last executing test programs: 2.396613888s ago: executing program 0 (id=1136): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x10, 0x6, 0x81, 0x4}, {0xb5, 0x2, 0x986, 0x0, 0xf7, 0x7a}, 0xfffffffd, 0x5, 0x1318}}]}}]}, 0x68}}, 0x44080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmmsg$unix(r8, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x10}}], 0x30, 0x40044}}], 0x1, 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) sendmsg$netlink(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000580)={0xbc, 0x41, 0x10, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@loopback}, @nested={0x9a, 0x55, 0x0, 0x1, [@generic="45ac70d7f7dcc5d4a0972f81be3204abff9da9611c0001deaada527d6fb727299f84eaee493cdf0365fe5f0ac415bf657564a2ee9616bd26980026e4b8d2544bd62ef79f5215bd38dfcae8966e261f66857989b67bc901ac052a90b74ba7e19773bf6dcd0b3fc089df877d50cae13fce6705cc6fe01cd3d89083b887b0d483a10473a80bcec19bc06200", @typed={0x4, 0x32}, @typed={0x8, 0xc2, 0x0, 0x0, @pid}]}, @typed={0x8, 0x13f, 0x0, 0x0, @pid}]}, 0xbc}, {0x0}, {&(0x7f0000000b40)={0x240, 0x19, 0x8, 0x70bd27, 0x25dfdbfc, "", [@nested={0x85, 0xbb, 0x0, 0x1, [@generic, @generic="3fe313f7e4c318328ea2e60b97bae8d9c20e1d801252bac06929c84606c6a349c114be15070e3001adc51b9b207129e9a62bc94f9762bccf4131fe143a7ebe13ede7b641749f3e77a0aa6bb8273bd56014048ec23cbf0d1eafc100707d5ac14fe272458cbef7c3f2070a3f5b432d943bc7442aec473ad08a2e507c3ffcafc61f06"]}, @typed={0x4, 0xe6}, @typed={0x8, 0x94, 0x0, 0x0, @pid}, @nested={0xdd, 0x16, 0x0, 0x1, [@generic="9ed835cf2a1db06a9f1d70dc2a5cfd2090000a2ae1309ee1db4b29a244179cd7377f11f3ab1bf86ba0dd7309cb40542b92c63977cecc3d62d310", @generic="9ecf5fa67b91685fed129e6025924ebab2a428128a85ecad6df3a4f0a3d7d04e0a1f97ff013dbc945f893cdf258ca3c1f4c9bf85b02071ba369f261f", @typed={0xc, 0xd2, 0x0, 0x0, @u64=0x3ff}, @nested={0x4, 0x11d}, @typed={0xc, 0xc5, 0x0, 0x0, @u64=0x10000}, @nested={0x4, 0x44}, @typed={0x1a, 0x13, 0x0, 0x0, @str='cpuset.effective_cpus\x00'}, @nested={0x4, 0xea}, @generic="0019556a2c9432d4760b353356abedaad7c24872cc6c3485bae48729e95cecc7cdf349"]}, @generic="36f2276c6e28eba0b1ae9451ea90cb57694d78aaa82438dfa5e5fbe16b5817cdb3349fe146f83b2661f9da75396ba1ef3d55fe88fb8cf2c2cad10c8e5a8ff680d5f4d3d8954d2dfe302c44324fe0dfff3c4164261f215b1b80167ff8c89bbdde7482f8ae85c1d5276655cbf08c41b12070b8669b2388631bed7644e359d8261428ad1098e474faf0c56595bb9bb12acd0a24aad68e92fcc7fb77bd5da3d1d4508c549396a386f8545f756bf102b3ffc1a5d4013a7bc6f8d98c5633"]}, 0x240}, {&(0x7f0000000340)={0x10, 0x26, 0x800, 0x70bd26, 0x25dfdbfc}, 0x10}, {&(0x7f0000000780)={0xa8, 0x18, 0x100, 0x70bd25, 0x25dfdbfc, "", [@nested={0x8c, 0x111, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @fd=r7}, @generic="231139c3f5bc439deca08feea01dcbc89910d7ac1ce0266e7fd3a1b6c0e63e9f09d4f4144c0ea0fcfb9054e8ff9ab36bf433dc45dc9eb91dc30cdfa22c597e67273718ab2868e29258bb5e2ab0d40d789e95ec8c92cdf7b2ad05f39aa3bbf45670daf10e1ab5158825b8e16e", @nested={0x4, 0x117}, @nested={0x4, 0xf2}, @nested={0x4, 0xe2}, @typed={0x8, 0xd6, 0x0, 0x0, @u32=0x4}]}, @typed={0xc, 0x76, 0x0, 0x0, @u64=0x7}]}, 0xa8}, {&(0x7f0000000940)={0x64, 0x2e, 0x4, 0x70bd26, 0x25dfdbfb, "", [@nested={0x54, 0xd0, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @uid}, @generic="287f3f34e8aa1468eed83e2a515d0c539fe0e98694c0373f0cd5a28db6b9e3b3b77fb0a4358cdbd8635bc7e68e4d4e6fae9daaf996a7f712cf5b518bce4dde73", @typed={0x8, 0xb3, 0x0, 0x0, @uid}]}]}, 0x64}], 0x6, &(0x7f0000001100)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, r4]}}, @rights={{0x2c, 0x1, 0x1, [r7, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r12}}}], 0x78, 0x88bf05585fabedea}, 0x10) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast1, 0x4e22, 0x0, 0x4e21, 0x7f, 0xa, 0x0, 0x20, 0x89, r1, r10}, {0x87, 0x6, 0x1, 0x7, 0x0, 0x80000000, 0x7f, 0x2}, {0xffffffffffff39da, 0x3ff, 0x4, 0xff}, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x4d6, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3505, 0x0, 0x3, 0x53, 0x3, 0x9, 0x1}}, 0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r13 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x3, 0x1, 0x62a7, 0xf}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x4}]}, {0x9, 0x6, "d7436df8d9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xd4}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r13, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.058705447s ago: executing program 3 (id=1140): syz_emit_ethernet(0x6a, &(0x7f0000000540)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x2, 0x2e, 0x5c, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x4, 0x1, 0x1, 0x2, 0x5, 0x8}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x2, 0x3, 0x0, 0x2, 0x5}, 0x2, {0x8, 0x1, 0x1, 0x6, 0x0, 0x0, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d03"], 0x0, 0x5a}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.992846101s ago: executing program 0 (id=1142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 