last executing test programs: 21.552481802s ago: executing program 3 (id=175): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x500, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 20.501871067s ago: executing program 3 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x2}}, 0x1c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x525, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x0, "b8a3e100908f616400000002fffd0000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 20.073232472s ago: executing program 3 (id=192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)=""/195, &(0x7f0000000200)=0xc3) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'macvtap0\x00', {'nicvf0\x00'}, 0x2}) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 19.833703601s ago: executing program 4 (id=196): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x300}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 19.71357774s ago: executing program 3 (id=200): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0x2000000}}, 0x1c) 19.645563344s ago: executing program 4 (id=201): r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)={0x18, 0x52, 0x1, 0x70bd2c, 0x1, {0x1c}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000000000e2f0e2f40000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{r2}, &(0x7f0000000940), &(0x7f0000001d40)=r5}, 0x20) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async, rerun: 32) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r9 = socket$inet6(0xa, 0x6, 0x0) listen(r9, 0x80080400) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000120001000000000000000000100000000c00000000000000000000000c0021"], 0x2c}], 0x1}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x15, &(0x7f0000000700)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x4, 0x0, 0x0, 0x8, 0x0, 0x30, 0x10}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) ppoll(&(0x7f0000000000)=[{r0, 0x200}, {r9, 0x80}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) 19.556279275s ago: executing program 2 (id=203): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) (fail_nth: 78) 19.45838155s ago: executing program 2 (id=205): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x10, 0x6, 0x660, 0x3f8, 0x3f8, 0x300, 0x0, 0x0, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e8}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @private1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @loopback, @mcast1]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x4e8}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@broadcast}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'wg1\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005001600000000010000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 19.301774137s ago: executing program 4 (id=207): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x5, 0x8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0x0, 0x1d8, 0xffffffff, 0x1d8, 0x120, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f0000000000), {[{{@ip={@private=0xa010101, @broadcast, 0x0, 0xff, 'pimreg0\x00', 'syzkaller1\x00', {0xff}, {}, 0x42, 0x1, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x0, 0x9, 0x9, 0x2, 0x4}}, @common=@unspec=@mac={{0x30}, {@empty, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@local, @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, @port=0x4e24, @port=0x4e20}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xff000000, 'vlan0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x21, 0x1, 0x9}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xc2a9, 0xbbf, 0x3, 0x1, 0x0, "753844e41e5d61741d7cca7da43ca2c96005f5c70404fc7acade777600fbaf5689a0ad8f05139637877653854363833211941cf766408efe95779061c8b9d718"}}}, {{@ip={@remote, @local, 0xffffff00, 0xff, 'bond_slave_1\x00', 'team0\x00', {0xff}, {}, 0xbf, 0x2, 0x60}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x2, 0x6, 0xfffffff3, 0x9, 0x78, 0x80}, {0x6}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, @ipv6=@mcast2, @port=0x4e23, @port=0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 19.229787891s ago: executing program 2 (id=209): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (fail_nth: 5) 18.830092167s ago: executing program 4 (id=212): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "97e9cddb93ea4ed1e2ace5b0c90ad625"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) r4 = socket$inet6(0xa, 0x3, 0x36) connect$inet6(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3273], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$NFT_BATCH(r6, 0x0, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r9}, 0x90) syz_emit_ethernet(0xe46, &(0x7f0000000940)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0xb, 0x4, 0x3, 0x0, 0xe34, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xeb, [@multicast2, @multicast1, @rand_addr=0x64010101, @multicast1, @empty]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xce, 0xffff, [0x1, 0xd0f], "a48fa23449642bbef65bc82b560cb905f8adbee0b91f2b3116e7f3a267d0803d636769d821d2f0dff568b8b65da5920639c5b4ef5a5b15579746259dc3de73cb7479217d10efd1a32c48b9fa15786dad9c64b278ad04d1ffc8bd1d83d48a32b14b42e5e369b45693d408cbac024abac8e6f18ed1b109ea94bb28c0d3c487e541e324bad8702f4b1fe6d05bb7b9e6f9b43972abb90c796fd811fe8c5a6c6664c93f0795f256cec6cc797addea39c8c86982955d60a6f7d4e2190619388f7c3b8702c5d2f697c7b19ece617cd4c718"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7c9aee2d5353253055bc65acf8eb79c850467aebe8f70684ac0c1e220431664043c3108e248f36cb4ead2e03397b1368d622af898a4281f190da"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "ccfc1502583ebfebb884a19117f27940b270a9b441cea9f8a54988a8f9ec654a86533f7dca1b974738b07a018e046b1c24b071094d7390a639214f7941841a48684fc0ac6ecf43dfb64bbe2315e332e0ab268d642feedf5480c6b216ffa53798682f3b59cf9e742ed8fb76f052db2933bb0a220b8b878f5fb1fbe9d0d9bb5e3f2abb4407ebe1c7e23afd95d68fbd20af6038b8e199431696c358f70a72ae912b988799e3f329a8c13e072c56ca6b4c05716cdeeef22868f8522524a1e78bc0f2cf4b20f7c28381844e885f88f964dbbbae055c77bcef76bfb977574b287433ddbeada7bbb2d0bcd194f70bbfbda3847ddc4c923479dc"}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x3, 0x0, 0x1, 0x2, 0x7}, 0x1, {0xc1}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x6, 0x1, 0x1, 0x0, 0x3, 0xd}, 0x2, {0xfd0000, 0x4757, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "b1c4a7ee5c8fe971db0786ecce4a7c39cdd29da23cc06b6a291fa9706af5208057131fcb46721911d96abe9dcc9ad70d5dedfcb1812432fe25a5509aac35e1682a36222e41f82656988b288cb4d9504b1a02d965e49da3841788f2d41d966e939c915e646103b01846af6d8ea868838332c66d3c916a9ddbd67dc498bee4347534ae52fac52f0e5bac7738637b39de1668925f4ba60a364cc282b61ab36c360343627ccbd28dfb89afacdc7a37f75f136164bf887d8376c7ab76a659aa41e7ed03d27f9f78bd51213d0e4a7bc99dd215412e44ad16dbb7e7dda80b65d532aa9a71275819560cf3471c66a220c217ee84f28157e6a0e6ee694bb16ed01294e714797cb6c4156915521372f4fa4faa6eb5802a062b09a4f7393188755630ae00c7f7f1e881d41d6b91f78d4f984fbf75e7326d12c402deda484c333a5c12fa72d3844e3fd8dbb5e03d203131d7290be7dc51fb0fdd8c8022e29b9f77095497144ee0f192978593fedc3cf92135ebb359c68ba6030cf68d9c37b229a396376aa68aaf8990d88996db09bac570ec00b7365999d696debab7fe5a7ca33abbe400886775f18cc32761b93ca93a3ea5917225ad5a8f8bf1feaf4ba8316b5eac37098c561f2121620dfb60c25ae0f0835900a55f659db8eaa399ed2f6b72363034afb0a80fe0db636b9b4df3230c73809654c900f81af4b4ae9f78dc1409780a490a2aa41577c55f48ffbb42611bd16c360e08debc4f456f1f8d3f3ffb33392228ff7dd9edb797ea16f36d9eec599fbc47467f95081dcdb4c1ac901ef24aa66ee08a294e452ca9ae2c18ea0eed01ae870b77f9edfb43f88cc97d5749e5a7f0360cbe3c98a0f9ea6c6d76f2feea218c4653d0d0e1207e94ce57f0fe27fbe6698c2a0c33b1d9aa724a7e0f9e75a270c76f300e770478ac3a11fdbb9501af0a5f1c22e21f6190bb04d8d6e10e97e5a430ef95354ba2694f567061cae5d1c59b0f5c3cff06c13eb9f4edf5afc792589ef90714ba8cbf1d8c5eb2cdaad6373f1e78af688e75da0eb8977e1ab2f59aa6a3d5b26a12c5193b6f2c826ea2e81076d92726eccc580d6274e5c742a9282789f083af02a81e8c09d40043e2bec666b908757cad1dfc0bb03befbe2d70af7c4d46af03c0fa14be073165aec5cddb4b47f8be75eff1e0f1bd603723c0b5f4ad84946b6885cf0e1ccf9c1249951b8135bf5bd2c11cf28c736ab1080ef5dfcf6abbdaa140e07a74bdc3a624f31065af23875f78bcf45497c7d309ff69ecc382f5b54a7eb94ca0f3661fec6e74285958eba9dccdda6aa3e2fc52b88416c7ddf9b633e1e2892809bf715da0999158f9c4a9375dad8486a9842c94fbe6dc0460a722cae7d1fb0f96c5916842c5ea7a91e779bbfb343071bb453c48ad64e749a9b391fcaf0b79669ee80fb1a4965235190c723ee15fbab2f27a3a0ac73353e328df914ab57fb8991279b29cee66e4768e515992e79dbab88eff3dae2a370d3e42802046a98bce7d527c62a8692593571b9f1aef8476e3b270a3239fe395d14912c1ff58ba7854cab8f1d90bb215e5c3389208b6fd9eb473b074239395fb5a48505ee25191c709d024d148c3b021279b351fca9ef5fdc93f5d5361755a903ae77d039c7d271cbf0274ea9fe5a1bdc1157ce275405bb85f4475ef3892c89b9b8d126745ed5764d8516391dd404b444e931e27df5d2417ef4764a15f6a470c07084bf8aecbc3a30155568ba4aa28ca3ecd0288a2083474fc0743489f3cda8c44fa190789e9826b653fe9c0bee883bf62a3deab639b5bcc2d5b850078cbb57c6d3343b0f2166ed0f4f0fe95e3896137941ec9f9a52d5a11bcb8a0d4b86c91db5b933d20aaf88cefb275454d1cca0cdd05b71579c03ebf59f35df32d8b1a3fe740454db546bec536e1f6778ade92cb650474312237d87fe1642122c6544df179588eeb601bf939aca15d913d7df893d9de190fb718eac60e7526cc308283b36e4e984ab26d104df8bdc3531c5b93da085608c3c84a943b9c0bb1e365a7001cc47e760a296609abc43e2e5291bed5a41230b70e4827a0c01881cbddd7fb8f48593a2e6388e3b9fe64f869bb2164068e3b1c6cb86f800e43809755ec1e5faeaa91b6024ff83ded87eec09dfaa9678baa4fb49d5304b066b75cd50921e512766c9986409d94de447ee5f4361af75e186547d566f8ece84fc4f3579e742a2ade703e3bf5c5ecc38dff5520527d313cfa317b56ed7ab7dca62dbc606dbb8196ca2ff326ae6ba676704a38bf924502de2fb1911d5952bff3281e7fe9d370b294a6c51f492c53c36dec57387a779bd56343b4d5efe6e045f20397f4652f5dcfeba830a01821992ffdc276958bc8a32ed8eba946c6693865a2f18731ab2e6777bb3f29ac5268cac220040c9066c4a3bc7159150188b60812df63a86037eea2762454d1ff5b8115f199b968c9e8a59c269babb070f5704d2d27d9b6c8a355bd1c96bf97c9229a6f54eca72a03830c3f8c03006b6ba733e4c53899a6e632358c333b2f2646dcc70598f107cb90ae399aff255ebbbb2da4687cf2025b6d2c59d87a61a6256c50205fa6b8acf2c648ae2a19d552a9af0b3e7d68f4f801fb5c639a1d6e168776766ff404a15f1193fc4a2e7969198991970559ce42d23c77944593bdcd94ac1fc5610a45d662f8136fe769543cf6de5a3d1325f9f1c7fe14f01a4b5341f41f0f692d078a3e7ff2496aab7d7999f78536582d9b5a6ebd1b6af27ef52e4818d3e98c131e7f246728682822b8460a87a42d20848b029aa0e571b1888af80a63d36e907317240c191049bdc92b206fb82daf186a382ddc5fc7deefb4d61fa94e19fe084023ba3e74d2738cf77219b071c8edd2e563bae8284335b56771e78d20c5e9e2b15d4acfe35de41585c74b08df4257fdeb0f2d39b1204c5b8c11958e6eb8f6e9902d4b35f06753d7e77a3d81f0e142d80890dfb4fb2d8a1b35cc89c77fe45fb15b36bb567ce6c298570d02a818653b13c973a56b58bce79c1d3041efd6b30fd1349a3813c1b731adaf3df1d632dc8186be4ef3959b5550b2e3129333ac34195003ffe986f01c1f666e4c874e726f75fce4e4e3306b3c53b7252c1344c8ebace4c3d411cab8f5dbfc3781d35efaaaf043dfd312a742e7113c99d54cecd0a6ee5a7347f9eff2d860e84d5ded3bbe39c25470b90a27a40e76791b9817c8a05945d1b29a36ef53f453a692e2ae0a5395df6741a6c5abc6a57da1f36e2d58d91d1a569da783bef5b8aaf95823e340a3214da0ebc43cae774495d3b8fbeba0d9df9dd813dca9e6a27a09f2f8b2ac413fdead6636bd5425ebb80aa9950411fc18ba03dc485c7c86dffeb0975bc2d08a32eb8b9295206e55fc6318f8258a4832cf5f4203196265ad36e86a21361d569fab92e0b439b08c3b6f2fe38a85299e97fc9e2ca2e564069f88619dfedcfce8e6dc5b3f58ce6cf3e287ec7983018bba9ed5e8e6e4f1e9854342fe389de59e962dcd5982b23e9217e3072f8a208ff54e680a1970524d24a974a05656f9a6ed1143ca2be401806d38c0ed06c97b33a09fe15bcea2f05cfaf78919ee7821f695310f4ed6b1736d0c08f30bbde6d29cc12bc7de3d21f386c0cb2cd42fcda0593978b4fd073d9ee29f4224a4666a3383512e461311b1c1b70fd156bec1025effd86aa4cd89f7071140b908ae806abec8175cfb5b3ee7ee89f1fcc9f75f45011baeb583c4068de9400245a4ca14b41708424ff04f1bcd3defe0ef52b2e1789dbf70922874265c2d13469c17cd8244f733ccacc458a17b70e285e57da2c306cb05c2aa8f783e773432c41901cd137dd3ca66c368ca3b0c9b8e89c26fc84a85d0900333d30411fcaf589654deff299a56ce278e6de0dd2bb64d77a5d99a38dd395d81cc81448c9f2ea041ba45caf0083a0c3920bd77e47be8006af329dd0c6d37c7bbef1251d0cb87d5402a62c56ca59e4d0ad9f9fafaba75487ed7c1e9e6b91e536f1f2671cf8000c799680d13e56b6675a626485beb61b1e6db8e35fc054fb791718ded80d666227ac1367565343b1df616a00afd135ba9a148300cfd0227fda17722af903aa628944f9cc26e7400387049068ea0df5c2b91c3c13a5d740e0c3bec83f3129cbbb8022c8e679748b53199aa106c0711ff6f0abc2d3e92d7753ca9df0eeba20607b22e36aad036ad6d9bd016bfc34a7c1bbf91af4af8007daad8959af0f65356cea2bcfddebed2e142aa5ad83603"}}}}}}, 0x0) 18.743407035s ago: executing program 3 (id=214): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000d0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 18.604151231s ago: executing program 2 (id=215): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x4001, 0x3, 0x9e8, 0x0, 0x0, 0x148, 0x8c0, 0x148, 0x950, 0x240, 0x240, 0x950, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x878, 0x8c0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {[], [], 0x20}], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'veth0_to_bond\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03001100000000001000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000042c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xb8}}, 0x0) 18.493692241s ago: executing program 3 (id=216): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88ca}, @void, @eth={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8a2d55", 0x8, 0x0, 0xff, @dev, @dev, {[@routing={0x29, 0x0, 0x1, 0x8}]}}}}}}, 0x42) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88ca}, @void, @eth={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8a2d55", 0x8, 0x0, 0xff, @dev, @dev, {[@routing={0x29, 0x0, 0x1, 0x8}]}}}}}}, 0x42) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x94, r5, 0x10, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x64, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x5c000}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1b8, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x3}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bond_slave_0\x00', 'team0\x00', {}, {}, 0x3a, 0x3, 0x6, 0x61}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x5, 0xfff7}}}, {{@ipv6={@private0, @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 'erspan0\x00', 'wg2\x00', {}, {0xff}, 0x33, 0xc, 0x1, 0x40}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd, 0xfffc, 0x1000, 0x1, 0x0, "80a2cd170c9a3b62495a566f137c79890e62a2ed0f8aa9bff9a9ff44a4ea9aa46405ee523785c8570e21e3d0bf4a7eb2c7dcfa053568e86d76e6b6c11c3e7ade"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x230) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1b8, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x3}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bond_slave_0\x00', 'team0\x00', {}, {}, 0x3a, 0x3, 0x6, 0x61}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x5, 0xfff7}}}, {{@ipv6={@private0, @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 'erspan0\x00', 'wg2\x00', {}, {0xff}, 0x33, 0xc, 0x1, 0x40}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd, 0xfffc, 0x1000, 0x1, 0x0, "80a2cd170c9a3b62495a566f137c79890e62a2ed0f8aa9bff9a9ff44a4ea9aa46405ee523785c8570e21e3d0bf4a7eb2c7dcfa053568e86d76e6b6c11c3e7ade"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x230) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) r11 = socket(0xa, 0x3, 0x1) getsockopt(r11, 0xff, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) 18.437114941s ago: executing program 4 (id=217): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @remote}}]}, 0x110) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9ea3f675c186dd60083ff200543a00fe8000000000000000000000000000bbff020000000000000000400000000001"], 0x0) 18.294648131s ago: executing program 2 (id=218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000200000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 18.019911841s ago: executing program 4 (id=221): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 17.936821394s ago: executing program 2 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100110008000300", @ANYRES32=r4, @ANYBLOB="38002d802c"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09049f00000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c00028008000440000000010c00024000000000000000000c000140ffffffffffffffe10800034000000e55140000001100010000000000000000000000000a"], 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x36, 0x0, &(0x7f0000000640)="243c42e8680d85ffff03762f88a8711286dda3d074cc01d9aeb405a78bcb0451deedab99cb2231bcb55e73154b9c1e72aee2cda6f603", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x19) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES8=r6, @ANYBLOB="dccef875a33a40bc1bf00cbf51d2ff418032222e36cb062bd78ade07b12e13178f48f0043ff0c9bfb47c506a4adc3915d3dfc67b62afd457b5a9e78b0404104ea548c40165fbfdf1018343526563da462950fd42af3fb169ac670ae1c905d1df8746865635b4a7d7595d052b857a0f52f8c0bdbbe6adfc4f0071a626c1578398759368b0924dccb6ddb8a3d66c796448374729547aa9c71d01fcb69f63d9f38ee0be4a6c7b33de3c4d5930c940a5e025010194c057300903232fe9853600", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 