last executing test programs: 2.662936648s ago: executing program 4 (id=1083): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}}, 0x0) 2.609778914s ago: executing program 0 (id=1084): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@deltfilter={0xec, 0x2d, 0xc31, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xb, 0xc}, {0xa, 0xffe0}}, [@f_rsvp6={{0xa}, {0x50, 0x2, [@TCA_RSVP_POLICE={0x3c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8002}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xad}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xc}}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x5}}]}}, @f_tcindex={{0xc}, {0x48, 0x2, [@TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xd, 0x8}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x14}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x8000}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x10, 0x10}}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x480d1}, 0x24008040) 2.49359383s ago: executing program 4 (id=1087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0xef, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 2.435500003s ago: executing program 4 (id=1091): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @dev}]}}}]}, 0x40}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1.734297913s ago: executing program 0 (id=1102): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6b}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.551848674s ago: executing program 0 (id=1105): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r4, 0x14, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r7 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_devices(r7, &(0x7f00000003c0)={'a', ' *:* ', 'rw\x00'}, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0xb) sendmsg$can_bcm(r0, 0x0, 0x24008004) socket(0x1d, 0x2, 0x6) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0xba5a, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r11}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r11, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x198, 0x24, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xf, 0x7}, {0xb, 0x10}}, [@TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x4, 0x3, 0x2, 0x0, 0xb4fe, 0x9, 0x5}}, {0xe, 0x2, [0x6, 0x2, 0x3, 0x400, 0x7]}}, {{0x1c, 0x1, {0x9, 0x3f, 0xf, 0x300000, 0x1, 0xeb1, 0x1, 0xa}}, {0x18, 0x2, [0xc, 0xfaaf, 0x3ff, 0x40, 0x0, 0x4, 0x5, 0x84a, 0x27f, 0x8b2]}}, {{0x1c, 0x1, {0x62, 0x4, 0x2, 0x3, 0x0, 0x1000, 0x7, 0x9}}, {0x16, 0x2, [0x7, 0xd0b, 0x48, 0x900, 0x9, 0x5, 0x5, 0xce3, 0x0]}}, {{0x1c, 0x1, {0xd, 0x1, 0xb, 0x9, 0x0, 0x3, 0x10, 0x6}}, {0x10, 0x2, [0x7, 0x4, 0x9a, 0x151b, 0x9, 0x775]}}, {{0x1c, 0x1, {0x0, 0xff, 0x1, 0x0, 0x1, 0x5, 0x4, 0x8}}, {0x14, 0x2, [0x6, 0xb, 0x1, 0x6, 0x100, 0x3, 0x2, 0x101]}}, {{0x1c, 0x1, {0x7, 0x3, 0x8000, 0x1, 0xa06f169411fdcf07, 0xe, 0xfe, 0x2}}, {0x8, 0x2, [0x81, 0x8]}}, {{0x1c, 0x1, {0xd, 0x3d, 0xd2, 0x80000000, 0x0, 0x0, 0x6, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x408000}]}, 0x198}, 0x1, 0xf0ffffffffffff, 0x0, 0x4000040}, 0x0) 1.439989258s ago: executing program 4 (id=1106): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x400400c0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0x7}}}, &(0x7f0000000480)=0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000010000000000010000000000000001410000001c001700000000000000006574683a7379a4bee846fe4814f3348345"], 0x38}}, 0x0) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x400400c0) (async) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0x7}}}, &(0x7f0000000480)=0x84) (async) 1.429227689s ago: executing program 2 (id=1109): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r2, 0x0, 0x7f, 0x6}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000240)=0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x33}}) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x2c}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r11, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x70, 0x271]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) 1.235954194s ago: executing program 3 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x20}, 0x10) 1.155717278s ago: executing program 0 (id=1111): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x5, @empty, 0x1ff}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x3cbe, @local, 0xd}], 0x78) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x68, &(0x7f0000000100)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e24, 0x4, @local}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x6}]}, &(0x7f00000001c0)=0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) r4 = accept4(r1, &(0x7f0000000280)=@caif=@dbg, &(0x7f0000000300)=0x80, 0x180800) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000340)=""/12, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000003c0)=""/196, &(0x7f00000004c0)=0xc4) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000500)=0x6, 0x4) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000001580)={0x1, @bcast, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9, 0x8, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000001600)={@mcast1, 0x4, 0x0, 0x0, 0x6, 0x0, 0x9}, &(0x7f0000001640)=0x20) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001780)={r3, 0xc4, &(0x7f0000001680)=[@in6={0xa, 0x4e20, 0x2, @private0, 0x3ff}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e23, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x466, @private2={0xfc, 0x2, '\x00', 0x1}, 0xddba}]}, &(0x7f00000017c0)=0x10) socket$alg(0x26, 0x5, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000001800)) r8 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001840)={0x2}) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000001880)={r3, 0x200, 0x66, 0x40, 0x7, 0x4, 0x8, 0x9, {r6, @in6={{0xa, 0x4e23, 0x100, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1}}, 0x48, 0x5, 0x7, 0x3, 0x9}}, &(0x7f0000001940)=0xb0) (async) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000001980)=0x4, &(0x7f00000019c0)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x23, 0x2, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000001a00)) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001a40)={r10, 0x5, 0x800, 0x81, 0xc, 0x91b6, 0x18, 0x800, {r10, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0xf, 0x0, 0x4, 0xffff82ca, 0x400}}, &(0x7f0000001b00)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000001b40)={r12, 0x101, 0x10}, &(0x7f0000001b80)=0xc) 1.155293859s ago: executing program 4 (id=1112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@deltfilter={0xf8, 0x2d, 0xc31, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xb, 0xc}, {0xa, 0xffe0}}, [@f_rsvp6={{0xa}, {0x5c, 0x2, [@TCA_RSVP_POLICE={0x3c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8002}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xad}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x5}}]}}, @f_tcindex={{0xc}, {0x48, 0x2, [@TCA_TCINDEX_POLICE={0xc, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xd, 0x8}}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x14}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x8000}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x10, 0x10}}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x480d1}, 0x24008040) 1.142802119s ago: executing program 1 (id=1113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001140)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x80, 0x20, 0x1000, 0x2, {{0x20, 0x4, 0x2, 0x11, 0x80, 0x64, 0x0, 0xf, 0x4, 0x0, @empty, @private=0xa010102, {[@generic={0x82, 0x7, "260f1a57f9"}, @timestamp={0x44, 0xc, 0x43, 0x0, 0x1, [0x3, 0x223]}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0xa, [{@broadcast, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xd}, {@local, 0x3}, {@multicast2, 0xff}, {@loopback, 0xff}, {@loopback, 0x3}]}, @lsrr={0x83, 0xb, 0xdb, [@broadcast, @loopback]}, @lsrr={0x83, 0x7, 0x6a, [@private=0xa010101]}, @cipso={0x86, 0x12, 0x1, [{0x1, 0x6, "e2b3235e"}, {0x7, 0x6, "28eb0347"}]}]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x5, 0x6, 0x3, 0x40, r0, 0xe, '\x00', r3, r4, 0x4, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={r5, 0x8f, 0x10, 0x6, 0xe}, &(0x7f0000000300)=0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r7, 0x0, 0x0, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) 1.142553336s ago: executing program 2 (id=1114): r0 = socket(0x22, 0x80803, 0xffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012701c00000069706970000000001400028008000100", @ANYRES32=r1, @ANYBLOB="0800030064010101"], 0x44}}, 0x880) 1.068220407s ago: executing program 3 (id=1115): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x160, 0x308, 0xc0, 0x308, 0x0, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0xffffffff, 'veth0_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x67, 0x0, 0x68}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x9, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e23}}}, {{@ip={@multicast1, @multicast1, 0xff, 0x0, 'hsr0\x00', 'vlan0\x00', {}, {}, 0x11, 0x1, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x4}}}, {{@ip={@local, @empty, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {}, 0x32, 0x0, 0x72}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x65}}}, {{@ip={@rand_addr=0x64010100, @local, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x5e, 0x1, 0x18}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x983, 0x400, 0xfed, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf25040000000d000a0000000030323135340000000008"], 0xc0}}, 0x0) 956.072573ms ago: executing program 1 (id=1116): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) 955.752004ms ago: executing program 0 (id=1117): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@deltfilter={0xdc, 0x2d, 0xc31, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xb, 0xc}, {0xa, 0xffe0}}, [@f_rsvp6={{0xa}, {0x64, 0x2, [@TCA_RSVP_POLICE={0x3c, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8002}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xad}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_RSVP_SRC={0x14, 0x3, @mcast2}]}}, @f_rsvp={{0x9}, {0x2c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0xd, 0x8000}, {0x5, 0x8, 0x9}, 0x5c, 0x76, 0x9}}]}}, @f_tcindex={{0xc}, {0x4}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x480d1}, 0x24008040) 954.704828ms ago: executing program 2 (id=1118): socket$netlink(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x4}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x108, 0x0, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb8}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASK={0x34, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}]}, 0x108}, 0x1, 0x0, 0x0, 0x24040000}, 0x4004010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) 923.228484ms ago: executing program 3 (id=1119): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00f000000880803fb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) (async) accept4(r2, &(0x7f0000000040)=@phonet, &(0x7f0000000100)=0x80, 0x80000) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002340)=@migrate={0xa0, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {{@in=@multicast1, @in6=@mcast1, 0x4e21, 0xfff, 0x4e21, 0x8, 0x2, 0x20, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, 0x6e6bb6, 0x2}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in6=@private2, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1b9ecd270b43f97b, 0x3, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x2404c0c4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x0, 0x0, 0x65, 0x0, @gue={{0x1, 0x0, 0x1, 0x6, 0x0, @void}, "ee0ee9b6b5a0bbfd903a6aa4cdc4e0e0a293a92cb3db486b77428a197a5ba29a7c161ef69950d4c183d2ac232c0ea37cb744b27ea3a3d0cc13b251066874a016e94d22ed70e1bf277c075cf44b9764ab30fc0c7d40f377dd89"}}}}}}}, 0x8f) 920.870464ms ago: executing program 1 (id=1120): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x6000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_IFNAME={0x14, 0x3, 'wg2\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 695.803027ms ago: executing program 3 (id=1121): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r1, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x3, 0x4) sendmsg$can_raw(r1, 0x0, 0x44090) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x400c000) accept4(r1, 0x0, 0x0, 0x800) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x4ca) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000540)="0c268a927f1f6588b9674812411f00000008000018ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a9542502a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66baa43baa822239fd33c2a27fe8dd18adc2886cb592b64766e68ba5efc092473173fbb09540fa1b503c3e61d248509a7d61b6ecd2133e8443c47cf2", 0x86, 0x4040011, 0x0, 0xfffffffffffffcf1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a0000000000000000000000080018004e204e82"], 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000014c0)={'gre0\x00', &(0x7f0000001400)}) shutdown(r2, 0x1) 579.945583ms ago: executing program 1 (id=1122): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x120, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0xc5, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0xb, 0x9}, @value=@ver_80211n={0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x20, 0xb, @default, @val={0x1, 0x5, [{0x3}, {0x48, 0x1}, {0x36}, {0x4}, {0x1b}]}, @val={0x2d, 0x1a, {0x2, 0x2, 0x7, 0x0, {0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3}, 0x6, 0x3c, 0x1}}, [{0xdd, 0x17, "8fe394897df8e48d8d4048388ea37d471f13ff7ff58b37"}, {0xdd, 0x61, "733d74b72ff0171fe78e31e036175e503cda52541fcc61b064053dcb8194fd9bd19a0b279bd18f9c56b80888819e638e39899f63e161d74c274c54c11502d62d5ca34aec71527f237c4d60bb72a6a51fee1e757fd55b6500d145e751a74fec1d94"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfb7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x40}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa23}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r5, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/56, 0x38}], 0x1) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000130a03000000000000000000020000000900020073797a31000000002fc1261027a67d51e977e44939c08a71f9b73c4de407b9352c17b2f34a8cb8bd060000000000000065bff67e4f938fd88a638081ae5c21eef1423d76eafcf8bd96cab245b13c026c2ce4e7c0cc7847365a3e7911f17d05bfa2cbe5829d6d6465bf8a837bb8b17a01ecce87d466531b279b1d3274e450ac51d2"], 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206013d050001000700000005000100070000001c000780060005400000000006000440000000000800080000000009050001000700000005000400"/84], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x3, 0x8, 0xb0, 0x5}, 0xc) socket$netlink(0x10, 0x3, 0xb) connect$bt_l2cap(r2, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)=ANY=[@ANYBLOB="380000000314010000000e08000000000900020073797a30000000000800410072786500140033006c6f00000000000a0000000000000000"], 0x38}}, 0x0) 574.382441ms ago: executing program 3 (id=1123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)="b145eaf4395adf3d3d5ab72d512d49ec69a8eaf1dcbb7d66ae7a14108be334", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4b277295cd3a17f9e9a25d70216a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc70c4b50f64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254cb166fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x38d}, {&(0x7f0000000600)="439e9c06fc666cb9f0c639abda0b5b96a02001fc3fa0d373f1064b06ce7b520d3431eadfac2be5ac", 0x28}], 0x2}}], 0x2, 0x0) 557.863285ms ago: executing program 2 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) getsockopt$bt_hci(r1, 0x0, 0x1, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03010000000000000000030000000900010073797930000000005c000000090a010400000000000000f10300000008000a40000000000900020073797a31000000000900010073797a300000000098d824aa90eb525915e8c8fe9a760800054000000023200011800e000100636f6e6e6c696d69740000000c0002800800014000000000140000001000010000000000000000000000000a397ffda814696f18c569359a0d71f667af4891"], 0xa4}}, 0x0) 444.416903ms ago: executing program 2 (id=1125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x600, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 443.666696ms ago: executing program 3 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) (fail_nth: 5) 112.785846ms ago: executing program 1 (id=1127): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}], 0x1c) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)={0x420}, 0x420}}, 0x40000) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="f8", 0x1}], 0x1, 0x0) write(r2, &(0x7f0000001100)="94", 0x1) tee(r1, r5, 0xaf5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xfff, 0x362, 0x80, 0x9}, 0x8) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x8041}, 0x10) close(0x3) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0xc0b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) 112.435645ms ago: executing program 2 (id=1128): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) 78.815654ms ago: executing program 4 (id=1129): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x160, 0x308, 0xc0, 0x308, 0x0, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x1, 0x1}}}, {{@ip={@broadcast, @multicast2, 0xff000000, 0xffffffff, 'veth0_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x67, 0x0, 0x68}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x9, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e23}}}, {{@ip={@multicast1, @multicast1, 0xff, 0x0, 'hsr0\x00', 'vlan0\x00', {}, {}, 0x11, 0x1, 0x18}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x40, 0x4}}}, {{@ip={@local, @empty, 0xff000000, 0x0, 'veth1_to_batadv\x00', 'dvmrp1\x00', {}, {}, 0x32, 0x0, 0x72}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x65}}}, {{@ip={@rand_addr=0x64010100, @local, 0xffffffff, 0xff000000, 'veth1_vlan\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x5e, 0x1, 0x18}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x983, 0x400, 