1.902444099s ago: executing program 3 (id=1143): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x28, 0x26, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffff}, {0x3, 0x13}, {0x5, 0xd}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x48, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40400d0}, 0x40000) 1.872600097s ago: executing program 0 (id=1144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, 0x2b, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffea7, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @binary="2a0aa32f9d5c778d"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}]}, 0x3c}}, 0x0) 1.824048851s ago: executing program 1 (id=1146): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000030094910003000000022000000000000000000000000000010500000008000000000077424d63ce397c2d00000000000000"], 0x0, 0x4e, 0x0, 0x3}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300080e0000002cbd7000fcdbdf2505000600000000000a00000000000002f8ffffffffffffff000000000000000102000000000000000200010000000000040007040000000005000c00000000000a000000000000000000000000000000000000000000000107000000000000006bdccc1800182df7d7f91f"], 0x70}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000009000000000000001800000d0000000000000067a9000000"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000002000000000000008000000018110000a870c3a447e9e0dccf6cd9c2662e616402a5557b110ddd74ab564da252baf09d020b44eefaf7cffb8684c8caa228a14c48a682064dcae75efafa0a48f5076800df333c76f022b828e2f7c43962c894dae6ee143c9584c996785b38593907f051ae8310c8e0757b89e54b143fac1280", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d1000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000020000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000004e200000000004000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000fffffffffffffffff100000000000000000000000000000040000000000000000000200000000000ffffffffffffffff00000400"/112], 0xb8}}, 0xc844) r4 = socket$isdn(0x22, 0x3, 0x23) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00'}) unshare(0x20040600) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x200000000000005f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ppoll(0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000580), 0x8) 1.653066926s ago: executing program 3 (id=1149): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r1, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x5, 0x9, 0xe90, 0xffffffffffffffff, 0xcde, '\x00', 0x0, r0, 0x3, 0x1, 0x5, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x18, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0xc, 0xb, 0x2, 0x2, 0xffffffffffffffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8f}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, @generic={0x9, 0x1, 0x1, 0x81, 0xfffffffa}, @jmp={0x5, 0x0, 0x5, 0x6, 0x2, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], &(0x7f0000000200)='GPL\x00', 0x8, 0x38, &(0x7f0000000240)=""/56, 0x41000, 0x4c, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x800, 0x901}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r4, r5], &(0x7f0000000500)=[{0x1, 0x2, 0x8, 0xc}, {0x2, 0x3, 0x9, 0xb}], 0x10, 0x69}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5}, 0x94) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x84, &(0x7f0000000000), 0x90) (async) sendmsg$inet(r1, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x5, 0x9, 0xe90, 0xffffffffffffffff, 0xcde, '\x00', 0x0, r0, 0x3, 0x1, 0x5, 0x9}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x18, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0xc, 0xb, 0x2, 0x2, 0xffffffffffffffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8f}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, @generic={0x9, 0x1, 0x1, 0x81, 0xfffffffa}, @jmp={0x5, 0x0, 0x5, 0x6, 0x2, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}], &(0x7f0000000200)='GPL\x00', 0x8, 0x38, &(0x7f0000000240)=""/56, 0x41000, 0x4c, '\x00', r3, 0x0, r1, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x800, 0x901}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r4, r5], &(0x7f0000000500)=[{0x1, 0x2, 0x8, 0xc}, {0x2, 0x3, 0x9, 0xb}], 0x10, 0x69}, 0x94) (async) 1.621974283s ago: executing program 1 (id=1150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffe0b479e5f1a919ffb702000008000000b703000000080000850000000694f429a6a2c9906efe5c40e699d52f85336183b3263f76302a15e7427097623a22ba8f3ff5a3201f0dee99f0b58ae86045649feb5e3d77ca71c088a25b1842374dd6f1186e07de64", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', 0x0}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000480)={'some', 0x20, 0x7, 0x20, 0xff}, 0xfffffffffffffd91) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000240001000100008000000000000000000600030000000000"], 0x1c}}, 0x8004) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e22, 0x0, 0x4e22, 0xfff, 0xa, 0x0, 0x0, 0x3a}, {0x3, 0xd4, 0x6, 