'syz.3.1292': attribute type 4 has an invalid length. [ 182.896628][T10030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1295'. [ 183.168834][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 183.444931][T10056] netlink: 'syz.1.1302': attribute type 5 has an invalid length. [ 183.474577][T10057] Cannot find set identified by id 0 to match [ 183.492218][T10056] ip6erspan0: entered promiscuous mode [ 183.920734][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 184.446868][T10104] set match dimension is over the limit! [ 184.699204][T10108] netlink: 'syz.3.1323': attribute type 10 has an invalid length. [ 184.718552][T10108] __nla_validate_parse: 2 callbacks suppressed [ 184.718572][T10108] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1323'. [ 185.072597][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 185.150866][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 185.526514][ T6278] ------------[ cut here ]------------ [ 185.532067][ T6278] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 185.532153][ T6278] WARNING: CPU: 0 PID: 6278 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 185.532248][T10147] netlink: 'syz.0.1332': attribute type 12 has an invalid length. [ 185.537977][ T6278] Modules linked in: [ 185.559337][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 185.570359][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 185.580539][ T6278] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 185.585943][ T6278] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 185.605933][ T6278] RSP: 0018:ffffc9000c20f920 EFLAGS: 00010246 [ 185.612257][ T6278] RAX: 7e82ee9b79044d00 RBX: ffff888060358cb0 RCX: ffff888025605a00 [ 185.620259][ T6278] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 185.628206][T10147] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1332'. [ 185.637430][ T6278] RBP: ffffc9000c20fab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210 [ 185.645502][ T6278] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 185.653544][ T6278] R13: 0000000000000000 R14: 1ffff92001841f38 R15: dffffc0000000000 [ 185.661632][ T6278] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 185.670725][ T6278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.677338][ T6278] CR2: 00007fc0fec77f98 CR3: 0000000069c6e000 CR4: 00000000003526f0 [ 185.685400][ T6278] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 185.693707][ T6278] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 185.701975][ T6278] Call Trace: [ 185.705271][ T6278] [ 185.708214][ T6278] ? __warn+0x165/0x4d0 [ 185.712454][ T6278] ? __mutex_lock+0xdac/0xee0 [ 185.717162][ T6278] ? report_bug+0x2b3/0x500 [ 185.721734][ T6278] ? __mutex_lock+0xdac/0xee0 [ 185.726455][ T6278] ? handle_bug+0x60/0x90 [ 185.730857][ T6278] ? exc_invalid_op+0x1a/0x50 [ 185.735561][ T6278] ? asm_exc_invalid_op+0x1a/0x20 [ 185.740683][ T6278] ? __warn_printk+0x292/0x360 [ 185.745484][ T6278] ? __mutex_lock+0xdac/0xee0 [ 185.750197][ T6278] ? free_netdev+0x2d9/0x610 [ 185.754873][ T6278] ? __pfx___mutex_lock+0x10/0x10 [ 185.759936][ T6278] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 185.765320][ T6278] ? dev_addr_check+0x6f/0x240 [ 185.770122][ T6278] ? dev_addr_flush+0x192/0x210 [ 185.775070][ T6278] free_netdev+0x2d9/0x610 [ 185.779529][ T6278] netdev_run_todo+0xf21/0x10d0 [ 185.784470][ T6278] ? __pfx_netdev_run_todo+0x10/0x10 [ 185.789788][ T6278] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 185.796364][ T6278] ? down_write+0x18c/0x220 [ 185.801147][ T6278] ? __pfx_down_write+0x10/0x10 [ 185.806046][ T6278] bnep_session+0x2e3c/0x3030 [ 185.810838][ T6278] ? __pfx_bnep_session+0x10/0x10 [ 185.815896][ T6278] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 