17.62426645s ago: executing program 1 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000001000000080007000000000008000800", @ANYRES32], 0x30}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1f, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd26, 0x25dfdbfe, {0x80, 0x14, 0x20, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3a00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88d0}, 0x840) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 17.513935389s ago: executing program 0 (id=226): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (fail_nth: 5) 17.099815845s ago: executing program 1 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000008004000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 17.015493599s ago: executing program 1 (id=228): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x100) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xb7, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843500810600fe8000000000000000000000000000bbfe8000000000000000000090633444aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="6000000090"], 0x0) 16.861752215s ago: executing program 1 (id=229): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x600, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 16.816983326s ago: executing program 1 (id=230): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x12}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x11, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b1176000000000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x52, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20) 16.683543868s ago: executing program 0 (id=231): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000300000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2300}, 0x50) 16.481722634s ago: executing program 0 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xff3f}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 16.253383188s ago: executing program 0 (id=233): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r3, @in={{0x2, 0x4e23, @empty}}, 0xa825, 0x100, 0x7, 0x7b2c6806, 0x20, 0x80000001, 0x23}, &(0x7f0000000440)=0x9c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000002060500000000000000000000000000050004000000000020227490f5dd6ceb83190900020073797a32000000000500050000000000050001000600000011000300686173683a6e"], 0x4c}}, 0x0) 15.909171439s ago: executing program 0 (id=234): syz_emit_ethernet(0x376, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x340, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0xe, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x19, 0x7, "b8a3e10000a3e10345fe0009000000ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0) 15.801776564s ago: executing program 1 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r6, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000480), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r1, &(0x7f0000010440)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000130a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140"], 0xa4}}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='bond_slave_1\x00'}) 15.738395395s ago: executing program 0 (id=236): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x490c2283}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x80, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e4bc49abcd7a51a6b7dab97e9535681c065330805594fec7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5dd63a2893c3e0bba1e9a5aa91bf710c7f1ffcb7e91c32a8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500030001"], 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.466447578s ago: executing program 32 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100110008000300", @ANYRES32=r4, @ANYBLOB="38002d802c"], 0x54}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09049f00000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c00028008000440000000010c00024000000000000000000c000140ffffffffffffffe10800034000000e55140000001100010000000000000000000000000a"], 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x36, 0x0, &(0x7f0000000640)="243c42e8680d85ffff03762f88a8711286dda3d074cc01d9aeb405a78bcb0451deedab99cb2231bcb55e73154b9c1e72aee2cda6f603", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x19) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYRES64=r1, @ANYRES8=r6, @ANYBLOB="dccef875a33a40bc1bf00cbf51d2ff418032222e36cb062bd78ade07b12e13178f48f0043ff0c9bfb47c506a4adc3915d3dfc67b62afd457b5a9e78b0404104ea548c40165fbfdf1018343526563da462950fd42af3fb169ac670ae1c905d1df8746865635b4a7d7595d052b857a0f52f8c0bdbbe6adfc4f0071a626c1578398759368b0924dccb6ddb8a3d66c796448374729547aa9c71d01fcb69f63d9f38ee0be4a6c7b33de3c4d5930c940a5e025010194c057300903232fe9853600", @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 2.283195233s ago: executing program 33 (id=216): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88ca}, @void, @eth={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8a2d55", 0x8, 0x0, 0xff, @dev, @dev, {[@routing={0x29, 0x0, 0x1, 0x8}]}}}}}}, 0x42) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88ca}, @void, @eth={@broadcast, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8a2d55", 0x8, 0x0, 0xff, @dev, @dev, {[@routing={0x29, 0x0, 0x1, 0x8}]}}}}}}, 0x42) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x94, r5, 0x10, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x64, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x5c000}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1b8, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x3}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bond_slave_0\x00', 'team0\x00', {}, {}, 0x3a, 0x3, 0x6, 0x61}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x5, 0xfff7}}}, {{@ipv6={@private0, @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 'erspan0\x00', 'wg2\x00', {}, {0xff}, 0x33, 0xc, 0x1, 0x40}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd, 0xfffc, 0x1000, 0x1, 0x0, "80a2cd170c9a3b62495a566f137c79890e62a2ed0f8aa9bff9a9ff44a4ea9aa46405ee523785c8570e21e3d0bf4a7eb2c7dcfa053568e86d76e6b6c11c3e7ade"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x230) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x1b8, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x10, 0x4, {0x3}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bond_slave_0\x00', 'team0\x00', {}, {}, 0x3a, 0x3, 0x6, 0x61}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x5, 0xfff7}}}, {{@ipv6={@private0, @mcast2, [0xff000000, 0xff, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], 'erspan0\x00', 'wg2\x00', {}, {0xff}, 0x33, 0xc, 0x1, 0x40}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xd, 0xfffc, 0x1000, 0x1, 0x0, "80a2cd170c9a3b62495a566f137c79890e62a2ed0f8aa9bff9a9ff44a4ea9aa46405ee523785c8570e21e3d0bf4a7eb2c7dcfa053568e86d76e6b6c11c3e7ade"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x230) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) r11 = socket(0xa, 0x3, 0x1) getsockopt(r11, 0xff, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) 2.182767532s ago: executing program 34 (id=221): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 67.578459ms ago: executing program 35 (id=236): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x490c2283}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x80, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x19}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e4bc49abcd7a51a6b7dab97e9535681c065330805594fec7"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5dd63a2893c3e0bba1e9a5aa91bf710c7f1ffcb7e91c32a8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080006110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0be2566c43d72918a8a9323fd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5d82054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fcfcffffffffffffffd442017cfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beac671e8e8fdecb035868a623fa71f871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a00040000bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae991e7f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef8a4fed5c9455640dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d76ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6e257343c1a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabba3c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f3878b1e11316d8ddae1c6c3b8faaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000090ee7ba4a70a084bd994ac5e00000000000000000000000000351a30cdf57a3d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd68a34e286991f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf6433f76d5af45155536a1a44bfcbfbfd232af000052f99be13156f7d604d933e593985a6f9a00"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="0500030001"], 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 36 (id=235): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x1, 0x3, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r6, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000480), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$unix(r1, &(0x7f0000010440)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000130a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140"], 0xa4}}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000000)='bond_slave_1\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 49.914594][ T5218] cgroup: Unknown subsys name 'net' [ 50.056173][ T5218] cgroup: Unknown subsys name 'cpuset' [ 50.063818][ T5218] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.356465][ T5218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.275273][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.303234][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.311074][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.319218][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.326912][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.334913][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.437325][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.458873][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.467133][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.474568][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.483377][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.503733][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.529651][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.538083][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.546111][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.555516][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.556907][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.571923][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.583075][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.584948][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.599968][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.608237][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.608841][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.623239][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.630691][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.646549][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.660091][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.669412][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.678946][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.686855][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.813019][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 53.922290][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.929590][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.937956][ T5228] bridge_slave_0: entered allmulticast mode [ 53.945482][ T5228] bridge_slave_0: entered promiscuous mode [ 53.953655][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.960751][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.968059][ T5228] bridge_slave_1: entered allmulticast mode [ 53.974929][ T5228] bridge_slave_1: entered promiscuous mode [ 54.035284][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.082277][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.146845][ T5228] team0: Port device team_slave_0 added [ 54.164986][ T5228] team0: Port device team_slave_1 added [ 54.212457][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 54.227180][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 54.237238][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.244223][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.270436][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.285892][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.293019][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.319022][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.397188][ T5228] hsr_slave_0: entered promiscuous mode [ 54.403958][ T5228] hsr_slave_1: entered promiscuous mode [ 54.410387][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 54.525938][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.533202][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.540316][ T5238] bridge_slave_0: entered allmulticast mode [ 54.547454][ T5238] bridge_slave_0: entered promiscuous mode [ 54.577001][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 54.586952][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.594526][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.601636][ T5238] bridge_slave_1: entered allmulticast mode [ 54.609086][ T5238] bridge_slave_1: entered promiscuous mode [ 54.628662][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.635779][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.643148][ T5231] bridge_slave_0: entered allmulticast mode [ 54.649638][ T5231] bridge_slave_0: entered promiscuous mode [ 54.687659][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.695087][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.702189][ T5231] bridge_slave_1: entered allmulticast mode [ 54.708926][ T5231] bridge_slave_1: entered promiscuous mode [ 54.732384][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.765321][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.817262][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.825093][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.832207][ T5232] bridge_slave_0: entered allmulticast mode [ 54.839401][ T5232] bridge_slave_0: entered promiscuous mode [ 54.847454][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.854806][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.861924][ T5232] bridge_slave_1: entered allmulticast mode [ 54.868835][ T5232] bridge_slave_1: entered promiscuous mode [ 54.877006][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.899908][ T5238] team0: Port device team_slave_0 added [ 54.908470][ T5238] team0: Port device team_slave_1 added [ 54.923275][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.980827][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.988464][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.996128][ T5241] bridge_slave_0: entered allmulticast mode [ 55.002622][ T5241] bridge_slave_0: entered promiscuous mode [ 55.010141][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.017841][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.025362][ T5241] bridge_slave_1: entered allmulticast mode [ 55.032201][ T5241] bridge_slave_1: entered promiscuous mode [ 55.039220][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.046305][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.072301][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.084957][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.091919][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.117978][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.130940][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.168516][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.179745][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.191366][ T5231] team0: Port device team_slave_0 added [ 55.213127][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.224612][ T5231] team0: Port device team_slave_1 added [ 55.264046][ T5232] team0: Port device team_slave_0 added [ 55.286423][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.294052][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.320010][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.333756][ T5238] hsr_slave_0: entered promiscuous mode [ 55.339955][ T5238] hsr_slave_1: entered promiscuous mode [ 55.347058][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.354897][ T5238] Cannot create hsr debugfs directory [ 55.361586][ T5232] team0: Port device team_slave_1 added [ 55.387039][ T5241] team0: Port device team_slave_0 added [ 55.393482][ T5239] Bluetooth: hci0: command tx timeout [ 55.394056][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.406823][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.432815][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.464569][ T5241] team0: Port device team_slave_1 added [ 55.490523][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.497630][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.524463][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.558818][ T5231] hsr_slave_0: entered promiscuous mode [ 55.565461][ T5231] hsr_slave_1: entered promiscuous mode [ 55.571765][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.579948][ T5231] Cannot create hsr debugfs directory [ 55.586363][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.593382][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.619319][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.623840][ T5239] Bluetooth: hci1: command tx timeout [ 55.644856][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.651816][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.678004][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.703104][ T5235] Bluetooth: hci2: command tx timeout [ 55.703183][ T5243] Bluetooth: hci3: command tx timeout [ 55.708852][ T5239] Bluetooth: hci4: command tx timeout [ 55.747233][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.754335][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.780520][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.797998][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.809180][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.824553][ T5232] hsr_slave_0: entered promiscuous mode [ 55.830733][ T5232] hsr_slave_1: entered promiscuous mode [ 55.837001][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.844729][ T5232] Cannot create hsr debugfs directory [ 55.871745][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.913837][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.963671][ T5241] hsr_slave_0: entered promiscuous mode [ 55.969903][ T5241] hsr_slave_1: entered promiscuous mode [ 55.976977][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.984877][ T5241] Cannot create hsr debugfs directory [ 56.188813][ T5238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.215760][ T5238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.229569][ T5238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.249447][ T5238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.290760][ T5231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.309068][ T5231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.317957][ T5231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.352722][ T5231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.366880][ T5232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.379614][ T5232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.390555][ T5232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.420889][ T5232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.465708][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.488562][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.506145][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.519076][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.544141][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.610601][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.637787][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.645096][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.664457][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.684128][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.691314][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.767069][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.784045][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.798178][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.827699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.834794][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.853777][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.874429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.881530][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.912171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.919329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.952434][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.976700][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.983864][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.010502][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.040043][ T2574] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.047223][ T2574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.075480][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.082569][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.128986][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.144393][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.170582][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.177747][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.246035][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.253201][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.347602][ T5228] veth0_vlan: entered promiscuous mode [ 57.411692][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.435474][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.450767][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.467886][ T5239] Bluetooth: hci0: command tx timeout [ 57.475063][ T5228] veth1_vlan: entered promiscuous mode [ 57.620202][ T5231] veth0_vlan: entered promiscuous mode [ 57.650998][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.682818][ T5231] veth1_vlan: entered promiscuous mode [ 57.704329][ T5239] Bluetooth: hci1: command tx timeout [ 57.749397][ T5228] veth0_macvtap: entered promiscuous mode [ 57.775218][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.784967][ T5239] Bluetooth: hci3: command tx timeout [ 57.785038][ T5243] Bluetooth: hci4: command tx timeout [ 57.790369][ T5239] Bluetooth: hci2: command tx timeout [ 57.826764][ T5228] veth1_macvtap: entered promiscuous mode [ 57.839804][ T5232] veth0_vlan: entered promiscuous mode [ 57.879323][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.890011][ T5232] veth1_vlan: entered promiscuous mode [ 57.913297][ T5231] veth0_macvtap: entered promiscuous mode [ 57.925392][ T5241] veth0_vlan: entered promiscuous mode [ 57.934121][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.949070][ T5231] veth1_macvtap: entered promiscuous mode [ 57.965276][ T5241] veth1_vlan: entered promiscuous mode [ 57.978579][ T5228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.988689][ T5228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.998193][ T5228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.007213][ T5228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.060831][ T5232] veth0_macvtap: entered promiscuous mode [ 58.089401][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.101156][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.114699][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.122627][ T5232] veth1_macvtap: entered promiscuous mode [ 58.133622][ T5238] veth0_vlan: entered promiscuous mode [ 58.158853][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.170434][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.181705][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.195778][ T5241] veth0_macvtap: entered promiscuous mode [ 58.206892][ T5241] veth1_macvtap: entered promiscuous mode [ 58.215943][ T5231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.225485][ T5231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.234569][ T5231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.244101][ T5231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.257649][ T5238] veth1_vlan: entered promiscuous mode [ 58.290615][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.301480][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.311529][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.322340][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.334103][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.341925][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.353884][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.363941][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.375501][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.386429][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.397602][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.408450][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.428915][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.440558][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.455732][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.467069][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.477022][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.487881][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.499213][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.541505][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.542330][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.560640][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.565152][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.571584][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.590086][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.599963][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.611274][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.622407][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.645992][ T5232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.654923][ T5232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.664877][ T5232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.674034][ T5232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.694927][ T5238] veth0_macvtap: entered promiscuous mode [ 58.712553][ T5238] veth1_macvtap: entered promiscuous mode [ 58.739151][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.749634][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.759378][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.768290][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.803663][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.814043][ T5228] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.815884][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.875157][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.885744][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.895859][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.907101][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.916995][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.927597][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.937462][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.948040][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.959544][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.006092][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.016868][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.029822][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.040463][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.050813][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.061773][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.081446][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.092213][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.104138][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.127905][ T5238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.136905][ T5238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.145845][ T5238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.155234][ T5238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.196993][ T2574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.214456][ T2574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.219214][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.236154][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.274458][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.288316][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.343771][ T2574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.352370][ T2574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.455619][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.464348][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.545723][ T5243] Bluetooth: hci0: command tx timeout [ 59.578715][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 59.657560][ T2574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.665859][ T2574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.763920][ T5315] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.787477][ T5243] Bluetooth: hci1: command tx timeout [ 59.809106][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.863849][ T5243] Bluetooth: hci4: command tx timeout [ 59.864051][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.870082][ T5243] Bluetooth: hci2: command tx timeout [ 59.882933][ T5239] Bluetooth: hci3: command tx timeout [ 59.989651][ T5325] FAULT_INJECTION: forcing a failure. [ 59.989651][ T5325] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.014677][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.3.8 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 60.025144][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.035217][ T5325] Call Trace: [ 60.038495][ T5325] [ 60.041418][ T5325] dump_stack_lvl+0x241/0x360 [ 60.046115][ T5325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.051313][ T5325] ? __pfx__printk+0x10/0x10 [ 60.055904][ T5325] should_fail_ex+0x3b0/0x4e0 [ 60.060583][ T5325] _copy_from_user+0x2f/0xe0 [ 60.065172][ T5325] move_addr_to_kernel+0x82/0x150 [ 60.070199][ T5325] __sys_connect+0xc1/0x300 [ 60.074706][ T5325] ? __pfx___sys_connect+0x10/0x10 [ 60.079825][ T5325] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.086153][ T5325] ? do_syscall_64+0x100/0x230 [ 60.090921][ T5325] __x64_sys_connect+0x7a/0x90 [ 60.095679][ T5325] do_syscall_64+0xf3/0x230 [ 60.100186][ T5325] ? clear_bhb_loop+0x35/0x90 [ 60.104866][ T5325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.110780][ T5325] RIP: 0033:0x7fc213d7e719 [ 60.115206][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.134808][ T5325] RSP: 002b:00007fc214bb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 60.143220][ T5325] RAX: ffffffffffffffda RBX: 00007fc213f35f80 RCX: 00007fc213d7e719 [ 60.151187][ T5325] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 60.159155][ T5325] RBP: 00007fc214bb9090 R08: 0000000000000000 R09: 0000000000000000 [ 60.167138][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.175122][ T5325] R13: 0000000000000000 R14: 00007fc213f35f80 R15: 00007fff0073b008 [ 60.183107][ T5325] [ 60.291541][ T5327] netlink: 296 bytes leftover after parsing attributes in process `syz.0.9'. [ 60.338161][ T5330] netlink: 296 bytes leftover after parsing attributes in process `syz.0.9'. [ 60.373544][ T5334] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.406957][ T5327] netlink: 'syz.0.9': attribute type 33 has an invalid length. [ 60.408773][ T5337] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9'. [ 60.421178][ T5327] netlink: 160 bytes leftover after parsing attributes in process `syz.0.9'. [ 60.478250][ T5332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 60.518736][ T5340] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.882645][ T5352] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 60.974902][ T5360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20'. [ 60.989971][ T5352] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 61.029211][ T5363] FAULT_INJECTION: forcing a failure. [ 61.029211][ T5363] name failslab, interval 1, probability 0, space 0, times 1 [ 61.054498][ T5360] Illegal XDP return value 4294967274 on prog (id 8) dev N/A, expect packet loss! [ 61.080413][ T5366] netlink: 256 bytes leftover after parsing attributes in process `syz.0.23'. [ 61.086820][ T5363] CPU: 1 UID: 0 PID: 5363 Comm: syz.1.22 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 61.099974][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.110043][ T5363] Call Trace: [ 61.113333][ T5363] [ 61.116264][ T5363] dump_stack_lvl+0x241/0x360 [ 61.120944][ T5363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.126136][ T5363] ? __pfx__printk+0x10/0x10 [ 61.130734][ T5363] should_fail_ex+0x3b0/0x4e0 [ 61.135427][ T5363] should_failslab+0xac/0x100 [ 61.140132][ T5363] ? sctp_add_bind_addr+0x89/0x3a0 [ 61.145247][ T5363] __kmalloc_cache_noprof+0x6c/0x2c0 [ 61.150537][ T5363] sctp_add_bind_addr+0x89/0x3a0 [ 61.155472][ T5363] sctp_copy_local_addr_list+0x311/0x500 [ 61.161101][ T5363] ? sctp_copy_local_addr_list+0xab/0x500 [ 61.166814][ T5363] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 61.172965][ T5363] ? sctp_v6_is_any+0x60/0x70 [ 61.177645][ T5363] sctp_bind_addr_copy+0xad/0x3b0 [ 61.182665][ T5363] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 61.188994][ T5363] sctp_connect_new_asoc+0x2f3/0x6c0 [ 61.194284][ T5363] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 61.200089][ T5363] ? sctp_sendmsg+0xbb9/0x3520 [ 61.204896][ T5363] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 61.210704][ T5363] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 61.216594][ T5363] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 61.222133][ T5363] sctp_sendmsg+0x219a/0x3520 [ 61.226828][ T5363] ? __pfx_sctp_sendmsg+0x10/0x10 [ 61.231854][ T5363] ? __pfx_aa_sk_perm+0x10/0x10 [ 61.236702][ T5363] ? inet_sendmsg+0x330/0x390 [ 61.241383][ T5363] __sock_sendmsg+0x1a6/0x270 [ 61.246060][ T5363] __sys_sendto+0x39b/0x4f0 [ 61.250561][ T5363] ? __pfx___sys_sendto+0x10/0x10 [ 61.255576][ T5363] ? __mutex_unlock_slowpath+0x21d/0x750 [ 61.261222][ T5363] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 61.267201][ T5363] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.273540][ T5363] __x64_sys_sendto+0xde/0x100 [ 61.278302][ T5363] do_syscall_64+0xf3/0x230 [ 61.282806][ T5363] ? clear_bhb_loop+0x35/0x90 [ 61.287509][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.293410][ T5363] RIP: 0033:0x7f7ae4b7e719 [ 61.297820][ T5363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.317431][ T5363] RSP: 002b:00007f7ae45ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 61.325848][ T5363] RAX: ffffffffffffffda RBX: 00007f7ae4d35f80 RCX: 00007f7ae4b7e719 [ 61.333820][ T5363] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 61.341788][ T5363] RBP: 00007f7ae45ff090 R08: 00000000200004c0 R09: 000000000000001c [ 61.349777][ T5363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.357741][ T5363] R13: 0000000000000000 R14: 00007f7ae4d35f80 R15: 00007ffeb2191a58 [ 61.365733][ T5363] [ 61.540495][ T5374] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 61.569881][ T5377] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 61.570783][ T5378] FAULT_INJECTION: forcing a failure. [ 61.570783][ T5378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.610283][ T5378] CPU: 0 UID: 0 PID: 5378 Comm: syz.1.27 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 61.620831][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.630906][ T5378] Call Trace: [ 61.634212][ T5378] [ 61.637164][ T5378] dump_stack_lvl+0x241/0x360 [ 61.641873][ T5378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.647097][ T5378] ? __pfx__printk+0x10/0x10 [ 61.651720][ T5378] should_fail_ex+0x3b0/0x4e0 [ 61.656438][ T5378] _copy_from_user+0x2f/0xe0 [ 61.661056][ T5378] move_addr_to_kernel+0x82/0x150 [ 61.666105][ T5378] __sys_connect+0xc1/0x300 [ 61.670610][ T5378] ? __pfx___sys_connect+0x10/0x10 [ 61.675721][ T5378] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.682049][ T5378] ? do_syscall_64+0x100/0x230 [ 61.686813][ T5378] __x64_sys_connect+0x7a/0x90 [ 61.691574][ T5378] do_syscall_64+0xf3/0x230 [ 61.696074][ T5378] ? clear_bhb_loop+0x35/0x90 [ 61.700750][ T5378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.706637][ T5378] RIP: 0033:0x7f7ae4b7e719 [ 61.711049][ T5378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.730661][ T5378] RSP: 002b:00007f7ae45ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 61.739089][ T5378] RAX: ffffffffffffffda RBX: 00007f7ae4d35f80 RCX: 00007f7ae4b7e719 [ 61.747061][ T5378] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 61.755030][ T5378] RBP: 00007f7ae45ff090 R08: 0000000000000000 R09: 0000000000000000 [ 61.762994][ T5378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.770954][ T5378] R13: 0000000000000000 R14: 00007f7ae4d35f80 R15: 00007ffeb2191a58 [ 61.778938][ T5378] [ 61.803863][ T5235] Bluetooth: hci0: command tx timeout [ 61.875049][ T5235] Bluetooth: hci1: command tx timeout [ 61.908896][ T5390] netlink: 'syz.2.30': attribute type 10 has an invalid length. [ 61.944956][ T5235] Bluetooth: hci3: command tx timeout [ 61.945006][ T5239] Bluetooth: hci2: command tx timeout [ 61.950946][ T5243] Bluetooth: hci4: command tx timeout [ 61.969390][ T5390] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.987473][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 62.541531][ T5426] netlink: 'syz.3.42': attribute type 13 has an invalid length. [ 62.551860][ T5426] veth0_macvtap: left promiscuous mode [ 62.558930][ T5426] macvtap0: entered allmulticast mode [ 62.570562][ T5426] macvtap0: refused to change device tx_queue_len [ 62.593887][ T5416] FAULT_INJECTION: forcing a failure. [ 62.593887][ T5416] name failslab, interval 1, probability 0, space 0, times 0 [ 62.620856][ T5416] CPU: 1 UID: 0 PID: 5416 Comm: syz.2.37 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 62.631397][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 62.641467][ T5416] Call Trace: [ 62.644745][ T5416] [ 62.647672][ T5416] dump_stack_lvl+0x241/0x360 [ 62.652348][ T5416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.657540][ T5416] ? __pfx__printk+0x10/0x10 [ 62.662126][ T5416] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 62.668124][ T5416] ? __pfx___might_resched+0x10/0x10 [ 62.673408][ T5416] ? kasan_save_track+0x51/0x80 [ 62.678254][ T5416] ? __kasan_kmalloc+0x98/0xb0 [ 62.683026][ T5416] should_fail_ex+0x3b0/0x4e0 [ 62.687718][ T5416] should_failslab+0xac/0x100 [ 62.692392][ T5416] ? __alloc_skb+0x1c3/0x440 [ 62.696976][ T5416] kmem_cache_alloc_node_noprof+0x71/0x320 [ 62.702787][ T5416] __alloc_skb+0x1c3/0x440 [ 62.707200][ T5416] ? __pfx___alloc_skb+0x10/0x10 [ 62.712134][ T5416] _sctp_make_chunk+0x58/0x460 [ 62.716898][ T5416] sctp_make_datafrag_empty+0xa6/0x510 [ 62.722351][ T5416] ? sctp_transport_reset_t3_rtx+0x40/0xe0 [ 62.728152][ T5416] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 62.733722][ T5416] ? sctp_auth_send_cid+0x69/0x250 [ 62.738835][ T5416] sctp_datamsg_from_user+0x740/0xf20 [ 62.744231][ T5416] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 62.749524][ T5416] ? __asan_memcpy+0x40/0x70 [ 62.754109][ T5416] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 62.759479][ T5416] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 62.765192][ T5416] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 62.770648][ T5416] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 62.776448][ T5416] ? sctp_sendmsg+0xbb9/0x3520 [ 62.781209][ T5416] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 62.787014][ T5416] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 62.792905][ T5416] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 62.798447][ T5416] sctp_sendmsg+0x1bc3/0x3520 [ 62.803132][ T5416] ? aa_sk_perm+0x96d/0xab0 [ 62.807631][ T5416] ? __pfx_sctp_sendmsg+0x10/0x10 [ 62.812655][ T5416] ? __pfx_aa_sk_perm+0x10/0x10 [ 62.817504][ T5416] ? inet_sendmsg+0x330/0x390 [ 62.822183][ T5416] __sock_sendmsg+0x1a6/0x270 [ 62.826862][ T5416] __sys_sendto+0x39b/0x4f0 [ 62.831368][ T5416] ? __pfx___sys_sendto+0x10/0x10 [ 62.836384][ T5416] ? __mutex_unlock_slowpath+0x21d/0x750 [ 62.842032][ T5416] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 62.848026][ T5416] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.854360][ T5416] __x64_sys_sendto+0xde/0x100 [ 62.859119][ T5416] do_syscall_64+0xf3/0x230 [ 62.863618][ T5416] ? clear_bhb_loop+0x35/0x90 [ 62.868291][ T5416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.874193][ T5416] RIP: 0033:0x7f879bb7e719 [ 62.878607][ T5416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.898209][ T5416] RSP: 002b:00007f879ca45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 62.906622][ T5416] RAX: ffffffffffffffda RBX: 00007f879bd36058 RCX: 00007f879bb7e719 [ 62.914585][ T5416] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 [ 62.922548][ T5416] RBP: 00007f879ca45090 R08: 0000000020000000 R09: 0000000000000010 [ 62.930515][ T5416] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 62.938484][ T5416] R13: 0000000000000001 R14: 00007f879bd36058 R15: 00007ffcbeb592a8 [ 62.946463][ T5416] [ 63.180489][ T5442] 0ªX¹¦À: renamed from caif0 [ 63.209551][ T5442] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 63.437448][ T5452] Bluetooth: MGMT ver 1.23 [ 63.444674][ T5456] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 63.630565][ T5472] FAULT_INJECTION: forcing a failure. [ 63.630565][ T5472] name failslab, interval 1, probability 0, space 0, times 0 [ 63.669336][ T5468] SET target dimension over the limit! [ 63.680340][ T5472] CPU: 0 UID: 0 PID: 5472 Comm: syz.0.58 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 63.690884][ T5472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.700967][ T5472] Call Trace: [ 63.704264][ T5472] [ 63.707212][ T5472] dump_stack_lvl+0x241/0x360 [ 63.711918][ T5472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.717150][ T5472] ? __pfx__printk+0x10/0x10 [ 63.721771][ T5472] should_fail_ex+0x3b0/0x4e0 [ 63.726481][ T5472] ? dst_alloc+0x12b/0x190 [ 63.730920][ T5472] should_failslab+0xac/0x100 [ 63.735632][ T5472] ? dst_alloc+0x12b/0x190 [ 63.740062][ T5472] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 63.745439][ T5472] dst_alloc+0x12b/0x190 [ 63.749679][ T5472] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 63.755752][ T5472] ip_route_output_key_hash+0x193/0x2b0 [ 63.761296][ T5472] ? ip_route_output_key_hash+0xdf/0x2b0 [ 63.766923][ T5472] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 63.772997][ T5472] ? _parse_integer_limit+0x1b5/0x200 [ 63.778372][ T5472] dccp_v4_connect+0x64a/0x1380 [ 63.783248][ T5472] dccp_v6_connect+0x74f/0x1480 [ 63.788122][ T5472] ? __pfx_dccp_v6_connect+0x10/0x10 [ 63.793437][ T5472] ? mark_lock+0x9a/0x360 [ 63.797774][ T5472] __inet_stream_connect+0x262/0xf30 [ 63.803054][ T5472] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.809382][ T5472] ? __local_bh_enable_ip+0x168/0x200 [ 63.814797][ T5472] ? lockdep_hardirqs_on+0x99/0x150 [ 63.819993][ T5472] ? __pfx___inet_stream_connect+0x10/0x10 [ 63.825793][ T5472] ? __local_bh_enable_ip+0x168/0x200 [ 63.831161][ T5472] ? inet_stream_connect+0x50/0xa0 [ 63.836265][ T5472] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 63.841986][ T5472] inet_stream_connect+0x65/0xa0 [ 63.846917][ T5472] ? __pfx_inet_stream_connect+0x10/0x10 [ 63.852545][ T5472] __sys_connect+0x2d1/0x300 [ 63.857130][ T5472] ? __pfx___sys_connect+0x10/0x10 [ 63.862245][ T5472] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.868578][ T5472] ? do_syscall_64+0x100/0x230 [ 63.873350][ T5472] __x64_sys_connect+0x7a/0x90 [ 63.878114][ T5472] do_syscall_64+0xf3/0x230 [ 63.882614][ T5472] ? clear_bhb_loop+0x35/0x90 [ 63.887291][ T5472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.893179][ T5472] RIP: 0033:0x7f89e237e719 [ 63.897585][ T5472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.917195][ T5472] RSP: 002b:00007f89e31f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 63.925605][ T5472] RAX: ffffffffffffffda RBX: 00007f89e2535f80 RCX: 00007f89e237e719 [ 63.933572][ T5472] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 63.941535][ T5472] RBP: 00007f89e31f2090 R08: 0000000000000000 R09: 0000000000000000 [ 63.949504][ T5472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.957482][ T5472] R13: 0000000000000000 R14: 00007f89e2535f80 R15: 00007fffb381b528 [ 63.965459][ T5472] [ 64.580665][ T5509] FAULT_INJECTION: forcing a failure. [ 64.580665][ T5509] name failslab, interval 1, probability 0, space 0, times 0 [ 64.614437][ T5509] CPU: 0 UID: 0 PID: 5509 Comm: syz.1.73 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 64.624990][ T5509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.635084][ T5509] Call Trace: [ 64.638379][ T5509] [ 64.641333][ T5509] dump_stack_lvl+0x241/0x360 [ 64.646041][ T5509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.651266][ T5509] ? __pfx__printk+0x10/0x10 [ 64.655899][ T5509] should_fail_ex+0x3b0/0x4e0 [ 64.660606][ T5509] should_failslab+0xac/0x100 [ 64.665307][ T5509] ? sctp_add_bind_addr+0x89/0x3a0 [ 64.670444][ T5509] __kmalloc_cache_noprof+0x6c/0x2c0 [ 64.675758][ T5509] sctp_add_bind_addr+0x89/0x3a0 [ 64.680724][ T5509] sctp_copy_local_addr_list+0x311/0x500 [ 64.686374][ T5509] ? sctp_copy_local_addr_list+0xab/0x500 [ 64.692092][ T5509] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 64.698242][ T5509] ? sctp_v6_is_any+0x60/0x70 [ 64.702921][ T5509] sctp_bind_addr_copy+0xad/0x3b0 [ 64.707939][ T5509] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 64.714268][ T5509] sctp_connect_new_asoc+0x2f3/0x6c0 [ 64.719555][ T5509] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 64.725359][ T5509] ? sctp_sendmsg+0xbb9/0x3520 [ 64.730127][ T5509] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 64.735931][ T5509] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 64.741821][ T5509] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 64.747365][ T5509] sctp_sendmsg+0x219a/0x3520 [ 64.752055][ T5509] ? __pfx_sctp_sendmsg+0x10/0x10 [ 64.757084][ T5509] ? __pfx_aa_sk_perm+0x10/0x10 [ 64.761931][ T5509] ? inet_sendmsg+0x330/0x390 [ 64.766605][ T5509] __sock_sendmsg+0x1a6/0x270 [ 64.771291][ T5509] __sys_sendto+0x39b/0x4f0 [ 64.775789][ T5509] ? __pfx___sys_sendto+0x10/0x10 [ 64.780804][ T5509] ? __mutex_unlock_slowpath+0x21d/0x750 [ 64.786456][ T5509] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 64.792455][ T5509] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 64.798797][ T5509] __x64_sys_sendto+0xde/0x100 [ 64.803566][ T5509] do_syscall_64+0xf3/0x230 [ 64.808073][ T5509] ? clear_bhb_loop+0x35/0x90 [ 64.812775][ T5509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.818682][ T5509] RIP: 0033:0x7f7ae4b7e719 [ 64.823094][ T5509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.842707][ T5509] RSP: 002b:00007f7ae45ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 64.851126][ T5509] RAX: ffffffffffffffda RBX: 00007f7ae4d35f80 RCX: 00007f7ae4b7e719 [ 64.859101][ T5509] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 64.867073][ T5509] RBP: 00007f7ae45ff090 R08: 00000000200004c0 R09: 000000000000001c [ 64.875044][ T5509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.883012][ T5509] R13: 0000000000000000 R14: 00007f7ae4d35f80 R15: 00007ffeb2191a58 [ 64.890991][ T5509] [ 65.031806][ T5522] FAULT_INJECTION: forcing a failure. [ 65.031806][ T5522] name failslab, interval 1, probability 0, space 0, times 0 [ 65.063996][ T5522] CPU: 0 UID: 0 PID: 5522 Comm: syz.2.78 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 65.074541][ T5522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.084620][ T5522] Call Trace: [ 65.087919][ T5522] [ 65.090868][ T5522] dump_stack_lvl+0x241/0x360 [ 65.095582][ T5522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.100821][ T5522] ? __pfx__printk+0x10/0x10 [ 65.105450][ T5522] should_fail_ex+0x3b0/0x4e0 [ 65.110158][ T5522] ? dst_alloc+0x12b/0x190 [ 65.114593][ T5522] should_failslab+0xac/0x100 [ 65.119307][ T5522] ? dst_alloc+0x12b/0x190 [ 65.123747][ T5522] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 65.128425][ T5529] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 65.129144][ T5522] dst_alloc+0x12b/0x190 [ 65.129174][ T5522] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 65.147136][ T5522] ip_route_output_key_hash+0x193/0x2b0 [ 65.152709][ T5522] ? ip_route_output_key_hash+0xdf/0x2b0 [ 65.158363][ T5522] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 65.164458][ T5522] ? _parse_integer_limit+0x1b5/0x200 [ 65.169861][ T5522] dccp_v4_connect+0x64a/0x1380 [ 65.174735][ T5522] dccp_v6_connect+0x74f/0x1480 [ 65.179603][ T5522] ? __pfx_dccp_v6_connect+0x10/0x10 [ 65.184901][ T5522] ? mark_lock+0x9a/0x360 [ 65.189233][ T5522] __inet_stream_connect+0x262/0xf30 [ 65.194519][ T5522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.200854][ T5522] ? __local_bh_enable_ip+0x168/0x200 [ 65.206244][ T5522] ? lockdep_hardirqs_on+0x99/0x150 [ 65.211468][ T5522] ? __pfx___inet_stream_connect+0x10/0x10 [ 65.217275][ T5522] ? __local_bh_enable_ip+0x168/0x200 [ 65.222651][ T5522] ? inet_stream_connect+0x50/0xa0 [ 65.227760][ T5522] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 65.233486][ T5522] inet_stream_connect+0x65/0xa0 [ 65.238424][ T5522] ? __pfx_inet_stream_connect+0x10/0x10 [ 65.244048][ T5522] __sys_connect+0x2d1/0x300 [ 65.248637][ T5522] ? __pfx___sys_connect+0x10/0x10 [ 65.253748][ T5522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.260077][ T5522] ? do_syscall_64+0x100/0x230 [ 65.264845][ T5522] __x64_sys_connect+0x7a/0x90 [ 65.269604][ T5522] do_syscall_64+0xf3/0x230 [ 65.274104][ T5522] ? clear_bhb_loop+0x35/0x90 [ 65.278798][ T5522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.284739][ T5522] RIP: 0033:0x7f879bb7e719 [ 65.289151][ T5522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.308757][ T5522] RSP: 002b:00007f879ca66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 65.317175][ T5522] RAX: ffffffffffffffda RBX: 00007f879bd35f80 RCX: 00007f879bb7e719 [ 65.325140][ T5522] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 65.333104][ T5522] RBP: 00007f879ca66090 R08: 0000000000000000 R09: 0000000000000000 [ 65.341074][ T5522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.349038][ T5522] R13: 0000000000000000 R14: 00007f879bd35f80 R15: 00007ffcbeb592a8 [ 65.357017][ T5522] [ 65.415159][ T5534] __nla_validate_parse: 3 callbacks suppressed [ 65.415176][ T5534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 65.469113][ T5235] Bluetooth: hci0: command 0x0c20 tx timeout [ 65.475892][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 65.520822][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 65.549137][ T5529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 65.745076][ T5551] FAULT_INJECTION: forcing a failure. [ 65.745076][ T5551] name failslab, interval 1, probability 0, space 0, times 0 [ 65.757960][ T5551] CPU: 0 UID: 0 PID: 5551 Comm: syz.4.89 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 65.768484][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.778558][ T5551] Call Trace: [ 65.781862][ T5551] [ 65.784811][ T5551] dump_stack_lvl+0x241/0x360 [ 65.789514][ T5551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.794736][ T5551] ? __pfx__printk+0x10/0x10 [ 65.799350][ T5551] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 65.805355][ T5551] ? __pfx___might_resched+0x10/0x10 [ 65.810662][ T5551] ? kasan_save_track+0x51/0x80 [ 65.815529][ T5551] ? __kasan_kmalloc+0x98/0xb0 [ 65.820316][ T5551] should_fail_ex+0x3b0/0x4e0 [ 65.825020][ T5551] should_failslab+0xac/0x100 [ 65.829725][ T5551] ? __alloc_skb+0x1c3/0x440 [ 65.834333][ T5551] kmem_cache_alloc_node_noprof+0x71/0x320 [ 65.840166][ T5551] __alloc_skb+0x1c3/0x440 [ 65.844615][ T5551] ? __pfx___alloc_skb+0x10/0x10 [ 65.849586][ T5551] _sctp_make_chunk+0x58/0x460 [ 65.854375][ T5551] sctp_make_datafrag_empty+0xa6/0x510 [ 65.859846][ T5551] ? sctp_transport_reset_t3_rtx+0x40/0xe0 [ 65.865663][ T5551] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 65.871233][ T5551] ? sctp_auth_send_cid+0x69/0x250 [ 65.876372][ T5551] sctp_datamsg_from_user+0x740/0xf20 [ 65.881790][ T5551] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 65.887111][ T5551] ? __asan_memcpy+0x40/0x70 [ 65.891722][ T5551] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 65.897120][ T5551] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 65.902857][ T5551] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 65.908332][ T5551] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 65.914162][ T5551] ? sctp_sendmsg+0xbb9/0x3520 [ 65.918966][ T5551] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 65.924799][ T5551] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 65.930716][ T5551] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 65.936286][ T5551] sctp_sendmsg+0x1bc3/0x3520 [ 65.941002][ T5551] ? aa_sk_perm+0x96d/0xab0 [ 65.945529][ T5551] ? __pfx_sctp_sendmsg+0x10/0x10 [ 65.950584][ T5551] ? __pfx_aa_sk_perm+0x10/0x10 [ 65.955459][ T5551] ? inet_sendmsg+0x330/0x390 [ 65.960158][ T5551] __sock_sendmsg+0x1a6/0x270 [ 65.964865][ T5551] __sys_sendto+0x39b/0x4f0 [ 65.969394][ T5551] ? __pfx___sys_sendto+0x10/0x10 [ 65.974435][ T5551] ? __mutex_unlock_slowpath+0x21d/0x750 [ 65.980109][ T5551] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 65.986118][ T5551] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.992476][ T5551] __x64_sys_sendto+0xde/0x100 [ 65.997272][ T5551] do_syscall_64+0xf3/0x230 [ 66.001798][ T5551] ? clear_bhb_loop+0x35/0x90 [ 66.006496][ T5551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.012408][ T5551] RIP: 0033:0x7fc9ea77e719 [ 66.016837][ T5551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.036460][ T5551] RSP: 002b:00007fc9eb605038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 66.044901][ T5551] RAX: ffffffffffffffda RBX: 00007fc9ea935f80 RCX: 00007fc9ea77e719 [ 66.052889][ T5551] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 [ 66.060865][ T5551] RBP: 00007fc9eb605090 R08: 0000000020000000 R09: 0000000000000010 [ 66.068831][ T5551] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 66.076797][ T5551] R13: 0000000000000000 R14: 00007fc9ea935f80 R15: 00007ffc01c2a1f8 [ 66.084773][ T5551] [ 66.185865][ T5567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.94'. [ 66.213346][ T5567] 0ªX¹¦À: renamed from caif0 [ 66.238112][ T5567] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 66.238422][ T5569] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 66.369529][ T5575] netlink: 168 bytes leftover after parsing attributes in process `syz.2.97'. [ 66.500888][ T5584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.102'. [ 66.510285][ T5581] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 66.577454][ T5587] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 66.972595][ T5606] Zero length message leads to an empty skb [ 67.410492][ T5639] FAULT_INJECTION: forcing a failure. [ 67.410492][ T5639] name failslab, interval 1, probability 0, space 0, times 0 [ 67.427354][ T5640] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.123'. [ 67.437216][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz.4.124 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 67.447832][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.457905][ T5639] Call Trace: [ 67.461211][ T5639] [ 67.464147][ T5639] dump_stack_lvl+0x241/0x360 [ 67.468831][ T5639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.474041][ T5639] ? __pfx__printk+0x10/0x10 [ 67.478650][ T5639] should_fail_ex+0x3b0/0x4e0 [ 67.483360][ T5639] should_failslab+0xac/0x100 [ 67.488061][ T5639] ? sctp_add_bind_addr+0x89/0x3a0 [ 67.493195][ T5639] __kmalloc_cache_noprof+0x6c/0x2c0 [ 67.498515][ T5639] sctp_add_bind_addr+0x89/0x3a0 [ 67.503469][ T5639] sctp_copy_local_addr_list+0x311/0x500 [ 67.509111][ T5639] ? sctp_copy_local_addr_list+0xab/0x500 [ 67.514839][ T5639] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 67.520994][ T5639] ? sctp_v6_is_any+0x60/0x70 [ 67.525679][ T5639] sctp_bind_addr_copy+0xad/0x3b0 [ 67.530703][ T5639] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 67.537032][ T5639] sctp_connect_new_asoc+0x2f3/0x6c0 [ 67.542324][ T5639] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 67.548131][ T5639] ? sctp_sendmsg+0xbb9/0x3520 [ 67.552912][ T5639] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 67.558733][ T5639] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 67.564626][ T5639] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 67.570182][ T5639] sctp_sendmsg+0x219a/0x3520 [ 67.574887][ T5639] ? __pfx_sctp_sendmsg+0x10/0x10 [ 67.579928][ T5639] ? __pfx_aa_sk_perm+0x10/0x10 [ 67.584781][ T5639] ? inet_sendmsg+0x330/0x390 [ 67.589459][ T5639] __sock_sendmsg+0x1a6/0x270 [ 67.594147][ T5639] __sys_sendto+0x39b/0x4f0 [ 67.598649][ T5639] ? __pfx___sys_sendto+0x10/0x10 [ 67.603680][ T5639] ? __mutex_unlock_slowpath+0x21d/0x750 [ 67.609330][ T5639] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 67.615314][ T5639] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.621646][ T5639] __x64_sys_sendto+0xde/0x100 [ 67.626411][ T5639] do_syscall_64+0xf3/0x230 [ 67.630911][ T5639] ? clear_bhb_loop+0x35/0x90 [ 67.635590][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.641475][ T5639] RIP: 0033:0x7fc9ea77e719 [ 67.645887][ T5639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.665494][ T5639] RSP: 002b:00007fc9eb605038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 67.673909][ T5639] RAX: ffffffffffffffda RBX: 00007fc9ea935f80 RCX: 00007fc9ea77e719 [ 67.681873][ T5639] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 67.689835][ T5639] RBP: 00007fc9eb605090 R08: 00000000200004c0 R09: 000000000000001c [ 67.697797][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.705757][ T5639] R13: 0000000000000000 R14: 00007fc9ea935f80 R15: 00007ffc01c2a1f8 [ 67.713736][ T5639] [ 67.726428][ T5235] Bluetooth: hci0: command 0x0c20 tx timeout [ 67.747016][ T5643] unsupported nla_type 40 [ 67.753778][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 67.965186][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 67.974716][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 67.984202][ T5658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 67.998770][ T5657] vlan2: entered promiscuous mode [ 68.133820][ T5668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 68.422858][ T5243] Bluetooth: hci4: command tx timeout [ 68.455556][ T5682] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 68.697153][ T5651] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 68.742704][ T5692] team_slave_0: entered promiscuous mode [ 68.748629][ T5692] team_slave_1: entered promiscuous mode [ 68.773076][ T5692] macsec1: entered promiscuous mode [ 68.779134][ T5692] team0: entered promiscuous mode [ 68.851430][ T5692] macsec1: entered allmulticast mode [ 68.868552][ T5692] team0: entered allmulticast mode [ 68.898182][ T5692] team_slave_0: entered allmulticast mode [ 68.915547][ T5692] team_slave_1: entered allmulticast mode [ 68.928924][ T5692] team0: left allmulticast mode [ 68.942860][ T5692] team_slave_0: left allmulticast mode [ 68.949330][ T5692] team_slave_1: left allmulticast mode [ 68.959398][ T5692] team0: left promiscuous mode [ 68.968062][ T5692] team_slave_0: left promiscuous mode [ 68.973614][ T5692] team_slave_1: left promiscuous mode [ 69.132700][ T5704] FAULT_INJECTION: forcing a failure. [ 69.132700][ T5704] name failslab, interval 1, probability 0, space 0, times 0 [ 69.156132][ T5704] CPU: 0 UID: 0 PID: 5704 Comm: syz.3.146 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 69.166754][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.176829][ T5704] Call Trace: [ 69.180120][ T5704] [ 69.183070][ T5704] dump_stack_lvl+0x241/0x360 [ 69.187780][ T5704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.193008][ T5704] ? __pfx__printk+0x10/0x10 [ 69.197627][ T5704] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 69.203630][ T5704] ? __pfx___might_resched+0x10/0x10 [ 69.208943][ T5704] ? kasan_save_track+0x51/0x80 [ 69.213819][ T5704] ? __kasan_kmalloc+0x98/0xb0 [ 69.218602][ T5704] should_fail_ex+0x3b0/0x4e0 [ 69.223309][ T5704] should_failslab+0xac/0x100 [ 69.228008][ T5704] ? __alloc_skb+0x1c3/0x440 [ 69.232624][ T5704] kmem_cache_alloc_node_noprof+0x71/0x320 [ 69.238457][ T5704] __alloc_skb+0x1c3/0x440 [ 69.242881][ T5704] ? __pfx___alloc_skb+0x10/0x10 [ 69.247824][ T5704] _sctp_make_chunk+0x58/0x460 [ 69.252588][ T5704] sctp_make_datafrag_empty+0xa6/0x510 [ 69.258038][ T5704] ? sctp_transport_reset_t3_rtx+0x40/0xe0 [ 69.263839][ T5704] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 69.269379][ T5704] ? sctp_auth_send_cid+0x69/0x250 [ 69.274489][ T5704] sctp_datamsg_from_user+0x740/0xf20 [ 69.279866][ T5704] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 69.285152][ T5704] ? __asan_memcpy+0x40/0x70 [ 69.289737][ T5704] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 69.295113][ T5704] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 69.300827][ T5704] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 69.306282][ T5704] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 69.312085][ T5704] ? sctp_sendmsg+0xbb9/0x3520 [ 69.316850][ T5704] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 69.322651][ T5704] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 69.328543][ T5704] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 69.334085][ T5704] sctp_sendmsg+0x1bc3/0x3520 [ 69.338768][ T5704] ? aa_sk_perm+0x96d/0xab0 [ 69.343268][ T5704] ? __pfx_sctp_sendmsg+0x10/0x10 [ 69.348295][ T5704] ? __pfx_aa_sk_perm+0x10/0x10 [ 69.353142][ T5704] ? inet_sendmsg+0x330/0x390 [ 69.357835][ T5704] __sock_sendmsg+0x1a6/0x270 [ 69.362525][ T5704] __sys_sendto+0x39b/0x4f0 [ 69.367030][ T5704] ? __pfx___sys_sendto+0x10/0x10 [ 69.372049][ T5704] ? __mutex_unlock_slowpath+0x21d/0x750 [ 69.377702][ T5704] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.383692][ T5704] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.390028][ T5704] __x64_sys_sendto+0xde/0x100 [ 69.394800][ T5704] do_syscall_64+0xf3/0x230 [ 69.399302][ T5704] ? clear_bhb_loop+0x35/0x90 [ 69.403978][ T5704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.409869][ T5704] RIP: 0033:0x7fc213d7e719 [ 69.414282][ T5704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.433882][ T5704] RSP: 002b:00007fc214bb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.442289][ T5704] RAX: ffffffffffffffda RBX: 00007fc213f35f80 RCX: 00007fc213d7e719 [ 69.450254][ T5704] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 [ 69.458217][ T5704] RBP: 00007fc214bb9090 R08: 0000000020000000 R09: 0000000000000010 [ 69.466184][ T5704] R10: e61e2840a154b0c0 R11: 0000000000000246 R12: 0000000000000002 [ 69.474149][ T5704] R13: 0000000000000000 R14: 00007fc213f35f80 R15: 00007fff0073b008 [ 69.482123][ T5704] [ 69.517191][ T5705] lo speed is unknown, defaulting to 1000 [ 69.523264][ T5705] lo speed is unknown, defaulting to 1000 [ 69.531074][ T5705] lo speed is unknown, defaulting to 1000 [ 69.584564][ T5707] 1ªX¹¦À: renamed from 60ªX¹¦À [ 69.602070][ T5705] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.644220][ T5707] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 69.718983][ T5719] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 69.729849][ T5705] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.732697][ T5719] netlink: 'syz.0.153': attribute type 3 has an invalid length. [ 69.857833][ T5705] lo speed is unknown, defaulting to 1000 [ 69.882019][ T5705] lo speed is unknown, defaulting to 1000 [ 69.906705][ T5705] lo speed is unknown, defaulting to 1000 [ 69.920658][ T5705] lo speed is unknown, defaulting to 1000 [ 69.928764][ T5729] FAULT_INJECTION: forcing a failure. [ 69.928764][ T5729] name failslab, interval 1, probability 0, space 0, times 0 [ 69.940164][ T5705] lo speed is unknown, defaulting to 1000 [ 69.941568][ T5729] CPU: 0 UID: 0 PID: 5729 Comm: syz.0.157 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 69.954590][ T5725] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 69.957788][ T5729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.957803][ T5729] Call Trace: [ 69.957812][ T5729] [ 69.957821][ T5729] dump_stack_lvl+0x241/0x360 [ 69.984853][ T5729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.990075][ T5729] ? __pfx__printk+0x10/0x10 [ 69.994696][ T5729] ? __pfx_lock_acquire+0x10/0x10 [ 69.999763][ T5729] should_fail_ex+0x3b0/0x4e0 [ 70.004472][ T5729] ? __inet_hash_connect+0xa2e/0x2170 [ 70.009860][ T5729] should_failslab+0xac/0x100 [ 70.014536][ T5729] ? __inet_hash_connect+0xa2e/0x2170 [ 70.019907][ T5729] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 70.025277][ T5729] __inet_hash_connect+0xa2e/0x2170 [ 70.030473][ T5729] ? __pfx___inet_check_established+0x10/0x10 [ 70.036547][ T5729] ? __pfx___inet_hash_connect+0x10/0x10 [ 70.042175][ T5729] ? rcu_is_watching+0x15/0xb0 [ 70.046940][ T5729] ? inet_hash_connect+0xac/0x140 [ 70.051961][ T5729] dccp_v4_connect+0xa21/0x1380 [ 70.056814][ T5729] dccp_v6_connect+0x74f/0x1480 [ 70.061664][ T5729] ? __pfx_dccp_v6_connect+0x10/0x10 [ 70.066956][ T5729] ? mark_lock+0x9a/0x360 [ 70.071282][ T5729] __inet_stream_connect+0x262/0xf30 [ 70.076560][ T5729] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.082892][ T5729] ? __local_bh_enable_ip+0x168/0x200 [ 70.088260][ T5729] ? lockdep_hardirqs_on+0x99/0x150 [ 70.093451][ T5729] ? __pfx___inet_stream_connect+0x10/0x10 [ 70.099248][ T5729] ? __local_bh_enable_ip+0x168/0x200 [ 70.104618][ T5729] ? inet_stream_connect+0x50/0xa0 [ 70.109730][ T5729] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 70.115455][ T5729] inet_stream_connect+0x65/0xa0 [ 70.120388][ T5729] ? __pfx_inet_stream_connect+0x10/0x10 [ 70.126010][ T5729] __sys_connect+0x2d1/0x300 [ 70.130595][ T5729] ? __pfx___sys_connect+0x10/0x10 [ 70.135707][ T5729] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.142038][ T5729] ? do_syscall_64+0x100/0x230 [ 70.146799][ T5729] __x64_sys_connect+0x7a/0x90 [ 70.151554][ T5729] do_syscall_64+0xf3/0x230 [ 70.156053][ T5729] ? clear_bhb_loop+0x35/0x90 [ 70.160729][ T5729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.166616][ T5729] RIP: 0033:0x7f89e237e719 [ 70.171026][ T5729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.190625][ T5729] RSP: 002b:00007f89e31f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 70.199034][ T5729] RAX: ffffffffffffffda RBX: 00007f89e2535f80 RCX: 00007f89e237e719 [ 70.206996][ T5729] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 70.214960][ T5729] RBP: 00007f89e31f2090 R08: 0000000000000000 R09: 