0x8, 0x3, 0x3, 0x5, 0x8001}, {0x7f, 0x10000, 0x8000000000000000}, 0xc, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x3, 0x3, 0x1, 0xa9, 0x8001, 0x1}}, 0xe8) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_l2cap(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f64764"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="230000003000000000000000937193e57aa50000000000000000eb040bd4041955fd0e46dc88cbd17d22b79232668d629ee85f64c03e9758dc9e2060c0c801d4266e738f52a355102b990d9a4a7e66a3f6999f1560454dececc9345174b8ff9193400dc8b04c5f4c74e4db671cdf63dcb11ead70f2d33b6f583de99b8b23e24d81881d4107e70447db6a4bb8eeec6908859f17c5796b9afff7ed90159c2510f274f427111dcee05e00"/181, @ANYRES32=r2, @ANYRES64=0x0], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2f000000040000000406000000000000000000005f64b167cee81d68708da5457a0d5a9698d1cb425585dbe560cca3558918e4524d0cf3354756c279052dfa2353c3635dc275b4dbcf3a9c81b93e81f619d5036fde636079096fc3c9d0c0cc5a92b26b4cf6322e95ae8053299bc72666ac7177094cc6ddd40067e580ff65de4f983848485af84114e51dc77e89bf38ad6dbed0ddb5d2ec7270b8ccf9b1da6c431678379a33cf879a288e1480bde1f74e15f3c135bb593c0cc4f0641cbe1eb53e90db7899a7f143452a36c758c29e1c12d065c98db2ccd220c56acfe2cd383951d7a33b4eac7f7dbc457c147190e9", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r11, 0x58, &(0x7f0000000300)}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0xa4f, 0xffffffb0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r13, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, 0x464, 0x200, 0x70bd2b, 0x25dfdbfb, "e00c60b0eda60303bde13d74dddde18f4891bf814cba793c20523011c3b0d09b8f5364ca2a3e437fb31cb874b90d7e5d64057768d1273e2898c77a5f89a710db509980b95e92b332700f00d412c9008cfcebfde4e22932ee834b2f4175e7ee8573584cda1cbf0d8ee33018e75d0408f48fb83ce4c2ed3e7fd6369089be4273d029d3d6760b6b1a91fe93", ["", "", ""]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.500021838s ago: executing program 2 (id=1152): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a3000000a1290000000d0000e7070003"], 0x1c}}, 0x4020010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @random="71e2b87f9b2d"}) 1.409411039s ago: executing program 3 (id=1153): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000a2c000000060a0b040000000000000000020016000900010073797a30001c00000900020400797a32000000001400000011000100000000f7000000000000000a"], 0x54}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r5) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="a2", 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf, 0x7, 0x5ffffe, 0x4, 0xdf, 0x2, 0x40000000000}, &(0x7f0000000500)={0x3, 0x8000, 0x0, 0xfffffffffffffffb, 0x4d, 0x1, 0x8000, 0x3}, &(0x7f0000000300)={0x7, 0x3, 0x1, 0xd, 0x8, 0x7ff, 0x9, 0x6}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f00000002c0)={0x0}) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=r3], 0x28}}, 0x802) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd7000fedbdf250c00000008000300", @ANYRES32=r9, @ANYBLOB="0a0006001d021100000000001401388009000100727af7fa970000cf509a26ee6bf700940acd8c6c40f25bbae621bfd3d3e0f00300000000000000e65f8a1c64bc108d4e"], 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) readv(r11, &(0x7f0000000040)=[{0x0}], 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="9d5ab229d99f6a8e10bb5fd52316e117eee892d86a067b4ae693515c2f15508e4d2d7c3d8a0ca7d2f3469320bce3097147e2e1816fe001f04afec25f5b9aaa55646b232a465b2c0deb426a084a2220ab94ff8be945f2a80ac0b0d740961893e41b80741213be111e59de4d56b3f64fb98fbf7b1153833e89545ca0f5b265", 0x7e) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440), 0x0) 1.289129963s ago: executing program 0 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 1.217053136s ago: executing program 1 (id=1155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x2f}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) getsockname$qrtr(r0, 0x0, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0xe0, 0xed, 0xfffffffb, 0x59, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x80, 0xfffffffb, 0x6}}) sendto$packet(r0, &(0x7f0000000040)="81a26611ab985d035480b428cf44ad9633c5f954feb445d6eb3cdfd7f032eefd4d8cc23d254a6679bd5138824c85db9aaf97fd0dea03f76fe47c75f721b673e7c18ec687f0aebccc0fe82b321b", 0x4d, 0x4, &(0x7f0000000180)={0x11, 0x1, r1, 0x1, 0x1, 0x6, @random="a24962635c20"}, 0x14) socket$igmp(0x2, 0x3, 0x2) 1.161931029s ago: executing program 0 (id=1157): r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@random="d5c7d4508c19", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x1, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r6, @ANYBLOB="3e0fe09976de849c"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@dev}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x700, 0x80, 0x26c5, 0x8, {{0x33, 0x4, 0x3, 0x38, 0xcc, 0x67, 0x0, 0xfa, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp={0x44, 0x1c, 0x4d, 0x0, 0x2, [0x101, 0x8a, 0x1c1, 0x8, 0xf88, 