0xfed, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c00028008000100000000000800010000000000080003000000000008000200000000000000020000000000080004000000000000000400000000000800040000000000080001"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf25040000000d000a0000000030323135340000000008"], 0xc0}}, 0x0) 57.656235ms ago: executing program 0 (id=1130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x701}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x701}, 0x14}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) (async) 0s ago: executing program 1 (id=1131): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x0, 0x1, 0x0, 0xf, 0x4, [{}]}, @struct]}, {0x0, [0x0, 0x61, 0x61]}}, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x1000}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ffdfed80da8 [ 77.803107][ T6161] [ 77.971021][ T6172] sctp: [Deprecated]: syz.0.298 (pid 6172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.971021][ T6172] Use struct sctp_sack_info instead [ 78.323024][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 78.404932][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 78.602516][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.018556][ T6225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.319'. [ 79.083544][ T6231] trusted_key: syz.2.322 sent an empty control message without MSG_MORE. [ 79.403224][ T6246] netlink: 'syz.0.328': attribute type 2 has an invalid length. [ 80.082765][ T6284] syzkaller1: entered promiscuous mode [ 80.088305][ T6284] syzkaller1: entered allmulticast mode [ 80.276393][ T6292] lo speed is unknown, defaulting to 1000 [ 80.416523][ T6299] syzkaller1: entered promiscuous mode [ 80.428597][ T6299] syzkaller1: entered allmulticast mode [ 80.946253][ T6326] netlink: 'syz.2.356': attribute type 2 has an invalid length. [ 81.205123][ T6337] netlink: 'syz.2.359': attribute type 30 has an invalid length. [ 81.428334][ T6348] syzkaller1: entered promiscuous mode [ 81.443764][ T6348] syzkaller1: entered allmulticast mode [ 81.532340][ T6353] __nla_validate_parse: 3 callbacks suppressed [ 81.532359][ T6353] netlink: 116 bytes leftover after parsing attributes in process `syz.3.364'. [ 81.663494][ T6358] vlan2: entered allmulticast mode [ 81.669694][ T6358] bond0: entered allmulticast mode [ 81.685076][ T6358] bond_slave_0: entered allmulticast mode [ 81.709778][ T6361] ipt_rpfilter: unknown options [ 81.726316][ T6358] bond_slave_1: entered allmulticast mode [ 81.737475][ T6358] bond0: left allmulticast mode [ 81.746467][ T6358] bond_slave_0: left allmulticast mode [ 81.758855][ T6358] bond_slave_1: left allmulticast mode [ 81.794735][ T6368] openvswitch: netlink: Actions may not be safe on all matching packets [ 82.048462][ T6381] bridge_slave_0: left allmulticast mode [ 82.054386][ T6381] bridge_slave_0: left promiscuous mode [ 82.060961][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.076130][ T6381] bridge_slave_1: left allmulticast mode [ 82.082294][ T6381] bridge_slave_1: left promiscuous mode [ 82.088003][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.103726][ T6381] bond0: (slave bond_slave_0): Releasing backup interface [ 82.128271][ T6381] bond0: (slave bond_slave_1): Releasing backup interface [ 82.172599][ T6381] team0: Port device team_slave_0 removed [ 82.188020][ T6381] team0: Port device team_slave_1 removed [ 82.196027][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.206735][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.215413][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.223572][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.243201][ T6382] wg2: entered promiscuous mode [ 82.432207][ T6392] netlink: 4272 bytes leftover after parsing attributes in process `syz.2.379'. [ 82.445172][ T6392] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 82.453422][ T6392] netlink: 121 bytes leftover after parsing attributes in process `syz.2.379'. [ 82.557773][ T6399] FAULT_INJECTION: forcing a failure. [ 82.557773][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.586407][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.2.382 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 82.597404][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.607499][ T6399] Call Trace: [ 82.610818][ T6399] [ 82.613771][ T6399] dump_stack_lvl+0x241/0x360 [ 82.618483][ T6399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.623707][ T6399] ? __pfx__printk+0x10/0x10 [ 82.628337][ T6399] ? __pfx_lock_release+0x10/0x10 [ 82.633399][ T6399] should_fail_ex+0x3b0/0x4e0 [ 82.638116][ T6399] _copy_from_user+0x2f/0xe0 [ 82.642734][ T6399] copy_msghdr_from_user+0xae/0x680 [ 82.647962][ T6399] ? __pfx___might_resched+0x10/0x10 [ 82.653280][ T6399] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 82.659210][ T6399] ? rcu_is_watching+0x15/0xb0 [ 82.664006][ T6399] ? __might_fault+0xaa/0x120 [ 82.668712][ T6399] do_recvmmsg+0x3f9/0xad0 [ 82.673170][ T6399] ? __pfx_do_recvmmsg+0x10/0x10 [ 82.678417][ T6399] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 82.684347][ T6399] ? ksys_write+0x229/0x2b0 [ 82.688895][ T6399] ? __pfx_lock_release+0x10/0x10 [ 82.693966][ T6399] ? vfs_write+0x7bf/0xc90 [ 82.698416][ T6399] ? kmem_cache_free+0x1a2/0x420 [ 82.703401][ T6399] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 82.709431][ T6399] __x64_sys_recvmmsg+0x199/0x250 [ 82.714506][ T6399] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 82.720081][ T6399] ? do_syscall_64+0x100/0x230 [ 82.724879][ T6399] ? do_syscall_64+0xb6/0x230 [ 82.729590][ T6399] do_syscall_64+0xf3/0x230 [ 82.734120][ T6399] ? clear_bhb_loop+0x35/0x90 [ 82.738835][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.744765][ T6399] RIP: 0033:0x7f19d437dff9 [ 82.749213][ T6399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.768954][ T6399] RSP: 002b:00007f19d515a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 82.777411][ T6399] RAX: ffffffffffffffda RBX: 00007f19d4535f80 RCX: 00007f19d437dff9 [ 82.785419][ T6399] RDX: 0000000000000002 RSI: 0000000020000180 RDI: 0000000000000004 [ 82.793427][ T6399] RBP: 00007f19d515a090 R08: 0000000000000000 R09: 0000000000000000 [ 82.801438][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.809444][ T6399] R13: 0000000000000000 R14: 00007f19d4535f80 R15: 00007ffdbf7ae898 [ 82.817468][ T6399] [ 82.976647][ T6415] tipc: Started in network mode [ 82.987938][ T6415] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.000660][ T5282] IPVS: starting estimator thread 0... [ 83.009026][ T6415] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 83.060779][ T6415] tipc: Enabled bearer , priority 10 [ 83.101183][ T6417] IPVS: using max 23 ests per chain, 55200 per kthread [ 83.141545][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 83.242100][ T4651] IPVS: starting estimator thread 0... [ 83.280216][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 83.330209][ T6434] IPVS: using max 21 ests per chain, 50400 per kthread [ 83.389833][ T6440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 83.420302][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 83.464108][ T6445] syzkaller1: entered promiscuous mode [ 83.469711][ T6445] syzkaller1: entered allmulticast mode [ 83.560218][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 83.700155][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 83.840297][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 83.863615][ T6470] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 83.936490][ T6479] delete_channel: no stack [ 83.942241][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 83.951429][ T6479] netlink: 6 bytes leftover after parsing attributes in process `syz.2.411'. [ 83.980311][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 84.088771][ T6483] netlink: 'syz.1.412': attribute type 3 has an invalid length. [ 84.125404][ T6483] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 84.131489][ T5310] tipc: Node number set to 2886997162 [ 84.140451][ T6483] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 84.149033][ T6483] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 84.193304][ T6488] openvswitch: netlink: Missing key (keys=40, expected=80) [ 84.396633][ T6500] syzkaller1: entered promiscuous mode [ 84.402987][ T6500] syzkaller1: entered allmulticast mode [ 84.699368][ T6512] syzkaller1: entered promiscuous mode [ 84.720499][ T6512] syzkaller1: entered allmulticast mode [ 84.777159][ T6517] netlink: 216 bytes leftover after parsing attributes in process `syz.4.424'. [ 85.363990][ T6551] sctp: [Deprecated]: syz.1.438 (pid 6551) Use of int in maxseg socket option. [ 85.363990][ T6551] Use struct sctp_assoc_value instead [ 85.528668][ T6562] netlink: 203276 bytes leftover after parsing attributes in process `syz.2.439'. [ 85.533798][ T6560] netlink: 203276 bytes leftover after parsing attributes in process `syz.2.439'. [ 85.591833][ T6568] syzkaller1: entered promiscuous mode [ 85.597596][ T6568] syzkaller1: entered allmulticast mode [ 85.597906][ T6559] netlink: 60 bytes leftover after parsing attributes in process `syz.2.439'. [ 85.620842][ T6559] unsupported nlmsg_type 40 [ 85.935611][ T6590] sctp: [Deprecated]: syz.3.449 (pid 6590) Use of int in max_burst socket option. [ 85.935611][ T6590] Use struct sctp_assoc_value instead [ 85.955316][ T6587] veth0: entered promiscuous mode [ 85.968398][ T6585] veth0: left promiscuous mode [ 86.160907][ T6599] netlink: 'syz.3.454': attribute type 32 has an invalid length. [ 86.231750][ T6604] FAULT_INJECTION: forcing a failure. [ 86.231750][ T6604] name failslab, interval 1, probability 0, space 0, times 0 [ 86.280772][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.4.456 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 86.291421][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.301546][ T6604] Call Trace: [ 86.304857][ T6604] [ 86.307815][ T6604] dump_stack_lvl+0x241/0x360 [ 86.312526][ T6604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.317756][ T6604] ? __pfx__printk+0x10/0x10 [ 86.322379][ T6604] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 86.327954][ T6604] ? __pfx___might_resched+0x10/0x10 [ 86.333271][ T6604] should_fail_ex+0x3b0/0x4e0 [ 86.337985][ T6604] ? skb_clone+0x20c/0x390 [ 86.342428][ T6604] should_failslab+0xac/0x100 [ 86.347137][ T6604] ? skb_clone+0x20c/0x390 [ 86.351581][ T6604] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 86.356986][ T6604] skb_clone+0x20c/0x390 [ 86.361266][ T6604] nfnetlink_rcv+0x575/0x2ab0 [ 86.365984][ T6604] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.372002][ T6604] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.378375][ T6604] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 86.384299][ T6604] ? lockdep_hardirqs_on+0x99/0x150 [ 86.389509][ T6604] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 86.394628][ T6604] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 86.400557][ T6604] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 86.407160][ T6604] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 86.414106][ T6604] ? rcu_is_watching+0x15/0xb0 [ 86.418876][ T6604] ? rcu_read_unlock_special+0x497/0x570 [ 86.424516][ T6604] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.429706][ T6604] ? skb_clone+0x240/0x390 [ 86.434122][ T6604] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 86.440104][ T6604] ? __netlink_deliver_tap+0x77e/0x7c0 [ 86.445574][ T6604] ? __rcu_read_unlock+0xa1/0x110 [ 86.450631][ T6604] netlink_unicast+0x7f6/0x990 [ 86.455403][ T6604] ? __pfx_netlink_unicast+0x10/0x10 [ 86.460687][ T6604] ? __virt_addr_valid+0x183/0x530 [ 86.465799][ T6604] ? __check_object_size+0x48e/0x900 [ 86.471092][ T6604] netlink_sendmsg+0x8e4/0xcb0 [ 86.475870][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.481171][ T6604] ? aa_sock_msg_perm+0x91/0x160 [ 86.486125][ T6604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.491428][ T6604] __sock_sendmsg+0x221/0x270 [ 86.496384][ T6604] ____sys_sendmsg+0x52a/0x7e0 [ 86.501201][ T6604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.506501][ T6604] __sys_sendmsg+0x292/0x380 [ 86.511095][ T6604] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.516214][ T6604] ? __pfx_vfs_write+0x10/0x10 [ 86.521011][ T6604] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.527339][ T6604] ? do_syscall_64+0x100/0x230 [ 86.532114][ T6604] ? do_syscall_64+0xb6/0x230 [ 86.536803][ T6604] do_syscall_64+0xf3/0x230 [ 86.541306][ T6604] ? clear_bhb_loop+0x35/0x90 [ 86.545979][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.551872][ T6604] RIP: 0033:0x7f053617dff9 [ 86.556546][ T6604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.576148][ T6604] RSP: 002b:00007f0536f74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.584565][ T6604] RAX: ffffffffffffffda RBX: 00007f0536335f80 RCX: 00007f053617dff9 [ 86.592539][ T6604] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 86.600508][ T6604] RBP: 00007f0536f74090 R08: 0000000000000000 R09: 0000000000000000 [ 86.608476][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.616441][ T6604] R13: 0000000000000000 R14: 00007f0536335f80 R15: 00007ffdfed80da8 [ 86.624428][ T6604] [ 86.713144][ T6614] xt_TCPMSS: Only works on TCP SYN packets [ 86.796460][ T6620] __nla_validate_parse: 8 callbacks suppressed [ 86.796481][ T6620] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.464'. [ 86.967527][ T6629] netlink: 36 bytes leftover after parsing attributes in process `syz.3.466'. [ 86.980761][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 86.989572][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 87.018370][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 87.648455][ T6673] netlink: 100 bytes leftover after parsing attributes in process `syz.0.482'. [ 87.765156][ T6675] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 87.777669][ T6675] tipc: Enabled bearer , priority 10 [ 88.054070][ T6689] netlink: 256 bytes leftover after parsing attributes in process `syz.0.486'. [ 88.220189][ C0] net_ratelimit: 8 callbacks suppressed [ 88.220208][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 88.535870][ T6715] netdevsim netdevsim3 ÿÿÿÿ: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.552330][ T6715] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.566100][ T6715] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.579916][ T6715] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 88.592807][ T6715] netdevsim netdevsim3 ÿÿÿÿ: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.601574][ T6715] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.610812][ T6715] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.619900][ T6715] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.629645][ T6715] geneve2: entered promiscuous mode [ 88.635441][ T6715] geneve2: entered allmulticast mode [ 88.948967][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 88.976639][ T6728] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 89.191320][ T6736] netlink: 'syz.3.505': attribute type 1 has an invalid length. [ 89.199137][ T6736] netlink: 224 bytes leftover after parsing attributes in process `syz.3.505'. [ 89.211045][ T6736] netlink: 'syz.3.505': attribute type 3 has an invalid length. [ 89.219030][ T6736] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.505'. [ 89.231485][ T6736] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 89.270232][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.436737][ T6751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.917485][ T6763] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 90.300190][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.433064][ T6815] xt_TCPMSS: Only works on TCP SYN packets [ 90.740481][ T6823] netlink: 'syz.0.531': attribute type 2 has an invalid length. [ 91.350268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 91.515463][ T6873] netlink: 'syz.1.548': attribute type 11 has an invalid length. [ 91.584406][ T6877] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 91.661397][ T6877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.669654][ T6877] bond1: (slave bond2): making interface the new active one [ 91.678683][ T6877] bond1: (slave bond2): Enslaving as an active interface with an up link [ 92.052503][ T6898] lo speed is unknown, defaulting to 1000 [ 92.129698][ T6902] tipc: Started in network mode [ 92.186334][ T6902] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 92.202647][ T6902] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 92.220758][ T6902] tipc: Enabled bearer , priority 10 [ 92.247584][ T6905] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 92.338022][ T6905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 92.367820][ T6902] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 92.380178][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 92.655916][ T6922] netlink: 'syz.4.563': attribute type 4 has an invalid length. [ 92.710906][ T6922] __nla_validate_parse: 98 callbacks suppressed [ 92.710926][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 93.316404][ T6953] netlink: 'syz.2.574': attribute type 3 has an invalid length. [ 93.325922][ T6953] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.574'. [ 93.340959][ T4651] tipc: Node number set to 1 [ 93.431352][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 93.777397][ T6970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.582'. [ 93.789124][ T6970] netlink: 39 bytes leftover after parsing attributes in process `syz.1.582'. [ 93.809939][ T6972] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20003 - 0 [ 93.843115][ T6972] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 93.863531][ T6972] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 93.910358][ T6972] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 93.968483][ T6972] geneve2: entered promiscuous mode [ 94.012633][ T6972] geneve2: entered allmulticast mode [ 94.148543][ T6989] syzkaller1: entered promiscuous mode [ 94.190195][ T6989] syzkaller1: entered allmulticast mode [ 94.460184][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.679499][ T7029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.601'. [ 