185.822371][ T6278] ? __pfx_woken_wake_function+0x10/0x10 [ 185.828058][ T6278] ? __kthread_parkme+0x169/0x1d0 [ 185.833159][ T6278] ? __pfx_bnep_session+0x10/0x10 [ 185.838270][ T6278] kthread+0x2f0/0x390 [ 185.842442][ T6278] ? __pfx_bnep_session+0x10/0x10 [ 185.847507][ T6278] ? __pfx_kthread+0x10/0x10 [ 185.852178][ T6278] ret_from_fork+0x4b/0x80 [ 185.856630][ T6278] ? __pfx_kthread+0x10/0x10 [ 185.861316][ T6278] ret_from_fork_asm+0x1a/0x30 [ 185.866121][ T6278] [ 185.869180][ T6278] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 185.876479][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01131-g8d20dcda404d #0 [ 185.887322][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 185.897377][ T6278] Call Trace: [ 185.900655][ T6278] [ 185.903598][ T6278] dump_stack_lvl+0x241/0x360 [ 185.908283][ T6278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.913495][ T6278] ? __pfx__printk+0x10/0x10 [ 185.918101][ T6278] ? _printk+0xd5/0x120 [ 185.922257][ T6278] ? __init_begin+0x41000/0x41000 [ 185.927284][ T6278] ? vscnprintf+0x5d/0x90 [ 185.931607][ T6278] panic+0x349/0x880 [ 185.935498][ T6278] ? __warn+0x174/0x4d0 [ 185.939649][ T6278] ? __pfx_panic+0x10/0x10 [ 185.944069][ T6278] ? ret_from_fork_asm+0x1a/0x30 [ 185.949019][ T6278] __warn+0x344/0x4d0 [ 185.952996][ T6278] ? __mutex_lock+0xdac/0xee0 [ 185.957676][ T6278] report_bug+0x2b3/0x500 [ 185.962021][ T6278] ? __mutex_lock+0xdac/0xee0 [ 185.966722][ T6278] handle_bug+0x60/0x90 [ 185.970893][ T6278] exc_invalid_op+0x1a/0x50 [ 185.975396][ T6278] asm_exc_invalid_op+0x1a/0x20 [ 185.980242][ T6278] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 185.985526][ T6278] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d 6f 40 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 dc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 186.005131][ T6278] RSP: 0018:ffffc9000c20f920 EFLAGS: 00010246 [ 186.011196][ T6278] RAX: 7e82ee9b79044d00 RBX: ffff888060358cb0 RCX: ffff888025605a00 [ 186.019158][ T6278] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 186.027144][ T6278] RBP: ffffc9000c20fab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210 [ 186.035129][ T6278] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 186.043097][ T6278] R13: 0000000000000000 R14: 1ffff92001841f38 R15: dffffc0000000000 [ 186.051088][ T6278] ? __warn_printk+0x292/0x360 [ 186.055859][ T6278] ? free_netdev+0x2d9/0x610 [ 186.060444][ T6278] ? __pfx___mutex_lock+0x10/0x10 [ 186.065479][ T6278] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 186.070766][ T6278] ? dev_addr_check+0x6f/0x240 [ 186.075524][ T6278] ? dev_addr_flush+0x192/0x210 [ 186.080365][ T6278] free_netdev+0x2d9/0x610 [ 186.084780][ T6278] netdev_run_todo+0xf21/0x10d0 [ 186.089628][ T6278] ? __pfx_netdev_run_todo+0x10/0x10 [ 186.094936][ T6278] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 186.101176][ T6278] ? down_write+0x18c/0x220 [ 186.105677][ T6278] ? __pfx_down_write+0x10/0x10 [ 186.110532][ T6278] bnep_session+0x2e3c/0x3030 [ 186.115212][ T6278] ? __pfx_bnep_session+0x10/0x10 [ 186.120226][ T6278] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 186.126548][ T6278] ? __pfx_woken_wake_function+0x10/0x10 [ 186.132179][ T6278] ? __kthread_parkme+0x169/0x1d0 [ 186.137199][ T6278] ? __pfx_bnep_session+0x10/0x10 [ 186.142212][ T6278] kthread+0x2f0/0x390 [ 186.146275][ T6278] ? __pfx_bnep_session+0x10/0x10 [ 186.151287][ T6278] ? __pfx_kthread+0x10/0x10 [ 186.155869][ T6278] ret_from_fork+0x4b/0x80 [ 186.160279][ T6278] ? __pfx_kthread+0x10/0x10 [ 186.164952][ T6278] ret_from_fork_asm+0x1a/0x30 [ 186.169740][ T6278] [ 186.173083][ T6278] Kernel Offset: disabled [ 186.177411][ T6278] Rebooting in 86400 seconds..