0xcb]}, @timestamp={0x44, 0x1c, 0xba, 0x0, 0x3, [0x1, 0x54, 0x1, 0x1, 0x9, 0x3]}, @lsrr={0x83, 0x17, 0xef, [@multicast1, @local, @empty, @private=0xa010101, @empty]}, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0x5, [{@rand_addr=0x64010102, 0xea41}, {@rand_addr=0x64010100, 0x40}, {@private=0xa010100, 0x74}, {@multicast2, 0xfab}, {@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x9}, {@local, 0x7}]}, @timestamp_addr={0x44, 0x24, 0xcc, 0x1, 0x1, [{@empty, 0x790e}, {@local, 0xff}, {@multicast1, 0x1438000}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x7}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0xe3, 0x22, 0x9, 0x4, @mcast1, @private1, 0x8000, 0x8, 0xa88b, 0xffffffff}}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400008196f04e3e3800", @ANYRES16=r1, @ANYBLOB="000227bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x2008014}, 0x4) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x12, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x8000) 1.08861245s ago: executing program 1 (id=1158): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xb, 0x3032, 0xffffffffffffffff, 0xffffc000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000160000000000000000000000004000636c6b91df42ef769317fb27687e5e31a300177913a94321fbe8178d9b859e541320597c9ffc40375e463218b68cbcf338d8cc991e812d8082c487ab2b52998b2453a6b2fa8702e83d6d223760ea66bd1ee575431d7d9c7e77d8da2b84914bcf76d27f49aa0cd23a009eee2ae3f2c8faea5a58eedf11b1a8e3d26abfd0ce351fdac0384a3a6f305bffe7675e7c17f3d528224989bf6c8727ceda6ea9a2e3ef81fc44ecc344d3f74e9e623ecdb0b679c9ef9ae94c2f0a30f20a42c2db6980b44b2115d60986565f4a70a54a9f5153d183203a5b2b3a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r2}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c803000016"], 0x3c8}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304, 0x36}, "f1ff5ef2fe299917", "9e8ecc7bb5352776725f1000711330ff2bb17b5508000100000000000300", '\\]?\x00'}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304, 0x36}, "f1ff5ef2fe299917", "9e8ecc7bb5352776725f1000711330ff2bb17b5508000100000000000300", '\\]?\x00'}, 0x38) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto$inet(r1, 0x0, 0x1, 0x20000040, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x2, 0x1, 0x9, 0x2}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa939393a30e66bf2b344e0800aaaaaaaaaaaab90800450000280000000700069078ac1414bbac16144e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa939393a30e66bf2b344e0800aaaaaaaaaaaab90800450000280000000700069078ac1414bbac16144e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c10000090780000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r5, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) 1.08691043s ago: executing program 2 (id=1159): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, @multicast1, @empty}, "001863718e9bf703"}}}}}, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x1) (async) shutdown(r3, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000200009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095c748f8340f0c5af5e1a8cffc54fbf2a067ec20307eb71a526f248f66406e30b85a2d6da24f93f15f4895766f188d88e0a019065e9601bf1d5d4f943e2633c95622e5e88a33635b6f09c4f99fbe884391ad5c258314ed87557554b478810f5099d11127fec195273de023f23b206f01fa83714acfa221bd7b986b862728581fa8e351fd046db8d5de95909028c84ee511ad5b639e648f05dc4138f78be5744a516fd6e100bcff8bddd99ca66fd76f766714570e912428a3277e644cc33d4d23c4500b67773d1ed96b79f619ad13fdd0f134148d4c949c440eacb5718d62357344317755efd8004b08b039e4f53b90a1ef53e797ca2fae90196ab5aba36a40690b40a81f9706f925d1931d7964084ab574344641c2e488a9a4a367957853704064dd1ef163ec306dcda5bffd85edc80fb27e40056f414a05ac155159d9d32239f0e647d3ef14cfeca8a26ba0ace153d09384c285d499b116c18ba49e3f0386b213269b8faa857e750e5d3d5e"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) (async) ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r8, @ANYBLOB="000000000000000014011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007002001000000000000000000000000000214000700fe8000000000000000000000000000001400070020010000000000000000000000000001050008000000"], 0x134}}, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 860.838816ms ago: executing program 4 (id=1161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={r5, 0x0, 0x7fff, 0x9}, &(0x7f00000002c0)=0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x40880}, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) 776.884273ms ago: executing program 2 (id=1162): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000540)={0xa, 0x4e20, 0x6, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000000000029000000360000003c000000000000001000000000000000290000000b00c3000000000000000000"], 0x30}}], 