last executing test programs: 1m16.181553926s ago: executing program 2 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x24040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x40008}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000000010000010000002800000089822a1c1931d9b3c73182b49d5c016c01c3cf765a2bcf4cc53d79a00fd55e20cef8188c04be92aa860ab971e934af865b917c4c7c7908e6", @ANYRES32, @ANYBLOB="0039000200000005cc00d8dda4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a0000020000002400018014000180080001"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) 1m3.378137587s ago: executing program 2 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x24040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x40008}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000000010000010000002800000089822a1c1931d9b3c73182b49d5c016c01c3cf765a2bcf4cc53d79a00fd55e20cef8188c04be92aa860ab971e934af865b917c4c7c7908e6", @ANYRES32, @ANYBLOB="0039000200000005cc00d8dda4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a0000020000002400018014000180080001"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) 51.33041006s ago: executing program 2 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x24040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x40008}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000000010000010000002800000089822a1c1931d9b3c73182b49d5c016c01c3cf765a2bcf4cc53d79a00fd55e20cef8188c04be92aa860ab971e934af865b917c4c7c7908e6", @ANYRES32, @ANYBLOB="0039000200000005cc00d8dda4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a0000020000002400018014000180080001"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) 38.523422859s ago: executing program 2 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x24040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x40008}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000000010000010000002800000089822a1c1931d9b3c73182b49d5c016c01c3cf765a2bcf4cc53d79a00fd55e20cef8188c04be92aa860ab971e934af865b917c4c7c7908e6", @ANYRES32, @ANYBLOB="0039000200000005cc00d8dda4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000b0000bfa30000000000000703000000feffff7a0af0fff8ffff1991a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0af2fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6d6c1d69f2ffcaa10350e11cb97c8adf1bc9a0c4ceceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556b84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000029a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e05005bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae20bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a0000020000002400018014000180080001"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) 26.202030011s ago: executing program 2 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x24040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x40008}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000000010000010000002800000089822a1c1931d9b3c73182b49d5c016c01c3cf765a2bcf4cc53d79a00fd55e20cef8188c04be92aa860ab971e934af865b917c4c7c7908e6", @ANYRES32, @ANYBLOB="0039000200000005cc00d8dda4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000fe80000000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62c67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedfb9f64d81584a2e85ab4f6ec718b02d78f2ebf04e6b3b94610a21616181629a03c3dc0bf05e0a71f887833b81db7a10bc53259cb80716f6804934a411d424c1db98d454be1adb2776fdbb92b299d3b80af6987a871b4549fdb4c8297ee31ad925c8b0fb1a9d2589b08ed52602cbc26b56df71201bc4ea8621c56f33d251c1d4589af2dcd78fbb4e34bde02cb3920a30cee9489ee72c3e19304c16c2110e1839712d484b80abe77786a7e2ba834874a4e16b93dd07297554a06c2ad2c906f8ebb1db8730df096709184728d48f0a806696bd0d4b12d0064b933d9675353dae77fe8419451f85da63be78b70ca2a84a77f572d9f289d4313e6f6039fe756ac13a5d08838315dff44cda433cc7bc6b77449f8c", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a0000020000002400018014000180080001"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) 11.815847805s ago: executing program 2 (id=215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x24040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={@remote, @private0, @empty, 0x40000, 0x40, 0x5, 0x100, 0x6, 0x40008}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000000010000010000002800000089822a1c1931d9b3c73182b49d5c016c01c3cf765a2bcf4cc53d79a00fd55e20cef8188c04be92aa860ab971e934af865b917c4c7c7908e6", @ANYRES32, @ANYBLOB="0039000200000005cc00d8dda4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000b0000bfa30000000000000703000000feffff7a0af0fff8ffff1991a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0af2fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6d6c1d69f2ffcaa10350e11cb97c8adf1bc9a0c4ceceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556b84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000029a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e05005bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae20bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a0000020000002400018014000180080001"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) 6.154504178s ago: executing program 1 (id=1073): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x20) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x2, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r2 = socket$inet6(0xa, 0x800, 0x2c) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000000240)="5cf3cb058ff287279e280d7f039abbc372dc89e64e54318cb731b7477b1e4341a325538f41a88ada62f706ac39c507e78960a1074209907eeafc5b0861a364965c5440a556dad96483f565d6628192a4d67a", 0x52}], 0x2}}], 0x1, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x15, &(0x7f0000000980)=ANY=[@ANYBLOB="18110000", @ANYBLOB="33ee44bbcfd200d7210306bc6c554c102181290ef4d1b1921a0493a77829ad766266707dbfd1d0345669cf05d9d5051b4dc6081c8ba2a8332dd00713bcc2e09c5fbbea53a098600423bde2e5489a5884710ff58bc7e83451fd2a13e8b2ce0617bf9a751de4c24412837f75317aca55f502aa1c42c79376fbe7650eae7ff893fd16be6904d2f8aabe28f8f40aa7736d064ed9b1421329d8e45ebe0bb30dee1150e6baa9e4919704ad8db3a4776e9e0953c3312bf753f690e4f58dac3799f325b80aea05678fb091245c2da2189199bcdfeaa556ee234d0e4a2fbb932c7ca9bf874bbac8e3f05cb0d1b800745b565f71", @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000950000000000000018000000020000000000000000000000182b0000", @ANYRES32, @ANYBLOB="0000000000000000852000000200000018550000030000000000000000000000656bf4ff010000001850000000ffffffffe60000000000008520000004000000"], &(0x7f0000000580)='GPL\x00', 0x3a, 0x8e, &(0x7f00000005c0)=""/142, 0x41000, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x1, 0x7, 0x7}, {0x1, 0x2, 0x4, 0xb}, {0x3, 0x4, 0xa, 0x7}, {0x2, 0x2, 0x6, 0x4}, {0x4, 0x4, 0x7, 0x9}, {0x3, 0x2, 0x9, 0x9}, {0x5, 0x2, 0x6, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) unshare(0x40020000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3, 0x0, 0x2}, 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESOCT=r4, @ANYRESHEX=r5, @ANYRES16], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 4.965609953s ago: executing program 0 (id=1085): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000011000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.830512843s ago: executing program 0 (id=1086): r0 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="203005000000000014002b8008002100", @ANYRES32=r3, @ANYBLOB="e620ac6d", @ANYRES32=r3, @ANYRESOCT=r5], 0x3c}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000400)={r1, r2/1000+10000}, 0x10) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000b00)={'veth0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x10, 0x0, 0x0, 0xfe, 0x8, 0x0, 0x4, [0x0, 0x0, 0x0, 0x0, 0x2, 0x1]}}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x1}, 0x20) r8 = accept4(r0, 0x0, 0x0, 0x80800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) socket$unix(0x1, 0x2, 0x0) sendmmsg$alg(r8, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000001c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb903a422bf306a10470d50f5cb1ece9cad3459bab1cf1538cd0b157653c5e892962c80018858c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34025e721193af07a045ad3fdc928f02f20bad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11d6eb07396e3f497ea0fdc866a803a3cd18f03e5de86331212bfb3819381b3b7590afd88e6cc7684f70b4c8e675269157170c5047227430a3b5ae902de6", 0x100}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000c40)=ANY=[@ANYBLOB="186300000100000009000000000000008520000005000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300001d01d597816d3563dff583d7ab554dc58f6651a30c27dc4f019ef55c", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000007b12000f0ffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000580300008500000006000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x16, &(0x7f00000002c0)=""/22, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xd, 0x0, 0x8}, 0x10, 0x73bb, r9, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, r9, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x80}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r10, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) 4.573449028s ago: executing program 0 (id=1088): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x3}}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001008078da0ce40073797a30000000002c000000030a01010000000000f00400010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002200000000000000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000"], 0x100}}, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f0000001280)=[{&(0x7f0000001180)="830d", 0x2}], 0x1, 0x0) vmsplice(r7, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) sendmmsg$inet(r3, &(0x7f0000003b00)=[{{&(0x7f0000001540)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001840)="320a5a4f8be7a7e03beab9b8f2242f2c", 0x10}, {&(0x7f0000003c80)="9630de29", 0x4}], 0x2}}], 0x1, 0x4004044) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x7}, @const={0x10, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f00000000c0)=""/63, 0x34, 0x3f, 0x0, 0x6}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r11, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/33, 0x21, 0x0, &(0x7f0000000180)=""/51, 0x33}}, 0x10) socket$key(0xf, 0x3, 0x2) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25d7dbfd, {0x0, 0x0, 0x0, r10, {0x10, 0xfff3}, {0x1, 0xc}, {0xfff3, 0xa}}, ["", "", "", ""]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1500}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 4.414734013s ago: executing program 3 (id=1089): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000020100000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94) 4.361509097s ago: executing program 3 (id=1090): close(0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 4.078000523s ago: executing program 3 (id=1091): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaeaaaaaaa86dd6000000000180600fe8000000000000000000000000000bbfe8000000000000000aa00004e223adb62ade0a0f884a84cad0a4602fa"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a010100000000000000000200000008000540000000000c00024000000000000000010900010073797a300000000014000000110001000000780ddc0000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x48080}, 0x44090) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x150, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c721145eedb11cd9cd93615686aa231c3a3c6098a8e3611e"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6895188c331a87d73d6d27436a9acb8fc495627b5c8e8617"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00df020316471468"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a7269e96e46f4250"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f52e72359a4e265ceef113b64f0cc600034b0366147c9ca8"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7582ad8129c16ff0ca849b6293d2adad72ae44b92afecd2d"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9e2a10fbd56589d5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4691}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b427c429ead6f4ac7c8f27b942e2feed"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bfb3d956663efde0a81891f8028c60f1"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="499cc1cb82aa872dd8fadec14580c6e0e9b5634fafe42c30d7a7bfcb6ebfeccb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7615e8eab136eac2d40d539f34e025c6178b117c8a3e6bf8efde93d37d8885f2"}]}, @NL80211_ATTR_REKEY_DATA={0x4}]}, 0x150}, 0x1, 0x0, 0x0, 0x4004}, 0x8004) 3.897643887s ago: executing program 3 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x604000000000000) 3.89699789s ago: executing program 1 (id=1093): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000003ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) 3.726378941s ago: executing program 1 (id=1094): syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="0171ae80c20000000180c2000001080045000058000eac1414ff0420880b0000000000000800000086dd080088be00000000100400000100000000000000080022ebdfff00002000000002000000000000000000000008006558000000000000000000000000b1ac4a68ed51dc7cb1604cb1055b895a8e1a1eaa7bca25291e81c7cb8f493c0f5b47dc06d2cb538779f53a7d34adf9d815e5768eb9947752a2de8c822cc8bb16795fab743c15c39a03b0e701fc3e8c036c7590a8d0343d96c13e0c6f762726ae36bf1b7df2b3294d75bde61be33d7daa74d2f03c3da1c40742d70334155753820117b4f62712652a810f788d0392b38c06cb3afbb5744e27909459b25149afabb6710227ff571a6fcd1a1649eb8263e0dbf3933117dc72f85a05a5f1b315740fd6325c2bfe3c766f"], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r0}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x101, 0x8, 0x40, 0x42, 0x1}, 0x50) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002180)=[{{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40050}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x38}}], 0x2, 0x44800) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee00"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3.726146416s ago: executing program 3 (id=1095): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000003b80)={0x10000001}) write(r2, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socketpair(0x29, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) unshare(0x6a040000) syz_emit_ethernet(0x336, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40010) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000010b78a0ef28d983d82de88f5fad23381de71280200001c0012800b000100627279646765000c00028008000500010000005468a11b02b700c430cc1fe86c45c1958bed0b12d2384671e28c1b9c9c2c581e9b9e0259fe37465fcd14c776b6c82dbc090a698a8c2053303cdb5cca3b4ca40bb545268aeefeb4656c541e448de49cc4b4a5cb716648e6f06580969094c06207a0fac28bf2cdce1f6629c1ba1c9ff20541079cf736a0b63311d499b824f58a5d7911c31e56a5"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000140), &(0x7f0000000000)=0x8) 3.589398901s ago: executing program 0 (id=1096): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0xf, 0x200, 0x3b, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x7, 0xa}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x9, 0x4, 0x6, 0x100, 0x40, 0x20200, r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x520, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xff}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8008080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r7, 0x400, 0x70bd2d, 0x4, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000005}, 0x40) sendmsg$nl_route_sched(r6, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x115, 0x70bd2b, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.551298365s ago: executing program 1 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020100000000000000000000711215000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.290537368s ago: executing program 0 (id=1099): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="0203fe020f000000000000000000000003000700000000000200000064010100000000000020000002000100000004d3000009007fffffff030005"], 0x78}, 0x1, 0x7}, 0x0) 3.290156625s ago: executing program 1 (id=1100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081001000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000a6003ffffffffffffaaaaaaaaaaaa08004500001c00000000fa2f90780000e1e0000001a00081e89fd59662297a4067c848d8eeec653178"], 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x50, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}}, 0x20000010) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x29, 0x8a, 0xa, 0x1000000, 0x36, @mcast1, @local, 0x78a0, 0x700, 0x2, 0x7aea}}) 3.144170404s ago: executing program 0 (id=1101): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc79, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pi6 \x00'}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3]) 2.793642602s ago: executing program 3 (id=1102): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000004000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007006e6174002c000000050a010200000000000000000100"], 0x25c}}, 0x0) 2.730489714s ago: executing program 1 (id=1103): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x20) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x2, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r2 = socket$inet6(0xa, 0x800, 0x2c) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000000240)="5cf3cb058ff287279e280d7f039abbc372dc89e64e54318cb731b7477b1e4341a325538f41a88ada62f706ac39c507e78960a1074209907eeafc5b0861a364965c5440a556dad96483f565d6628192a4d67a", 0x52}], 0x2}}], 0x1, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x15, &(0x7f0000000980)=ANY=[@ANYBLOB="18110000", @ANYBLOB="33ee44bbcfd200d7210306bc6c554c102181290ef4d1b1921a0493a77829ad766266707dbfd1d0345669cf05d9d5051b4dc6081c8ba2a8332dd00713bcc2e09c5fbbea53a098600423bde2e5489a5884710ff58bc7e83451fd2a13e8b2ce0617bf9a751de4c24412837f75317aca55f502aa1c42c79376fbe7650eae7ff893fd16be6904d2f8aabe28f8f40aa7736d064ed9b1421329d8e45ebe0bb30dee1150e6baa9e4919704ad8db3a4776e9e0953c3312bf753f690e4f58dac3799f325b80aea05678fb091245c2da2189199bcdfeaa556ee234d0e4a2fbb932c7ca9bf874bbac8e3f05cb0d1b800745b565f71", @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000950000000000000018000000020000000000000000000000182b0000", @ANYRES32, @ANYBLOB="0000000000000000852000000200000018550000030000000000000000000000656bf4ff010000001850000000ffffffffe60000000000008520000004000000"], &(0x7f0000000580)='GPL\x00', 0x3a, 0x8e, &(0x7f00000005c0)=""/142, 0x41000, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x1, 0x7, 0x7}, {0x1, 0x2, 0x4, 0xb}, {0x3, 0x4, 0xa, 0x7}, {0x2, 0x2, 0x6, 0x4}, {0x4, 0x4, 0x7, 0x9}, {0x3, 0x2, 0x9, 0x9}, {0x5, 0x2, 0x6, 0x1}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) unshare(0x40020000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3, 0x0, 0x2}, 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESOCT=r4, @ANYRESHEX=r5, @ANYRES16], 0x50) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) 2.111784728s ago: executing program 4 (id=1105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000004c0)=0x8, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687d", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a000000fe00fd0939610000"], 0x1c}}, 0x0) 1.106676525s ago: executing program 4 (id=1106): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x56, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x4, 0x9f, &(0x7f0000000480)=""/159, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10002b00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local, 0x31, r3}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000004c40)={@remote, r3}, 0x14) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x4e20, 0x0, 0x4e23, 0x3, 0x2, 0xa0, 0x80, 0x67, r3, r4}, {0x5, 0xa, 0x8, 0x5, 0x9, 0x2, 0x80000001, 0x101}, {0x8000, 0xdd0a, 0x81, 0x7}, 0x5, 0x6e6bc0, 0x1, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d4, 0x6c}, 0x2, @in=@loopback, 0x3506, 0x1, 0x1, 0x10, 0x8, 0x7fffffff, 0x362}}, 0xe8) (async) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000001400)={0x4, &(0x7f0000001180)=[{@fixed}, {@fixed}, {@none}, {@fixed}]}) 943.784321ms ago: executing program 4 (id=1107): syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="0171ae80c20000000180c2000001080045000058000eac1414ff0420880b0000000000000800000086dd080088be00000000100400000100000000000000080022ebdfff00002000000002000000000000000000000008006558000000000000000000000000b1ac4a68ed51dc7cb1604cb1055b895a8e1a1eaa7bca25291e81c7cb8f493c0f5b47dc06d2cb538779f53a7d34adf9d815e5768eb9947752a2de8c822cc8bb16795fab743c15c39a03b0e701fc3e8c036c7590a8d0343d96c13e0c6f762726ae36bf1b7df2b3294d75bde61be33d7daa74d2f03c3da1c40742d70334155753820117b4f62712652a810f788d0392b38c06cb3afbb5744e27909459b25149afabb6710227ff571a6fcd1a1649eb8263e0dbf3933117dc72f85a05a5f1b315740fd6325c2bfe3c766f"], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r0}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x101, 0x8, 0x40, 0x42, 0x1}, 0x50) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002180)=[{{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40050}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x38}}], 0x2, 0x44800) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee00"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 765.475811ms ago: executing program 4 (id=1108): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x17, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 618.593291ms ago: executing program 4 (id=1109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x8004010}, 0x20000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x802, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000000540)=0xffff, &(0x7f0000000580)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 0s ago: executing program 4 (id=1110): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f00000004c0)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x82, 0x3f8, 0x20, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000001) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="000425bd7000fbdbdfe7f506c100280005802400f2000000000001000100fc5aa8b798944a23080003000300090000000800030006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) sendto$inet6(r0, &(0x7f0000000100)="de53", 0x2, 0x2810, &(0x7f00000000c0)={0xa, 0x4e21, 0x1001, @mcast2, 0x4}, 0x1c) kernel console output (not intermixed with test programs): veth0_macvtap: entered promiscuous mode [ 141.445227][ T6977] veth1_macvtap: entered promiscuous mode [ 141.510582][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.572512][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.655860][ T1329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.695014][ T1329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.717909][ T1329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.737001][ T1329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.786513][ T7244] netlink: 36 bytes leftover after parsing attributes in process `syz.3.404'. [ 141.920572][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.948093][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.999077][ T7249] trusted_key: syz.3.406 sent an empty control message without MSG_MORE. [ 142.012289][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.038201][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.946751][ T7287] pimreg3: entered allmulticast mode [ 143.009144][ T7278] lo speed is unknown, defaulting to 1000 [ 143.009320][ T7280] pimreg3: left allmulticast mode [ 143.115601][ T7281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.416'. [ 143.346428][ T2969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.433664][ T7290] syzkaller0: entered promiscuous mode [ 143.439534][ T7290] syzkaller0: entered allmulticast mode [ 143.953128][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.975818][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.003898][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.015361][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.027860][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.286144][ T2969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.382096][ T7307] lo speed is unknown, defaulting to 1000 [ 145.540259][ T7315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.426'. [ 145.659086][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 145.674916][ T7320] netlink: 7 bytes leftover after parsing attributes in process `syz.3.428'. [ 145.691414][ T2969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.865583][ T2969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.120913][ T5831] Bluetooth: hci4: command tx timeout [ 146.199096][ T7338] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.434'. [ 146.476317][ T7336] netlink: 100 bytes leftover after parsing attributes in process `syz.3.431'. [ 146.506686][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.514556][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.893758][ T7363] netlink: 68 bytes leftover after parsing attributes in process `syz.0.436'. [ 147.121212][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.226615][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.237957][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.279260][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.330384][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.439'. [ 147.342911][ T7371] netlink: 44 bytes leftover after parsing attributes in process `syz.3.437'. [ 147.366802][ T2969] bridge_slave_1: left allmulticast mode [ 147.373852][ T2969] bridge_slave_1: left promiscuous mode [ 147.388933][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.400165][ T2969] bridge_slave_0: left allmulticast mode [ 147.405869][ T2969] bridge_slave_0: left promiscuous mode [ 147.412998][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.745722][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.760458][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.771025][ T2969] bond0 (unregistering): Released all slaves [ 148.197608][ T5831] Bluetooth: hci4: command tx timeout [ 148.216018][ T7307] chnl_net:caif_netlink_parms(): no params data found [ 148.918578][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 148.963950][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.448'. [ 149.049121][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.081372][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.105613][ T7307] bridge_slave_0: entered allmulticast mode [ 149.138265][ T7307] bridge_slave_0: entered promiscuous mode [ 149.188770][ T2969] hsr_slave_0: left promiscuous mode [ 149.204321][ T2969] hsr_slave_1: left promiscuous mode [ 149.212037][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.220247][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.243680][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.251836][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.305436][ T2969] veth1_macvtap: left promiscuous mode [ 149.312635][ T2969] veth0_macvtap: left promiscuous mode [ 149.326268][ T2969] veth1_vlan: left promiscuous mode [ 149.332939][ T2969] veth0_vlan: left promiscuous mode [ 149.988231][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 150.050321][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 150.279539][ T5831] Bluetooth: hci4: command tx timeout [ 150.558556][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.565846][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.577154][ T7307] bridge_slave_1: entered allmulticast mode [ 150.586652][ T7307] bridge_slave_1: entered promiscuous mode [ 150.739496][ T7307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.836444][ T7307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.076560][ T7307] team0: Port device team_slave_0 added [ 151.109281][ T7307] team0: Port device team_slave_1 added [ 151.245229][ T7454] __nla_validate_parse: 2 callbacks suppressed [ 151.245250][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 151.290996][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 151.365741][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.387397][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.468622][ T7307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.508241][ T7307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.525875][ T7307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.555919][ T7307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.683114][ T7307] hsr_slave_0: entered promiscuous mode [ 151.690627][ T7307] hsr_slave_1: entered promiscuous mode [ 151.698721][ T7307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.716280][ T7307] Cannot create hsr debugfs directory [ 151.816257][ T7475] rdma_rxe: rxe_newlink: failed to add lo [ 151.844023][ T7477] ÿ: renamed from bond_slave_0 [ 152.359762][ T5831] Bluetooth: hci4: command tx timeout [ 152.538092][ T7493] netlink: 'syz.4.472': attribute type 13 has an invalid length. [ 152.561248][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 152.671046][ T7307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.714651][ T7307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.750325][ T7307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.828531][ T7307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.040301][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 153.049755][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 153.130033][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 153.194916][ T7307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.236645][ T7307] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.259420][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.266657][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.284743][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.291998][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.691261][ T7307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.700309][ T7536] FAULT_INJECTION: forcing a failure. [ 153.700309][ T7536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.745273][ T7536] CPU: 0 UID: 0 PID: 7536 Comm: syz.0.484 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 153.745303][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.745315][ T7536] Call Trace: [ 153.745323][ T7536] [ 153.745332][ T7536] dump_stack_lvl+0x189/0x250 [ 153.745369][ T7536] ? __pfx____ratelimit+0x10/0x10 [ 153.745394][ T7536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.745424][ T7536] ? __pfx__printk+0x10/0x10 [ 153.745447][ T7536] ? __might_fault+0xb0/0x130 [ 153.745480][ T7536] should_fail_ex+0x414/0x560 [ 153.745510][ T7536] _copy_from_user+0x2d/0xb0 [ 153.745531][ T7536] __sys_bpf+0x1ed/0x860 [ 153.745560][ T7536] ? __pfx___sys_bpf+0x10/0x10 [ 153.745600][ T7536] ? ksys_write+0x22a/0x250 [ 153.745635][ T7536] ? __pfx_ksys_write+0x10/0x10 [ 153.745663][ T7536] ? rcu_is_watching+0x15/0xb0 [ 153.745702][ T7536] __x64_sys_bpf+0x7c/0x90 [ 153.745727][ T7536] do_syscall_64+0xfa/0x3b0 [ 153.745761][ T7536] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.745783][ T7536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.745803][ T7536] ? clear_bhb_loop+0x60/0xb0 [ 153.745827][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.745847][ T7536] RIP: 0033:0x7f0ffb38e929 [ 153.745865][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.745881][ T7536] RSP: 002b:00007f0ffc2a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.745904][ T7536] RAX: ffffffffffffffda RBX: 00007f0ffb5b5fa0 RCX: 00007f0ffb38e929 [ 153.745918][ T7536] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 153.745930][ T7536] RBP: 00007f0ffc2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.745942][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.745953][ T7536] R13: 0000000000000000 R14: 00007f0ffb5b5fa0 R15: 00007ffe1a46dcb8 [ 153.745983][ T7536] [ 154.073171][ T7307] veth0_vlan: entered promiscuous mode [ 154.152020][ T7307] veth1_vlan: entered promiscuous mode [ 154.204898][ T7546] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 154.234307][ T7552] sctp: [Deprecated]: syz.4.490 (pid 7552) Use of int in max_burst socket option deprecated. [ 154.234307][ T7552] Use struct sctp_assoc_value instead [ 154.255491][ T7547] bond0 (unregistering): Released all slaves [ 154.417310][ T7307] veth0_macvtap: entered promiscuous mode [ 154.469030][ T7307] veth1_macvtap: entered promiscuous mode [ 154.568475][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 154.610102][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.661566][ T7307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.747084][ T2986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.820814][ T2986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.863950][ T2986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.880274][ T2986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.001681][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 155.021539][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.042288][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 155.054278][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.110138][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.127184][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.453818][ T7596] netlink: 'syz.4.506': attribute type 11 has an invalid length. [ 155.815667][ T7612] Bluetooth: MGMT ver 1.23 [ 155.833978][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 155.860969][ T7612] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 156.382304][ T7636] __nla_validate_parse: 1 callbacks suppressed [ 156.382329][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 156.670671][ T2969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.506644][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'. [ 157.738362][ T2969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.836588][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.846605][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.868549][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.877413][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.887123][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.909484][ T2969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.930039][ T7670] tipc: Started in network mode [ 157.935080][ T7670] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711 [ 157.944739][ T7670] tipc: Enabling of bearer rejected, failed to enable media [ 158.022092][ T2969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.064763][ T7675] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 158.103511][ T7664] lo speed is unknown, defaulting to 1000 [ 158.373391][ T2969] bridge_slave_1: left allmulticast mode [ 158.400843][ T2969] bridge_slave_1: left promiscuous mode [ 158.420795][ T2969] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.465391][ T2969] bridge_slave_0: left allmulticast mode [ 158.486505][ T2969] bridge_slave_0: left promiscuous mode [ 158.505551][ T2969] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.906186][ T7701] netlink: 'syz.0.543': attribute type 1 has an invalid length. [ 159.084832][ T2969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.103749][ T2969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.115208][ T2969] bond0 (unregistering): Released all slaves [ 159.154064][ T7688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 159.295080][ T7701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.807429][ T7730] netlink: 17 bytes leftover after parsing attributes in process `syz.0.549'. [ 159.958695][ T5837] Bluetooth: hci4: command tx timeout [ 160.288716][ T2969] hsr_slave_0: left promiscuous mode [ 160.304815][ T2969] hsr_slave_1: left promiscuous mode [ 160.315857][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.323888][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.333541][ T2969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.341375][ T2969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.379155][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 160.381680][ T2969] veth1_macvtap: left promiscuous mode [ 160.394078][ T2969] veth0_macvtap: left promiscuous mode [ 160.400198][ T2969] veth1_vlan: left promiscuous mode [ 160.411901][ T2969] veth0_vlan: left promiscuous mode [ 160.592157][ T7750] FAULT_INJECTION: forcing a failure. [ 160.592157][ T7750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.622781][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.4.555 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 160.622813][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.622823][ T7750] Call Trace: [ 160.622829][ T7750] [ 160.622836][ T7750] dump_stack_lvl+0x189/0x250 [ 160.622864][ T7750] ? __pfx____ratelimit+0x10/0x10 [ 160.622881][ T7750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.622903][ T7750] ? __pfx__printk+0x10/0x10 [ 160.622929][ T7750] should_fail_ex+0x414/0x560 [ 160.622951][ T7750] _copy_to_user+0x31/0xb0 [ 160.622966][ T7750] simple_read_from_buffer+0xe1/0x170 [ 160.622985][ T7750] proc_fail_nth_read+0x1df/0x250 [ 160.623006][ T7750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.623025][ T7750] ? rw_verify_area+0x258/0x650 [ 160.623046][ T7750] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.623063][ T7750] vfs_read+0x200/0x980 [ 160.623089][ T7750] ? __pfx___mutex_lock+0x10/0x10 [ 160.623108][ T7750] ? __pfx_vfs_read+0x10/0x10 [ 160.623130][ T7750] ? __fget_files+0x2a/0x420 [ 160.623149][ T7750] ? __fget_files+0x3a0/0x420 [ 160.623163][ T7750] ? __fget_files+0x2a/0x420 [ 160.623228][ T7750] ksys_read+0x145/0x250 [ 160.623252][ T7750] ? __pfx_ksys_read+0x10/0x10 [ 160.623272][ T7750] ? rcu_is_watching+0x15/0xb0 [ 160.623299][ T7750] ? do_syscall_64+0xbe/0x3b0 [ 160.623320][ T7750] do_syscall_64+0xfa/0x3b0 [ 160.623337][ T7750] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.623352][ T7750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.623366][ T7750] ? clear_bhb_loop+0x60/0xb0 [ 160.623384][ T7750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.623398][ T7750] RIP: 0033:0x7fb3dd78d33c [ 160.623411][ T7750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.623423][ T7750] RSP: 002b:00007fb3de5c3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.623440][ T7750] RAX: ffffffffffffffda RBX: 00007fb3dd9b6080 RCX: 00007fb3dd78d33c [ 160.623456][ T7750] RDX: 000000000000000f RSI: 00007fb3de5c30a0 RDI: 0000000000000004 [ 160.623465][ T7750] RBP: 00007fb3de5c3090 R08: 0000000000000000 R09: 0000000000000000 [ 160.623474][ T7750] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.623482][ T7750] R13: 0000000000000001 R14: 00007fb3dd9b6080 R15: 00007ffd72857558 [ 160.623505][ T7750] [ 161.228709][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 161.371990][ T2969] team0 (unregistering): Port device team_slave_1 removed [ 161.421064][ T2969] team0 (unregistering): Port device team_slave_0 removed [ 162.037356][ T5837] Bluetooth: hci4: command tx timeout [ 162.084511][ T7664] chnl_net:caif_netlink_parms(): no params data found [ 162.434113][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 162.459346][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 162.567937][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.575778][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.584280][ T7664] bridge_slave_0: entered allmulticast mode [ 162.596153][ T7664] bridge_slave_0: entered promiscuous mode [ 162.632127][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.647456][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.654880][ T7664] bridge_slave_1: entered allmulticast mode [ 162.663014][ T7664] bridge_slave_1: entered promiscuous mode [ 162.791140][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.867503][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.877430][ T7795] netlink: 136 bytes leftover after parsing attributes in process `syz.3.567'. [ 162.886756][ T7795] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 162.932897][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 162.935138][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 162.956615][ T7798] batadv1: entered promiscuous mode [ 162.965142][ T7798] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 162.979390][ T7798] team0: Failed to send options change via netlink (err -105) [ 162.987148][ T7798] team0: Port device batadv1 added [ 163.071626][ T7664] team0: Port device team_slave_0 added [ 163.077600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.120289][ T7664] team0: Port device team_slave_1 added [ 163.272635][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.286514][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.352299][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.388833][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 163.398944][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 163.411284][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.420715][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.455565][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.468027][ T7813] netlink: 'syz.3.574': attribute type 39 has an invalid length. [ 163.658657][ T7664] hsr_slave_0: entered promiscuous mode [ 163.665583][ T7664] hsr_slave_1: entered promiscuous mode [ 163.678201][ T7664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.686441][ T7664] Cannot create hsr debugfs directory [ 163.842070][ T7827] FAULT_INJECTION: forcing a failure. [ 163.842070][ T7827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.855767][ T7827] CPU: 0 UID: 0 PID: 7827 Comm: syz.0.580 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 163.855798][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.855810][ T7827] Call Trace: [ 163.855818][ T7827] [ 163.855827][ T7827] dump_stack_lvl+0x189/0x250 [ 163.855866][ T7827] ? __pfx____ratelimit+0x10/0x10 [ 163.855891][ T7827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.855922][ T7827] ? __pfx__printk+0x10/0x10 [ 163.855944][ T7827] ? __might_fault+0xb0/0x130 [ 163.855975][ T7827] should_fail_ex+0x414/0x560 [ 163.856004][ T7827] _copy_from_user+0x2d/0xb0 [ 163.856024][ T7827] ____sys_sendmsg+0x2fe/0x830 [ 163.856061][ T7827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.856098][ T7827] ? import_iovec+0x74/0xa0 [ 163.856121][ T7827] ___sys_sendmsg+0x21f/0x2a0 [ 163.856153][ T7827] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.856231][ T7827] ? __fget_files+0x2a/0x420 [ 163.856252][ T7827] ? __fget_files+0x3a0/0x420 [ 163.856285][ T7827] __sys_sendmmsg+0x227/0x430 [ 163.856321][ T7827] ? __pfx___sys_sendmmsg+0x10/0x10 [ 163.856348][ T7827] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 163.856403][ T7827] ? ksys_write+0x22a/0x250 [ 163.856437][ T7827] ? __pfx_ksys_write+0x10/0x10 [ 163.856465][ T7827] ? rcu_is_watching+0x15/0xb0 [ 163.856503][ T7827] __x64_sys_sendmmsg+0xa0/0xc0 [ 163.856534][ T7827] do_syscall_64+0xfa/0x3b0 [ 163.856557][ T7827] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.856579][ T7827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.856598][ T7827] ? clear_bhb_loop+0x60/0xb0 [ 163.856624][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.856649][ T7827] RIP: 0033:0x7f0ffb38e929 [ 163.856667][ T7827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.856684][ T7827] RSP: 002b:00007f0ffc2a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 163.856706][ T7827] RAX: ffffffffffffffda RBX: 00007f0ffb5b5fa0 RCX: 00007f0ffb38e929 [ 163.856721][ T7827] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004 [ 163.856733][ T7827] RBP: 00007f0ffc2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.856745][ T7827] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 163.856757][ T7827] R13: 0000000000000000 R14: 00007f0ffb5b5fa0 R15: 00007ffe1a46dcb8 [ 163.856790][ T7827] [ 164.119393][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 164.133263][ T5837] Bluetooth: hci4: command tx timeout [ 164.482300][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 164.496006][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 164.716038][ T7843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.588'. [ 164.901776][ T7664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 164.935984][ T7664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 164.979402][ T7664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.155218][ T7664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.445212][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.515245][ T7664] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.543679][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.550968][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.591270][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.598519][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.083860][ T7905] vlan2: entered promiscuous mode [ 166.090451][ T7905] bridge0: entered promiscuous mode [ 166.197792][ T5837] Bluetooth: hci4: command tx timeout [ 166.222456][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.309893][ T7664] veth0_vlan: entered promiscuous mode [ 166.351796][ T7664] veth1_vlan: entered promiscuous mode [ 166.468977][ T7664] veth0_macvtap: entered promiscuous mode [ 166.534252][ T7664] veth1_macvtap: entered promiscuous mode [ 166.547463][ T7923] Bluetooth: MGMT ver 1.23 [ 166.615634][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.680031][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.746190][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.775807][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.953872][ T7925] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.971016][ T7925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.004015][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.024955][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.149130][ T7929] lo speed is unknown, defaulting to 1000 [ 167.428131][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.436002][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.560789][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.581046][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.658132][ T7946] pim6reg1: entered allmulticast mode [ 167.752784][ T7949] FAULT_INJECTION: forcing a failure. [ 167.752784][ T7949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.781935][ T7949] CPU: 1 UID: 0 PID: 7949 Comm: syz.4.620 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 167.781965][ T7949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.781977][ T7949] Call Trace: [ 167.781986][ T7949] [ 167.781994][ T7949] dump_stack_lvl+0x189/0x250 [ 167.782031][ T7949] ? __pfx____ratelimit+0x10/0x10 [ 167.782055][ T7949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.782086][ T7949] ? __pfx__printk+0x10/0x10 [ 167.782108][ T7949] ? __might_fault+0xb0/0x130 [ 167.782140][ T7949] should_fail_ex+0x414/0x560 [ 167.782170][ T7949] _copy_from_user+0x2d/0xb0 [ 167.782190][ T7949] sock_do_ioctl+0x182/0x300 [ 167.782215][ T7949] ? __pfx_sock_do_ioctl+0x10/0x10 [ 167.782233][ T7949] ? __lock_acquire+0xab9/0xd20 [ 167.782276][ T7949] sock_ioctl+0x576/0x790 [ 167.782299][ T7949] ? __pfx_sock_ioctl+0x10/0x10 [ 167.782319][ T7949] ? __fget_files+0x2a/0x420 [ 167.782339][ T7949] ? __fget_files+0x3a0/0x420 [ 167.782358][ T7949] ? __fget_files+0x2a/0x420 [ 167.782382][ T7949] ? bpf_lsm_file_ioctl+0x9/0x20 [ 167.782409][ T7949] ? __pfx_sock_ioctl+0x10/0x10 [ 167.782428][ T7949] __se_sys_ioctl+0xf9/0x170 [ 167.782458][ T7949] do_syscall_64+0xfa/0x3b0 [ 167.782481][ T7949] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.782503][ T7949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.782523][ T7949] ? clear_bhb_loop+0x60/0xb0 [ 167.782547][ T7949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.782565][ T7949] RIP: 0033:0x7fb3dd78e929 [ 167.782583][ T7949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.782599][ T7949] RSP: 002b:00007fb3de5e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.782629][ T7949] RAX: ffffffffffffffda RBX: 00007fb3dd9b5fa0 RCX: 00007fb3dd78e929 [ 167.782642][ T7949] RDX: 00002000000000c0 RSI: 0000000000008924 RDI: 0000000000000004 [ 167.782654][ T7949] RBP: 00007fb3de5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 167.782665][ T7949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.782677][ T7949] R13: 0000000000000000 R14: 00007fb3dd9b5fa0 R15: 00007ffd72857558 [ 167.782709][ T7949] [ 168.268653][ T7952] __nla_validate_parse: 7 callbacks suppressed [ 168.268682][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 168.287722][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 168.420649][ T7941] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 168.458464][ T7941] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 168.593320][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.622'. [ 169.502617][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 169.512250][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 169.525844][ T1329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.510873][ T1329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.702384][ T1329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.907941][ T1329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.170551][ T1329] bridge_slave_1: left allmulticast mode [ 171.180751][ T1329] bridge_slave_1: left promiscuous mode [ 171.193295][ T1329] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.207881][ T1329] bridge_slave_0: left allmulticast mode [ 171.220167][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.222617][ T1329] bridge_slave_0: left promiscuous mode [ 171.236484][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.246373][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.256276][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.259686][ T1329] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.272759][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 171.617953][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 171.946755][ T1329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.963031][ T1329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.982289][ T1329] bond0 (unregistering): Released all slaves [ 172.033684][ T7923] Set syz1 is full, maxelem 65536 reached [ 172.096191][ T7989] lo speed is unknown, defaulting to 1000 [ 172.203978][ T7994] netlink: 96 bytes leftover after parsing attributes in process `syz.4.635'. [ 172.324669][ T7994] vlan2: entered allmulticast mode [ 172.333243][ T7994] erspan0: entered allmulticast mode [ 172.347722][ T8004] netlink: 'syz.3.638': attribute type 20 has an invalid length. [ 172.488984][ T8006] delete_channel: no stack [ 172.662892][ T8006] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 172.670881][ T8006] batadv2: entered promiscuous mode [ 172.678257][ T8006] team0: Port device batadv2 added [ 172.700029][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 172.709683][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.642'. [ 173.175727][ T8027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.646'. [ 173.228791][ T8028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.280155][ T8027] __nla_validate_parse: 1 callbacks suppressed [ 173.280176][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'. [ 173.327036][ T5837] Bluetooth: hci4: command tx timeout [ 173.424846][ T1329] hsr_slave_0: left promiscuous mode [ 173.445816][ T1329] hsr_slave_1: left promiscuous mode [ 173.456537][ T1329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.474831][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.487775][ T1329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.500760][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.550509][ T1329] veth1_macvtap: left promiscuous mode [ 173.556129][ T1329] veth0_macvtap: left promiscuous mode [ 173.564109][ T1329] veth1_vlan: left promiscuous mode [ 173.577170][ T1329] veth0_vlan: left promiscuous mode [ 173.615335][ T8044] netlink: 68 bytes leftover after parsing attributes in process `syz.4.651'. [ 174.064306][ T1329] team0 (unregistering): Port device team_slave_1 removed [ 174.105030][ T1329] team0 (unregistering): Port device team_slave_0 removed [ 174.694750][ T8047] netlink: 'syz.0.652': attribute type 10 has an invalid length. [ 174.705845][ T8047] dummy0: entered promiscuous mode [ 174.712290][ T8047] team0: Port device dummy0 added [ 174.726091][ T8047] netlink: 'syz.0.652': attribute type 10 has an invalid length. [ 174.745345][ T7989] chnl_net:caif_netlink_parms(): no params data found [ 174.790672][ T8047] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.822179][ T8047] dummy0: left promiscuous mode [ 174.828479][ T8047] team0: Failed to send options change via netlink (err -105) [ 174.836323][ T8047] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.849174][ T8047] team0: Port device dummy0 removed [ 174.859493][ T8047] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.884894][ T8052] netlink: 100 bytes leftover after parsing attributes in process `syz.1.653'. [ 175.107087][ T8067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 175.289857][ T8075] Bluetooth: MGMT ver 1.23 [ 175.294927][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.324747][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.335984][ T7989] bridge_slave_0: entered allmulticast mode [ 175.350723][ T7989] bridge_slave_0: entered promiscuous mode [ 175.372500][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.393246][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.401599][ T5837] Bluetooth: hci4: command tx timeout [ 175.413345][ T7989] bridge_slave_1: entered allmulticast mode [ 175.421915][ T7989] bridge_slave_1: entered promiscuous mode [ 175.500837][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.514852][ T8086] veth0: entered promiscuous mode [ 175.524564][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.537326][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 175.587213][ T8086] veth0 (unregistering): left promiscuous mode [ 175.669201][ T7989] team0: Port device team_slave_0 added [ 175.678016][ T7989] team0: Port device team_slave_1 added [ 175.750384][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.757864][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.784371][ T7989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.799484][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.806738][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.833662][ T7989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.904835][ T7989] hsr_slave_0: entered promiscuous mode [ 175.929257][ T7989] hsr_slave_1: entered promiscuous mode [ 175.936335][ T7989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.953680][ T7989] Cannot create hsr debugfs directory [ 176.240253][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.669'. [ 176.272903][ T8104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.669'. [ 176.825273][ T8128] netlink: 100 bytes leftover after parsing attributes in process `syz.0.680'. [ 176.855279][ T8128] netlink: 100 bytes leftover after parsing attributes in process `syz.0.680'. [ 176.940636][ T8135] xt_bpf: check failed: parse error [ 176.956258][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 176.962474][ T7989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 177.044357][ T7989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 177.124230][ T7989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 177.161294][ T7989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 177.465907][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.477562][ T5837] Bluetooth: hci4: command tx timeout [ 177.568156][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.606416][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.613719][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.710098][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.717448][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.862717][ T8180] geneve2: entered allmulticast mode [ 177.881051][ T8183] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 177.899555][ T8183] netlink: 'syz.0.699': attribute type 2 has an invalid length. [ 177.915048][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.938908][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.943501][ T8185] FAULT_INJECTION: forcing a failure. [ 177.943501][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 177.961827][ T1329] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.005762][ T1329] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.026600][ T8185] CPU: 1 UID: 0 PID: 8185 Comm: syz.4.701 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 178.026633][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.026646][ T8185] Call Trace: [ 178.026655][ T8185] [ 178.026664][ T8185] dump_stack_lvl+0x189/0x250 [ 178.026705][ T8185] ? __pfx____ratelimit+0x10/0x10 [ 178.026730][ T8185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.026764][ T8185] ? __pfx__printk+0x10/0x10 [ 178.026794][ T8185] ? __pfx___might_resched+0x10/0x10 [ 178.026825][ T8185] ? fs_reclaim_acquire+0x7d/0x100 [ 178.026856][ T8185] should_fail_ex+0x414/0x560 [ 178.026890][ T8185] should_failslab+0xa8/0x100 [ 178.026927][ T8185] __kmalloc_noprof+0xcb/0x4f0 [ 178.026946][ T8185] ? sock_kmalloc+0xd6/0x160 [ 178.026981][ T8185] sock_kmalloc+0xd6/0x160 [ 178.027015][ T8185] hash_recvmsg+0x1d4/0x840 [ 178.027049][ T8185] ? __pfx_hash_recvmsg+0x10/0x10 [ 178.027075][ T8185] sock_recvmsg+0x22c/0x270 [ 178.027102][ T8185] ____sys_recvmsg+0x1c9/0x460 [ 178.027142][ T8185] ? __pfx_____sys_recvmsg+0x10/0x10 [ 178.027192][ T8185] ? import_iovec+0x74/0xa0 [ 178.027216][ T8185] ___sys_recvmsg+0x1b5/0x510 [ 178.027254][ T8185] ? __pfx____sys_recvmsg+0x10/0x10 [ 178.027315][ T8185] ? __fget_files+0x3a0/0x420 [ 178.027352][ T8185] __x64_sys_recvmsg+0x198/0x260 [ 178.027387][ T8185] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 178.027430][ T8185] ? __pfx_ksys_write+0x10/0x10 [ 178.027459][ T8185] ? rcu_is_watching+0x15/0xb0 [ 178.027498][ T8185] ? do_syscall_64+0xbe/0x3b0 [ 178.027529][ T8185] do_syscall_64+0xfa/0x3b0 [ 178.027552][ T8185] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.027575][ T8185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.027596][ T8185] ? clear_bhb_loop+0x60/0xb0 [ 178.027622][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.027641][ T8185] RIP: 0033:0x7fb3dd78e929 [ 178.027660][ T8185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.027676][ T8185] RSP: 002b:00007fb3de5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 178.027696][ T8185] RAX: ffffffffffffffda RBX: 00007fb3dd9b5fa0 RCX: 00007fb3dd78e929 [ 178.027711][ T8185] RDX: 0000000000002140 RSI: 0000200000000300 RDI: 0000000000000005 [ 178.027723][ T8185] RBP: 00007fb3de5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 178.027735][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.027747][ T8185] R13: 0000000000000000 R14: 00007fb3dd9b5fa0 R15: 00007ffd72857558 [ 178.027780][ T8185] [ 178.700497][ T8208] FAULT_INJECTION: forcing a failure. [ 178.700497][ T8208] name failslab, interval 1, probability 0, space 0, times 0 [ 178.715461][ T8208] CPU: 1 UID: 0 PID: 8208 Comm: syz.4.709 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 178.715492][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.715505][ T8208] Call Trace: [ 178.715513][ T8208] [ 178.715522][ T8208] dump_stack_lvl+0x189/0x250 [ 178.715560][ T8208] ? __pfx____ratelimit+0x10/0x10 [ 178.715584][ T8208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.715616][ T8208] ? __pfx__printk+0x10/0x10 [ 178.715644][ T8208] ? __pfx___might_resched+0x10/0x10 [ 178.715680][ T8208] should_fail_ex+0x414/0x560 [ 178.715711][ T8208] should_failslab+0xa8/0x100 [ 178.715736][ T8208] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 178.715757][ T8208] ? __get_vm_area_node+0x13f/0x300 [ 178.715782][ T8208] __get_vm_area_node+0x13f/0x300 [ 178.715815][ T8208] __vmalloc_node_range_noprof+0x301/0x12f0 [ 178.715839][ T8208] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 178.715882][ T8208] ? is_bpf_text_address+0x26/0x2b0 [ 178.715941][ T8208] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.715961][ T8208] ? __might_fault+0xb0/0x130 [ 178.715980][ T8208] ? __pfx_aa_get_newest_label+0x10/0x10 [ 178.716005][ T8208] ? _parse_integer_limit+0x1ae/0x1f0 [ 178.716038][ T8208] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 178.716065][ T8208] __vmalloc_noprof+0xb1/0xf0 [ 178.716086][ T8208] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 178.716118][ T8208] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 178.716154][ T8208] bpf_prog_alloc+0x3c/0x1a0 [ 178.716181][ T8208] bpf_prog_load+0x735/0x1930 [ 178.716216][ T8208] ? __pfx_bpf_prog_load+0x10/0x10 [ 178.716264][ T8208] ? bpf_lsm_bpf+0x9/0x20 [ 178.716288][ T8208] ? security_bpf+0x7e/0x300 [ 178.716309][ T8208] __sys_bpf+0x5f1/0x860 [ 178.716332][ T8208] ? __pfx___sys_bpf+0x10/0x10 [ 178.716366][ T8208] ? ksys_write+0x22a/0x250 [ 178.716394][ T8208] ? __pfx_ksys_write+0x10/0x10 [ 178.716417][ T8208] ? rcu_is_watching+0x15/0xb0 [ 178.716452][ T8208] __x64_sys_bpf+0x7c/0x90 [ 178.716473][ T8208] do_syscall_64+0xfa/0x3b0 [ 178.716494][ T8208] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.716515][ T8208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.716534][ T8208] ? clear_bhb_loop+0x60/0xb0 [ 178.716567][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.716582][ T8208] RIP: 0033:0x7fb3dd78e929 [ 178.716600][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.716616][ T8208] RSP: 002b:00007fb3de5e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.716638][ T8208] RAX: ffffffffffffffda RBX: 00007fb3dd9b5fa0 RCX: 00007fb3dd78e929 [ 178.716652][ T8208] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 178.716664][ T8208] RBP: 00007fb3de5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 178.716676][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.716688][ T8208] R13: 0000000000000000 R14: 00007fb3dd9b5fa0 R15: 00007ffd72857558 [ 178.716719][ T8208] [ 178.721547][ T8203] : entered promiscuous mode [ 178.762050][ T8208] syz.4.709: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 178.977015][ T8209] netlink: 'syz.0.707': attribute type 12 has an invalid length. [ 178.979713][ T8208] ,cpuset= [ 179.003293][ T8209] __nla_validate_parse: 1 callbacks suppressed [ 179.003318][ T8209] netlink: 248 bytes leftover after parsing attributes in process `syz.0.707'. [ 179.005984][ T8208] / [ 179.014065][ T8214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.710'. [ 179.015099][ T8208] ,mems_allowed=0-1 [ 179.075073][ T8208] CPU: 1 UID: 0 PID: 8208 Comm: syz.4.709 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 179.075102][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.075114][ T8208] Call Trace: [ 179.075122][ T8208] [ 179.075131][ T8208] dump_stack_lvl+0x189/0x250 [ 179.075169][ T8208] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 179.075198][ T8208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.075229][ T8208] ? __pfx__printk+0x10/0x10 [ 179.075251][ T8208] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.075273][ T8208] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 179.075303][ T8208] warn_alloc+0x214/0x310 [ 179.075333][ T8208] ? __pfx_warn_alloc+0x10/0x10 [ 179.075358][ T8208] ? __get_vm_area_node+0x13f/0x300 [ 179.075383][ T8208] ? __get_vm_area_node+0x2b5/0x300 [ 179.075409][ T8208] __vmalloc_node_range_noprof+0x326/0x12f0 [ 179.075434][ T8208] ? is_bpf_text_address+0x26/0x2b0 [ 179.075492][ T8208] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.075513][ T8208] ? __might_fault+0xb0/0x130 [ 179.075531][ T8208] ? __pfx_aa_get_newest_label+0x10/0x10 [ 179.075556][ T8208] ? _parse_integer_limit+0x1ae/0x1f0 [ 179.075587][ T8208] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 179.075615][ T8208] __vmalloc_noprof+0xb1/0xf0 [ 179.075636][ T8208] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 179.075668][ T8208] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 179.075702][ T8208] bpf_prog_alloc+0x3c/0x1a0 [ 179.075734][ T8208] bpf_prog_load+0x735/0x1930 [ 179.075775][ T8208] ? __pfx_bpf_prog_load+0x10/0x10 [ 179.075828][ T8208] ? bpf_lsm_bpf+0x9/0x20 [ 179.075854][ T8208] ? security_bpf+0x7e/0x300 [ 179.075888][ T8208] __sys_bpf+0x5f1/0x860 [ 179.075917][ T8208] ? __pfx___sys_bpf+0x10/0x10 [ 179.075958][ T8208] ? ksys_write+0x22a/0x250 [ 179.075991][ T8208] ? __pfx_ksys_write+0x10/0x10 [ 179.076018][ T8208] ? rcu_is_watching+0x15/0xb0 [ 179.076057][ T8208] __x64_sys_bpf+0x7c/0x90 [ 179.076082][ T8208] do_syscall_64+0xfa/0x3b0 [ 179.076106][ T8208] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.076129][ T8208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.076150][ T8208] ? clear_bhb_loop+0x60/0xb0 [ 179.076175][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.076194][ T8208] RIP: 0033:0x7fb3dd78e929 [ 179.076213][ T8208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.076229][ T8208] RSP: 002b:00007fb3de5e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.076251][ T8208] RAX: ffffffffffffffda RBX: 00007fb3dd9b5fa0 RCX: 00007fb3dd78e929 [ 179.076265][ T8208] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 179.076278][ T8208] RBP: 00007fb3de5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 179.076290][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.076302][ T8208] R13: 0000000000000000 R14: 00007fb3dd9b5fa0 R15: 00007ffd72857558 [ 179.076334][ T8208] [ 179.076353][ T8208] Mem-Info: [ 179.141932][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.144501][ T8208] active_anon:4529 inactive_anon:0 isolated_anon:0 [ 179.144501][ T8208] active_file:1674 inactive_file:39874 isolated_file:0 [ 179.144501][ T8208] unevictable:768 dirty:390 writeback:0 [ 179.144501][ T8208] slab_reclaimable:11717 slab_unreclaimable:99596 [ 179.144501][ T8208] mapped:29967 shmem:1363 pagetables:1074 [ 179.144501][ T8208] sec_pagetables:0 bounce:0 [ 179.144501][ T8208] kernel_misc_reclaimable:0 [ 179.144501][ T8208] free:1323044 free_pcp:15794 free_cma:0 [ 179.429771][ T8208] Node 0 active_anon:18016kB inactive_anon:0kB active_file:6696kB inactive_file:159296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121468kB dirty:1560kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12040kB pagetables:4152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.463493][ T8208] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 179.495515][ T8211] lo speed is unknown, defaulting to 1000 [ 179.495771][ T7989] veth0_vlan: entered promiscuous mode [ 179.567851][ T8208] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 179.597331][ T5837] Bluetooth: hci4: command tx timeout [ 179.607426][ T7989] veth1_vlan: entered promiscuous mode [ 179.639837][ T7989] veth0_macvtap: entered promiscuous mode [ 179.650884][ T7989] veth1_macvtap: entered promiscuous mode [ 179.672633][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.685526][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.746232][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.746316][ T8208] lowmem_reserve[]: [ 179.773502][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.797033][ T8208] 0 2500 2502 2502 2502 [ 179.798072][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.801400][ T8208] Node 0 DMA32 free:1376712kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17968kB inactive_anon:0kB active_file:6696kB inactive_file:157464kB unevictable:1536kB writepending:1556kB present:3129332kB managed:2560924kB mlocked:0kB bounce:0kB free_pcp:42308kB local_pcp:23880kB free_cma:0kB [ 179.844555][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.856387][ T8208] lowmem_reserve[]: 0 0 1 1 1 [ 179.861985][ T8208] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 179.891993][ T8208] lowmem_reserve[]: 0 0 0 0 0 [ 179.897376][ T8208] Node 1 Normal free:3899492kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22464kB local_pcp:9760kB free_cma:0kB [ 179.974985][ T8208] lowmem_reserve[]: 0 0 0 0 0 [ 179.999660][ T8208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.035173][ T8208] Node 0 DMA32: 2*4kB (ME) 296*8kB (ME) 117*16kB (M) 317*32kB (UME) 148*64kB (UME) 62*128kB (UME) 41*256kB (UM) 21*512kB (UME) 12*1024kB (UM) 6*2048kB (UM) 317*4096kB (M) = 1376056kB [ 180.078883][ T8208] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 180.098113][ T8208] Node 1 Normal: 225*4kB (UE) 52*8kB (UME) 52*16kB (UME) 64*32kB (UME) 26*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3899492kB [ 180.100547][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.134743][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.171103][ T8208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.183319][ T8208] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.207954][ T8208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.232254][ T8208] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.249710][ T8208] 42907 total pagecache pages [ 180.254653][ T8208] 0 pages in swap cache [ 180.263829][ T8208] Free swap = 124996kB [ 180.294126][ T8208] Total swap = 124996kB [ 180.309313][ T8208] 2097051 pages RAM [ 180.313281][ T8208] 0 pages HighMem/MovableOnly [ 180.323382][ T8208] 424714 pages reserved [ 180.331819][ T8208] 0 pages cma reserved [ 180.344276][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.352978][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.463150][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 180.897174][ T8241] netlink: 48 bytes leftover after parsing attributes in process `syz.4.719'. [ 181.073199][ T8252] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 181.121651][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 181.144326][ T8257] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 181.166556][ T8257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.304777][ T8264] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 181.601425][ T2986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.875805][ T2986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.102997][ T2986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.181714][ T2986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.325928][ T2986] bridge_slave_1: left allmulticast mode [ 182.331907][ T2986] bridge_slave_1: left promiscuous mode [ 182.338037][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.349026][ T2986] bridge_slave_0: left allmulticast mode [ 182.354726][ T2986] bridge_slave_0: left promiscuous mode [ 182.360842][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.517739][ T8283] netlink: 'syz.3.732': attribute type 11 has an invalid length. [ 182.549659][ T8281] netlink: 'syz.1.731': attribute type 83 has an invalid length. [ 183.123976][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.142453][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.155220][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 183.172872][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 183.181319][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.262749][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.283695][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.304453][ T2986] bond0 (unregistering): Released all slaves [ 183.449302][ T8288] lo speed is unknown, defaulting to 1000 [ 183.529783][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 183.813425][ T8305] netlink: 14 bytes leftover after parsing attributes in process `syz.4.740'. [ 183.926810][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 184.174993][ T8305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.195708][ T8305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.220966][ T8305] bond0 (unregistering): Released all slaves [ 184.315547][ T8307] dummy0: entered promiscuous mode [ 185.235882][ T2986] hsr_slave_0: left promiscuous mode [ 185.242252][ T5837] Bluetooth: hci4: command tx timeout [ 185.258831][ T2986] hsr_slave_1: left promiscuous mode [ 185.270734][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.279714][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.298689][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.306995][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.385341][ T2986] veth1_macvtap: left promiscuous mode [ 185.417605][ T2986] veth0_macvtap: left promiscuous mode [ 185.433883][ T2986] veth1_vlan: left promiscuous mode [ 185.449852][ T2986] veth0_vlan: left promiscuous mode [ 186.185015][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 186.227189][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 186.697272][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.754'. [ 186.875340][ T8288] chnl_net:caif_netlink_parms(): no params data found [ 187.281930][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.307800][ T8288] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.317373][ T5837] Bluetooth: hci4: command tx timeout [ 187.338407][ T8288] bridge_slave_0: entered allmulticast mode [ 187.346624][ T8288] bridge_slave_0: entered promiscuous mode [ 187.368146][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.377227][ T8288] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.384531][ T8288] bridge_slave_1: entered allmulticast mode [ 187.404764][ T8288] bridge_slave_1: entered promiscuous mode [ 187.582619][ T8288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.632582][ T8288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.749102][ T8288] team0: Port device team_slave_0 added [ 187.769096][ T8288] team0: Port device team_slave_1 added [ 187.914449][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.926965][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.958579][ T8288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.999665][ T8288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.006675][ T8288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.044493][ T8288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.069213][ T8424] vlan2: entered promiscuous mode [ 188.242896][ T8288] hsr_slave_0: entered promiscuous mode [ 188.260703][ T8288] hsr_slave_1: entered promiscuous mode [ 188.279189][ T8288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.299194][ T8288] Cannot create hsr debugfs directory [ 188.438648][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 188.490414][ T8433] team_slave_0: entered promiscuous mode [ 188.496213][ T8433] team_slave_1: entered promiscuous mode [ 188.502119][ T8433] batadv1: entered promiscuous mode [ 188.512931][ T8433] team_slave_0: left promiscuous mode [ 188.518523][ T8433] team_slave_1: left promiscuous mode [ 188.524001][ T8433] batadv1: left promiscuous mode [ 188.624776][ T8439] batadv_slave_0: entered promiscuous mode [ 188.812976][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 188.829153][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.785'. [ 189.285449][ T8468] netlink: 64 bytes leftover after parsing attributes in process `syz.4.793'. [ 189.397431][ T5837] Bluetooth: hci4: command tx timeout [ 189.490906][ T8288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.503030][ T8288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.523925][ T8288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.547172][ T8288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.673947][ T8288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.719465][ T8288] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.759209][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.766984][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.798431][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.805674][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.047110][ T8494] FAULT_INJECTION: forcing a failure. [ 190.047110][ T8494] name failslab, interval 1, probability 0, space 0, times 0 [ 190.065015][ T8494] CPU: 0 UID: 0 PID: 8494 Comm: syz.3.799 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 190.065049][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.065069][ T8494] Call Trace: [ 190.065078][ T8494] [ 190.065095][ T8494] dump_stack_lvl+0x189/0x250 [ 190.065161][ T8494] ? __pfx____ratelimit+0x10/0x10 [ 190.065187][ T8494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.065220][ T8494] ? __pfx__printk+0x10/0x10 [ 190.065248][ T8494] ? __mutex_trylock_common+0x153/0x260 [ 190.065287][ T8494] should_fail_ex+0x414/0x560 [ 190.065320][ T8494] should_failslab+0xa8/0x100 [ 190.065353][ T8494] __kmalloc_cache_noprof+0x70/0x3d0 [ 190.065374][ T8494] ? __hw_addr_add_ex+0x1f4/0x770 [ 190.065411][ T8494] __hw_addr_add_ex+0x1f4/0x770 [ 190.065450][ T8494] dev_addr_init+0x14f/0x230 [ 190.065486][ T8494] ? __pfx_dev_addr_init+0x10/0x10 [ 190.065534][ T8494] alloc_netdev_mqs+0x2ae/0x1170 [ 190.065554][ T8494] ? __pfx_batadv_meshif_init_early+0x10/0x10 [ 190.065592][ T8494] rtnl_create_link+0x31f/0xd10 [ 190.065625][ T8494] rtnl_newlink_create+0x25c/0xb00 [ 190.065664][ T8494] ? __pfx_aa_get_newest_label+0x10/0x10 [ 190.065695][ T8494] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 190.065723][ T8494] ? rtnl_newlink+0x8db/0x1c70 [ 190.065758][ T8494] ? __pfx___mutex_lock+0x10/0x10 [ 190.065797][ T8494] ? ns_capable+0x8a/0xf0 [ 190.065834][ T8494] rtnl_newlink+0x16d6/0x1c70 [ 190.065862][ T8494] ? netlink_sendmsg+0x805/0xb30 [ 190.065909][ T8494] ? __pfx_rtnl_newlink+0x10/0x10 [ 190.065967][ T8494] ? kasan_quarantine_put+0xdd/0x220 [ 190.065999][ T8494] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.066030][ T8494] ? nlmon_xmit+0xb0/0x100 [ 190.066048][ T8494] ? kmem_cache_free+0x18f/0x400 [ 190.066085][ T8494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.066117][ T8494] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.066150][ T8494] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.066181][ T8494] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 190.066225][ T8494] ? __dev_queue_xmit+0x27e/0x3a70 [ 190.066271][ T8494] ? __lock_acquire+0xab9/0xd20 [ 190.066344][ T8494] ? __pfx_rtnl_newlink+0x10/0x10 [ 190.066370][ T8494] rtnetlink_rcv_msg+0x7cc/0xb70 [ 190.066400][ T8494] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 190.066425][ T8494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 190.066448][ T8494] ? ref_tracker_free+0x63a/0x7d0 [ 190.066473][ T8494] ? __copy_skb_header+0xa7/0x550 [ 190.066506][ T8494] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.066533][ T8494] ? __skb_clone+0x63/0x7a0 [ 190.066571][ T8494] netlink_rcv_skb+0x208/0x470 [ 190.066606][ T8494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 190.066634][ T8494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.066675][ T8494] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.066698][ T8494] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.066729][ T8494] netlink_unicast+0x75b/0x8d0 [ 190.066764][ T8494] netlink_sendmsg+0x805/0xb30 [ 190.066802][ T8494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.066832][ T8494] ? aa_sock_msg_perm+0x94/0x160 [ 190.066858][ T8494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.066884][ T8494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.066910][ T8494] __sock_sendmsg+0x21c/0x270 [ 190.066935][ T8494] ____sys_sendmsg+0x505/0x830 [ 190.066974][ T8494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.067015][ T8494] ? import_iovec+0x74/0xa0 [ 190.067040][ T8494] ___sys_sendmsg+0x21f/0x2a0 [ 190.067074][ T8494] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.067155][ T8494] ? __fget_files+0x2a/0x420 [ 190.067176][ T8494] ? __fget_files+0x3a0/0x420 [ 190.067210][ T8494] __x64_sys_sendmsg+0x19b/0x260 [ 190.067243][ T8494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.067285][ T8494] ? __pfx_ksys_write+0x10/0x10 [ 190.067321][ T8494] ? rcu_is_watching+0x15/0xb0 [ 190.067366][ T8494] ? do_syscall_64+0xbe/0x3b0 [ 190.067397][ T8494] do_syscall_64+0xfa/0x3b0 [ 190.067422][ T8494] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.067445][ T8494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.067466][ T8494] ? clear_bhb_loop+0x60/0xb0 [ 190.067492][ T8494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.067513][ T8494] RIP: 0033:0x7fa8f2b8e929 [ 190.067541][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.067559][ T8494] RSP: 002b:00007fa8f09f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.067587][ T8494] RAX: ffffffffffffffda RBX: 00007fa8f2db6080 RCX: 00007fa8f2b8e929 [ 190.067609][ T8494] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 190.067622][ T8494] RBP: 00007fa8f09f6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.067634][ T8494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.067646][ T8494] R13: 0000000000000000 R14: 00007fa8f2db6080 R15: 00007fff887e15a8 [ 190.067678][ T8494] [ 190.615157][ T8497] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 190.973550][ T8509] FAULT_INJECTION: forcing a failure. [ 190.973550][ T8509] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 190.989503][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.0.805 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 190.989533][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.989545][ T8509] Call Trace: [ 190.989553][ T8509] [ 190.989562][ T8509] dump_stack_lvl+0x189/0x250 [ 190.989601][ T8509] ? __pfx____ratelimit+0x10/0x10 [ 190.989631][ T8509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.989663][ T8509] ? __pfx__printk+0x10/0x10 [ 190.989686][ T8509] ? fs_reclaim_acquire+0x7d/0x100 [ 190.989722][ T8509] should_fail_ex+0x414/0x560 [ 190.989753][ T8509] prepare_alloc_pages+0x213/0x610 [ 190.989786][ T8509] __alloc_frozen_pages_noprof+0x123/0x370 [ 190.989817][ T8509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 190.989864][ T8509] alloc_pages_mpol+0x232/0x4a0 [ 190.989892][ T8509] alloc_pages_noprof+0xa9/0x190 [ 190.989914][ T8509] pte_alloc_one+0x21/0x170 [ 190.989947][ T8509] __pte_alloc+0x25/0x1a0 [ 190.989975][ T8509] __handle_mm_fault+0x4b8a/0x5620 [ 190.990034][ T8509] ? __pfx___handle_mm_fault+0x10/0x10 [ 190.990080][ T8509] ? follow_page_pte+0xe7e/0x14b0 [ 190.990115][ T8509] ? __pfx___might_resched+0x10/0x10 [ 190.990150][ T8509] handle_mm_fault+0x40a/0x8e0 [ 190.990192][ T8509] __get_user_pages+0x1af4/0x30b0 [ 190.990259][ T8509] ? __pfx___get_user_pages+0x10/0x10 [ 190.990289][ T8509] ? __gup_longterm_locked+0xbf7/0x15b0 [ 190.990319][ T8509] ? down_read_killable+0x1d1/0x350 [ 190.990353][ T8509] __gup_longterm_locked+0xd66/0x15b0 [ 190.990397][ T8509] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 190.990430][ T8509] ? gup_fast_fallback+0x1afc/0x2260 [ 190.990464][ T8509] gup_fast_fallback+0x1cd4/0x2260 [ 190.990534][ T8509] ? __pfx_gup_fast_fallback+0x10/0x10 [ 190.990572][ T8509] ? __local_bh_enable_ip+0x12d/0x1c0 [ 190.990607][ T8509] ? pin_user_pages_fast+0x4d/0xb0 [ 190.990640][ T8509] iov_iter_extract_pages+0x35a/0x5e0 [ 190.990672][ T8509] extract_iter_to_sg+0xe46/0x24e0 [ 190.990710][ T8509] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 190.990743][ T8509] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 190.990772][ T8509] ? unpin_user_page+0xc9/0x1d0 [ 190.990797][ T8509] ? __pfx_unpin_user_page+0x10/0x10 [ 190.990838][ T8509] ? __asan_memset+0x22/0x50 [ 190.990869][ T8509] hash_sendmsg+0x4f4/0x11d0 [ 190.990921][ T8509] ? __pfx_hash_sendmsg+0x10/0x10 [ 190.990947][ T8509] __sock_sendmsg+0x21c/0x270 [ 190.990974][ T8509] ____sys_sendmsg+0x52d/0x830 [ 190.991022][ T8509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.991062][ T8509] ? import_iovec+0x74/0xa0 [ 190.991085][ T8509] ___sys_sendmsg+0x21f/0x2a0 [ 190.991116][ T8509] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.991189][ T8509] ? __fget_files+0x2a/0x420 [ 190.991209][ T8509] ? __fget_files+0x3a0/0x420 [ 190.991244][ T8509] __sys_sendmmsg+0x227/0x430 [ 190.991280][ T8509] ? __pfx___sys_sendmmsg+0x10/0x10 [ 190.991308][ T8509] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 190.991364][ T8509] ? ksys_write+0x22a/0x250 [ 190.991398][ T8509] ? __pfx_ksys_write+0x10/0x10 [ 190.991426][ T8509] ? rcu_is_watching+0x15/0xb0 [ 190.991466][ T8509] __x64_sys_sendmmsg+0xa0/0xc0 [ 190.991500][ T8509] do_syscall_64+0xfa/0x3b0 [ 190.991523][ T8509] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.991545][ T8509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.991566][ T8509] ? clear_bhb_loop+0x60/0xb0 [ 190.991591][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.991611][ T8509] RIP: 0033:0x7f0ffb38e929 [ 190.991630][ T8509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.991647][ T8509] RSP: 002b:00007f0ffc2a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 190.991668][ T8509] RAX: ffffffffffffffda RBX: 00007f0ffb5b5fa0 RCX: 00007f0ffb38e929 [ 190.991684][ T8509] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004 [ 190.991696][ T8509] RBP: 00007f0ffc2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.991708][ T8509] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 190.991719][ T8509] R13: 0000000000000000 R14: 00007f0ffb5b5fa0 R15: 00007ffe1a46dcb8 [ 190.991752][ T8509] [ 191.477299][ T5837] Bluetooth: hci4: command