94.874009][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 95.383659][ T7056] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 95.399460][ T7056] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.612'. [ 95.409759][ T7056] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 95.422246][ T7056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.612'. [ 95.500178][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.737506][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 95.754186][ T7074] netlink: 48 bytes leftover after parsing attributes in process `syz.3.620'. [ 95.774775][ T7074] vlan2: entered allmulticast mode [ 95.952305][ T7090] tipc: Enabling of bearer rejected, failed to enable media [ 96.540189][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 96.639795][ T7124] IPVS: Scheduler module ip_vs_sip not found [ 96.653414][ T7125] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 96.959200][ T7149] netlink: 'syz.4.652': attribute type 21 has an invalid length. [ 97.199492][ T7164] syzkaller1: entered promiscuous mode [ 97.220016][ T7164] syzkaller1: entered allmulticast mode [ 97.580267][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 97.751704][ T7199] __nla_validate_parse: 7 callbacks suppressed [ 97.751724][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 97.769311][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.670'. [ 97.796229][ T7203] netlink: 'syz.4.669': attribute type 9 has an invalid length. [ 97.805020][ T7203] netlink: 134672 bytes leftover after parsing attributes in process `syz.4.669'. [ 97.823653][ T7203] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 98.096870][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 98.117107][ T7225] netlink: 50 bytes leftover after parsing attributes in process `syz.2.679'. [ 98.117832][ T7228] netlink: 'syz.0.680': attribute type 4 has an invalid length. [ 98.139543][ T7228] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.680'. [ 98.142561][ T7225] netlink: 50 bytes leftover after parsing attributes in process `syz.2.679'. [ 98.239287][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 98.260377][ T7235] netlink: 'syz.2.683': attribute type 1 has an invalid length. [ 98.416708][ T7241] FAULT_INJECTION: forcing a failure. [ 98.416708][ T7241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.433730][ T7241] CPU: 1 UID: 0 PID: 7241 Comm: syz.2.686 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 98.444386][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 98.454558][ T7241] Call Trace: [ 98.457876][ T7241] [ 98.460818][ T7241] dump_stack_lvl+0x241/0x360 [ 98.465523][ T7241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.470752][ T7241] ? __pfx__printk+0x10/0x10 [ 98.475377][ T7241] ? __pfx_lock_release+0x10/0x10 [ 98.480430][ T7241] ? rcu_is_watching+0x15/0xb0 [ 98.485236][ T7241] should_fail_ex+0x3b0/0x4e0 [ 98.489949][ T7241] _copy_from_iter+0x1ed/0x1d60 [ 98.494836][ T7241] ? alloc_pages_mpol_noprof+0x417/0x680 [ 98.500500][ T7241] ? __pfx__copy_from_iter+0x10/0x10 [ 98.505817][ T7241] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 98.511828][ T7241] ? alloc_pages_noprof+0xef/0x170 [ 98.516966][ T7241] ? page_copy_sane+0x46/0x260 [ 98.521848][ T7241] copy_page_from_iter+0x7a/0x100 [ 98.526910][ T7241] tun_get_user+0x2046/0x47e0 [ 98.531623][ T7241] ? tun_get_user+0x871/0x47e0 [ 98.536439][ T7241] ? __lock_acquire+0x1384/0x2050 [ 98.541503][ T7241] ? __pfx_tun_get_user+0x10/0x10 [ 98.546544][ T7241] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 98.552011][ T7241] ? tun_get+0x1e/0x2f0 [ 98.556169][ T7241] ? __pfx_lock_release+0x10/0x10 [ 98.561379][ T7241] ? tun_get+0x1e/0x2f0 [ 98.565532][ T7241] ? tun_get+0x27d/0x2f0 [ 98.569770][ T7241] tun_chr_write_iter+0x10d/0x1f0 [ 98.574793][ T7241] vfs_write+0xa6d/0xc90 [ 98.579039][ T7241] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 98.584585][ T7241] ? __pfx_vfs_write+0x10/0x10 [ 98.589355][ T7241] ? fdget_pos+0x19a/0x320 [ 98.593789][ T7241] ksys_write+0x183/0x2b0 [ 98.598115][ T7241] ? __pfx_ksys_write+0x10/0x10 [ 98.602960][ T7241] ? do_syscall_64+0x100/0x230 [ 98.607719][ T7241] ? do_syscall_64+0xb6/0x230 [ 98.612412][ T7241] do_syscall_64+0xf3/0x230 [ 98.616909][ T7241] ? clear_bhb_loop+0x35/0x90 [ 98.621584][ T7241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.627570][ T7241] RIP: 0033:0x7f19d437cadf [ 98.631993][ T7241] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 98.640383][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 98.651579][ T7241] RSP: 002b:00007f19d515a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 98.651605][ T7241] RAX: ffffffffffffffda RBX: 00007f19d4535f80 RCX: 00007f19d437cadf [ 98.651620][ T7241] RDX: 0000000000000032 RSI: 0000000020000000 RDI: 00000000000000c8 [ 98.682767][ T7241] RBP: 00007f19d515a090 R08: 0000000000000000 R09: 0000000000000000 [ 98.690754][ T7241] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 98.698740][ T7241] R13: 0000000000000000 R14: 00007f19d4535f80 R15: 00007ffdbf7ae898 [ 98.706756][ T7241] [ 98.896687][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.691'. [ 98.920162][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.691'. [ 99.035846][ T7267] tipc: Started in network mode [ 99.046048][ T7267] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 99.055427][ T7267] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 99.069609][ T7267] tipc: Enabled bearer , priority 10 [ 99.078609][ T7270] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 99.096129][ T7269] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 99.275097][ T7279] tipc: Trying to set illegal importance in message [ 99.277725][ T7276] netlink: 'syz.1.699': attribute type 1 has an invalid length. [ 99.490340][ T7290] netlink: 'syz.0.705': attribute type 8 has an invalid length. [ 99.626754][ T7299] bridge0: port 3(erspan0) entered blocking state [ 99.653454][ T7299] bridge0: port 3(erspan0) entered disabled state [ 99.660192][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 99.666842][ T7299] erspan0: entered allmulticast mode [ 99.678525][ T7299] erspan0: entered promiscuous mode [ 99.687276][ T7299] bridge0: port 3(erspan0) entered blocking state [ 99.687558][ T7302] netlink: 'syz.4.710': attribute type 9 has an invalid length. [ 99.693874][ T7299] bridge0: port 3(erspan0) entered forwarding state [ 99.705188][ T7299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.180191][ T4651] tipc: Node number set to 1 [ 100.700192][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 100.756811][ T7333] syzkaller1: entered promiscuous mode [ 100.772796][ T7333] syzkaller1: entered allmulticast mode [ 100.986447][ T7344] tipc: MTU too low for tipc bearer [ 100.993448][ T7346] FAULT_INJECTION: forcing a failure. [ 100.993448][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 101.007817][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.1.727 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 101.018454][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.028543][ T7346] Call Trace: [ 101.031856][ T7346] [ 101.034819][ T7346] dump_stack_lvl+0x241/0x360 [ 101.039527][ T7346] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.044749][ T7346] ? __pfx__printk+0x10/0x10 [ 101.051027][ T7346] ? __kmalloc_node_noprof+0xb7/0x440 [ 101.056429][ T7346] ? __pfx___might_resched+0x10/0x10 [ 101.061754][ T7346] should_fail_ex+0x3b0/0x4e0 [ 101.066469][ T7346] should_failslab+0xac/0x100 [ 101.071184][ T7346] __kmalloc_node_noprof+0xdf/0x440 [ 101.076415][ T7346] ? __kvmalloc_node_noprof+0x72/0x190 [ 101.081902][ T7346] ? __nf_register_net_hook+0x1ef/0x8d0 [ 101.087481][ T7346] __kvmalloc_node_noprof+0x72/0x190 [ 101.092789][ T7346] nf_hook_entries_grow+0x288/0x720 [ 101.097982][ T7346] ? trace_contention_end+0x3c/0x120 [ 101.103356][ T7346] __nf_register_net_hook+0x278/0x8d0 [ 101.108765][ T7346] ? __pfx___mutex_lock+0x10/0x10 [ 101.113827][ T7346] nf_register_net_hook+0xb0/0x190 [ 101.118960][ T7346] nf_register_net_hooks+0x41/0x1a0 [ 101.124162][ T7346] nf_ct_netns_do_get+0x355/0x630 [ 101.129190][ T7346] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 101.134745][ T7346] ? __raw_spin_lock_init+0x45/0x100 [ 101.140134][ T7346] nf_ct_netns_get+0x45/0xb0 [ 101.144734][ T7346] nft_connlimit_do_init+0x1ca/0x2c0 [ 101.150021][ T7346] nft_set_elem_expr_alloc+0x1f5/0x560 [ 101.155488][ T7346] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 101.161478][ T7346] ? nft_rhash_init+0x2ea/0x430 [ 101.166330][ T7346] ? __pfx_nft_rhash_init+0x10/0x10 [ 101.171524][ T7346] ? lockdep_hardirqs_on+0x99/0x150 [ 101.176723][ T7346] ? __pfx_nft_rhash_key+0x10/0x10 [ 101.181836][ T7346] ? __pfx_nft_rhash_obj+0x10/0x10 [ 101.186951][ T7346] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 101.192061][ T7346] nft_set_expr_alloc+0x67/0x770 [ 101.196998][ T7346] ? nf_tables_newset+0x17de/0x2ee0 [ 101.202206][ T7346] nf_tables_newset+0x225d/0x2ee0 [ 101.207250][ T7346] ? __pfx_nf_tables_newset+0x10/0x10 [ 101.212633][ T7346] ? __pfx_lock_release+0x10/0x10 [ 101.217680][ T7346] ? __nla_parse+0x40/0x60 [ 101.222098][ T7346] nfnetlink_rcv+0x14dc/0x2ab0 [ 101.226886][ T7346] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.232028][ T7346] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.237219][ T7346] ? skb_clone+0x240/0x390 [ 101.241640][ T7346] ? __pfx_lock_release+0x10/0x10 [ 101.246689][ T7346] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.251884][ T7346] netlink_unicast+0x7f6/0x990 [ 101.256833][ T7346] ? __pfx_netlink_unicast+0x10/0x10 [ 101.262119][ T7346] ? __virt_addr_valid+0x183/0x530 [ 101.267231][ T7346] ? __check_object_size+0x48e/0x900 [ 101.272521][ T7346] netlink_sendmsg+0x8e4/0xcb0 [ 101.277292][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.282581][ T7346] ? aa_sock_msg_perm+0x91/0x160 [ 101.287523][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.292818][ T7346] __sock_sendmsg+0x221/0x270 [ 101.297500][ T7346] ____sys_sendmsg+0x52a/0x7e0 [ 101.302266][ T7346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.307559][ T7346] __sys_sendmsg+0x292/0x380 [ 101.312148][ T7346] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.317269][ T7346] ? __pfx_vfs_write+0x10/0x10 [ 101.322050][ T7346] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.328379][ T7346] ? do_syscall_64+0x100/0x230 [ 101.333146][ T7346] ? do_syscall_64+0xb6/0x230 [ 101.337821][ T7346] do_syscall_64+0xf3/0x230 [ 101.342323][ T7346] ? clear_bhb_loop+0x35/0x90 [ 101.347001][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.352901][ T7346] RIP: 0033:0x7fc2c137dff9 [ 101.357315][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.376929][ T7346] RSP: 002b:00007fc2c20fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.385349][ T7346] RAX: ffffffffffffffda RBX: 00007fc2c1535f80 RCX: 00007fc2c137dff9 [ 101.393317][ T7346] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 101.401284][ T7346] RBP: 00007fc2c20fc090 R08: 0000000000000000 R09: 0000000000000000 [ 101.409339][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.417307][ T7346] R13: 0000000000000000 R14: 00007fc2c1535f80 R15: 00007fff69bef348 [ 101.425291][ T7346] [ 101.444228][ T7351] wg2: entered promiscuous mode [ 101.487558][ T7351] team0: Device wg2 is of different type [ 101.613282][ T7360] tipc: Invalid UDP bearer configuration [ 101.613323][ T7360] tipc: Enabling of bearer rejected, failed to enable media [ 101.740192][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 101.874355][ T7376] syzkaller1: entered promiscuous mode [ 101.892125][ T7376] syzkaller1: entered allmulticast mode [ 102.479902][ T7420] lo speed is unknown, defaulting to 1000 [ 102.607603][ T7420] bond0: entered promiscuous mode [ 102.620296][ T7420] bond0: entered allmulticast mode [ 102.639152][ T7420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.780314][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 103.137840][ T61] bond0 (unregistering): Released all slaves [ 103.162592][ T7437] syzkaller1: entered promiscuous mode [ 103.168570][ T7437] syzkaller1: entered allmulticast mode [ 103.180256][ T7445] __nla_validate_parse: 22 callbacks suppressed [ 103.180273][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 103.455943][ T7460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.480303][ T7462] FAULT_INJECTION: forcing a failure. [ 103.480303][ T7462] name failslab, interval 1, probability 0, space 0, times 0 [ 103.495220][ T7460] IPv6: sit1: Disabled Multicast RS [ 103.511374][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.1.765 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 103.522012][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.532092][ T7462] Call Trace: [ 103.535401][ T7462] [ 103.538353][ T7462] dump_stack_lvl+0x241/0x360 [ 103.543044][ T7462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.548248][ T7462] ? __pfx__printk+0x10/0x10 [ 103.552847][ T7462] ? __kmalloc_node_noprof+0xb7/0x440 [ 103.558219][ T7462] ? __pfx___might_resched+0x10/0x10 [ 103.563509][ T7462] should_fail_ex+0x3b0/0x4e0 [ 103.568191][ T7462] should_failslab+0xac/0x100 [ 103.572874][ T7462] __kmalloc_node_noprof+0xdf/0x440 [ 103.578071][ T7462] ? __kvmalloc_node_noprof+0x72/0x190 [ 103.583621][ T7462] __kvmalloc_node_noprof+0x72/0x190 [ 103.588907][ T7462] bpf_test_run_xdp_live+0x290/0x2160 [ 103.594283][ T7462] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 103.600196][ T7462] ? __pfx_lock_release+0x10/0x10 [ 103.605229][ T7462] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 103.610513][ T7462] ? __pfx___might_resched+0x10/0x10 [ 103.615806][ T7462] ? __mutex_unlock_slowpath+0x21d/0x750 [ 103.621557][ T7462] ? __pfx_autoremove_wake_function+0x10/0x10 [ 103.627628][ T7462] ? __mutex_unlock_slowpath+0x21d/0x750 [ 103.633281][ T7462] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 103.639112][ T7462] ? synchronize_rcu+0x11b/0x360 [ 103.644135][ T7462] ? __pfx_synchronize_rcu+0x10/0x10 [ 103.649437][ T7462] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 103.655681][ T7462] ? 0xffffffffa00007dc [ 103.659845][ T7462] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 103.665750][ T7462] ? _copy_from_user+0xa6/0xe0 [ 103.670602][ T7462] ? bpf_test_init+0x15a/0x180 [ 103.675368][ T7462] ? xdp_convert_md_to_buff+0x5b/0x330 [ 103.680916][ T7462] bpf_prog_test_run_xdp+0x805/0x11e0 [ 103.686408][ T7462] ? __pfx_lock_release+0x10/0x10 [ 103.691446][ T7462] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.697278][ T7462] ? __fget_files+0x29/0x470 [ 103.701895][ T7462] ? fput+0x1a8/0x230 [ 103.705877][ T7462] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 103.711705][ T7462] bpf_prog_test_run+0x2e4/0x360 [ 103.716647][ T7462] __sys_bpf+0x48d/0x810 [ 103.720896][ T7462] ? __pfx___sys_bpf+0x10/0x10 [ 103.725667][ T7462] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.731652][ T7462] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.737980][ T7462] ? do_syscall_64+0x100/0x230 [ 103.742745][ T7462] __x64_sys_bpf+0x7c/0x90 [ 103.747247][ T7462] do_syscall_64+0xf3/0x230 [ 103.751760][ T7462] ? clear_bhb_loop+0x35/0x90 [ 103.756441][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.762354][ T7462] RIP: 0033:0x7fc2c137dff9 [ 103.766785][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.786484][ T7462] RSP: 002b:00007fc2c20fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.794901][ T7462] RAX: ffffffffffffffda RBX: 00007fc2c1535f80 RCX: 00007fc2c137dff9 [ 103.802871][ T7462] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 103.811275][ T7462] RBP: 00007fc2c20fc090 R08: 0000000000000000 R09: 0000000000000000 [ 103.819247][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.827218][ T7462] R13: 0000000000000000 R14: 00007fc2c1535f80 R15: 00007fff69bef348 [ 103.835199][ T7462] [ 103.838851][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 104.139766][ T7483] validate_nla: 1 callbacks suppressed [ 104.139786][ T7483] netlink: 'syz.4.774': attribute type 10 has an invalid length. [ 104.165943][ T7483] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.774'. [ 104.181125][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 104.572251][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.780'. [ 104.591346][ T7510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.780'. [ 104.602919][ T7512] netlink: 68 bytes leftover after parsing attributes in process `syz.2.782'. [ 104.769261][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 104.860144][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 104.962580][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 104.978337][ T7534] netlink: 21 bytes leftover after parsing attributes in process `syz.3.790'. [ 105.060105][ T7541] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 105.293806][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.796'. [ 105.826472][ T7596] FAULT_INJECTION: forcing a failure. [ 105.826472][ T7596] name failslab, interval 1, probability 0, space 0, times 0 [ 105.839856][ T7596] CPU: 0 UID: 0 PID: 7596 Comm: syz.3.811 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 105.850483][ T7596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.860569][ T7596] Call Trace: [ 105.863874][ T7596] [ 105.866814][ T7596] dump_stack_lvl+0x241/0x360 [ 105.871491][ T7596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.876771][ T7596] ? __pfx__printk+0x10/0x10 [ 105.881376][ T7596] ? __kmalloc_node_noprof+0xb7/0x440 [ 105.886803][ T7596] ? __pfx___might_resched+0x10/0x10 [ 105.892111][ T7596] should_fail_ex+0x3b0/0x4e0 [ 105.896835][ T7596] should_failslab+0xac/0x100 [ 105.901543][ T7596] __kmalloc_node_noprof+0xdf/0x440 [ 105.906772][ T7596] ? __kvmalloc_node_noprof+0x72/0x190 [ 105.912254][ T7596] ? __pfx___mutex_trylock_common+0x10/0x10 [ 105.918190][ T7596] __kvmalloc_node_noprof+0x72/0x190 [ 105.923500][ T7596] nf_hook_entries_grow+0x288/0x720 [ 105.928745][ T7596] __nf_register_net_hook+0x278/0x8d0 [ 105.934160][ T7596] ? __pfx___mutex_lock+0x10/0x10 [ 105.939220][ T7596] nf_register_net_hook+0xb0/0x190 [ 105.944366][ T7596] nf_register_net_hooks+0x41/0x1a0 [ 105.949601][ T7596] nf_defrag_ipv4_enable+0x85/0x110 [ 105.954821][ T7596] nf_ct_netns_do_get+0x187/0x630 [ 105.960205][ T7596] ? nf_ct_iterate_cleanup_net+0x9c/0xc0 [ 105.965872][ T7596] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 105.971445][ T7596] ? nf_ct_netns_do_get+0x549/0x630 [ 105.976675][ T7596] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 105.982260][ T7596] nf_ct_netns_inet_get+0x1f/0x150 [ 105.987405][ T7596] nf_ct_netns_get+0x5c/0xb0 [ 105.992021][ T7596] nft_connlimit_do_init+0x1ca/0x2c0 [ 105.997342][ T7596] nft_set_elem_expr_alloc+0x1f5/0x560 [ 106.002839][ T7596] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 106.008860][ T7596] ? nft_rhash_init+0x2ea/0x430 [ 106.013741][ T7596] ? __pfx_nft_rhash_init+0x10/0x10 [ 106.018961][ T7596] ? lockdep_hardirqs_on+0x99/0x150 [ 106.024203][ T7596] ? __pfx_nft_rhash_key+0x10/0x10 [ 106.029346][ T7596] ? __pfx_nft_rhash_obj+0x10/0x10 [ 106.034577][ T7596] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 106.039723][ T7596] nft_set_expr_alloc+0x67/0x770 [ 106.044692][ T7596] ? nf_tables_newset+0x17de/0x2ee0 [ 106.049927][ T7596] nf_tables_newset+0x225d/0x2ee0 [ 106.055027][ T7596] ? __pfx_nf_tables_newset+0x10/0x10 [ 106.060445][ T7596] ? __pfx_lock_release+0x10/0x10 [ 106.065512][ T7596] ? __nla_parse+0x40/0x60 [ 106.070056][ T7596] nfnetlink_rcv+0x14dc/0x2ab0 [ 106.074885][ T7596] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 106.080066][ T7596] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.085276][ T7596] ? skb_clone+0x240/0x390 [ 106.089690][ T7596] ? __pfx_lock_release+0x10/0x10 [ 106.094721][ T7596] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.099921][ T7596] netlink_unicast+0x7f6/0x990 [ 106.104710][ T7596] ? __pfx_netlink_unicast+0x10/0x10 [ 106.110012][ T7596] ? __virt_addr_valid+0x183/0x530 [ 106.115136][ T7596] ? __check_object_size+0x48e/0x900 [ 106.120422][ T7596] netlink_sendmsg+0x8e4/0xcb0 [ 106.125189][ T7596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.130488][ T7596] ? aa_sock_msg_perm+0x91/0x160 [ 106.135454][ T7596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.140748][ T7596] __sock_sendmsg+0x221/0x270 [ 106.145453][ T7596] ____sys_sendmsg+0x52a/0x7e0 [ 106.150252][ T7596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.155557][ T7596] __sys_sendmsg+0x292/0x380 [ 106.160158][ T7596] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.165305][ T7596] ? __pfx_vfs_write+0x10/0x10 [ 106.170117][ T7596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.176463][ T7596] ? do_syscall_64+0x100/0x230 [ 106.181240][ T7596] ? do_syscall_64+0xb6/0x230 [ 106.185910][ T7596] do_syscall_64+0xf3/0x230 [ 106.190607][ T7596] ? clear_bhb_loop+0x35/0x90 [ 106.195303][ T7596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.201200][ T7596] RIP: 0033:0x7f17dd77dff9 [ 106.205613][ T7596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.225235][ T7596] RSP: 002b:00007f17de653038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.233690][ T7596] RAX: ffffffffffffffda RBX: 00007f17dd935f80 RCX: 00007f17dd77dff9 [ 106.241690][ T7596] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 106.249688][ T7596] RBP: 00007f17de653090 R08: 0000000000000000 R09: 0000000000000000 [ 106.257692][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.265691][ T7596] R13: 0000000000000000 R14: 00007f17dd935f80 R15: 00007ffdcf3be028 [ 106.273708][ T7596] [ 106.277292][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 106.560544][ T7618] netlink: 'syz.3.820': attribute type 9 has an invalid length. [ 106.796812][ T7637] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 107.340428][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 107.591184][ T7669] openvswitch: netlink: Unknown nsh attribute 0 [ 107.889315][ T7685] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 107.959942][ T7685] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 107.995805][ T7685] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 108.025043][ T7685] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 108.067813][ T7685] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 108.082761][ T7685] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 108.105170][ T7685] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 108.131154][ T7685] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 108.254037][ T7701] __nla_validate_parse: 6 callbacks suppressed [ 108.254059][ T7701] netlink: 68 bytes leftover after parsing attributes in process `syz.3.846'. [ 108.380252][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 108.530719][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.850'. [ 108.945653][ T7734] gtp0: entered promiscuous mode [ 108.964416][ T7734] gtp0: entered allmulticast mode [ 109.169860][ T7744] validate_nla: 41 callbacks suppressed [ 109.169880][ T7744] netlink: 'syz.2.857': attribute type 1 has an invalid length. [ 109.241417][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 109.420184][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 109.580452][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 109.611535][ T7773] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 109.900519][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 109.929608][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 109.946572][ T7795] netlink: 188 bytes leftover after parsing attributes in process `syz.2.875'. [ 109.961124][ T7795] netlink: 188 bytes leftover after parsing attributes in process `syz.2.875'. [ 110.111218][ T7801] team0: Port device team_slave_1 removed [ 110.125000][ T7801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 110.183035][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 110.237325][ T7808] FAULT_INJECTION: forcing a failure. [ 110.237325][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 110.263689][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.2.881 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 110.274431][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.284523][ T7808] Call Trace: [ 110.287873][ T7808] [ 110.290826][ T7808] dump_stack_lvl+0x241/0x360 [ 110.295572][ T7808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.300851][ T7808] ? __pfx__printk+0x10/0x10 [ 110.305481][ T7808] ? __kmalloc_node_noprof+0xb7/0x440 [ 110.310884][ T7808] ? __pfx___might_resched+0x10/0x10 [ 110.316203][ T7808] should_fail_ex+0x3b0/0x4e0 [ 110.320912][ T7808] should_failslab+0xac/0x100 [ 110.325596][ T7808] __kmalloc_node_noprof+0xdf/0x440 [ 110.330801][ T7808] ? __kvmalloc_node_noprof+0x72/0x190 [ 110.336256][ T7808] ? __nf_register_net_hook+0x1ef/0x8d0 [ 110.341803][ T7808] __kvmalloc_node_noprof+0x72/0x190 [ 110.347081][ T7808] nf_hook_entries_grow+0x288/0x720 [ 110.352287][ T7808] __nf_register_net_hook+0x278/0x8d0 [ 110.357665][ T7808] nf_register_net_hook+0xb0/0x190 [ 110.362782][ T7808] nf_register_net_hooks+0x41/0x1a0 [ 110.367981][ T7808] nf_ct_netns_do_get+0x3b0/0x630 [ 110.373008][ T7808] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 110.378296][ T7808] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 110.383841][ T7808] ? nf_ct_netns_do_get+0x549/0x630 [ 110.389049][ T7808] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 110.394600][ T7808] nf_ct_netns_inet_get+0x1f/0x150 [ 110.399726][ T7808] nf_ct_netns_get+0x5c/0xb0 [ 110.404321][ T7808] nft_connlimit_do_init+0x1ca/0x2c0 [ 110.409615][ T7808] nft_set_elem_expr_alloc+0x1f5/0x560 [ 110.415076][ T7808] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 110.421073][ T7808] ? nft_rhash_init+0x2ea/0x430 [ 110.425925][ T7808] ? __pfx_nft_rhash_init+0x10/0x10 [ 110.431118][ T7808] ? lockdep_hardirqs_on+0x99/0x150 [ 110.436314][ T7808] ? __pfx_nft_rhash_key+0x10/0x10 [ 110.441424][ T7808] ? __pfx_nft_rhash_obj+0x10/0x10 [ 110.446533][ T7808] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 110.451647][ T7808] nft_set_expr_alloc+0x67/0x770 [ 110.456584][ T7808] ? nf_tables_newset+0x17de/0x2ee0 [ 110.461819][ T7808] nf_tables_newset+0x225d/0x2ee0 [ 110.466860][ T7808] ? __pfx_nf_tables_newset+0x10/0x10 [ 110.470288][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.472231][ T7808] ? __pfx_lock_release+0x10/0x10 [ 110.484104][ T7808] ? __nla_parse+0x40/0x60 [ 110.488524][ T7808] nfnetlink_rcv+0x14dc/0x2ab0 [ 110.493310][ T7808] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 110.498451][ T7808] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.503643][ T7808] ? skb_clone+0x240/0x390 [ 110.508323][ T7808] ? __pfx_lock_release+0x10/0x10 [ 110.513360][ T7808] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.518732][ T7808] netlink_unicast+0x7f6/0x990 [ 110.523502][ T7808] ? __pfx_netlink_unicast+0x10/0x10 [ 110.528785][ T7808] ? __virt_addr_valid+0x183/0x530 [ 110.533903][ T7808] ? __check_object_size+0x48e/0x900 [ 110.540582][ T7808] netlink_sendmsg+0x8e4/0xcb0 [ 110.545355][ T7808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.550639][ T7808] ? aa_sock_msg_perm+0x91/0x160 [ 110.555579][ T7808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.560865][ T7808] __sock_sendmsg+0x221/0x270 [ 110.565546][ T7808] ____sys_sendmsg+0x52a/0x7e0 [ 110.570335][ T7808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.575649][ T7808] __sys_sendmsg+0x292/0x380 [ 110.580243][ T7808] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.585447][ T7808] ? __pfx_vfs_write+0x10/0x10 [ 110.590273][ T7808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.596610][ T7808] ? do_syscall_64+0x100/0x230 [ 110.601374][ T7808] ? do_syscall_64+0xb6/0x230 [ 110.606046][ T7808] do_syscall_64+0xf3/0x230 [ 110.610545][ T7808] ? clear_bhb_loop+0x35/0x90 [ 110.615217][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.621113][ T7808] RIP: 0033:0x7f19d437dff9 [ 110.625531][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.645132][ T7808] RSP: 002b:00007f19d515a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.653569][ T7808] RAX: ffffffffffffffda RBX: 00007f19d4535f80 RCX: 00007f19d437dff9 [ 110.661542][ T7808] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 110.669511][ T7808] RBP: 00007f19d515a090 R08: 0000000000000000 R09: 0000000000000000 [ 110.677478][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.685446][ T7808] R13: 0000000000000000 R14: 00007f19d4535f80 R15: 00007ffdbf7ae898 [ 110.693425][ T7808] [ 110.854722][ T7821] netlink: 'syz.0.887': attribute type 21 has an invalid length. [ 111.426267][ T7866] FAULT_INJECTION: forcing a failure. [ 111.426267][ T7866] name failslab, interval 1, probability 0, space 0, times 0 [ 111.427194][ T7867] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 111.467830][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.3.900 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 111.478484][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.488576][ T7866] Call Trace: [ 111.491876][ T7866] [ 111.494830][ T7866] dump_stack_lvl+0x241/0x360 [ 111.499544][ T7866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.504776][ T7866] ? __pfx__printk+0x10/0x10 [ 111.509406][ T7866] ? __kmalloc_node_noprof+0xb7/0x440 [ 111.514809][ T7866] ? __pfx___might_resched+0x10/0x10 [ 111.520133][ T7866] should_fail_ex+0x3b0/0x4e0 [ 111.524848][ T7866] should_failslab+0xac/0x100 [ 111.529556][ T7866] __kmalloc_node_noprof+0xdf/0x440 [ 111.534873][ T7866] ? __kvmalloc_node_noprof+0x72/0x190 [ 111.540359][ T7866] ? __nf_register_net_hook+0x1ef/0x8d0 [ 111.546042][ T7866] __kvmalloc_node_noprof+0x72/0x190 [ 111.546310][ T7877] netlink: 'syz.2.904': attribute type 2 has an invalid length. [ 111.551339][ T7866] nf_hook_entries_grow+0x288/0x720 [ 111.551384][ T7866] __nf_register_net_hook+0x278/0x8d0 [ 111.551417][ T7866] nf_register_net_hook+0xb0/0x190 [ 111.551440][ T7866] nf_register_net_hooks+0x41/0x1a0 [ 111.551465][ T7866] nf_ct_netns_do_get+0x3b0/0x630 [ 111.551487][ T7866] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 111.551511][ T7866] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 111.551531][ T7866] ? nf_ct_netns_do_get+0x549/0x630 [ 111.551553][ T7866] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 111.551583][ T7866] nf_ct_netns_inet_get+0x1f/0x150 [ 111.551607][ T7866] nf_ct_netns_get+0x5c/0xb0 [ 111.551628][ T7866] nft_connlimit_do_init+0x1ca/0x2c0 [ 111.551653][ T7866] nft_set_elem_expr_alloc+0x1f5/0x560 [ 111.551675][ T7866] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 111.551708][ T7866] ? nft_rhash_init+0x2ea/0x430 [ 111.638119][ T7866] ? __pfx_nft_rhash_init+0x10/0x10 [ 111.643352][ T7866] ? lockdep_hardirqs_on+0x99/0x150 [ 111.648589][ T7866] ? __pfx_nft_rhash_key+0x10/0x10 [ 111.653737][ T7866] ? __pfx_nft_rhash_obj+0x10/0x10 [ 111.659233][ T7866] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 111.664380][ T7866] nft_set_expr_alloc+0x67/0x770 [ 111.669348][ T7866] ? nf_tables_newset+0x17de/0x2ee0 [ 111.674589][ T7866] nf_tables_newset+0x225d/0x2ee0 [ 111.679677][ T7866] ? __pfx_nf_tables_newset+0x10/0x10 [ 111.685091][ T7866] ? __pfx_lock_release+0x10/0x10 [ 111.690246][ T7866] ? __nla_parse+0x40/0x60 [ 111.694695][ T7866] nfnetlink_rcv+0x14dc/0x2ab0 [ 111.699505][ T7866] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 111.704685][ T7866] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.709911][ T7866] ? skb_clone+0x240/0x390 [ 111.714361][ T7866] ? __pfx_lock_release+0x10/0x10 [ 111.719427][ T7866] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.724646][ T7866] netlink_unicast+0x7f6/0x990 [ 111.729455][ T7866] ? __pfx_netlink_unicast+0x10/0x10 [ 111.734767][ T7866] ? __virt_addr_valid+0x183/0x530 [ 111.739905][ T7866] ? __check_object_size+0x48e/0x900 [ 111.742779][ T7880] netlink: 'syz.2.904': attribute type 1 has an invalid length. [ 111.745198][ T7866] netlink_sendmsg+0x8e4/0xcb0 [ 111.745237][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.762928][ T7866] ? aa_sock_msg_perm+0x91/0x160 [ 111.768039][ T7866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.773346][ T7866] __sock_sendmsg+0x221/0x270 [ 111.778058][ T7866] ____sys_sendmsg+0x52a/0x7e0 [ 111.782857][ T7866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.788195][ T7866] __sys_sendmsg+0x292/0x380 [ 111.792819][ T7866] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.797974][ T7866] ? __pfx_vfs_write+0x10/0x10 [ 111.802788][ T7866] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.809153][ T7866] ? do_syscall_64+0x100/0x230 [ 111.813950][ T7866] ? do_syscall_64+0xb6/0x230 [ 111.818657][ T7866] do_syscall_64+0xf3/0x230 [ 111.823190][ T7866] ? clear_bhb_loop+0x35/0x90 [ 111.827898][ T7866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.833831][ T7866] RIP: 0033:0x7f17dd77dff9 [ 111.838276][ T7866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.857910][ T7866] RSP: 002b:00007f17de653038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.866367][ T7866] RAX: ffffffffffffffda RBX: 00007f17dd935f80 RCX: 00007f17dd77dff9 [ 111.874374][ T7866] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 111.882377][ T7866] RBP: 00007f17de653090 R08: 0000000000000000 R09: 0000000000000000 [ 111.890383][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.898387][ T7866] R13: 0000000000000000 R14: 00007f17dd935f80 R15: 00007ffdcf3be028 [ 111.906413][ T7866] [ 111.910539][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 111.938537][ T7867] lo speed is unknown, defaulting to 1000 [ 112.795581][ T7924] FAULT_INJECTION: forcing a failure. [ 112.795581][ T7924] name failslab, interval 1, probability 0, space 0, times 0 [ 112.818327][ T7924] CPU: 1 UID: 0 PID: 7924 Comm: syz.0.917 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 112.828968][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 112.839021][ T7924] Call Trace: [ 112.842296][ T7924] [ 112.845224][ T7924] dump_stack_lvl+0x241/0x360 [ 112.849911][ T7924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.855104][ T7924] ? __pfx__printk+0x10/0x10 [ 112.859695][ T7924] ? __kmalloc_node_noprof+0xb7/0x440 [ 112.865072][ T7924] ? __pfx___might_resched+0x10/0x10 [ 112.870353][ T7924] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.876353][ T7924] should_fail_ex+0x3b0/0x4e0 [ 112.881037][ T7924] should_failslab+0xac/0x100 [ 112.885712][ T7924] __kmalloc_node_noprof+0xdf/0x440 [ 112.890907][ T7924] ? __kvmalloc_node_noprof+0x72/0x190 [ 112.896366][ T7924] __kvmalloc_node_noprof+0x72/0x190 [ 112.901759][ T7924] nf_hook_entries_grow+0x288/0x720 [ 112.907010][ T7924] __nf_register_net_hook+0x278/0x8d0 [ 112.912408][ T7924] nf_register_net_hook+0xb0/0x190 [ 112.917532][ T7924] nf_register_net_hooks+0x41/0x1a0 [ 112.922744][ T7924] nf_defrag_ipv6_enable+0x85/0x110 [ 112.927951][ T7924] nf_ct_netns_do_get+0x1e1/0x630 [ 112.932972][ T7924] ? __pfx_nf_ct_tcp_fixup+0x10/0x10 [ 112.938259][ T7924] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 112.943800][ T7924] ? nf_ct_netns_do_get+0x549/0x630 [ 112.948999][ T7924] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 112.954548][ T7924] nf_ct_netns_inet_get+0x3b/0x150 [ 112.959664][ T7924] nf_ct_netns_get+0x5c/0xb0 [ 112.960529][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 112.964245][ T7924] nft_connlimit_do_init+0x1ca/0x2c0 [ 112.976422][ T7924] nft_set_elem_expr_alloc+0x1f5/0x560 [ 112.981901][ T7924] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 112.987910][ T7924] ? nft_rhash_init+0x2ea/0x430 [ 112.992771][ T7924] ? __pfx_nft_rhash_init+0x10/0x10 [ 112.997978][ T7924] ? lockdep_hardirqs_on+0x99/0x150 [ 113.003178][ T7924] ? __pfx_nft_rhash_key+0x10/0x10 [ 113.008284][ T7924] ? __pfx_nft_rhash_obj+0x10/0x10 [ 113.013393][ T7924] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 113.018509][ T7924] nft_set_expr_alloc+0x67/0x770 [ 113.023449][ T7924] ? nf_tables_newset+0x17de/0x2ee0 [ 113.028676][ T7924] nf_tables_newset+0x225d/0x2ee0 [ 113.033717][ T7924] ? __pfx_nf_tables_newset+0x10/0x10 [ 113.039094][ T7924] ? __pfx_lock_release+0x10/0x10 [ 113.044128][ T7924] ? __nla_parse+0x40/0x60 [ 113.048545][ T7924] nfnetlink_rcv+0x14dc/0x2ab0 [ 113.053330][ T7924] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 113.058474][ T7924] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.063668][ T7924] ? skb_clone+0x240/0x390 [ 113.068080][ T7924] ? __pfx_lock_release+0x10/0x10 [ 113.073115][ T7924] ? netlink_deliver_tap+0x2e/0x1b0 [ 113.078312][ T7924] netlink_unicast+0x7f6/0x990 [ 113.083082][ T7924] ? __pfx_netlink_unicast+0x10/0x10 [ 113.088366][ T7924] ? __virt_addr_valid+0x183/0x530 [ 113.093522][ T7924] ? __check_object_size+0x48e/0x900 [ 113.098808][ T7924] netlink_sendmsg+0x8e4/0xcb0 [ 113.103580][ T7924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.108862][ T7924] ? aa_sock_msg_perm+0x91/0x160 [ 113.113834][ T7924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.119117][ T7924] __sock_sendmsg+0x221/0x270 [ 113.123884][ T7924] ____sys_sendmsg+0x52a/0x7e0 [ 113.128658][ T7924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.133953][ T7924] __sys_sendmsg+0x292/0x380 [ 113.138540][ T7924] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.143662][ T7924] ? __pfx_vfs_write+0x10/0x10 [ 113.148442][ T7924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.154776][ T7924] ? do_syscall_64+0x100/0x230 [ 113.159546][ T7924] ? do_syscall_64+0xb6/0x230 [ 113.164228][ T7924] do_syscall_64+0xf3/0x230 [ 113.168728][ T7924] ? clear_bhb_loop+0x35/0x90 [ 113.173402][ T7924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.179293][ T7924] RIP: 0033:0x7ff5b2f7dff9 [ 113.183706][ T7924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.203306][ T7924] RSP: 002b:00007ff5b3d19038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.211720][ T7924] RAX: ffffffffffffffda RBX: 00007ff5b3135f80 RCX: 00007ff5b2f7dff9 [ 113.219685][ T7924] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 113.227655][ T7924] RBP: 00007ff5b3d19090 R08: 0000000000000000 R09: 0000000000000000 [ 113.235627][ T7924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.243593][ T7924] R13: 0000000000000000 R14: 00007ff5b3135f80 R15: 00007ffd538b2bb8 [ 113.251578][ T7924] [ 113.395465][ T7933] tipc: Enabled bearer , priority 10 [ 113.980132][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 115.020396][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 116.060141][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 117.101345][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 118.140182][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 119.180410][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 120.220175][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 121.260398][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 122.300145][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 123.350392][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 124.390140][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 125.420409][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 126.470142][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 127.510395][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 128.550128][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 129.580381][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 130.620130][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.670392][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 132.700129][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 133.102668][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.740448][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 134.780208][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 135.830417][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 136.860139][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 137.910402][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 138.940160][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 139.980613][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 141.020142][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 142.070409][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 143.100119][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 144.140417][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 145.190136][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 146.220406][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 147.260121][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 148.300404][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 149.340139][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 150.380396][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 151.430130][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 152.470376][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 153.500136][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.540443][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 155.580162][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 156.620385][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 157.660124][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 158.700470][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 159.740120][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 160.780436][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 161.820201][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 162.860395][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.900112][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 164.940388][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 165.990113][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 167.020497][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 168.060226][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 169.100380][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 170.140149][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 171.190379][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.220120][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 173.260368][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 174.300120][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 175.340423][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 176.380102][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.420374][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 178.460162][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.500378][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 179.980131][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 179.986492][ T5233] Bluetooth: hci1: command tx timeout [ 179.992738][ T4624] Bluetooth: hci3: command tx timeout [ 180.540123][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.580387][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 182.620134][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 183.660556][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.700103][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 185.740360][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 186.780118][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 187.830354][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 188.860100][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 189.900371][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.940159][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 191.980393][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 193.020089][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 194.060375][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.110097][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 196.140407][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.180103][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 198.220366][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 199.260100][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 200.310371][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.340103][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.710447][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.380358][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 203.420136][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 204.470359][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 205.500104][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 206.540393][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 207.580106][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 208.620383][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 209.670112][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 210.710361][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 211.740271][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.780494][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 213.820112][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.870418][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.900118][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 216.940407][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.980094][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 219.020348][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.060091][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 221.100378][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 222.150123][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.180393][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 224.220114][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 225.260395][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 226.276970][ T8021] __nla_validate_parse: 12 callbacks suppressed [ 226.276992][ T8021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'. [ 226.300122][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.146215][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.156064][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.171657][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.181074][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.193203][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.201631][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.234141][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.244606][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.254062][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.262309][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.273470][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 227.285418][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.301258][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.310613][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.319665][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.340477][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 227.371400][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.379628][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 227.388581][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.423130][ T4624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.431805][ T4624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.446428][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.451595][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.461459][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.465922][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.471587][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.478083][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.492113][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.492499][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.499874][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 227.515635][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.544782][ T5237] syz-executor (5237) used greatest stack depth: 18832 bytes left [ 227.606109][ T8038] lo speed is unknown, defaulting to 1000 [ 227.636575][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.658266][ T8029] lo speed is unknown, defaulting to 1000 [ 227.685436][ T8034] lo speed is unknown, defaulting to 1000 [ 227.724137][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.738306][ T8036] lo speed is unknown, defaulting to 1000 [ 227.758932][ T8032] lo speed is unknown, defaulting to 1000 [ 227.780354][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.820496][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 227.898455][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.142617][ T8038] chnl_net:caif_netlink_parms(): no params data found [ 228.235994][ T8034] chnl_net:caif_netlink_parms(): no params data found [ 228.293387][ T12] erspan0: left allmulticast mode [ 228.298491][ T12] erspan0: left promiscuous mode [ 228.305574][ T12] bridge0: port 3(erspan0) entered disabled state [ 228.315578][ T12] bridge_slave_1: left allmulticast mode [ 228.321606][ T12] bridge_slave_1: left promiscuous mode [ 228.327283][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.339735][ T12] bridge_slave_0: left allmulticast mode [ 228.346438][ T12] bridge_slave_0: left promiscuous mode [ 228.352664][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.380265][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 228.670468][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.684374][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.694863][ T12] bond0 (unregistering): Released all slaves [ 228.830320][ T12] tipc: Disabling bearer [ 228.838086][ T12] tipc: Disabling bearer [ 228.844374][ T12] tipc: Left network mode [ 228.851717][ T8029] chnl_net:caif_netlink_parms(): no params data found [ 228.866402][ T8036] chnl_net:caif_netlink_parms(): no params data found [ 228.876808][ T8032] chnl_net:caif_netlink_parms(): no params data found [ 228.905722][ T8038] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.913196][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.920551][ T8038] bridge_slave_0: entered allmulticast mode [ 228.927157][ T8038] bridge_slave_0: entered promiscuous mode [ 228.939122][ T8038] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.946535][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.955494][ T8038] bridge_slave_1: entered allmulticast mode [ 228.964004][ T8038] bridge_slave_1: entered promiscuous mode [ 229.085220][ T8034] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.092650][ T8034] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.099913][ T8034] bridge_slave_0: entered allmulticast mode [ 229.108259][ T8034] bridge_slave_0: entered promiscuous mode [ 229.164027][ T8034] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.175229][ T8034] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.182967][ T8034] bridge_slave_1: entered allmulticast mode [ 229.189585][ T8034] bridge_slave_1: entered promiscuous mode [ 229.212161][ T8038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.298852][ T8038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.326380][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.334894][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.342531][ T5233] Bluetooth: hci3: command tx timeout [ 229.346807][ T8036] bridge_slave_0: entered allmulticast mode [ 229.356103][ T8036] bridge_slave_0: entered promiscuous mode [ 229.364402][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.371600][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.378811][ T8032] bridge_slave_0: entered allmulticast mode [ 229.386081][ T8032] bridge_slave_0: entered promiscuous mode [ 229.394277][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.401693][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.409017][ T8032] bridge_slave_1: entered allmulticast mode [ 229.416076][ T8032] bridge_slave_1: entered promiscuous mode [ 229.432981][ T5233] Bluetooth: hci0: command tx timeout [ 229.457217][ T8034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.496002][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.503823][ T5233] Bluetooth: hci2: command tx timeout [ 229.509920][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.519617][ T8036] bridge_slave_1: entered allmulticast mode [ 229.527572][ T8036] bridge_slave_1: entered promiscuous mode [ 229.563688][ T8034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.580304][ T5233] Bluetooth: hci1: command tx timeout [ 229.586303][ T5233] Bluetooth: hci5: command tx timeout [ 229.594969][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.602828][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.610618][ T8029] bridge_slave_0: entered allmulticast mode [ 229.617248][ T8029] bridge_slave_0: entered promiscuous mode [ 229.631458][ T8038] team0: Port device team_slave_0 added [ 229.678619][ T12] hsr_slave_0: left promiscuous mode [ 229.691283][ T12] hsr_slave_1: left promiscuous mode [ 229.719252][ T12] veth1_macvtap: left promiscuous mode [ 229.733001][ T12] veth0_macvtap: left promiscuous mode [ 229.738648][ T12] veth1_vlan: left promiscuous mode [ 229.746020][ T12] veth0_vlan: left promiscuous mode [ 230.322629][ T12] team0 (unregistering): Port device team_slave_1 removed [ 230.366800][ T12] team0 (unregistering): Port device team_slave_0 removed [ 230.654381][ T8032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.669849][ T8029] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.677229][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.685003][ T8029] bridge_slave_1: entered allmulticast mode [ 230.696480][ T8029] bridge_slave_1: entered promiscuous mode [ 230.707246][ T8038] team0: Port device team_slave_1 added [ 230.725029][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.761830][ T8032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.774773][ T8034] team0: Port device team_slave_0 added [ 230.784040][ T8034] team0: Port device team_slave_1 added [ 230.843940][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.851118][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.877788][ T8038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.892138][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.934009][ T8029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.954989][ T8029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.964989][ T8038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.972879][ T8038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.000520][ T8038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.098263][ T8036] team0: Port device team_slave_0 added [ 231.107258][ T8036] team0: Port device team_slave_1 added [ 231.118435][ T8032] team0: Port device team_slave_0 added [ 231.126407][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.133721][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.160453][ T8034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.174577][ T8034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.181956][ T8034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.208209][ T8034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.230651][ T8029] team0: Port device team_slave_0 added [ 231.249038][ T8038] hsr_slave_0: entered promiscuous mode [ 231.255606][ T8038] hsr_slave_1: entered promiscuous mode [ 231.262053][ T8038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.269636][ T8038] Cannot create hsr debugfs directory [ 231.298753][ T8032] team0: Port device team_slave_1 added [ 231.322055][ T8029] team0: Port device team_slave_1 added [ 231.338540][ T12] IPVS: stop unused estimator thread 0... [ 231.352828][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.359833][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.386088][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.423389][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.430280][ T5233] Bluetooth: hci3: command tx timeout [ 231.436776][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.463519][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.476491][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.483758][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.510158][ T5233] Bluetooth: hci0: command tx timeout [ 231.516144][ T8032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.560553][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.567545][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.595062][ T5233] Bluetooth: hci2: command tx timeout [ 231.595942][ T8029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.627255][ T8032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.635801][ T8032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.662037][ T5233] Bluetooth: hci1: command tx timeout [ 231.663853][ T5238] Bluetooth: hci5: command tx timeout [ 231.668129][ T8032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.687948][ T8034] hsr_slave_0: entered promiscuous mode [ 231.695080][ T8034] hsr_slave_1: entered promiscuous mode [ 231.702116][ T8034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.709696][ T8034] Cannot create hsr debugfs directory [ 231.718353][ T8029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.727629][ T8029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.754242][ T8029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.874047][ T8036] hsr_slave_0: entered promiscuous mode [ 231.886333][ T8036] hsr_slave_1: entered promiscuous mode [ 231.892964][ T8036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.920568][ T8036] Cannot create hsr debugfs directory [ 232.080666][ T8032] hsr_slave_0: entered promiscuous mode [ 232.098692][ T8032] hsr_slave_1: entered promiscuous mode [ 232.107846][ T8032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.125586][ T8032] Cannot create hsr debugfs directory [ 232.151616][ T8029] hsr_slave_0: entered promiscuous mode [ 232.169474][ T8029] hsr_slave_1: entered promiscuous mode [ 232.176024][ T8029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.195114][ T8029] Cannot create hsr debugfs directory [ 232.272880][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.342962][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.376537][ T8038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.447290][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.501682][ T12] netdevsim netdevsim3 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.559490][ T8038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.616909][ T8038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.697725][ T8038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.005632][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.016549][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 233.119531][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.130451][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 233.222572][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.233912][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 233.300084][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.311853][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 233.501058][ T5238] Bluetooth: hci3: command tx timeout [ 233.544459][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.580401][ T5238] Bluetooth: hci0: command tx timeout [ 233.639343][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.654504][ T8038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.665219][ T8038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.672334][ T5238] Bluetooth: hci2: command tx timeout [ 233.685386][ T8038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.732754][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.740352][ T5238] Bluetooth: hci5: command tx timeout [ 233.743724][ T5233] Bluetooth: hci1: command tx timeout [ 233.776708][ T8038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.832419][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.035329][ T12] bridge_slave_1: left allmulticast mode [ 234.041708][ T12] bridge_slave_1: left promiscuous mode [ 234.047449][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.057251][ T12] bridge_slave_0: left allmulticast mode [ 234.063258][ T12] bridge_slave_0: left promiscuous mode [ 234.069048][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.088695][ T12] bridge_slave_1: left allmulticast mode [ 234.095000][ T12] bridge_slave_1: left promiscuous mode [ 234.100982][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.109554][ T12] bridge_slave_0: left allmulticast mode [ 234.119770][ T12] bridge_slave_0: left promiscuous mode [ 234.125749][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.137793][ T12] bridge_slave_1: left allmulticast mode [ 234.144155][ T12] bridge_slave_1: left promiscuous mode [ 234.149879][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.158555][ T12] bridge_slave_0: left allmulticast mode [ 234.164517][ T12] bridge_slave_0: left promiscuous mode [ 234.172353][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.666249][ T12] erspan0 (unregistering): left allmulticast mode [ 235.031878][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 235.145545][ T12] bond3 (unregistering): (slave bridge1): Releasing active interface [ 235.200429][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 235.338012][ T12] bond0 (unregistering): Released all slaves [ 235.350524][ T12] bond1 (unregistering): Released all slaves [ 235.456941][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.467875][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.478419][ T12] bond0 (unregistering): Released all slaves [ 235.491119][ T12] bond1 (unregistering): Released all slaves [ 235.583508][ T5233] Bluetooth: hci3: command tx timeout [ 235.603896][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.616736][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.627208][ T12] bond0 (unregistering): Released all slaves [ 235.638599][ T12] bond1 (unregistering): Released all slaves [ 235.650839][ T12] bond2 (unregistering): Released all slaves [ 235.665671][ T5233] Bluetooth: hci0: command tx timeout [ 235.740860][ T5233] Bluetooth: hci2: command tx timeout [ 235.782897][ T12] bond3 (unregistering): Released all slaves [ 235.820727][ T5238] Bluetooth: hci1: command tx timeout [ 235.832394][ T5233] Bluetooth: hci5: command tx timeout [ 235.893743][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.910285][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.920888][ T12] bond0 (unregistering): Released all slaves [ 235.932860][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 235.946708][ T12] bond1 (unregistering): Released all slaves [ 236.068998][ T12] bond2 (unregistering): Released all slaves [ 236.128816][ T8038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.216058][ T8038] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.241631][ T12] : left promiscuous mode [ 236.332259][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.339422][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.373248][ T12] tipc: Disabling bearer [ 236.378713][ T12] tipc: Left network mode [ 236.379797][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.390214][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.452587][ T12] tipc: Disabling bearer [ 236.464669][ T12] tipc: Disabling bearer [ 236.485922][ T12] tipc: Left network mode [ 236.675064][ T8032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.779128][ T8032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.794586][ T8032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.840554][ T8032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.215157][ T8038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.505565][ T8032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.560980][ T8032] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.625394][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.632589][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.724761][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.731954][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.871683][ T8038] veth0_vlan: entered promiscuous mode [ 237.927509][ T8038] veth1_vlan: entered promiscuous mode [ 237.987239][ T8038] veth0_macvtap: entered promiscuous mode [ 238.021048][ T8038] veth1_macvtap: entered promiscuous mode [ 238.063288][ T8036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.073531][ T8036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.083902][ T8036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.163369][ T8036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.199404][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.221621][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.248879][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.260307][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.271289][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.282333][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.295422][ T8038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.423221][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.444696][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.461199][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.480389][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.500450][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.521393][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.541822][ T8038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.568837][ T8034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.617008][ T8038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.635828][ T8038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.646291][ T8038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.655800][ T8038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.667796][ T8034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.685301][ T8034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.698185][ T8034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.912707][ T12] hsr_slave_0: left promiscuous mode [ 238.924509][ T12] hsr_slave_1: left promiscuous mode [ 238.936269][ T12] hsr_slave_0: left promiscuous mode [ 238.948684][ T12] hsr_slave_1: left promiscuous mode [ 238.956696][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.964532][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.974423][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.981984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.994648][ T12] hsr_slave_0: left promiscuous mode [ 239.001206][ T12] hsr_slave_1: left promiscuous mode [ 239.007057][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.014865][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.031428][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.038877][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.049484][ T12] hsr_slave_0: left promiscuous mode [ 239.057275][ T12] hsr_slave_1: left promiscuous mode [ 239.063833][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.071373][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.079192][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.087365][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.133263][ T12] veth1_macvtap: left promiscuous mode [ 239.138823][ T12] veth0_macvtap: left promiscuous mode [ 239.146122][ T12] veth1_vlan: left promiscuous mode [ 239.151706][ T12] veth0_vlan: left promiscuous mode [ 239.158676][ T12] veth1_macvtap: left promiscuous mode [ 239.164322][ T12] veth0_macvtap: left promiscuous mode [ 239.171452][ T12] veth1_vlan: left promiscuous mode [ 239.176825][ T12] veth0_vlan: left promiscuous mode [ 239.183973][ T12] veth1_macvtap: left promiscuous mode [ 239.189519][ T12] veth0_macvtap: left promiscuous mode [ 239.195388][ T12] veth1_vlan: left promiscuous mode [ 239.200899][ T12] veth0_vlan: left promiscuous mode [ 239.208449][ T12] veth1_macvtap: left promiscuous mode [ 239.214096][ T12] veth0_macvtap: left promiscuous mode [ 239.219704][ T12] veth1_vlan: left promiscuous mode [ 239.225765][ T12] veth0_vlan: left promiscuous mode [ 240.326277][ T12] team0 (unregistering): Port device vlan0 removed [ 240.559128][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.241413][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.286526][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.915966][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.956756][ T12] team0 (unregistering): Port device team_slave_0 removed [ 242.254754][ T8032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.283890][ T8029] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 242.304954][ T8029] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 242.322511][ T936] lo speed is unknown, defaulting to 1000 [ 242.348627][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.357028][ T8029] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 242.362066][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.421931][ T8029] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 242.462989][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.519411][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.533697][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.583357][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.603202][ T8032] veth0_vlan: entered promiscuous mode [ 242.635515][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.646801][ T8034] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.719337][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.726597][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.753679][ T2961] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.760914][ T2961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.770896][ T2961] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.778047][ T2961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.788842][ T8032] veth1_vlan: entered promiscuous mode [ 242.841230][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.848410][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.004863][ T8036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.021972][ T8036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.065585][ T8032] veth0_macvtap: entered promiscuous mode [ 243.134799][ T8032] veth1_macvtap: entered promiscuous mode [ 243.161404][ T8029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.213626][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.263733][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.281779][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.292583][ T8034] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.333181][ T8032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.381395][ T8032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.407495][ T8032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.452834][ T8029] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.489558][ T8032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.528071][ T8032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.559789][ T8032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.580822][ T8032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.715829][ T2513] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.723277][ T2513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.797568][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.804765][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.866719][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.092653][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.120392][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.135200][ T8034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.257895][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.286259][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.319942][ T8036] veth0_vlan: entered promiscuous mode [ 244.455848][ T8036] veth1_vlan: entered promiscuous mode [ 244.499722][ T8034] veth0_vlan: entered promiscuous mode [ 244.534518][ T8034] veth1_vlan: entered promiscuous mode [ 244.553802][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 244.708041][ T12] IPVS: stop unused estimator thread 0... [ 244.768515][ T8029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.799500][ T8034] veth0_macvtap: entered promiscuous mode [ 244.829211][ T8034] veth1_macvtap: entered promiscuous mode [ 244.846359][ T8036] veth0_macvtap: entered promiscuous mode [ 244.907074][ T8248] tipc: Started in network mode [ 244.928552][ T8248] tipc: Node identity , cluster identity 4711 [ 244.959795][ T8248] tipc: Failed to obtain node identity [ 244.968155][ T8248] tipc: Enabling of bearer