0000000000000000 [ 70.222922][ T5729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.230883][ T5729] R13: 0000000000000000 R14: 00007f89e2535f80 R15: 00007fffb381b528 [ 70.238859][ T5729] [ 70.503855][ T5738] openvswitch: netlink: Message has -1 unknown bytes. [ 70.522182][ T5738] __nla_validate_parse: 5 callbacks suppressed [ 70.522199][ T5738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 71.322204][ T5770] FAULT_INJECTION: forcing a failure. [ 71.322204][ T5770] name failslab, interval 1, probability 0, space 0, times 0 [ 71.334937][ T5770] CPU: 1 UID: 0 PID: 5770 Comm: syz.2.172 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 71.345557][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.355638][ T5770] Call Trace: [ 71.358940][ T5770] [ 71.361888][ T5770] dump_stack_lvl+0x241/0x360 [ 71.366600][ T5770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.371821][ T5770] ? __pfx__printk+0x10/0x10 [ 71.376436][ T5770] ? __pfx_lock_acquire+0x10/0x10 [ 71.381498][ T5770] should_fail_ex+0x3b0/0x4e0 [ 71.386207][ T5770] ? __inet_hash_connect+0xa2e/0x2170 [ 71.391604][ T5770] should_failslab+0xac/0x100 [ 71.396307][ T5770] ? __inet_hash_connect+0xa2e/0x2170 [ 71.401706][ T5770] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 71.407104][ T5770] __inet_hash_connect+0xa2e/0x2170 [ 71.412325][ T5770] ? __pfx___inet_check_established+0x10/0x10 [ 71.418439][ T5770] ? __pfx___inet_hash_connect+0x10/0x10 [ 71.424095][ T5770] ? rcu_is_watching+0x15/0xb0 [ 71.428874][ T5770] ? inet_hash_connect+0xac/0x140 [ 71.433900][ T5770] dccp_v4_connect+0xa21/0x1380 [ 71.438759][ T5770] dccp_v6_connect+0x74f/0x1480 [ 71.443615][ T5770] ? __pfx_dccp_v6_connect+0x10/0x10 [ 71.448914][ T5770] ? mark_lock+0x9a/0x360 [ 71.453242][ T5770] __inet_stream_connect+0x262/0xf30 [ 71.458522][ T5770] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.464858][ T5770] ? __local_bh_enable_ip+0x168/0x200 [ 71.470229][ T5770] ? lockdep_hardirqs_on+0x99/0x150 [ 71.475431][ T5770] ? __pfx___inet_stream_connect+0x10/0x10 [ 71.481230][ T5770] ? __local_bh_enable_ip+0x168/0x200 [ 71.486605][ T5770] ? inet_stream_connect+0x50/0xa0 [ 71.491709][ T5770] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 71.497432][ T5770] inet_stream_connect+0x65/0xa0 [ 71.502365][ T5770] ? __pfx_inet_stream_connect+0x10/0x10 [ 71.507994][ T5770] __sys_connect+0x2d1/0x300 [ 71.512578][ T5770] ? __pfx___sys_connect+0x10/0x10 [ 71.517689][ T5770] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.524014][ T5770] ? do_syscall_64+0x100/0x230 [ 71.528774][ T5770] __x64_sys_connect+0x7a/0x90 [ 71.533547][ T5770] do_syscall_64+0xf3/0x230 [ 71.538064][ T5770] ? clear_bhb_loop+0x35/0x90 [ 71.542749][ T5770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.548665][ T5770] RIP: 0033:0x7f879bb7e719 [ 71.553101][ T5770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.572720][ T5770] RSP: 002b:00007f879ca66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 71.581136][ T5770] RAX: ffffffffffffffda RBX: 00007f879bd35f80 RCX: 00007f879bb7e719 [ 71.589105][ T5770] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003 [ 71.597069][ T5770] RBP: 00007f879ca66090 R08: 0000000000000000 R09: 0000000000000000 [ 71.605032][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.612994][ T5770] R13: 0000000000000000 R14: 00007f879bd35f80 R15: 00007ffcbeb592a8 [ 71.620970][ T5770] [ 71.733632][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.740193][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.892245][ T5783] FAULT_INJECTION: forcing a failure. [ 71.892245][ T5783] name failslab, interval 1, probability 0, space 0, times 0 [ 71.938530][ T5783] CPU: 1 UID: 0 PID: 5783 Comm: syz.2.176 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 71.949175][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.959253][ T5783] Call Trace: [ 71.962553][ T5783] [ 71.965498][ T5783] dump_stack_lvl+0x241/0x360 [ 71.970204][ T5783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.975428][ T5783] ? __pfx__printk+0x10/0x10 [ 71.980051][ T5783] should_fail_ex+0x3b0/0x4e0 [ 71.984755][ T5783] should_failslab+0xac/0x100 [ 71.989455][ T5783] ? sctp_add_bind_addr+0x89/0x3a0 [ 71.994585][ T5783] __kmalloc_cache_noprof+0x6c/0x2c0 [ 71.999897][ T5783] sctp_add_bind_addr+0x89/0x3a0 [ 72.004866][ T5783] sctp_copy_local_addr_list+0x311/0x500 [ 72.010516][ T5783] ? sctp_copy_local_addr_list+0xab/0x500 [ 72.016255][ T5783] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 72.022406][ T5783] ? sctp_v6_is_any+0x60/0x70 [ 72.027084][ T5783] sctp_bind_addr_copy+0xad/0x3b0 [ 72.032102][ T5783] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 72.038451][ T5783] sctp_connect_new_asoc+0x2f3/0x6c0 [ 72.043743][ T5783] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 72.049547][ T5783] ? sctp_sendmsg+0xbb9/0x3520 [ 72.054317][ T5783] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 72.060123][ T5783] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 72.066014][ T5783] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 72.071556][ T5783] sctp_sendmsg+0x219a/0x3520 [ 72.076248][ T5783] ? __pfx_sctp_sendmsg+0x10/0x10 [ 72.081275][ T5783] ? __pfx_aa_sk_perm+0x10/0x10 [ 72.086120][ T5783] ? inet_sendmsg+0x330/0x390 [ 72.090790][ T5783] __sock_sendmsg+0x1a6/0x270 [ 72.095466][ T5783] __sys_sendto+0x39b/0x4f0 [ 72.099968][ T5783] ? __pfx___sys_sendto+0x10/0x10 [ 72.104989][ T5783] ? __mutex_unlock_slowpath+0x21d/0x750 [ 72.110641][ T5783] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 72.116619][ T5783] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.122947][ T5783] __x64_sys_sendto+0xde/0x100 [ 72.127704][ T5783] do_syscall_64+0xf3/0x230 [ 72.132201][ T5783] ? clear_bhb_loop+0x35/0x90 [ 72.136875][ T5783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.142764][ T5783] RIP: 0033:0x7f879bb7e719 [ 72.147181][ T5783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.166781][ T5783] RSP: 002b:00007f879ca66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 72.175192][ T5783] RAX: ffffffffffffffda RBX: 00007f879bd35f80 RCX: 00007f879bb7e719 [ 72.183155][ T5783] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 72.191117][ T5783] RBP: 00007f879ca66090 R08: 00000000200004c0 R09: 000000000000001c [ 72.199086][ T5783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 72.207055][ T5783] R13: 0000000000000000 R14: 00007f879bd35f80 R15: 00007ffcbeb592a8 [ 72.215032][ T5783] [ 72.254063][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 72.427795][ T5795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 72.579002][ T5801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 72.653902][ T5803] netlink: 192 bytes leftover after parsing attributes in process `syz.2.186'. [ 72.732923][ T5805] FAULT_INJECTION: forcing a failure. [ 72.732923][ T5805] name failslab, interval 1, probability 0, space 0, times 0 [ 72.782574][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: syz.0.187 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 72.793214][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.803268][ T5805] Call Trace: [ 72.806625][ T5805] [ 72.809557][ T5805] dump_stack_lvl+0x241/0x360 [ 72.814242][ T5805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.819445][ T5805] ? __pfx__printk+0x10/0x10 [ 72.824052][ T5805] should_fail_ex+0x3b0/0x4e0 [ 72.828751][ T5805] ? dst_alloc+0x12b/0x190 [ 72.833176][ T5805] should_failslab+0xac/0x100 [ 72.837864][ T5805] ? dst_alloc+0x12b/0x190 [ 72.842276][ T5805] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 72.847694][ T5805] dst_alloc+0x12b/0x190 [ 72.851965][ T5805] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 72.858040][ T5805] ip_route_output_key_hash+0x193/0x2b0 [ 72.863585][ T5805] ? ip_route_output_key_hash+0xdf/0x2b0 [ 72.869217][ T5805] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 72.875286][ T5805] ? __pfx_call_rcu+0x10/0x10 [ 72.879959][ T5805] ? _parse_integer_limit+0x1b5/0x200 [ 72.885329][ T5805] ip_route_output_flow+0x29/0x140 [ 72.890447][ T5805] dccp_v4_connect+0x6a8/0x1380 [ 72.895305][ T5805] dccp_v6_connect+0x74f/0x1480 [ 72.900152][ T5805] ? __pfx_dccp_v6_connect+0x10/0x10 [ 72.905444][ T5805] ? mark_lock+0x9a/0x360 [ 72.909770][ T5805] __inet_stream_connect+0x262/0xf30 [ 72.915051][ T5805] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.921382][ T5805] ? __local_bh_enable_ip+0x168/0x200 [ 72.926749][ T5805] ? lockdep_hardirqs_on+0x99/0x150 [ 72.931945][ T5805] ? __pfx___inet_stream_connect+0x10/0x10 [ 72.937745][ T5805] ? __local_bh_enable_ip+0x168/0x200 [ 72.943117][ T5805] ? inet_stream_connect+0x50/0xa0 [ 72.948220][ T5805] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 72.953940][ T5805] inet_stream_connect+0x65/0xa0 [ 72.958870][ T5805] ? __pfx_inet_stream_connect+0x10/0x10 [ 72.964498][ T5805] __sys_connect+0x2d1/0x300 [ 72.969085][ T5805] ? __pfx___sys_connect+0x10/0x10 [ 72.974207][ T5805] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.980545][ T5805] ? do_syscall_64+0x100/0x230 [ 72.985310][ T5805] __x64_sys_connect+0x7a/0x90 [ 72.990073][ T5805] do_syscall_64+0xf3/0x230 [ 72.994575][ T5805] ? clear_bhb_loop+0x35/0x90 [ 72.999249][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.005134][ T5805] RIP: 0033:0x7f89e237e719 [ 73.009540][ T5805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.029136][ T5805] RSP: 002b:00007f89e31f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 73.037547][ T5805] RAX: ffffffffffffffda RBX: 00007f89e2535f80 RCX: 00007f89e237e719 [ 73.045510][ T5805] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 73.053473][ T5805] RBP: 00007f89e31f2090 R08: 0000000000000000 R09: 0000000000000000 [ 73.061437][ T5805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.069402][ T5805] R13: 0000000000000000 R14: 00007f89e2535f80 R15: 00007fffb381b528 [ 73.077380][ T5805] [ 73.157571][ T5809] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 73.289478][ T5809] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.320589][ T5275] IPVS: starting estimator thread 0... [ 73.422963][ T5817] IPVS: using max 21 ests per chain, 50400 per kthread [ 73.541374][ T5828] netlink: 244 bytes leftover after parsing attributes in process `syz.1.195'. [ 73.941023][ T5856] netlink: 168 bytes leftover after parsing attributes in process `syz.2.205'. [ 73.975756][ T5858] netlink: 3 bytes leftover after parsing attributes in process `syz.0.206'. [ 73.993037][ T5858] 0ªX¹¦À: renamed from caif0 [ 74.021590][ T5858] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 74.120935][ T5860] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 74.153475][ T5871] FAULT_INJECTION: forcing a failure. [ 74.153475][ T5871] name failslab, interval 1, probability 0, space 0, times 0 [ 74.166404][ T5871] CPU: 1 UID: 0 PID: 5871 Comm: syz.2.209 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 74.177020][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.187092][ T5871] Call Trace: [ 74.190386][ T5871] [ 74.193344][ T5871] dump_stack_lvl+0x241/0x360 [ 74.198050][ T5871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.203268][ T5871] ? __pfx__printk+0x10/0x10 [ 74.207882][ T5871] ? __pfx_lock_acquire+0x10/0x10 [ 74.212934][ T5871] ? percpu_ref_get_many+0x19/0x140 [ 74.218163][ T5871] should_fail_ex+0x3b0/0x4e0 [ 74.222877][ T5871] ? __inet_hash_connect+0x11cc/0x2170 [ 74.228360][ T5871] should_failslab+0xac/0x100 [ 74.233101][ T5871] ? __inet_hash_connect+0x11cc/0x2170 [ 74.238586][ T5871] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 74.243988][ T5871] __inet_hash_connect+0x11cc/0x2170 [ 74.249326][ T5871] ? __pfx___inet_hash_connect+0x10/0x10 [ 74.254985][ T5871] ? rcu_is_watching+0x15/0xb0 [ 74.259773][ T5871] ? inet_hash_connect+0xac/0x140 [ 74.264831][ T5871] dccp_v4_connect+0xa21/0x1380 [ 74.269718][ T5871] dccp_v6_connect+0x74f/0x1480 [ 74.274599][ T5871] ? __pfx_dccp_v6_connect+0x10/0x10 [ 74.279919][ T5871] ? mark_lock+0x9a/0x360 [ 74.284296][ T5871] __inet_stream_connect+0x262/0xf30 [ 74.289605][ T5871] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.295962][ T5871] ? __local_bh_enable_ip+0x168/0x200 [ 74.301368][ T5871] ? lockdep_hardirqs_on+0x99/0x150 [ 74.306593][ T5871] ? __pfx___inet_stream_connect+0x10/0x10 [ 74.312435][ T5871] ? __local_bh_enable_ip+0x168/0x200 [ 74.317832][ T5871] ? inet_stream_connect+0x50/0xa0 [ 74.322968][ T5871] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 74.328724][ T5871] inet_stream_connect+0x65/0xa0 [ 74.333687][ T5871] ? __pfx_inet_stream_connect+0x10/0x10 [ 74.339343][ T5871] __sys_connect+0x2d1/0x300 [ 74.343965][ T5871] ? __pfx___sys_connect+0x10/0x10 [ 74.349111][ T5871] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.355500][ T5871] ? do_syscall_64+0x100/0x230 [ 74.360296][ T5871] __x64_sys_connect+0x7a/0x90 [ 74.365090][ T5871] do_syscall_64+0xf3/0x230 [ 74.369620][ T5871] ? clear_bhb_loop+0x35/0x90 [ 74.374324][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.380238][ T5871] RIP: 0033:0x7f879bb7e719 [ 74.384672][ T5871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.404296][ T5871] RSP: 002b:00007f879ca66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 74.412732][ T5871] RAX: ffffffffffffffda RBX: 00007f879bd35f80 RCX: 00007f879bb7e719 [ 74.420718][ T5871] RDX: 000000000000001c RSI: 0000000020000140 RDI: 0000000000000003 [ 74.428704][ T5871] RBP: 00007f879ca66090 R08: 0000000000000000 R09: 0000000000000000 [ 74.436689][ T5871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.444682][ T5871] R13: 0000000000000000 R14: 00007f879bd35f80 R15: 00007ffcbeb592a8 [ 74.452688][ T5871] [ 74.624403][ T5275] IPVS: starting estimator thread 0... [ 74.763981][ T5885] IPVS: using max 17 ests per chain, 40800 per kthread [ 75.836549][ T5923] FAULT_INJECTION: forcing a failure. [ 75.836549][ T5923] name failslab, interval 1, probability 0, space 0, times 0 [ 75.849323][ T5923] CPU: 1 UID: 0 PID: 5923 Comm: syz.0.226 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 75.859932][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 75.870006][ T5923] Call Trace: [ 75.873302][ T5923] [ 75.876247][ T5923] dump_stack_lvl+0x241/0x360 [ 75.880951][ T5923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.886172][ T5923] ? __pfx__printk+0x10/0x10 [ 75.890782][ T5923] ? __pfx_lock_acquire+0x10/0x10 [ 75.895825][ T5923] ? percpu_ref_get_many+0x19/0x140 [ 75.901079][ T5923] should_fail_ex+0x3b0/0x4e0 [ 75.905783][ T5923] ? __inet_hash_connect+0x11cc/0x2170 [ 75.911266][ T5923] should_failslab+0xac/0x100 [ 75.915964][ T5923] ? __inet_hash_connect+0x11cc/0x2170 [ 75.921442][ T5923] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 75.926841][ T5923] __inet_hash_connect+0x11cc/0x2170 [ 75.932209][ T5923] ? __pfx___inet_hash_connect+0x10/0x10 [ 75.937868][ T5923] ? rcu_is_watching+0x15/0xb0 [ 75.942655][ T5923] ? inet_hash_connect+0xac/0x140 [ 75.947712][ T5923] dccp_v4_connect+0xa21/0x1380 [ 75.952596][ T5923] dccp_v6_connect+0x74f/0x1480 [ 75.957477][ T5923] ? __pfx_dccp_v6_connect+0x10/0x10 [ 75.962799][ T5923] ? mark_lock+0x9a/0x360 [ 75.967160][ T5923] __inet_stream_connect+0x262/0xf30 [ 75.972468][ T5923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.978826][ T5923] ? __local_bh_enable_ip+0x168/0x200 [ 75.984218][ T5923] ? lockdep_hardirqs_on+0x99/0x150 [ 75.989437][ T5923] ? __pfx___inet_stream_connect+0x10/0x10 [ 75.995260][ T5923] ? __local_bh_enable_ip+0x168/0x200 [ 76.000709][ T5923] ? inet_stream_connect+0x50/0xa0 [ 76.005837][ T5923] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 76.011591][ T5923] inet_stream_connect+0x65/0xa0 [ 76.016547][ T5923] ? __pfx_inet_stream_connect+0x10/0x10 [ 76.022201][ T5923] __sys_connect+0x2d1/0x300 [ 76.026814][ T5923] ? __pfx___sys_connect+0x10/0x10 [ 76.031965][ T5923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.038321][ T5923] ? do_syscall_64+0x100/0x230 [ 76.043111][ T5923] __x64_sys_connect+0x7a/0x90 [ 76.047895][ T5923] do_syscall_64+0xf3/0x230 [ 76.052416][ T5923] ? clear_bhb_loop+0x35/0x90 [ 76.057115][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.063027][ T5923] RIP: 0033:0x7f89e237e719 [ 76.067468][ T5923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.087097][ T5923] RSP: 002b:00007f89e31f2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 76.095536][ T5923] RAX: ffffffffffffffda RBX: 00007f89e2535f80 RCX: 00007f89e237e719 [ 76.103525][ T5923] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003 [ 76.111514][ T5923] RBP: 00007f89e31f2090 R08: 0000000000000000 R09: 0000000000000000 [ 76.119502][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.127487][ T5923] R13: 0000000000000000 R14: 00007f89e2535f80 R15: 00007fffb381b528 [ 76.135499][ T5923] [ 76.279170][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 76.679900][ T51] cfg80211: failed to load regulatory.db [ 77.233091][ T5938] netlink: 48 bytes leftover after parsing attributes in process `syz.0.233'. [ 84.302768][ C0] sched: DL replenish lagged too much [ 91.891679][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.901251][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.912846][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.923434][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.936783][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.944290][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.177478][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.196426][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.204562][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.212416][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.223754][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.231693][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.273064][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.281810][ T5243] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.295700][ T5243] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.307228][ T5243] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.317083][ T5243] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.332537][ T5243] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.784399][ T5243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.793948][ T5243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.801595][ T5243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.809928][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.819568][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.827020][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.912235][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 93.927175][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 93.935909][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 93.945539][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 93.953924][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 93.961257][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 94.023168][ T5235] Bluetooth: hci5: command tx timeout [ 94.263119][ T5235] Bluetooth: hci2: command tx timeout [ 94.423017][ T5235] Bluetooth: hci6: command tx timeout [ 95.863128][ T5235] Bluetooth: hci7: command tx timeout [ 96.023445][ T5235] Bluetooth: hci8: command tx timeout [ 96.102946][ T5235] Bluetooth: hci5: command tx timeout [ 96.343062][ T5235] Bluetooth: hci2: command tx timeout [ 96.503581][ T5235] Bluetooth: hci6: command tx timeout [ 97.942943][ T5235] Bluetooth: hci7: command tx timeout [ 98.103137][ T5235] Bluetooth: hci8: command tx timeout [ 98.182978][ T5235] Bluetooth: hci5: command tx timeout [ 98.423057][ T5235] Bluetooth: hci2: command tx timeout [ 98.583045][ T5235] Bluetooth: hci6: command tx timeout [ 100.022949][ T5235] Bluetooth: hci7: command tx timeout [ 100.183147][ T5235] Bluetooth: hci8: command tx timeout [ 100.262972][ T5235] Bluetooth: hci5: command tx timeout [ 100.503088][ T5235] Bluetooth: hci2: command tx timeout [ 100.668500][ T5235] Bluetooth: hci6: command tx timeout [ 102.103004][ T5235] Bluetooth: hci7: command tx timeout [ 102.263056][ T5235] Bluetooth: hci8: command tx timeout [ 132.987301][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.999297][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.201586][ T5912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.753480][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.762379][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.770173][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.784029][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.793259][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.800590][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.953364][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.961848][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.041808][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.050434][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.058346][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.065732][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.194823][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.204425][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.212186][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.220167][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.233484][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.240784][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.728131][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.738375][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.747826][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.756006][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.764076][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.771351][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.836359][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.846280][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.854318][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.862242][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.870329][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.877654][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.823030][ T5243] Bluetooth: hci0: command tx timeout [ 157.143021][ T5243] Bluetooth: hci1: command tx timeout [ 157.305941][ T5243] Bluetooth: hci3: command tx timeout [ 157.862958][ T5243] Bluetooth: hci4: command tx timeout [ 157.943029][ T5243] Bluetooth: hci5: command tx timeout [ 158.904027][ T5243] Bluetooth: hci0: command tx timeout [ 159.222963][ T5243] Bluetooth: hci1: command tx timeout [ 159.382950][ T5243] Bluetooth: hci3: command tx timeout [ 159.944342][ T5243] Bluetooth: hci4: command tx timeout [ 160.025812][ T5243] Bluetooth: hci5: command tx timeout [ 160.983001][ T5243] Bluetooth: hci0: command tx timeout [ 161.303022][ T5243] Bluetooth: hci1: command tx timeout [ 161.462950][ T5243] Bluetooth: hci3: command tx timeout [ 162.022999][ T5243] Bluetooth: hci4: command tx timeout [ 162.102899][ T5243] Bluetooth: hci5: command tx timeout [ 163.062912][ T5243] Bluetooth: hci0: command tx timeout [ 163.382966][ T5243] Bluetooth: hci1: command tx timeout [ 163.542847][ T5243] Bluetooth: hci3: command tx timeout [ 164.102911][ T5243] Bluetooth: hci4: command tx timeout [ 164.182959][ T5243] Bluetooth: hci5: command tx timeout [ 194.438495][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.444928][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.011845][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 217.017979][ T5230] Bluetooth: hci7: command 0x0406 tx timeout [ 217.081679][ T54] Bluetooth: hci8: command 0x0406 tx timeout [ 217.087829][ T5230] Bluetooth: hci6: command 0x0406 tx timeout [ 218.178668][ T5235] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 218.208841][ T5235] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 218.218017][ T5235] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 218.229642][ T5235] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 218.237792][ T5235] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 218.245387][ T5235] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 218.306916][ T5236] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 218.324433][ T5236] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 218.332176][ T5236] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 218.340593][ T5236] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 218.349157][ T5236] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 218.362969][ T5236] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 218.465014][ T5235] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 218.485875][ T5235] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 218.493708][ T5235] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 218.501657][ T5235] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 218.509825][ T5235] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 218.517633][ T5235] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 218.654735][ T5236] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 218.663448][ T5236] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 218.671096][ T5236] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 218.679971][ T5236] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 218.687752][ T5236] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 218.695900][ T5236] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 219.056262][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 219.070624][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 219.080691][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 219.094848][ T5236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 219.108658][ T5236] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 219.116086][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 220.343043][ T5236] Bluetooth: hci9: command tx timeout [ 220.422891][ T5236] Bluetooth: hci10: command tx timeout [ 220.582915][ T5236] Bluetooth: hci11: command tx timeout [ 220.744247][ T5236] Bluetooth: hci12: command tx timeout [ 221.142891][ T5236] Bluetooth: hci13: command tx timeout [ 222.422888][ T5236] Bluetooth: hci9: command tx timeout [ 222.502879][ T5236] Bluetooth: hci10: command tx timeout [ 222.662840][ T5236] Bluetooth: hci11: command tx timeout [ 222.825132][ T5236] Bluetooth: hci12: command tx timeout [ 223.223034][ T5236] Bluetooth: hci13: command tx timeout [ 224.502956][ T5235] Bluetooth: hci9: command tx timeout [ 224.582922][ T5236] Bluetooth: hci10: command tx timeout [ 224.742839][ T5236] Bluetooth: hci11: command tx timeout [ 224.902859][ T5236] Bluetooth: hci12: command tx timeout [ 225.302887][ T5236] Bluetooth: hci13: command tx timeout [ 226.585233][ T5236] Bluetooth: hci9: command tx timeout [ 226.662825][ T5236] Bluetooth: hci10: command tx timeout [ 226.822863][ T5236] Bluetooth: hci11: command tx timeout [ 226.982941][ T5236] Bluetooth: hci12: command tx timeout [ 227.382946][ T5236] Bluetooth: hci13: command tx timeout [ 255.881810][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.889520][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.914745][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 277.924952][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 277.934349][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 277.942228][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 277.950324][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 277.958059][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 278.426991][ T4624] Bluetooth: hci1: command 0x0406 tx timeout [ 278.434403][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 278.440457][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 278.447769][ T4624] Bluetooth: hci3: command 0x0406 tx timeout [ 278.454425][ T4624] Bluetooth: hci5: command 0x0406 tx timeout [ 279.184687][ T5235] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 279.194269][ T5235] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 279.201941][ T5235] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 279.212230][ T5235] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 279.220186][ T5235] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 279.227912][ T5235] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 279.788732][ T5236] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 279.799533][ T5236] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 279.807999][ T5236] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 279.816292][ T5236] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 279.824578][ T5236] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 279.833900][ T5236] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 279.940757][ T5239] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 279.953704][ T5239] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 279.961383][ T5239] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 279.969753][ T5239] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 279.979453][ T5239] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 279.988139][ T5239] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 279.995872][ T5239] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 280.003712][ T5239] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 280.011755][ T5239] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 280.021520][ T5239] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 280.029520][ T5230] Bluetooth: hci14: command tx timeout [ 280.036606][ T5239] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 280.044441][ T5239] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 281.303559][ T5236] Bluetooth: hci15: command tx timeout [ 281.942963][ T5236] Bluetooth: hci16: command tx timeout [ 282.102950][ T5235] Bluetooth: hci18: command tx timeout [ 282.108977][ T5235] Bluetooth: hci17: command tx timeout [ 282.115162][ T5239] Bluetooth: hci14: command tx timeout [ 283.384284][ T5235] Bluetooth: hci15: command tx timeout [ 284.023116][ T5235] Bluetooth: hci16: command tx timeout [ 284.182927][ T5230] Bluetooth: hci14: command tx timeout [ 284.188472][ T5230] Bluetooth: hci18: command tx timeout [ 284.194271][ T5235] Bluetooth: hci17: command tx timeout [ 285.462986][ T5230] Bluetooth: hci15: command tx timeout [ 286.102959][ T5230] Bluetooth: hci16: command tx timeout [ 286.262842][ T5230] Bluetooth: hci18: command tx timeout [ 286.268371][ T5230] Bluetooth: hci17: command tx timeout [ 286.274430][ T5235] Bluetooth: hci14: command tx timeout [ 287.542840][ T5230] Bluetooth: hci15: command tx timeout [ 288.182936][ T5230] Bluetooth: hci16: command tx timeout [ 288.345204][ T5236] Bluetooth: hci18: command tx timeout [ 288.350751][ T5230] Bluetooth: hci17: command tx timeout [ 295.542928][ T30] INFO: task kworker/u8:7:2905 blocked for more than 143 seconds. [ 295.550794][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 295.592059][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 295.637112][ T30] task:kworker/u8:7 state:D stack:23632 pid:2905 tgid:2905 ppid:2 flags:0x00004000 [ 295.731428][ T30] Workqueue: netns cleanup_net [ 295.778010][ T30] Call Trace: [ 295.781341][ T30] [ 295.822863][ T30] __schedule+0x1895/0x4b30 [ 295.842439][ T30] ? __pfx___schedule+0x10/0x10 [ 295.852805][ T30] ? __pfx_lock_release+0x10/0x10 [ 295.857891][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 295.918308][ T30] ? kthread_data+0x52/0xd0 [ 295.938583][ T30] ? schedule+0x90/0x320 [ 295.973146][ T30] ? wq_worker_sleeping+0x66/0x240 [ 295.978322][ T30] ? schedule+0x90/0x320 [ 295.982594][ T30] schedule+0x14b/0x320 [ 296.038032][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.048226][ T30] __mutex_lock+0x6a7/0xd70 [ 296.058258][ T30] ? __mutex_lock+0x52a/0xd70 [ 296.065770][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 296.070867][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.082231][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 296.090431][ T30] cleanup_net+0x615/0xcc0 [ 296.099772][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 296.106888][ T30] ? process_scheduled_works+0x976/0x1850 [ 296.117518][ T30] process_scheduled_works+0xa63/0x1850 [ 296.124941][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 296.131141][ T30] ? assign_work+0x364/0x3d0 [ 296.140722][ T30] worker_thread+0x870/0xd30 [ 296.146780][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 296.157422][ T30] ? __kthread_parkme+0x169/0x1d0 [ 296.162491][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.171068][ T30] kthread+0x2f0/0x390 [ 296.181238][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.190558][ T30] ? __pfx_kthread+0x10/0x10 [ 296.200680][ T30] ret_from_fork+0x4b/0x80 [ 296.207388][ T30] ? __pfx_kthread+0x10/0x10 [ 296.212021][ T30] ret_from_fork_asm+0x1a/0x30 [ 296.221681][ T30] [ 296.226326][ T30] INFO: task syz.2.222:5912 blocked for more than 144 seconds. [ 296.247640][ T30] Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 296.259805][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.272924][ T30] task:syz.2.222 state:D stack:19792 pid:5912 tgid:5908 ppid:5241 flags:0x00004002 [ 296.291538][ T30] Call Trace: [ 296.295112][ T30] [ 296.298076][ T30] __schedule+0x1895/0x4b30 [ 296.308995][ T30] ? __pfx___schedule+0x10/0x10 [ 296.314187][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.319251][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 296.332537][ T30] ? schedule+0x90/0x320 [ 296.337109][ T30] schedule+0x14b/0x320 [ 296.341307][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.353027][ T30] __mutex_lock+0x6a7/0xd70 [ 296.357596][ T30] ? __mutex_lock+0x52a/0xd70 [ 296.362308][ T30] ? tun_chr_close+0x3b/0x1b0 [ 296.372938][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.378014][ T30] ? __pfx_call_rcu+0x10/0x10 [ 296.389373][ T30] tun_chr_close+0x3b/0x1b0 [ 296.395442][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 296.400645][ T30] __fput+0x23f/0x880 [ 296.453118][ T30] task_work_run+0x24f/0x310 [ 296.457756][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 296.474753][ T30] ? __pfx_task_work_run+0x10/0x10 [ 296.479907][ T30] ? do_exit+0xa2a/0x28e0 [ 296.489709][ T30] ? kmem_cache_free+0x1a2/0x420 [ 296.494951][ T30] ? do_exit+0xa2a/0x28e0 [ 296.499325][ T30] do_exit+0xa2f/0x28e0 [ 296.512694][ T30] ? __pfx_do_exit+0x10/0x10 [ 296.521056][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.529055][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.538628][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.549261][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 296.558251][ T30] do_group_exit+0x207/0x2c0 [ 296.565820][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 296.571061][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 296.579963][ T30] get_signal+0x16a3/0x1740 [ 296.590020][ T30] ? __pfx_get_signal+0x10/0x10 [ 296.598487][ T30] arch_do_signal_or_restart+0x96/0x860 [ 296.606628][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 296.619514][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.628124][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 296.637542][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 296.645681][ T30] do_syscall_64+0x100/0x230 [ 296.650313][ T30] ? clear_bhb_loop+0x35/0x90 [ 296.659062][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.667659][ T30] RIP: 0033:0x7f879bb7e719 [ 296.672105][ T30] RSP: 002b:00007f879ca45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.684939][ T30] RAX: 00000000000000d8 RBX: 00007f879bd36058 RCX: 00007f879bb7e719 [ 296.696674][ T30] RDX: 0000000000000000 RSI: 0000000020000940 RDI: 0000000000000006 [ 296.707428][ T30] RBP: 00007f879bbf12be R08: 0000000000000000 R09: 0000000000000000 [ 296.718658][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.732082][ T30] R13: 0000000000000000 R14: 00007f879bd36058 R15: 00007ffcbeb592a8 [ 296.741538][ T30] [ 296.749546][ T30] [ 296.749546][ T30] Showing all locks held in the system: [ 296.760085][ T30] 1 lock held by khungtaskd/30: [ 296.770187][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 296.781492][ T30] 3 locks held by kworker/u8:2/35: [ 296.791701][ T30] #0: ffff88814bbfa148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 296.809559][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 296.836119][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 296.851178][ T30] 3 locks held by kworker/u8:4/63: [ 296.860269][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 296.877521][ T30] #1: ffffc900015e7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 296.891323][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 296.904385][ T30] 3 locks held by kworker/1:2/1849: [ 296.909611][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 296.927043][ T30] #1: ffffc90004aefd00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 296.942314][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 296.956539][ T30] 4 locks held by kworker/u8:7/2905: [ 296.961898][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 296.979178][ T30] #1: ffffc90009cd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 296.990398][ T30] #2: ffffffff8fcc6450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 297.007586][ T30] #3: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 297.020015][ T30] 2 locks held by getty/4984: [ 297.029138][ T30] #0: ffff88814beba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 297.041578][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 297.055551][ T30] 3 locks held by kworker/1:3/5244: [ 297.060794][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 297.086275][ T30] #1: ffffc90002f8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 297.101280][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 297.117049][ T30] 3 locks held by kworker/1:4/5275: [ 297.122288][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 297.141731][ T30] #1: ffffc90003ed7d00 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 297.152121][ T30] #2: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_todo+0x1c/0x8d0 [ 297.167058][ T30] 5 locks held by kworker/0:5/5305: [ 297.172295][ T30] 1 lock held by syz.2.222/5912: [ 297.178920][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 297.196065][ T30] 1 lock held by syz.1.235/5946: [ 297.201046][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 297.217854][ T30] 2 locks held by syz.0.236/5947: [ 297.228135][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 297.241619][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 297.259422][ T30] 1 lock held by syz-executor/5960: [ 297.265017][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.282575][ T30] 1 lock held by syz-executor/5961: [ 297.288111][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.304838][ T30] 1 lock held by syz-executor/5968: [ 297.310071][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.323049][ T30] 1 lock held by syz-executor/5970: [ 297.328276][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.345638][ T30] 1 lock held by syz-executor/5980: [ 297.350874][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.367277][ T30] 1 lock held by syz-executor/5982: [ 297.372506][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.384014][ T30] 1 lock held by syz-executor/5985: [ 297.389240][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.403661][ T30] 1 lock held by syz-executor/5988: [ 297.408901][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.427436][ T30] 1 lock held by syz-executor/5990: [ 297.436129][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.449309][ T30] 1 lock held by syz-executor/5999: [ 297.457092][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.470512][ T30] 1 lock held by syz-executor/6001: [ 297.478930][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.496512][ T30] 1 lock held by syz-executor/6004: [ 297.501829][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.515229][ T30] 1 lock held by syz-executor/6007: [ 297.520461][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.537856][ T30] 1 lock held by syz-executor/6009: [ 297.548602][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.565543][ T30] 1 lock held by syz-executor/6018: [ 297.571276][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.583623][ T30] 1 lock held by syz-executor/6026: [ 297.588853][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.604007][ T30] 1 lock held by syz-executor/6028: [ 297.609244][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.623241][ T30] 1 lock held by syz-executor/6030: [ 297.628472][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.646163][ T30] 1 lock held by syz-executor/6031: [ 297.651398][ T30] #0: ffffffff8fcd2fc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 297.668893][ T30] [ 297.671605][ T30] ============================================= [ 297.671605][ T30] [ 297.681212][ T30] NMI backtrace for cpu 1 [ 297.685569][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 297.696088][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.706161][ T30] Call Trace: [ 297.709456][ T30] [ 297.712403][ T30] dump_stack_lvl+0x241/0x360 [ 297.717116][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.722340][ T30] ? __pfx__printk+0x10/0x10 [ 297.726964][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 297.731935][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 297.737422][ T30] ? _printk+0xd5/0x120 [ 297.741601][ T30] ? __pfx__printk+0x10/0x10 [ 297.746213][ T30] ? __wake_up_klogd+0xcc/0x110 [ 297.751093][ T30] ? __pfx__printk+0x10/0x10 [ 297.755703][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 297.760761][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 297.766762][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 297.772785][ T30] watchdog+0xff4/0x1040 [ 297.777053][ T30] ? watchdog+0x1ea/0x1040 [ 297.781495][ T30] ? __pfx_watchdog+0x10/0x10 [ 297.786195][ T30] kthread+0x2f0/0x390 [ 297.790280][ T30] ? __pfx_watchdog+0x10/0x10 [ 297.794980][ T30] ? __pfx_kthread+0x10/0x10 [ 297.799590][ T30] ret_from_fork+0x4b/0x80 [ 297.804031][ T30] ? __pfx_kthread+0x10/0x10 [ 297.808639][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.813441][ T30] [ 297.817123][ T30] Sending NMI from CPU 1 to CPUs 0: [ 297.822387][ C0] NMI backtrace for cpu 0 [ 297.822400][ C0] CPU: 0 UID: 0 PID: 5305 Comm: kworker/0:5 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 297.822418][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.822428][ C0] Workqueue: events nsim_dev_trap_report_work [ 297.822449][ C0] RIP: 0010:unwind_next_frame+0x21b/0x22d0 [ 297.822466][ C0] Code: 84 c0 0f 85 97 1a 00 00 44 8b 03 41 ff c0 4b 8d 04 64 48 8d b4 00 80 15 9e 90 48 c7 c0 ee b3 4b 91 48 39 c6 0f 83 19 18 00 00 <4b> 8d 0c 40 48 8d 8c 09 80 15 9e 90 48 39 c1 0f 87 04 18 00 00 45 [ 297.822482][ C0] RSP: 0018:ffffc90000007010 EFLAGS: 00000293 [ 297.822495][ C0] RAX: ffffffff914bb3ee RBX: ffffffff916f1ec4 RCX: 00000000000b0001 [ 297.822508][ C0] RDX: 00000000000b0001 RSI: ffffffff912827a4 RDI: 0000000000000001 [ 297.822518][ C0] RBP: dffffc0000000000 R08: 0000000000170307 R09: ffffc900000071d0 [ 297.822529][ C0] R10: ffffc90000007130 R11: ffffffff8180a0e0 R12: 0000000000170306 [ 297.822540][ C0] R13: ffffc900000070e0 R14: 000000000008dab4 R15: ffffffff89dab442 [ 297.822552][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 297.822565][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.822576][ C0] CR2: 000000110c25c38c CR3: 000000000e734000 CR4: 00000000003526f0 [ 297.822589][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.822599][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 297.822609][ C0] Call Trace: [ 297.822614][ C0] [ 297.822621][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 297.822644][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 297.822665][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 297.822683][ C0] ? nmi_handle+0x2a/0x5a0 [ 297.822704][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 297.822723][ C0] ? nmi_handle+0x14f/0x5a0 [ 297.822737][ C0] ? nmi_handle+0x2a/0x5a0 [ 297.822753][ C0] ? unwind_next_frame+0x21b/0x22d0 [ 297.822766][ C0] ? default_do_nmi+0x63/0x160 [ 297.822785][ C0] ? exc_nmi+0x123/0x1f0 [ 297.822803][ C0] ? end_repeat_nmi+0xf/0x53 [ 297.822822][ C0] ? nf_hook_slow+0xc2/0x220 [ 297.822844][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 297.822865][ C0] ? unwind_next_frame+0x21b/0x22d0 [ 297.822880][ C0] ? unwind_next_frame+0x21b/0x22d0 [ 297.822896][ C0] ? unwind_next_frame+0x21b/0x22d0 [ 297.822910][ C0] [ 297.822915][ C0] [ 297.822925][ C0] ? nf_hook_slow+0xc3/0x220 [ 297.822944][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 297.822968][ C0] arch_stack_walk+0x11c/0x150 [ 297.822986][ C0] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 297.823005][ C0] ? nf_hook_slow+0xc3/0x220 [ 297.823025][ C0] stack_trace_save+0x118/0x1d0 [ 297.823042][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 297.823061][ C0] ? mark_lock+0x9a/0x360 [ 297.823078][ C0] kasan_save_track+0x3f/0x80 [ 297.823092][ C0] ? kasan_save_track+0x3f/0x80 [ 297.823105][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 297.823120][ C0] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 297.823137][ C0] ? kmem_cache_free+0x177/0x420 [ 297.823154][ C0] ? nf_conntrack_free+0x2fd/0x390 [ 297.823167][ C0] ? nf_conntrack_in+0xb51/0x1890 [ 297.823181][ C0] ? nf_hook_slow+0xc3/0x220 [ 297.823220][ C0] __kasan_kmalloc+0x98/0xb0 [ 297.823235][ C0] ? kmem_cache_free+0x177/0x420 [ 297.823253][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 297.823272][ C0] ? nf_conntrack_free+0x2fd/0x390 [ 297.823286][ C0] kmem_cache_free+0x177/0x420 [ 297.823302][ C0] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 297.823317][ C0] ? nf_conntrack_free+0x2fd/0x390 [ 297.823333][ C0] nf_conntrack_free+0x2fd/0x390 [ 297.823348][ C0] nf_conntrack_in+0xb51/0x1890 [ 297.823374][ C0] ? __pfx_nf_conntrack_in+0x10/0x10 [ 297.823394][ C0] ? ipt_do_table+0x312/0x1860 [ 297.823410][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 297.823427][ C0] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 297.823444][ C0] ? ip_sabotage_in+0x55/0x290 [ 297.823462][ C0] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 297.823480][ C0] nf_hook_slow+0xc3/0x220 [ 297.823499][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 297.823515][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 297.823532][ C0] NF_HOOK+0x29e/0x450 [ 297.823547][ C0] ? __lock_acquire+0x1384/0x2050 [ 297.823567][ C0] ? NF_HOOK+0x9a/0x450 [ 297.823583][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 297.823598][ C0] ? ip_rcv_core+0x801/0xd10 [ 297.823616][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 297.823636][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 297.823653][ C0] __netif_receive_skb+0x2bf/0x650 [ 297.823672][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 297.823691][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 297.823708][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.823727][ C0] ? __pfx_lock_release+0x10/0x10 [ 297.823746][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 297.823767][ C0] process_backlog+0x662/0x15b0 [ 297.823787][ C0] ? process_backlog+0x33b/0x15b0 [ 297.823809][ C0] ? __pfx_process_backlog+0x10/0x10 [ 297.823826][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.823846][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.823867][ C0] __napi_poll+0xcb/0x490 [ 297.823886][ C0] net_rx_action+0x89b/0x1240 [ 297.823913][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 297.823931][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 297.823969][ C0] handle_softirqs+0x2c5/0x980 [ 297.823990][ C0] ? do_softirq+0x11b/0x1e0 [ 297.824008][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 297.824030][ C0] do_softirq+0x11b/0x1e0 [ 297.824046][ C0] [ 297.824051][ C0] [ 297.824056][ C0] ? __pfx_do_softirq+0x10/0x10 [ 297.824073][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 297.824094][ C0] ? rcu_is_watching+0x15/0xb0 [ 297.824111][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 297.824129][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 297.824145][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 297.824163][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 297.824181][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 297.824199][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 297.824223][ C0] ? process_scheduled_works+0x976/0x1850 [ 297.824241][ C0] process_scheduled_works+0xa63/0x1850 [ 297.824271][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.824293][ C0] ? assign_work+0x364/0x3d0 [ 297.824313][ C0] worker_thread+0x870/0xd30 [ 297.824337][ C0] ? __kthread_parkme+0x169/0x1d0 [ 297.824357][ C0] ? __pfx_worker_thread+0x10/0x10 [ 297.824375][ C0] kthread+0x2f0/0x390 [ 297.824388][ C0] ? __pfx_worker_thread+0x10/0x10 [ 297.824405][ C0] ? __pfx_kthread+0x10/0x10 [ 297.824420][ C0] ret_from_fork+0x4b/0x80 [ 297.824438][ C0] ? __pfx_kthread+0x10/0x10 [ 297.824452][ C0] ret_from_fork_asm+0x1a/0x30 [ 297.824477][ C0] [ 298.499973][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 298.506859][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 298.517377][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.527466][ T30] Call Trace: [ 298.530766][ T30] [ 298.533717][ T30] dump_stack_lvl+0x241/0x360 [ 298.538444][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.543671][ T30] ? __pfx__printk+0x10/0x10 [ 298.548322][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.554333][ T30] ? vscnprintf+0x5d/0x90 [ 298.558690][ T30] panic+0x349/0x880 [ 298.562606][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 298.568790][ T30] ? __pfx_panic+0x10/0x10 [ 298.573227][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 298.578621][ T30] ? __irq_work_queue_local+0x137/0x410 [ 298.584201][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 298.589600][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 298.595785][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 298.601969][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 298.608151][ T30] watchdog+0x1033/0x1040 [ 298.612506][ T30] ? watchdog+0x1ea/0x1040 [ 298.616949][ T30] ? __pfx_watchdog+0x10/0x10 [ 298.621656][ T30] kthread+0x2f0/0x390 [ 298.625744][ T30] ? __pfx_watchdog+0x10/0x10 [ 298.630441][ T30] ? __pfx_kthread+0x10/0x10 [ 298.635053][ T30] ret_from_fork+0x4b/0x80 [ 298.639493][ T30] ? __pfx_kthread+0x10/0x10 [ 298.644103][ T30] ret_from_fork_asm+0x1a/0x30 [ 298.648901][ T30] [ 298.652188][ T30] Kernel Offset: disabled [ 298.656523][ T30] Rebooting in 86400 seconds..