tx timeout [ 191.543661][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.808'. [ 191.552816][ T8517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.808'. [ 191.569738][ T8288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.616796][ T8288] veth0_vlan: entered promiscuous mode [ 191.629907][ T8288] veth1_vlan: entered promiscuous mode [ 191.683939][ T8288] veth0_macvtap: entered promiscuous mode [ 191.708669][ T8288] veth1_macvtap: entered promiscuous mode [ 191.731055][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.742884][ T8288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.777289][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.786517][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.830209][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.884215][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.036010][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.055637][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.129333][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.151446][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.127572][ T8567] FAULT_INJECTION: forcing a failure. [ 193.127572][ T8567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.141725][ T8567] CPU: 0 UID: 0 PID: 8567 Comm: syz.4.825 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 193.141758][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.141771][ T8567] Call Trace: [ 193.141778][ T8567] [ 193.141787][ T8567] dump_stack_lvl+0x189/0x250 [ 193.141823][ T8567] ? __pfx____ratelimit+0x10/0x10 [ 193.141848][ T8567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.141879][ T8567] ? __pfx__printk+0x10/0x10 [ 193.141900][ T8567] ? __might_fault+0xb0/0x130 [ 193.141933][ T8567] should_fail_ex+0x414/0x560 [ 193.141963][ T8567] _copy_from_iter+0x1db/0x16f0 [ 193.141998][ T8567] ? rcu_is_watching+0x15/0xb0 [ 193.142041][ T8567] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 193.142077][ T8567] ? __pfx__copy_from_iter+0x10/0x10 [ 193.142116][ T8567] ? __build_skb_around+0x257/0x3e0 [ 193.142147][ T8567] ? netlink_sendmsg+0x642/0xb30 [ 193.142171][ T8567] ? skb_put+0x11b/0x210 [ 193.142202][ T8567] netlink_sendmsg+0x6b2/0xb30 [ 193.142239][ T8567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.142268][ T8567] ? aa_sock_msg_perm+0x94/0x160 [ 193.142295][ T8567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 193.142321][ T8567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.142348][ T8567] __sock_sendmsg+0x21c/0x270 [ 193.142372][ T8567] ____sys_sendmsg+0x505/0x830 [ 193.142407][ T8567] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.142447][ T8567] ? import_iovec+0x74/0xa0 [ 193.142471][ T8567] ___sys_sendmsg+0x21f/0x2a0 [ 193.142504][ T8567] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.142588][ T8567] ? __fget_files+0x2a/0x420 [ 193.142610][ T8567] ? __fget_files+0x3a0/0x420 [ 193.142645][ T8567] __x64_sys_sendmsg+0x19b/0x260 [ 193.142679][ T8567] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.142721][ T8567] ? __pfx_ksys_write+0x10/0x10 [ 193.142751][ T8567] ? rcu_is_watching+0x15/0xb0 [ 193.142790][ T8567] ? do_syscall_64+0xbe/0x3b0 [ 193.142820][ T8567] do_syscall_64+0xfa/0x3b0 [ 193.142845][ T8567] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.142877][ T8567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.142899][ T8567] ? clear_bhb_loop+0x60/0xb0 [ 193.142925][ T8567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.142945][ T8567] RIP: 0033:0x7fb3dd78e929 [ 193.142965][ T8567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.142982][ T8567] RSP: 002b:00007fb3de5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.143005][ T8567] RAX: ffffffffffffffda RBX: 00007fb3dd9b5fa0 RCX: 00007fb3dd78e929 [ 193.143019][ T8567] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000011 [ 193.143031][ T8567] RBP: 00007fb3de5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 193.143044][ T8567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.143056][ T8567] R13: 0000000000000000 R14: 00007fb3dd9b5fa0 R15: 00007ffd72857558 [ 193.143116][ T8567] [ 193.526063][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 193.553431][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 193.635402][ T8578] netlink: 308 bytes leftover after parsing attributes in process `syz.4.831'. [ 193.666230][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 193.677617][ T8578] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 194.000080][ T8595] tun0: tun_chr_ioctl cmd 2148553947 [ 194.218496][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 194.345649][ T8613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 194.369977][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.440981][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.117463][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.194069][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.251893][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.477810][ T37] bridge_slave_1: left allmulticast mode [ 195.484006][ T37] bridge_slave_1: left promiscuous mode [ 195.521832][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.542290][ T37] bridge_slave_0: left allmulticast mode [ 195.556384][ T37] bridge_slave_0: left promiscuous mode [ 195.575853][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.655708][ T8628] netlink: 'syz.3.847': attribute type 4 has an invalid length. [ 195.700199][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 195.705220][ T8628] netlink: 152 bytes leftover after parsing attributes in process `syz.3.847'. [ 195.996062][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.006461][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.020665][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.029342][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.046404][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.852252][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.857940][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.853'. [ 196.870265][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.853'. [ 196.881092][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.893260][ T37] bond0 (unregistering): Released all slaves [ 197.215114][ T8634] lo speed is unknown, defaulting to 1000 [ 197.274105][ T8657] FAULT_INJECTION: forcing a failure. [ 197.274105][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 197.290052][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.1.858 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 197.290086][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.290100][ T8657] Call Trace: [ 197.290108][ T8657] [ 197.290117][ T8657] dump_stack_lvl+0x189/0x250 [ 197.290154][ T8657] ? __pfx____ratelimit+0x10/0x10 [ 197.290179][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.290211][ T8657] ? __pfx__printk+0x10/0x10 [ 197.290249][ T8657] should_fail_ex+0x414/0x560 [ 197.290281][ T8657] should_failslab+0xa8/0x100 [ 197.290305][ T8657] __kmalloc_cache_noprof+0x70/0x3d0 [ 197.290325][ T8657] ? sctp_add_bind_addr+0x8c/0x370 [ 197.290354][ T8657] sctp_add_bind_addr+0x8c/0x370 [ 197.290382][ T8657] sctp_copy_local_addr_list+0x30b/0x4e0 [ 197.290410][ T8657] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 197.290433][ T8657] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 197.290459][ T8657] ? sctp_v6_is_any+0x64/0x80 [ 197.290487][ T8657] ? sctp_copy_one_addr+0x93/0x360 [ 197.290513][ T8657] sctp_bind_addr_copy+0xb3/0x3c0 [ 197.290538][ T8657] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 197.290576][ T8657] sctp_connect_new_asoc+0x2e0/0x690 [ 197.290609][ T8657] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 197.290636][ T8657] ? __local_bh_enable_ip+0x12d/0x1c0 [ 197.290676][ T8657] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 197.290704][ T8657] ? security_sctp_bind_connect+0x7e/0x2e0 [ 197.290730][ T8657] sctp_sendmsg+0x155c/0x2810 [ 197.290773][ T8657] ? __pfx_sctp_sendmsg+0x10/0x10 [ 197.290813][ T8657] ? aa_sk_perm+0x81e/0x950 [ 197.290842][ T8657] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.290870][ T8657] ? sock_rps_record_flow+0x19/0x410 [ 197.290896][ T8657] ? inet_sendmsg+0x2f4/0x370 [ 197.290922][ T8657] __sock_sendmsg+0x19c/0x270 [ 197.290949][ T8657] ____sys_sendmsg+0x52d/0x830 [ 197.290987][ T8657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.291028][ T8657] ? import_iovec+0x74/0xa0 [ 197.291052][ T8657] ___sys_sendmsg+0x21f/0x2a0 [ 197.291085][ T8657] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.291159][ T8657] ? __fget_files+0x2a/0x420 [ 197.291181][ T8657] ? __fget_files+0x3a0/0x420 [ 197.291215][ T8657] __sys_sendmmsg+0x227/0x430 [ 197.291252][ T8657] ? __pfx___sys_sendmmsg+0x10/0x10 [ 197.291279][ T8657] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 197.291336][ T8657] ? ksys_write+0x22a/0x250 [ 197.291371][ T8657] ? __pfx_ksys_write+0x10/0x10 [ 197.291399][ T8657] ? rcu_is_watching+0x15/0xb0 [ 197.291439][ T8657] __x64_sys_sendmmsg+0xa0/0xc0 [ 197.291471][ T8657] do_syscall_64+0xfa/0x3b0 [ 197.291495][ T8657] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.291518][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.291538][ T8657] ? clear_bhb_loop+0x60/0xb0 [ 197.291564][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.291584][ T8657] RIP: 0033:0x7fb91b98e929 [ 197.291602][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.291621][ T8657] RSP: 002b:00007fb91c805038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 197.291643][ T8657] RAX: ffffffffffffffda RBX: 00007fb91bbb5fa0 RCX: 00007fb91b98e929 [ 197.291658][ T8657] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 197.291671][ T8657] RBP: 00007fb91c805090 R08: 0000000000000000 R09: 0000000000000000 [ 197.291683][ T8657] R10: 931766f6119eed40 R11: 0000000000000246 R12: 0000000000000002 [ 197.291696][ T8657] R13: 0000000000000000 R14: 00007fb91bbb5fa0 R15: 00007ffe5d5a7498 [ 197.291730][ T8657] [ 198.127049][ T5837] Bluetooth: hci4: command tx timeout [ 198.194141][ T8674] vlan0: entered promiscuous mode [ 198.346626][ T8674] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.387976][ T8681] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 198.396464][ T8681] batadv3: entered promiscuous mode [ 198.408421][ T8681] team0: Failed to send port change of device batadv3 via netlink (err -105) [ 198.418467][ T8681] team0: Failed to send options change via netlink (err -105) [ 198.426069][ T8681] team0: Port device batadv3 added [ 198.444516][ T37] hsr_slave_0: left promiscuous mode [ 198.451760][ T37] hsr_slave_1: left promiscuous mode [ 198.458385][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.466144][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.475627][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.483509][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.522733][ T37] veth1_macvtap: left promiscuous mode [ 198.529076][ T37] veth0_macvtap: left promiscuous mode [ 198.534883][ T37] veth1_vlan: left promiscuous mode [ 198.542808][ T37] veth0_vlan: left promiscuous mode [ 198.597593][ T8687] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 199.175272][ T8691] __nla_validate_parse: 3 callbacks suppressed [ 199.175293][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 199.198689][ T37] team0 (unregistering): Port device team_slave_1 removed [ 199.275455][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 199.285470][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 199.318844][ T37] team0 (unregistering): Port device team_slave_0 removed [ 199.326289][ T8698] netlink: 72 bytes leftover after parsing attributes in process `syz.4.871'. [ 199.824129][ T8674] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.927316][ T8674] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.006640][ T8634] chnl_net:caif_netlink_parms(): no params data found [ 200.024166][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 200.066777][ T8674] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.197391][ T5837] Bluetooth: hci4: command tx timeout [ 200.413365][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.422451][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.430258][ T8634] bridge_slave_0: entered allmulticast mode [ 200.439179][ T8634] bridge_slave_0: entered promiscuous mode [ 200.454630][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.482895][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.500909][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.517614][ T8634] bridge_slave_1: entered allmulticast mode [ 200.534116][ T8634] bridge_slave_1: entered promiscuous mode [ 200.578841][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.655694][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.701315][ T8634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.723748][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.747599][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.883'. [ 200.762446][ T8634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.775195][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 200.788538][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 200.828503][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.865048][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.981867][ T8634] team0: Port device team_slave_0 added [ 200.987432][ T8742] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 201.010901][ T8634] team0: Port device team_slave_1 added [ 201.084430][ T8742] team0: Device ipvlan1 failed to register rx_handler [ 201.108605][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.131249][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.167737][ T8634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.208088][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.4.889'. [ 201.212156][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.241241][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.298744][ T8634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.377120][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.513639][ T8634] hsr_slave_0: entered promiscuous mode [ 201.531815][ T8634] hsr_slave_1: entered promiscuous mode [ 201.552821][ T8634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.576985][ T8634] Cannot create hsr debugfs directory [ 201.642122][ T8770] netlink: 'syz.0.896': attribute type 11 has an invalid length. [ 201.682588][ T8769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.897'. [ 202.277295][ T5837] Bluetooth: hci4: command tx timeout [ 202.789985][ T8820] tipc: Started in network mode [ 202.809624][ T8820] tipc: Node identity 3a000000000040120000006e70000001, cluster identity 4711 [ 202.837365][ T8820] tipc: Enabling of bearer rejected, failed to enable media [ 203.095356][ T8634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 203.146130][ T8634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 203.179035][ T8634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 203.196191][ T8634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 203.199456][ T8830] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 203.447978][ T8634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.475620][ T8634] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.490453][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.497774][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.533367][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.540649][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.674967][ T8848] vlan3: entered promiscuous mode [ 203.694169][ T8848] team0: entered promiscuous mode [ 203.703682][ T8848] team_slave_0: entered promiscuous mode [ 203.715005][ T8848] team_slave_1: entered promiscuous mode [ 203.725809][ T8848] batadv1: entered promiscuous mode [ 204.357253][ T5837] Bluetooth: hci4: command tx timeout [ 204.450379][ T8634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.543582][ T8880] x_tables: duplicate underflow at hook 1 [ 204.558501][ T8882] __nla_validate_parse: 9 callbacks suppressed [ 204.558521][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.930'. [ 204.571717][ T8885] netlink: 44 bytes leftover after parsing attributes in process `syz.4.929'. [ 204.630604][ T8634] veth0_vlan: entered promiscuous mode [ 204.640570][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.931'. [ 204.683057][ T8634] veth1_vlan: entered promiscuous mode [ 204.765132][ T8634] veth0_macvtap: entered promiscuous mode [ 204.803670][ T8634] veth1_macvtap: entered promiscuous mode [ 204.809037][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 204.823667][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 