rejected, failed to enable media [ 245.013277][ T8036] veth1_macvtap: entered promiscuous mode [ 245.040713][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.058348][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.068707][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.086158][ T8260] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 245.096156][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.107594][ T8260] netlink: 512 bytes leftover after parsing attributes in process `syz.1.965'. [ 245.118374][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.134062][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 245.192576][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.223420][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.249849][ T8034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.273422][ T8034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.293917][ T8034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.328515][ T8034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.345351][ T8034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.355724][ T8034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.370114][ T8034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.413745][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.451398][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.487573][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.502366][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.513057][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.524548][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.537648][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.549924][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.568558][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.589364][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.610667][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.632312][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.644290][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.656024][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.675175][ T8281] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 245.697586][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 245.708450][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 245.730338][ T8029] veth0_vlan: entered promiscuous mode [ 245.769851][ T8036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.789070][ T8036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.806911][ T8036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.825493][ T8036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.925719][ T8029] veth1_vlan: entered promiscuous mode [ 245.976456][ T8029] veth0_macvtap: entered promiscuous mode [ 245.986241][ T8029] veth1_macvtap: entered promiscuous mode [ 246.025520][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.043840][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.065703][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.088022][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.108588][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.129936][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.145506][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.157565][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.184655][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.233720][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.971'. [ 246.270197][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 246.365762][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.389910][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.406174][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.416790][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.430020][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.447047][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.457474][ T8029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.476336][ T8029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.487855][ T8029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.502557][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 246.555727][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.574806][ T8029] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.589463][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.597531][ T8029] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.624124][ T8029] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.657415][ T8029] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.688282][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.736855][ T8331] openvswitch: netlink: Actions may not be safe on all matching packets [ 246.755796][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.825827][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.835745][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.861008][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.888032][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.945013][ T8343] sctp: [Deprecated]: syz.1.977 (pid 8343) Use of int in maxseg socket option. [ 246.945013][ T8343] Use struct sctp_assoc_value instead [ 247.084747][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.133118][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.256106][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.268259][ T8355] bridge: RTM_NEWNEIGH with invalid ether address [ 247.350520][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.799689][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.988'. [ 247.802306][ T8392] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 247.838629][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 247.847698][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.861635][ T8392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.878759][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.887948][ T8392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.964334][ T8399] netlink: 'syz.1.991': attribute type 5 has an invalid length. [ 247.988489][ T8399] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 248.014740][ T8399] lo speed is unknown, defaulting to 1000 [ 248.036301][ T8399] lo speed is unknown, defaulting to 1000 [ 248.052717][ T8399] lo speed is unknown, defaulting to 1000 [ 248.427304][ T25] lo speed is unknown, defaulting to 1000 [ 248.442978][ T8431] vlan2: entered promiscuous mode [ 248.449707][ T8399] infiniband syz0: set active [ 248.466481][ T8399] infiniband syz0: added lo [ 248.542813][ T8399] RDS/IB: syz0: added [ 248.547872][ T8399] smc: adding ib device syz0 with port count 1 [ 248.560791][ T8399] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 248.595613][ T5281] lo speed is unknown, defaulting to 1000 [ 248.595634][ T8444] netlink: 'syz.2.997': attribute type 16 has an invalid length. [ 248.662253][ T8399] lo speed is unknown, defaulting to 1000 [ 248.870882][ T8399] lo speed is unknown, defaulting to 1000 [ 249.341014][ T8399] lo speed is unknown, defaulting to 1000 [ 249.549561][ T8399] lo speed is unknown, defaulting to 1000 [ 249.747790][ T8491] netlink: 'syz.3.1010': attribute type 1 has an invalid length. [ 249.771042][ T8491] __nla_validate_parse: 3 callbacks suppressed [ 249.771063][ T8491] netlink: 9396 bytes leftover after parsing attributes in process `syz.3.1010'. [ 249.863193][ T8399] lo speed is unknown, defaulting to 1000 [ 250.017194][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 250.164144][ T8514] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1021'. [ 250.412481][ T8533] netlink: 'syz.3.1027': attribute type 9 has an invalid length. [ 250.437119][ T8533] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.1027'. [ 250.547850][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 250.699001][ T8547] netlink: 'syz.1.1033': attribute type 5 has an invalid length. [ 250.718281][ T8547] netlink: 'syz.1.1033': attribute type 4 has an invalid length. [ 250.758505][ T8547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1033'. [ 250.813853][ T8547] syz0: rxe_newlink: already configured on lo [ 250.856872][ T8555] openvswitch: netlink: Actions may not be safe on all matching packets [ 251.431293][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 251.461235][ T8585] netlink: 'syz.1.1042': attribute type 11 has an invalid length. [ 251.509744][ T8590] SET target dimension over the limit! [ 251.520107][ T8591] SET target dimension over the limit! [ 251.613323][ T8593] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 251.668995][ T8599] netlink: 'syz.0.1051': attribute type 32 has an invalid length. [ 251.714088][ T8593] bond1: entered promiscuous mode [ 251.719185][ T8593] bond1: entered allmulticast mode [ 251.730822][ T8593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.788218][ T8608] vlan2: entered allmulticast mode [ 251.795333][ T8608] bond0: entered allmulticast mode [ 251.800716][ T8608] bond_slave_0: entered allmulticast mode [ 251.806724][ T8608] bond_slave_1: entered allmulticast mode [ 251.814691][ T8608] bond0: left allmulticast mode [ 251.819692][ T8608] bond_slave_0: left allmulticast mode [ 251.829825][ T8608] bond_slave_1: left allmulticast mode [ 251.886208][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 251.984457][ T8620] netlink: 'syz.3.1056': attribute type 5 has an invalid length. [ 252.000469][ T8620] netlink: 'syz.3.1056': attribute type 4 has an invalid length. [ 252.018482][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1056'. [ 252.026197][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 252.049518][ T8620] rdma_rxe: rxe_newlink: failed to add lo [ 252.119853][ T8631] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 252.129797][ T8632] FAULT_INJECTION: forcing a failure. [ 252.129797][ T8632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.152712][ T8632] CPU: 1 UID: 0 PID: 8632 Comm: syz.4.1061 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 252.163444][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 252.173499][ T8632] Call Trace: [ 252.176800][ T8632] [ 252.179749][ T8632] dump_stack_lvl+0x241/0x360 [ 252.184460][ T8632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.189661][ T8632] ? __pfx__printk+0x10/0x10 [ 252.194256][ T8632] ? __pfx_lock_release+0x10/0x10 [ 252.199288][ T8632] should_fail_ex+0x3b0/0x4e0 [ 252.204083][ T8632] _copy_from_user+0x2f/0xe0 [ 252.208723][ T8632] __sys_bpf+0x1a4/0x810 [ 252.212980][ T8632] ? __pfx___sys_bpf+0x10/0x10 [ 252.217759][ T8632] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.223747][ T8632] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.230081][ T8632] ? do_syscall_64+0x100/0x230 [ 252.234845][ T8632] __x64_sys_bpf+0x7c/0x90 [ 252.239280][ T8632] do_syscall_64+0xf3/0x230 [ 252.243783][ T8632] ? clear_bhb_loop+0x35/0x90 [ 252.248641][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.254582][ T8632] RIP: 0033:0x7f5ff817dff9 [ 252.258993][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.278695][ T8632] RSP: 002b:00007f5ff8f78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.287132][ T8632] RAX: ffffffffffffffda RBX: 00007f5ff8335f80 RCX: 00007f5ff817dff9 [ 252.295111][ T8632] RDX: 0000000000000010 RSI: 0000000020000340 RDI: 0000000000000011 [ 252.303078][ T8632] RBP: 00007f5ff8f78090 R08: 0000000000000000 R09: 0000000000000000 [ 252.311057][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.319024][ T8632] R13: 0000000000000000 R14: 00007f5ff8335f80 R15: 00007ffd7e6d8908 [ 252.327014][ T8632] [ 252.388391][ T8635] Bluetooth: MGMT ver 1.23 [ 252.745155][ T8658] netlink: 'syz.0.1073': attribute type 5 has an invalid length. [ 252.754522][ T8658] netlink: 'syz.0.1073': attribute type 4 has an invalid length. [ 252.769585][ T8658] rdma_rxe: rxe_newlink: failed to add lo [ 252.901186][ T8666] FAULT_INJECTION: forcing a failure. [ 252.901186][ T8666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.932769][ T8666] CPU: 1 UID: 0 PID: 8666 Comm: syz.4.1077 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 252.943515][ T8666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 252.953615][ T8666] Call Trace: [ 252.956919][ T8666] [ 252.959876][ T8666] dump_stack_lvl+0x241/0x360 [ 252.964583][ T8666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.969816][ T8666] ? __pfx__printk+0x10/0x10 [ 252.974533][ T8666] ? __pfx_lock_release+0x10/0x10 [ 252.979563][ T8666] should_fail_ex+0x3b0/0x4e0 [ 252.984332][ T8666] strncpy_from_user+0x36/0x250 [ 252.989204][ T8666] bpf_raw_tp_link_attach+0x21d/0x6e0 [ 252.994612][ T8666] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 253.000548][ T8666] ? fput+0x1a8/0x230 [ 253.004559][ T8666] bpf_raw_tracepoint_open+0x177/0x1f0 [ 253.010038][ T8666] __sys_bpf+0x3c0/0x810 [ 253.014293][ T8666] ? __pfx___sys_bpf+0x10/0x10 [ 253.019073][ T8666] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.025063][ T8666] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.031488][ T8666] ? do_syscall_64+0x100/0x230 [ 253.036253][ T8666] __x64_sys_bpf+0x7c/0x90 [ 253.040680][ T8666] do_syscall_64+0xf3/0x230 [ 253.045188][ T8666] ? clear_bhb_loop+0x35/0x90 [ 253.049863][ T8666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.055757][ T8666] RIP: 0033:0x7f5ff817dff9 [ 253.060182][ T8666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.080161][ T8666] RSP: 002b:00007f5ff8f78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.088580][ T8666] RAX: ffffffffffffffda RBX: 00007f5ff8335f80 RCX: 00007f5ff817dff9 [ 253.096559][ T8666] RDX: 0000000000000010 RSI: 0000000020000340 RDI: 0000000000000011 [ 253.104540][ T8666] RBP: 00007f5ff8f78090 R08: 0000000000000000 R09: 0000000000000000 [ 253.112509][ T8666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.120478][ T8666] R13: 0000000000000000 R14: 00007f5ff8335f80 R15: 00007ffd7e6d8908 [ 253.128459][ T8666] [ 253.416821][ T8692] netlink: 'syz.3.1089': attribute type 5 has an invalid length. [ 253.433054][ T8692] rdma_rxe: rxe_newlink: failed to add lo [ 253.560726][ T8705] FAULT_INJECTION: forcing a failure. [ 253.560726][ T8705] name failslab, interval 1, probability 0, space 0, times 0 [ 253.589149][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.3.1093 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 253.599890][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.609975][ T8705] Call Trace: [ 253.613279][ T8705] [ 253.616236][ T8705] dump_stack_lvl+0x241/0x360 [ 253.620952][ T8705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.626186][ T8705] ? __pfx__printk+0x10/0x10 [ 253.630929][ T8705] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 253.636447][ T8705] ? __pfx___might_resched+0x10/0x10 [ 253.641951][ T8705] should_fail_ex+0x3b0/0x4e0 [ 253.646677][ T8705] should_failslab+0xac/0x100 [ 253.651533][ T8705] ? bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 253.657258][ T8705] __kmalloc_cache_noprof+0x6c/0x2c0 [ 253.662544][ T8705] ? bpf_get_raw_tracepoint+0xa5/0x270 [ 253.668003][ T8705] bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 253.673376][ T8705] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 253.679287][ T8705] ? fput+0x1a8/0x230 [ 253.683281][ T8705] bpf_raw_tracepoint_open+0x177/0x1f0 [ 253.688742][ T8705] __sys_bpf+0x3c0/0x810 [ 253.692986][ T8705] ? __pfx___sys_bpf+0x10/0x10 [ 253.697764][ T8705] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.703746][ T8705] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.710094][ T8705] ? do_syscall_64+0x100/0x230 [ 253.714859][ T8705] __x64_sys_bpf+0x7c/0x90 [ 253.719279][ T8705] do_syscall_64+0xf3/0x230 [ 253.723810][ T8705] ? clear_bhb_loop+0x35/0x90 [ 253.728507][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.734410][ T8705] RIP: 0033:0x7f87ffd7dff9 [ 253.738931][ T8705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.758538][ T8705] RSP: 002b:00007f8800bc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.766953][ T8705] RAX: ffffffffffffffda RBX: 00007f87fff35f80 RCX: 00007f87ffd7dff9 [ 253.774919][ T8705] RDX: 0000000000000010 RSI: 0000000020000340 RDI: 0000000000000011 [ 253.782886][ T8705] RBP: 00007f8800bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 253.790873][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.799045][ T8705] R13: 0000000000000000 R14: 00007f87fff35f80 R15: 00007fff12e13108 [ 253.807023][ T8705] [ 254.255343][ T8733] rdma_rxe: rxe_newlink: failed to add lo [ 254.508011][ T8749] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 254.524635][ T8754] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.525891][ T8749] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 254.534278][ T8754] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.551173][ T8754] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.560041][ T8754] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.971216][ T8783] infiniband syz0: set active [ 254.985365][ T8783] bridge_slave_0: left allmulticast mode [ 254.991274][ T8783] bridge_slave_0: left promiscuous mode [ 254.996969][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.009658][ T8783] bridge_slave_1: left allmulticast mode [ 255.025318][ T8783] bridge_slave_1: left promiscuous mode [ 255.036964][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.048311][ T8783] bond0: (slave bond_slave_0): Releasing backup interface [ 255.064834][ T8783] bond0: (slave bond_slave_1): Releasing backup interface [ 255.085644][ T8783] team0: Port device team_slave_0 removed [ 255.098479][ T8783] team0: Port device team_slave_1 removed [ 255.105214][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.113156][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.122159][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.129632][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.143012][ T5281] lo speed is unknown, defaulting to 1000 [ 255.153637][ T8789] wg2: entered promiscuous mode [ 255.192731][ T8789] team0: Port device wg2 added [ 255.229645][ T8792] __nla_validate_parse: 14 callbacks suppressed [ 255.229663][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 255.316918][ T8794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 255.344237][ T8794] syz0: rxe_newlink: already configured on lo [ 255.438993][ T8804] FAULT_INJECTION: forcing a failure. [ 255.438993][ T8804] name failslab, interval 1, probability 0, space 0, times 0 [ 255.472113][ T8804] CPU: 1 UID: 0 PID: 8804 Comm: syz.3.1126 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 255.482858][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.492921][ T8804] Call Trace: [ 255.496200][ T8804] [ 255.499130][ T8804] dump_stack_lvl+0x241/0x360 [ 255.503839][ T8804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.509069][ T8804] ? __pfx__printk+0x10/0x10 [ 255.513664][ T8804] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 255.519211][ T8804] ? __pfx___might_resched+0x10/0x10 [ 255.524502][ T8804] should_fail_ex+0x3b0/0x4e0 [ 255.529204][ T8804] ? alloc_empty_file+0x9e/0x1d0 [ 255.534154][ T8804] should_failslab+0xac/0x100 [ 255.538895][ T8804] ? alloc_empty_file+0x9e/0x1d0 [ 255.543856][ T8804] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 255.549255][ T8804] alloc_empty_file+0x9e/0x1d0 [ 255.554034][ T8804] alloc_file_pseudo+0x1da/0x290 [ 255.558988][ T8804] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 255.564455][ T8804] ? __local_bh_enable_ip+0x168/0x200 [ 255.569833][ T8804] ? bpf_link_prime+0x7a/0x240 [ 255.574765][ T8804] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 255.580488][ T8804] anon_inode_getfile+0xc8/0x180 [ 255.585434][ T8804] bpf_link_prime+0xff/0x240 [ 255.590020][ T8804] bpf_raw_tp_link_attach+0x3c4/0x6e0 [ 255.595568][ T8804] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 255.601472][ T8804] ? fput+0x1a8/0x230 [ 255.605453][ T8804] bpf_raw_tracepoint_open+0x177/0x1f0 [ 255.610912][ T8804] __sys_bpf+0x3c0/0x810 [ 255.615150][ T8804] ? __pfx___sys_bpf+0x10/0x10 [ 255.619918][ T8804] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.625913][ T8804] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.632262][ T8804] ? do_syscall_64+0x100/0x230 [ 255.637025][ T8804] __x64_sys_bpf+0x7c/0x90 [ 255.641451][ T8804] do_syscall_64+0xf3/0x230 [ 255.646905][ T8804] ? clear_bhb_loop+0x35/0x90 [ 255.651665][ T8804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.657573][ T8804] RIP: 0033:0x7f87ffd7dff9 [ 255.661989][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.681593][ T8804] RSP: 002b:00007f8800bc8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.690014][ T8804] RAX: ffffffffffffffda RBX: 00007f87fff35f80 RCX: 00007f87ffd7dff9 [ 255.697987][ T8804] RDX: 0000000000000010 RSI: 0000000020000340 RDI: 0000000000000011 [ 255.706221][ T8804] RBP: 00007f8800bc8090 R08: 0000000000000000 R09: 0000000000000000 [ 255.714280][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.722248][ T8804] R13: 0000000000000000 R14: 00007f87fff35f80 R15: 00007fff12e13108 [ 255.730315][ T8804] [ 255.984596][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.423046][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 350.220225][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 350.220240][ T5242] Bluetooth: hci3: command 0x0406 tx timeout [ 350.232035][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 378.864887][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.950092][ T5233] Bluetooth: hci5: command 0x0406 tx timeout [ 399.990258][ T30] INFO: task syz.3.1126:8804 blocked for more than 143 seconds. [ 399.997984][ T30] Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 400.005641][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.014361][ T30] task:syz.3.1126 state:D stack:22744 pid:8804 tgid:8803 ppid:8034 flags:0x00004000 [ 400.024612][ T30] Call Trace: [ 400.027886][ T30] [ 400.030878][ T30] __schedule+0x1895/0x4b30 [ 400.035412][ T30] ? __pfx___schedule+0x10/0x10 [ 400.040329][ T30] ? __pfx_lock_release+0x10/0x10 [ 400.046267][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.052395][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.058740][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 400.064121][ T30] ? schedule+0x90/0x320 [ 400.068401][ T30] schedule+0x14b/0x320 [ 400.072896][ T30] schedule_preempt_disabled+0x13/0x30 [ 400.078381][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 400.084129][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 400.090189][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 400.096345][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 400.101445][ T30] ? exit_mmap+0x28b/0xc40 [ 400.105875][ T30] down_write+0x1d7/0x220 [ 400.110224][ T30] ? __pfx_down_write+0x10/0x10 [ 400.115068][ T30] exit_mmap+0x2bd/0xc40 [ 400.119303][ T30] ? __mutex_lock+0x2ef/0xd70 [ 400.125851][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 400.130683][ T30] ? __pfx_exit_aio+0x10/0x10 [ 400.135381][ T30] ? uprobe_clear_state+0x271/0x290 [ 400.140805][ T30] ? mm_update_next_owner+0xa4/0x810 [ 400.146788][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 400.152096][ T30] __mmput+0x115/0x390 [ 400.156196][ T30] exit_mm+0x220/0x310 [ 400.160338][ T30] ? __pfx_exit_mm+0x10/0x10 [ 400.164936][ T30] ? taskstats_exit+0x326/0xa60 [ 400.169781][ T30] do_exit+0x9b2/0x28e0 [ 400.174007][ T30] ? __pfx_do_exit+0x10/0x10 [ 400.178609][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 400.184006][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.190024][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.196367][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 400.201528][ T30] do_group_exit+0x207/0x2c0 [ 400.206143][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.211403][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 400.216615][ T30] get_signal+0x16a3/0x1740 [ 400.221270][ T30] ? __pfx_get_signal+0x10/0x10 [ 400.226158][ T30] arch_do_signal_or_restart+0x96/0x860 [ 400.232168][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 400.238357][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.244524][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 400.250543][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 400.256094][ T30] do_syscall_64+0x100/0x230 [ 400.261212][ T30] ? clear_bhb_loop+0x35/0x90 [ 400.265908][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.271861][ T30] RIP: 0033:0x7f87ffd7dff9 [ 400.276275][ T30] RSP: 002b:00007f8800bc80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 400.284772][ T30] RAX: fffffffffffffe00 RBX: 00007f87fff35f88 RCX: 00007f87ffd7dff9 [ 400.292785][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87fff35f88 [ 400.300911][ T30] RBP: 00007f87fff35f80 R08: 0000000000000000 R09: 0000000000000000 [ 400.308904][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f87fff35f8c [ 400.316935][ T30] R13: 0000000000000000 R14: 00007fff12e13020 R15: 00007fff12e13108 [ 400.324970][ T30] [ 400.328005][ T30] INFO: task syz.2.1128:8807 blocked for more than 143 seconds. [ 400.335703][ T30] Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 400.343391][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.352922][ T30] task:syz.2.1128 state:D stack:23808 pid:8807 tgid:8807 ppid:8036 flags:0x00004000 [ 400.363218][ T30] Call Trace: [ 400.366520][ T30] [ 400.369462][ T30] __schedule+0x1895/0x4b30 [ 400.374097][ T30] ? __pfx___schedule+0x10/0x10 [ 400.378963][ T30] ? __pfx_lock_release+0x10/0x10 [ 400.384164][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.390200][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.396543][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 400.401766][ T30] ? schedule+0x90/0x320 [ 400.406032][ T30] schedule+0x14b/0x320 [ 400.410230][ T30] schedule_preempt_disabled+0x13/0x30 [ 400.415685][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 400.421454][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 400.427346][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 400.433523][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 400.438551][ T30] ? exit_mmap+0x28b/0xc40 [ 400.443031][ T30] down_write+0x1d7/0x220 [ 400.447355][ T30] ? __pfx_down_write+0x10/0x10 [ 400.453138][ T30] exit_mmap+0x2bd/0xc40 [ 400.457407][ T30] ? __mutex_lock+0x2ef/0xd70 [ 400.462249][ T30] ? __pfx_exit_mmap+0x10/0x10 [ 400.467038][ T30] ? __pfx_exit_aio+0x10/0x10 [ 400.471753][ T30] ? uprobe_clear_state+0x271/0x290 [ 400.476949][ T30] ? mm_update_next_owner+0xa4/0x810 [ 400.482322][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 400.487542][ T30] __mmput+0x115/0x390 [ 400.491644][ T30] exit_mm+0x220/0x310 [ 400.495704][ T30] ? __pfx_exit_mm+0x10/0x10 [ 400.500391][ T30] ? taskstats_exit+0x326/0xa60 [ 400.505263][ T30] do_exit+0x9b2/0x28e0 [ 400.509411][ T30] ? preempt_schedule_common+0x84/0xd0 [ 400.514914][ T30] ? __pfx_do_exit+0x10/0x10 [ 400.519495][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.525634][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.532024][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 400.537391][ T30] do_group_exit+0x207/0x2c0 [ 400.542107][ T30] __x64_sys_exit_group+0x3f/0x40 [ 400.547164][ T30] x64_sys_call+0x2634/0x2640 [ 400.551877][ T30] do_syscall_64+0xf3/0x230 [ 400.557153][ T30] ? clear_bhb_loop+0x35/0x90 [ 400.561926][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.567817][ T30] RIP: 0033:0x7fddea97dff9 [ 400.572280][ T30] RSP: 002b:00007ffdc20cb658 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 400.580795][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fddea97dff9 [ 400.588789][ T30] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.596804][ T30] RBP: 00007ffdc20cb6ac R08: 00007ffdc20cb73f R09: 000000000003e59b [ 400.604828][ T30] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 400.612842][ T30] R13: 000000000003e59b R14: 000000000003e57e R15: 00007ffdc20cb700 [ 400.621040][ T30] [ 400.624075][ T30] [ 400.624075][ T30] Showing all locks held in the system: [ 400.631967][ T30] 1 lock held by khungtaskd/30: [ 400.636829][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 400.646881][ T30] 2 locks held by getty/4988: [ 400.651673][ T30] #0: ffff88814c4870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 400.662348][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 400.672581][ T30] 1 lock held by syz-executor/5220: [ 400.677788][ T30] #0: ffff88802811e098 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 400.687324][ T30] 1 lock held by syz-executor/8029: [ 400.692566][ T30] #0: ffff88805b4e2798 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 400.707106][ T30] 2 locks held by syz-executor/8032: [ 400.712671][ T30] #0: ffffffff8e9eb390 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x282/0x1f40 [ 400.721660][ T30] #1: ffff88807b4b1e18 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2a5/0x1f40 [ 400.730716][ T30] 2 locks held by syz-executor/8038: [ 400.735988][ T30] #0: ffffffff8e9eb390 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x282/0x1f40 [ 400.744840][ T30] #1: ffff88807b4b3118 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x2a5/0x1f40 [ 400.753970][ T30] 1 lock held by syz.3.1126/8804: [ 400.759766][ T30] #0: ffff88805b4e6098 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 400.769036][ T30] 1 lock held by syz.2.1128/8807: [ 400.774087][ T30] #0: ffff88805b4e0b18 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2bd/0xc40 [ 400.784205][ T30] [ 400.786543][ T30] ============================================= [ 400.786543][ T30] [ 400.795098][ T30] NMI backtrace for cpu 1 [ 400.799434][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 400.809930][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.819985][ T30] Call Trace: [ 400.823261][ T30] [ 400.826185][ T30] dump_stack_lvl+0x241/0x360 [ 400.830862][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.836053][ T30] ? __pfx__printk+0x10/0x10 [ 400.840655][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 400.845593][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 400.851046][ T30] ? _printk+0xd5/0x120 [ 400.855200][ T30] ? __pfx__printk+0x10/0x10 [ 400.859793][ T30] ? __wake_up_klogd+0xcc/0x110 [ 400.864651][ T30] ? __pfx__printk+0x10/0x10 [ 400.869242][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 400.874273][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.880277][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 400.886274][ T30] watchdog+0xff4/0x1040 [ 400.890528][ T30] ? watchdog+0x1ea/0x1040 [ 400.894951][ T30] ? __pfx_watchdog+0x10/0x10 [ 400.899630][ T30] kthread+0x2f0/0x390 [ 400.903698][ T30] ? __pfx_watchdog+0x10/0x10 [ 400.908378][ T30] ? __pfx_kthread+0x10/0x10 [ 400.912963][ T30] ret_from_fork+0x4b/0x80 [ 400.917378][ T30] ? __pfx_kthread+0x10/0x10 [ 400.921958][ T30] ret_from_fork_asm+0x1a/0x30 [ 400.926729][ T30] [ 400.930514][ T30] Sending NMI from CPU 1 to CPUs 0: [ 400.936199][ C0] NMI backtrace for cpu 0 [ 400.936212][ C0] CPU: 0 UID: 0 PID: 2513 Comm: kworker/u8:7 Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 400.936232][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.936248][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 400.936272][ C0] RIP: 0010:memset_orig+0x33/0xb0 [ 400.936291][ C0] Code: b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 400.936305][ C0] RSP: 0018:ffffc9000924f548 EFLAGS: 00000206 [ 400.936318][ C0] RAX: 0000000000000000 RBX: ffff88804c06f800 RCX: 0000000000000006 [ 400.936330][ C0] RDX: 0000000000000400 RSI: 0000000000000000 RDI: ffff88804c06fa40 [ 400.936341][ C0] RBP: 0000000000000300 R08: ffffc9000924fa7f R09: 0000000000000000 [ 400.936352][ C0] R10: ffff88804c06f800 R11: fffff52001249f50 R12: 0000000000000920 [ 400.936364][ C0] R13: ffff88801ac41dc0 R14: ffffffff8b42fddb R15: 0000000000000400 [ 400.936376][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 400.936389][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.936401][ C0] CR2: 00007f907e2786c0 CR3: 000000000e734000 CR4: 00000000003526f0 [ 400.936416][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 400.936425][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 400.936436][ C0] Call Trace: [ 400.936442][ C0] [ 400.936449][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 400.936468][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 400.936499][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 400.936516][ C0] ? nmi_handle+0x2a/0x5a0 [ 400.936539][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 400.936557][ C0] ? nmi_handle+0x14f/0x5a0 [ 400.936572][ C0] ? nmi_handle+0x2a/0x5a0 [ 400.936589][ C0] ? memset_orig+0x33/0xb0 [ 400.936603][ C0] ? default_do_nmi+0x63/0x160 [ 400.936621][ C0] ? exc_nmi+0x123/0x1f0 [ 400.936638][ C0] ? end_repeat_nmi+0xf/0x53 [ 400.936653][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 400.936679][ C0] ? memset_orig+0x33/0xb0 [ 400.936695][ C0] ? memset_orig+0x33/0xb0 [ 400.936711][ C0] ? memset_orig+0x33/0xb0 [ 400.936726][ C0] [ 400.936732][ C0] [ 400.936737][ C0] __kmalloc_noprof+0x1ca/0x400 [ 400.936758][ C0] ieee802_11_parse_elems_full+0xdb/0x2880 [ 400.936778][ C0] ? __pfx_validate_chain+0x10/0x10 [ 400.936795][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.936818][ C0] ? __pfx_validate_chain+0x10/0x10 [ 400.936834][ C0] ? __pfx_validate_chain+0x10/0x10 [ 400.936849][ C0] ? validate_chain+0x11e/0x5920 [ 400.936865][ C0] ? __pfx_validate_chain+0x10/0x10 [ 400.936884][ C0] ? __pfx_validate_chain+0x10/0x10 [ 400.936900][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 400.936919][ C0] ? __lock_acquire+0x1384/0x2050 [ 400.936943][ C0] ? mark_lock+0x9a/0x360 [ 400.936965][ C0] ieee80211_ibss_rx_queued_mgmt+0x4c8/0x2d70 [ 400.936993][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 400.937016][ C0] ? mark_lock+0x9a/0x360 [ 400.937032][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.937053][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.937073][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 400.937098][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 400.937121][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 400.937138][ C0] ? process_scheduled_works+0x976/0x1850 [ 400.937158][ C0] process_scheduled_works+0xa63/0x1850 [ 400.937189][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.937211][ C0] ? assign_work+0x364/0x3d0 [ 400.937232][ C0] worker_thread+0x870/0xd30 [ 400.937257][ C0] ? __kthread_parkme+0x169/0x1d0 [ 400.937278][ C0] ? __pfx_worker_thread+0x10/0x10 [ 400.937296][ C0] kthread+0x2f0/0x390 [ 400.937310][ C0] ? __pfx_worker_thread+0x10/0x10 [ 400.937328][ C0] ? __pfx_kthread+0x10/0x10 [ 400.937343][ C0] ret_from_fork+0x4b/0x80 [ 400.937362][ C0] ? __pfx_kthread+0x10/0x10 [ 400.937377][ C0] ret_from_fork_asm+0x1a/0x30 [ 400.937401][ C0] [ 400.938485][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 401.343901][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00215-g174714f0e505 #0 [ 401.357359][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 401.367414][ T30] Call Trace: [ 401.370688][ T30] [ 401.373624][ T30] dump_stack_lvl+0x241/0x360 [ 401.378303][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.383496][ T30] ? __pfx__printk+0x10/0x10 [ 401.388088][ T30] ? vscnprintf+0x5d/0x90 [ 401.392405][ T30] panic+0x349/0x880 [ 401.396331][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 401.402495][ T30] ? __pfx_panic+0x10/0x10 [ 401.406919][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 401.412311][ T30] ? __irq_work_queue_local+0x137/0x410 [ 401.417865][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 401.423225][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 401.429369][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 401.435523][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 401.441679][ T30] watchdog+0x1033/0x1040 [ 401.445996][ T30] ? watchdog+0x1ea/0x1040 [ 401.450399][ T30] ? __pfx_watchdog+0x10/0x10 [ 401.455083][ T30] kthread+0x2f0/0x390 [ 401.459148][ T30] ? __pfx_watchdog+0x10/0x10 [ 401.463823][ T30] ? __pfx_kthread+0x10/0x10 [ 401.468398][ T30] ret_from_fork+0x4b/0x80 [ 401.472825][ T30] ? __pfx_kthread+0x10/0x10 [ 401.477418][ T30] ret_from_fork_asm+0x1a/0x30 [ 401.482206][ T30] [ 401.485419][ T30] Kernel Offset: disabled [ 401.489743][ T30] Rebooting in 86400 seconds..