204.844197][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.884339][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.915067][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.954273][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.964691][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.033833][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.214089][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.233954][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.334051][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.368829][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.509316][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 205.538912][ T8912] gre2: entered promiscuous mode [ 205.703990][ T8922] netlink: 32 bytes leftover after parsing attributes in process `syz.4.946'. [ 205.799214][ T8922] lo speed is unknown, defaulting to 1000 [ 206.965890][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.863654][ T8952] netlink: 308 bytes leftover after parsing attributes in process `syz.3.958'. [ 207.898419][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'. [ 207.908614][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 207.921540][ T8956] FAULT_INJECTION: forcing a failure. [ 207.921540][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 207.927422][ T8952] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 207.950262][ T8956] CPU: 0 UID: 0 PID: 8956 Comm: syz.0.956 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 207.950295][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.950308][ T8956] Call Trace: [ 207.950317][ T8956] [ 207.950325][ T8956] dump_stack_lvl+0x189/0x250 [ 207.950364][ T8956] ? __pfx____ratelimit+0x10/0x10 [ 207.950387][ T8956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.950419][ T8956] ? __pfx__printk+0x10/0x10 [ 207.950448][ T8956] ? __pfx___might_resched+0x10/0x10 [ 207.950477][ T8956] ? fs_reclaim_acquire+0x7d/0x100 [ 207.950507][ T8956] should_fail_ex+0x414/0x560 [ 207.950539][ T8956] should_failslab+0xa8/0x100 [ 207.950563][ T8956] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 207.950597][ T8956] ? __alloc_skb+0x112/0x2d0 [ 207.950628][ T8956] __alloc_skb+0x112/0x2d0 [ 207.950659][ T8956] netlink_ack+0x146/0xa50 [ 207.950680][ T8956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.950724][ T8956] netlink_rcv_skb+0x28c/0x470 [ 207.950750][ T8956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.950776][ T8956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.950815][ T8956] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.950839][ T8956] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.950870][ T8956] netlink_unicast+0x75b/0x8d0 [ 207.950905][ T8956] netlink_sendmsg+0x805/0xb30 [ 207.950940][ T8956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.950977][ T8956] ? aa_sock_msg_perm+0x94/0x160 [ 207.951005][ T8956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.951030][ T8956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.951055][ T8956] __sock_sendmsg+0x21c/0x270 [ 207.951081][ T8956] ____sys_sendmsg+0x505/0x830 [ 207.951117][ T8956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.951157][ T8956] ? import_iovec+0x74/0xa0 [ 207.951180][ T8956] ___sys_sendmsg+0x21f/0x2a0 [ 207.951212][ T8956] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.951282][ T8956] ? __fget_files+0x2a/0x420 [ 207.951303][ T8956] ? __fget_files+0x3a0/0x420 [ 207.951336][ T8956] __x64_sys_sendmsg+0x19b/0x260 [ 207.951369][ T8956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.951409][ T8956] ? __pfx_ksys_write+0x10/0x10 [ 207.951437][ T8956] ? rcu_is_watching+0x15/0xb0 [ 207.951474][ T8956] ? do_syscall_64+0xbe/0x3b0 [ 207.951504][ T8956] do_syscall_64+0xfa/0x3b0 [ 207.951526][ T8956] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.951549][ T8956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.951569][ T8956] ? clear_bhb_loop+0x60/0xb0 [ 207.951593][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.951613][ T8956] RIP: 0033:0x7f0ffb38e929 [ 207.951631][ T8956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.951648][ T8956] RSP: 002b:00007f0ffc2a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.951671][ T8956] RAX: ffffffffffffffda RBX: 00007f0ffb5b5fa0 RCX: 00007f0ffb38e929 [ 207.951686][ T8956] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000011 [ 207.951698][ T8956] RBP: 00007f0ffc2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 207.951711][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.951723][ T8956] R13: 0000000000000000 R14: 00007f0ffb5b5fa0 R15: 00007ffe1a46dcb8 [ 207.951755][ T8956] [ 208.551097][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.560316][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.569079][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.577788][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.590350][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.694951][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.806345][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.892168][ T8971] pim6reg1: entered promiscuous mode [ 208.898307][ T8971] pim6reg1: entered allmulticast mode [ 208.942516][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.091010][ T8962] lo speed is unknown, defaulting to 1000 [ 209.346980][ T12] bridge_slave_1: left allmulticast mode [ 209.352712][ T12] bridge_slave_1: left promiscuous mode [ 209.367383][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.381554][ T12] bridge_slave_0: left allmulticast mode [ 209.439936][ T12] bridge_slave_0: left promiscuous mode [ 209.445819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.906193][ T8985] __nla_validate_parse: 1 callbacks suppressed [ 209.906216][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.966'. [ 210.465585][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.476739][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.488772][ T12] bond0 (unregistering): Released all slaves [ 210.512765][ T8986] batman_adv: batadv0: Adding interface: ip6gretap1 [ 210.521837][ T8986] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.548321][ T8986] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 210.560593][ T8988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.569477][ T8988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.577557][ T8988] batman_adv: batadv0: Removing interface: ip6gretap1 [ 210.640981][ T8993] vlan2: entered promiscuous mode [ 210.646152][ T8993] bridge0: entered promiscuous mode [ 210.677182][ T5843] Bluetooth: hci4: command tx timeout [ 210.824121][ T8997] netlink: 5 bytes leftover after parsing attributes in process `syz.0.968'. [ 210.844962][ T8998] netlink: 248 bytes leftover after parsing attributes in process `syz.1.969'. [ 210.903598][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 211.479247][ T12] hsr_slave_0: left promiscuous mode [ 211.497426][ T12] hsr_slave_1: left promiscuous mode [ 211.510799][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.532535][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.552453][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.566450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.622669][ T12] veth1_macvtap: left promiscuous mode [ 211.633642][ T12] veth0_macvtap: left promiscuous mode [ 211.651076][ T12] veth1_vlan: left promiscuous mode [ 211.660591][ T12] veth0_vlan: left promiscuous mode [ 211.877316][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 211.877836][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 211.883449][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 211.883502][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 212.082369][ T9025] FAULT_INJECTION: forcing a failure. [ 212.082369][ T9025] name failslab, interval 1, probability 0, space 0, times 0 [ 212.095455][ T9025] CPU: 0 UID: 0 PID: 9025 Comm: syz.0.975 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 212.095486][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.095499][ T9025] Call Trace: [ 212.095507][ T9025] [ 212.095518][ T9025] dump_stack_lvl+0x189/0x250 [ 212.095556][ T9025] ? __pfx____ratelimit+0x10/0x10 [ 212.095581][ T9025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.095613][ T9025] ? __pfx__printk+0x10/0x10 [ 212.095651][ T9025] should_fail_ex+0x414/0x560 [ 212.095683][ T9025] should_failslab+0xa8/0x100 [ 212.095707][ T9025] __kmalloc_cache_noprof+0x70/0x3d0 [ 212.095728][ T9025] ? sctp_add_bind_addr+0x8c/0x370 [ 212.095756][ T9025] sctp_add_bind_addr+0x8c/0x370 [ 212.095785][ T9025] sctp_copy_local_addr_list+0x30b/0x4e0 [ 212.095814][ T9025] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 212.095837][ T9025] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 212.095863][ T9025] ? sctp_v6_is_any+0x64/0x80 [ 212.095890][ T9025] ? sctp_copy_one_addr+0x93/0x360 [ 212.095918][ T9025] sctp_bind_addr_copy+0xb3/0x3c0 [ 212.095942][ T9025] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 212.095979][ T9025] sctp_connect_new_asoc+0x2e0/0x690 [ 212.096013][ T9025] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 212.096039][ T9025] ? __local_bh_enable_ip+0x12d/0x1c0 [ 212.096079][ T9025] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 212.096107][ T9025] ? security_sctp_bind_connect+0x7e/0x2e0 [ 212.096133][ T9025] sctp_sendmsg+0x155c/0x2810 [ 212.096176][ T9025] ? __pfx_sctp_sendmsg+0x10/0x10 [ 212.096207][ T9025] ? aa_sk_perm+0x81e/0x950 [ 212.096236][ T9025] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.096264][ T9025] ? sock_rps_record_flow+0x19/0x410 [ 212.096289][ T9025] ? inet_sendmsg+0x2f4/0x370 [ 212.096315][ T9025] __sock_sendmsg+0x19c/0x270 [ 212.096343][ T9025] ____sys_sendmsg+0x52d/0x830 [ 212.096385][ T9025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.096433][ T9025] ? import_iovec+0x74/0xa0 [ 212.096457][ T9025] ___sys_sendmsg+0x21f/0x2a0 [ 212.096491][ T9025] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.096563][ T9025] ? __fget_files+0x2a/0x420 [ 212.096585][ T9025] ? __fget_files+0x3a0/0x420 [ 212.096620][ T9025] __sys_sendmmsg+0x227/0x430 [ 212.096657][ T9025] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.096684][ T9025] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 212.096742][ T9025] ? ksys_write+0x22a/0x250 [ 212.096776][ T9025] ? __pfx_ksys_write+0x10/0x10 [ 212.096804][ T9025] ? rcu_is_watching+0x15/0xb0 [ 212.096844][ T9025] __x64_sys_sendmmsg+0xa0/0xc0 [ 212.096875][ T9025] do_syscall_64+0xfa/0x3b0 [ 212.096900][ T9025] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.096922][ T9025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.096942][ T9025] ? clear_bhb_loop+0x60/0xb0 [ 212.096967][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.096987][ T9025] RIP: 0033:0x7f0ffb38e929 [ 212.097006][ T9025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.097023][ T9025] RSP: 002b:00007f0ffc2a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.097045][ T9025] RAX: ffffffffffffffda RBX: 00007f0ffb5b5fa0 RCX: 00007f0ffb38e929 [ 212.097060][ T9025] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 212.097073][ T9025] RBP: 00007f0ffc2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.097085][ T9025] R10: 931766f6119eed40 R11: 0000000000000246 R12: 0000000000000002 [ 212.097098][ T9025] R13: 0000000000000000 R14: 00007f0ffb5b5fa0 R15: 00007ffe1a46dcb8 [ 212.097130][ T9025] [ 212.560717][ T9030] delete_channel: no stack [ 212.592603][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.976'. [ 212.761747][ T5152] Bluetooth: hci4: command tx timeout [ 212.915347][ T12] team0 (unregistering): Port device team_slave_1 removed [ 212.962734][ T12] team0 (unregistering): Port device team_slave_0 removed [ 213.561064][ T8962] chnl_net:caif_netlink_parms(): no params data found [ 213.807450][ T9055] netlink: 136 bytes leftover after parsing attributes in process `syz.1.980'. [ 213.921007][ T9058] netlink: 268 bytes leftover after parsing attributes in process `syz.4.986'. [ 213.933554][ T9058] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 213.942339][ T9058] netlink: 232 bytes leftover after parsing attributes in process `syz.4.986'. [ 213.951992][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.961391][ T9058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.986'. [ 213.971526][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.979432][ T8962] bridge_slave_0: entered allmulticast mode [ 213.989388][ T8962] bridge_slave_0: entered promiscuous mode [ 214.011950][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.037132][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.044550][ T8962] bridge_slave_1: entered allmulticast mode [ 214.053608][ T8962] bridge_slave_1: entered promiscuous mode [ 214.070688][ T9061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.985'. [ 214.128294][ T9059] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.154315][ T9045] lo speed is unknown, defaulting to 1000 [ 214.239291][ T9059] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.288753][ T8962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.318065][ T8962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.407539][ T9059] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.477961][ T8962] team0: Port device team_slave_0 added [ 214.502878][ T9059] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.543989][ T8962] team0: Port device team_slave_1 added [ 214.641398][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.650257][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.679832][ T8962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.707834][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.714852][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.742398][ T8962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.837300][ T5152] Bluetooth: hci4: command tx timeout [ 214.846437][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.866387][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.952192][ T2986] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.011211][ T8962] hsr_slave_0: entered promiscuous mode [ 215.018858][ T8962] hsr_slave_1: entered promiscuous mode [ 215.044488][ T8962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.057108][ T8962] Cannot create hsr debugfs directory [ 215.246485][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.346311][ T9084] xfrm1: entered promiscuous mode [ 215.366126][ T9084] xfrm1: entered allmulticast mode [ 215.470443][ T9092] __nla_validate_parse: 2 callbacks suppressed [ 215.470477][ T9092] netlink: 44 bytes leftover after parsing attributes in process `syz.0.995'. [ 215.506063][ T9095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.708507][ T9102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.981099][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 216.022684][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 216.092312][ T1034] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.111724][ T1034] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.141195][ T1034] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.167142][ T1034] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.273328][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'. [ 216.563431][ T8962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.641997][ T8962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.676672][ T8962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.695934][ T8962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.791197][ T9142] Bluetooth: MGMT ver 1.23 [ 216.856612][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 216.878399][ T9144] lo speed is unknown, defaulting to 1000 [ 216.917450][ T5152] Bluetooth: hci4: command tx timeout [ 216.936447][ T5923] IPVS: starting estimator thread 0... [ 217.058139][ T8962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.067821][ T9148] IPVS: using max 28 ests per chain, 67200 per kthread [ 217.248358][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 217.297929][ T9156] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1010'. [ 217.510197][ T8962] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.602621][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.609870][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.669274][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.677591][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.185711][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 218.377158][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 218.441197][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1019'. [ 218.564434][ T9187] netlink: 'syz.4.1021': attribute type 3 has an invalid length. [ 219.484122][ T8962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.658178][ T8962] veth0_vlan: entered promiscuous mode [ 219.709661][ T8962] veth1_vlan: entered promiscuous mode [ 219.825152][ T9215] vlan2: entered promiscuous mode [ 219.837012][ T9215] team0: entered promiscuous mode [ 219.846058][ T9215] team_slave_0: entered promiscuous mode [ 219.863020][ T9215] team_slave_1: entered promiscuous mode [ 219.882451][ T9215] batadv1: entered promiscuous mode [ 219.897707][ T9215] batadv2: entered promiscuous mode [ 219.945322][ T8962] veth0_macvtap: entered promiscuous mode [ 219.991459][ T8962] veth1_macvtap: entered promiscuous mode [ 220.073527][ T8962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.105714][ T8962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.137457][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.213223][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.242858][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.289365][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.396075][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.414773][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.472450][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.502657][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.012055][ T9252] __nla_validate_parse: 1 callbacks suppressed [ 221.012077][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'. [ 221.018637][ T2986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.044161][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'. [ 221.073401][ T9251] netlink: 'syz.1.1039': attribute type 26 has an invalid length. [ 221.170032][ T2986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.279052][ T2986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.353149][ T2986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.606537][ T2986] bridge_slave_1: left allmulticast mode [ 221.612413][ T2986] bridge_slave_1: left promiscuous mode [ 221.619024][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.630323][ T2986] bridge_slave_0: left allmulticast mode [ 221.636001][ T2986] bridge_slave_0: left promiscuous mode [ 221.642397][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.983855][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.995822][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.008116][ T2986] bond0 (unregistering): Released all slaves [ 222.249325][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1042'. [ 222.278773][ T9262] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1043'. [ 222.406553][ T9262] sit0: entered promiscuous mode [ 222.894218][ T2986] hsr_slave_0: left promiscuous mode [ 222.911491][ T2986] hsr_slave_1: left promiscuous mode [ 222.924769][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.942621][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.963829][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.980607][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.009679][ T9288] netlink: 'syz.1.1050': attribute type 20 has an invalid length. [ 223.051314][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.055145][ T2986] veth1_macvtap: left promiscuous mode [ 223.066151][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.068345][ T2986] veth0_macvtap: left promiscuous mode [ 223.079928][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.084909][ T2986] veth1_vlan: left promiscuous mode [ 223.093089][ T2986] veth0_vlan: left promiscuous mode [ 223.096570][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.111008][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.645499][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 223.699527][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 224.124087][ T9282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.132107][ T9282] batadv0: entered promiscuous mode [ 224.141995][ T9282] team0: Port device batadv0 added [ 224.291913][ T9293] delete_channel: no stack [ 224.328440][ T9290] lo speed is unknown, defaulting to 1000 [ 224.493059][ T9298] IPVS: Scheduler module ip_vs_sip not found [ 224.983510][ T9320] FAULT_INJECTION: forcing a failure. [ 224.983510][ T9320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.030601][ T9315] lo speed is unknown, defaulting to 1000 [ 225.047081][ T9320] CPU: 1 UID: 0 PID: 9320 Comm: syz.4.1061 Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 225.047115][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.047129][ T9320] Call Trace: [ 225.047139][ T9320] [ 225.047148][ T9320] dump_stack_lvl+0x189/0x250 [ 225.047186][ T9320] ? __pfx____ratelimit+0x10/0x10 [ 225.047212][ T9320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.047244][ T9320] ? __pfx__printk+0x10/0x10 [ 225.047268][ T9320] ? __might_fault+0xb0/0x130 [ 225.047301][ T9320] should_fail_ex+0x414/0x560 [ 225.047333][ T9320] _copy_from_iter+0x1db/0x16f0 [ 225.047368][ T9320] ? rcu_is_watching+0x15/0xb0 [ 225.047402][ T9320] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 225.047438][ T9320] ? __pfx__copy_from_iter+0x10/0x10 [ 225.047470][ T9320] ? __build_skb_around+0x257/0x3e0 [ 225.047515][ T9320] ? netlink_sendmsg+0x642/0xb30 [ 225.047541][ T9320] ? skb_put+0x11b/0x210 [ 225.047573][ T9320] netlink_sendmsg+0x6b2/0xb30 [ 225.047611][ T9320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.047642][ T9320] ? aa_sock_msg_perm+0x94/0x160 [ 225.047677][ T9320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.047704][ T9320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.047731][ T9320] __sock_sendmsg+0x21c/0x270 [ 225.047758][ T9320] ____sys_sendmsg+0x505/0x830 [ 225.047796][ T9320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.047836][ T9320] ? import_iovec+0x74/0xa0 [ 225.047860][ T9320] ___sys_sendmsg+0x21f/0x2a0 [ 225.047893][ T9320] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.047963][ T9320] ? __fget_files+0x2a/0x420 [ 225.047986][ T9320] ? __fget_files+0x3a0/0x420 [ 225.048020][ T9320] __x64_sys_sendmsg+0x19b/0x260 [ 225.048055][ T9320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.048096][ T9320] ? __pfx_ksys_write+0x10/0x10 [ 225.048125][ T9320] ? rcu_is_watching+0x15/0xb0 [ 225.048163][ T9320] ? do_syscall_64+0xbe/0x3b0 [ 225.048193][ T9320] do_syscall_64+0xfa/0x3b0 [ 225.048216][ T9320] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.048240][ T9320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.048259][ T9320] ? clear_bhb_loop+0x60/0xb0 [ 225.048284][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.048305][ T9320] RIP: 0033:0x7fb3dd78e929 [ 225.048324][ T9320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.048340][ T9320] RSP: 002b:00007fb3de5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.048362][ T9320] RAX: ffffffffffffffda RBX: 00007fb3dd9b5fa0 RCX: 00007fb3dd78e929 [ 225.048378][ T9320] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 225.048392][ T9320] RBP: 00007fb3de5e4090 R08: 0000000000000000 R09: 0000000000000000 [ 225.048405][ T9320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.048417][ T9320] R13: 0000000000000000 R14: 00007fb3dd9b5fa0 R15: 00007ffd72857558 [ 225.048449][ T9320] [ 225.359807][ T5152] Bluetooth: hci4: command tx timeout [ 225.902316][ T9290] chnl_net:caif_netlink_parms(): no params data found [ 226.075043][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 226.127795][ T9341] team_slave_0: entered promiscuous mode [ 226.133617][ T9341] team_slave_1: entered promiscuous mode [ 226.139446][ T9341] batadv1: entered promiscuous mode [ 226.155416][ T9341] team_slave_0: left promiscuous mode [ 226.160984][ T9341] team_slave_1: left promiscuous mode [ 226.166482][ T9341] batadv1: left promiscuous mode [ 226.484283][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.502430][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.517537][ T9290] bridge_slave_0: entered allmulticast mode [ 226.546474][ T9290] bridge_slave_0: entered promiscuous mode [ 226.614679][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.633999][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.662832][ T9290] bridge_slave_1: entered allmulticast mode [ 226.676078][ T9290] bridge_slave_1: entered promiscuous mode [ 226.770286][ T5923] IPVS: starting estimator thread 0... [ 226.864390][ T9290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.873620][ T9369] IPVS: using max 26 ests per chain, 62400 per kthread [ 226.902616][ T9364] lo speed is unknown, defaulting to 1000 [ 226.913245][ T9290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.070450][ T9290] team0: Port device team_slave_0 added [ 227.096164][ T9290] team0: Port device team_slave_1 added [ 227.278490][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.285503][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.367135][ T9290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.387498][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 227.397285][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 227.397418][ T5837] Bluetooth: hci4: command tx timeout [ 227.428195][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.443057][ T7366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.459968][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.487110][ T9290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.676615][ T9290] hsr_slave_0: entered promiscuous mode [ 227.704642][ T9290] hsr_slave_1: entered promiscuous mode [ 227.721380][ T9290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.739722][ T9290] Cannot create hsr debugfs directory [ 227.787936][ T9393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1082'. [ 227.857943][ T9393] : entered promiscuous mode [ 227.941978][ T9390] lo speed is unknown, defaulting to 1000 [ 227.956522][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 228.256526][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 228.283261][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 228.437370][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.529811][ T9410] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 229.228954][ T9428] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1095'. [ 229.266348][ T9290] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.281267][ T9424] lo speed is unknown, defaulting to 1000 [ 229.477788][ T5837] Bluetooth: hci4: command tx timeout [ 229.564087][ T9290] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.601333][ T9290] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.647846][ T9290] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.773610][ T9441] lo speed is unknown, defaulting to 1000 [ 230.183730][ T9290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.277613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.328980][ T9290] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.368899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.376109][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.413985][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.421258][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.566687][ T9463] netlink: 'syz.0.1101': attribute type 4 has an invalid length. [ 230.698896][ T9467] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.753803][ T9458] lo speed is unknown, defaulting to 1000 [ 230.996712][ T9457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1102'. [ 231.185068][ T9290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.291370][ T9290] veth0_vlan: entered promiscuous mode [ 231.322037][ T9454] lo speed is unknown, defaulting to 1000 [ 231.341042][ T9290] veth1_vlan: entered promiscuous mode [ 231.544224][ T9290] veth0_macvtap: entered promiscuous mode [ 231.558428][ T5837] Bluetooth: hci4: command tx timeout [ 231.661832][ T9290] veth1_macvtap: entered promiscuous mode [ 231.725871][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.770299][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.806496][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.828108][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.852790][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.890334][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.322480][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.340761][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.554847][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.564119][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.858345][ T9290] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 232.864748][ T9290] CPU: 0 UID: 0 PID: 9290 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00998-g5f712c3877f9 #0 PREEMPT(full) [ 232.877019][ T9290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.887109][ T9290] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 232.892702][ T9290] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 51 5d 62 ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 96 de c5 ff 49 83 3f 00 0f 84 [ 232.912692][ T9290] RSP: 0018:ffffc9000461f7e0 EFLAGS: 00010206 [ 232.918794][ T9290] RAX: ffffffff825df27f RBX: 0000000000000000 RCX: ffff88804f2cda00 [ 232.926805][ T9290] RDX: 0000000000000000 RSI: ffff888143aa1e10 RDI: 0000000000000000 [ 232.934806][ T9290] RBP: 0000000000000006 R08: ffff88804f2cda00 R09: 0000000000000008 [ 232.942798][ T9290] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 232.950797][ T9290] R13: ffff888143aa1e10 R14: 0000000000000000 R15: 0000000000000030 [ 232.958779][ T9290] FS: 0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 232.967722][ T9290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 232.974327][ T9290] CR2: 000055558fb225c8 CR3: 00000000314ee000 CR4: 00000000003526f0 [ 232.982326][ T9290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 232.990312][ T9290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 232.998323][ T9290] Call Trace: [ 233.001613][ T9290] [ 233.004555][ T9290] ? trace_kmalloc+0x1f/0xd0 [ 233.009242][ T9290] ? kobject_move+0x20a/0x4f0 [ 233.013935][ T9290] kobject_move+0x3a5/0x4f0 [ 233.018454][ T9290] ? __pfx_kobject_move+0x10/0x10 [ 233.023494][ T9290] ? get_device_parent+0x366/0x3a0 [ 233.028621][ T9290] device_move+0xe0/0x700 [ 233.032964][ T9290] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.038964][ T9290] hci_conn_del_sysfs+0xb8/0x170 [ 233.043946][ T9290] hci_conn_del+0x8ff/0xcb0 [ 233.048487][ T9290] hci_conn_hash_flush+0x191/0x230 [ 233.053797][ T9290] hci_dev_close_sync+0xaef/0x1330 [ 233.059022][ T9290] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 233.064584][ T9290] ? up_write+0x1c4/0x420 [ 233.068933][ T9290] hci_unregister_dev+0x21a/0x510 [ 233.074011][ T9290] vhci_release+0x80/0xd0 [ 233.078373][ T9290] ? __pfx_vhci_release+0x10/0x10 [ 233.083403][ T9290] __fput+0x449/0xa70 [ 233.087406][ T9290] task_work_run+0x1d1/0x260 [ 233.092014][ T9290] ? __pfx_task_work_run+0x10/0x10 [ 233.097140][ T9290] ? kmem_cache_free+0x18f/0x400 [ 233.102107][ T9290] do_exit+0x6b5/0x22e0 [ 233.106295][ T9290] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 233.111681][ T9290] ? __pfx_do_exit+0x10/0x10 [ 233.116296][ T9290] ? _raw_spin_unlock_irq+0x23/0x50 [ 233.121505][ T9290] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.126722][ T9290] do_group_exit+0x21c/0x2d0 [ 233.131331][ T9290] __x64_sys_exit_group+0x3f/0x40 [ 233.136370][ T9290] x64_sys_call+0x21ba/0x21c0 [ 233.141072][ T9290] do_syscall_64+0xfa/0x3b0 [ 233.145619][ T9290] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.150830][ T9290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.156910][ T9290] ? clear_bhb_loop+0x60/0xb0 [ 233.161615][ T9290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.167530][ T9290] RIP: 0033:0x7fb1d658e929 [ 233.171973][ T9290] Code: Unable to access opcode bytes at 0x7fb1d658e8ff. [ 233.179001][ T9290] RSP: 002b:00007ffce3541368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 233.187438][ T9290] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb1d658e929 [ 233.195645][ T9290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 233.203646][ T9290] RBP: 00007fb1d65ee8f0 R08: 00007ffce353f107 R09: 0000000000000003 [ 233.211894][ T9290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.219881][ T9290] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffce3541520 [ 233.227874][ T9290] [ 233.230902][ T9290] Modules linked in: [ 233.235185][ T9290] ---[ end trace 0000000000000000 ]--- [ 233.242226][ T9290] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 233.249038][ T9290] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 51 5d 62 ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 96 de c5 ff 49 83 3f 00 0f 84 [ 233.276447][ T9290] RSP: 0018:ffffc9000461f7e0 EFLAGS: 00010206 [ 233.282668][ T9290] RAX: ffffffff825df27f RBX: 0000000000000000 RCX: ffff88804f2cda00 [ 233.291444][ T9290] RDX: 0000000000000000 RSI: ffff888143aa1e10 RDI: 0000000000000000 [ 233.300690][ T9290] RBP: 0000000000000006 R08: ffff88804f2cda00 R09: 0000000000000008 [ 233.309393][ T9290] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 233.317480][ T9290] R13: ffff888143aa1e10 R14: 0000000000000000 R15: 0000000000000030 [ 233.325501][ T9290] FS: 0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 233.334586][ T9290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.341541][ T9290] CR2: 000000110c2dd81a CR3: 000000006e7a2000 CR4: 00000000003526f0 [ 233.349711][ T9290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 233.357807][ T9290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 233.366277][ T9290] Kernel panic - not syncing: Fatal exception [ 233.372715][ T9290] Kernel Offset: disabled [ 233.377049][ T9290] Rebooting in 86400 seconds..