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) getsockname(r1, &(0x7f00000002c0)=@xdp, &(0x7f0000000180)=0x80) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000090) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000000000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001c5b3d48000998ad2bb9fe9a1f774fb8d55b492c53be03356b35da787fae9f55660c4ac0353bd12f1c7e80f227dcf825355f25170907d84d1fec11f751482af50e81ebf1af4692ab62f39bb020d097abff8d38052c94044aec2010100003f8c"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009140000001100010000000000000000000000000a61891e64c738c7b3d2e93d00b605f398618b431ed67f3373c1afda7585badef80cd5a7ee31330fb46d0073b59fa5a99c62c9e390948f0c27c3cfde4411224475c3da387f0fd53cd7bc820a3005d14254efdc82a1bc0925283ba1450b16bac570"], 0x64}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000009000000000a54000000060a0104000000000000000002000000200004801c0001800a0001006c696d69740000000c00028008000440000000010900010073797a30000000000900020073797a320000000005000740cc000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000380)={0x0, 0xd}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000580)={r8, 0x1}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="730700000000000005020010fc000000000000000000000000000001000100c91000000000000000000000ffff00000000010100"/64], 0x40) getsockopt$inet6_mreq(r2, 0x29, 0xe, &(0x7f00000005c0)={@initdev}, &(0x7f0000000400)=0x14) 776.081748ms ago: executing program 0 (id=1163): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000100)=0x18, &(0x7f0000000140)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r5, &(0x7f0000000240)="001494", 0x3, 0x4040081, 0x0, 0x0) recvfrom$unix(r6, 0x0, 0x0, 0x10102, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) 723.791167ms ago: executing program 4 (id=1164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f00000001c0)="97a1a637630c5b4c06bd30dbc501b1cab105f70e6760d1b17dc25903ce5bd9071b73e71ed6c7dbc113296143c0d890e5d79063c6239fedb489648f514b7053716f76", 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a0300"], 0x34}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000000000b020000000b0000000000005ed92fe64622f88e727609010000000020002e615f5f005f007159156c072c23d10856401748154c3142ce8eae1af82d5d4214362e99a89bcbdb8cc84846e09f34a3fe9007192648f0fd"], &(0x7f00000002c0)=""/16, 0x3a, 0x10, 0x1, 0x7, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r5, 0x20, &(0x7f00000004c0)={&(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000440)=""/72, 0x48}}, 0x10) 577.186585ms ago: executing program 2 (id=1165): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xa0000000, 0x0) (async) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x4048800) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) 460.810645ms ago: executing program 4 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xaf, 0x20000000, 0x5b, 0x3}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x74}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x7, 0xaf, 0x20000000, 0x5b, 0x3}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x74}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r5}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 408.09175ms ago: executing program 1 (id=1167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 390.516564ms ago: executing program 2 (id=1168): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x101, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x3dff4d5fc65e69ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c045}, 0x40000) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}}, 0x20000000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f00000007c0)={{r3}, "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"}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async) r8 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="6e30f4cd1cc8"}, 0x14) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) (async) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="0201140001"], 0xdd12}], 0x1}, 0x1) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r11, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r12, &(0x7f0000000940)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) (async) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="81b651f1f3e7200923", 0x9}], 0x1}, 0x4048081) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0xa}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x3, {0x1}, {0x2, 0x1, 0x3}, 0xff, 0x2}], 0x20) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 334.855908ms ago: executing program 3 (id=1169): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000190001"], 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) 209.131448ms ago: executing program 4 (id=1170): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcf7ffff000000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x7, @empty, 0x10000}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60010700009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c9078"], 0x0) 181.293768ms ago: executing program 1 (id=1171): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000030094910003000000022000000000000000000000000000010500000008000000000077424d63ce397c2d00000000000000"], 0x0, 0x4e, 0x0, 0x3}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300080e0000002cbd7000fcdbdf2505000600000000000a00000000000002f8ffffffffffffff000000000000000102000000000000000200010000000000040007040000000005000c00000000000a000000000000000000000000000000000000000000000107000000000000006bdccc1800182df7d7f91f"], 0x70}, 0x1, 0x7}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000009000000000000001800000d0000000000000067a9000000"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000002000000000000008000000018110000a870c3a447e9e0dccf6cd9c2662e616402a5557b110ddd74ab564da252baf09d020b44eefaf7cffb8684c8caa228a14c48a682064dcae75efafa0a48f5076800df333c76f022b828e2f7c43962c894dae6ee143c9584c996785b38593907f051ae8310c8e0757b89e54b143fac1280", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d1000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000020000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000004e200000000004000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000fffffffffffffffff100000000000000000000000000000040000000000000000000200000000000ffffffffffffffff00000400"/112], 0xb8}}, 0xc844) r4 = socket$isdn(0x22, 0x3, 0x23) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bond_slave_1\x00'}) unshare(0x20040600) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x200000000000005f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000580), 0x8) 155.492987ms ago: executing program 4 (id=1172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0xe8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8000400) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, 0x0, 0xffffff32) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000100", @ANYRESDEC=r1, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008041) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0xe8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x8000400) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r2, 0x0, 0xffffff32) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000100", @ANYRESDEC=r1, @ANYRESOCT=r1], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008041) (async) 40.903041ms ago: executing program 3 (id=1173): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0xfffffffe, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @loopback={0x0, 0xffff888101827518}, 0x0, 0x80, 0x38dc586a}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x5, 0xc, 0x9, 0x8, 0x8, 0xd85, 0x1, 0x1, r2}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x2}, &(0x7f0000000040)=0x8) 40.424647ms ago: executing program 4 (id=1174): socket(0x1e, 0x4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x101}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x11}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @var={0x2, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x54}, 0x28) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000002c0)=0x1c, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x1, 0x6, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020a10100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x0) 0s ago: executing program 2 (id=1175): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18) getpeername(r0, 0x0, &(0x7f0000000200)) (async) getpeername(r0, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'macvlan0\x00', {'veth0_to_bond\x00'}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 72.105203][ T5818] cgroup: Unknown subsys name 'net' [ 72.255168][ T5818] cgroup: Unknown subsys name 'cpuset' [ 72.264009][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.692161][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.634173][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.643586][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.652000][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.673813][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.679833][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.682414][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.689718][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.699264][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.712803][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.720628][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.720823][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.742181][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.762785][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.770825][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.771220][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.786697][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.793000][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.798579][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.803573][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.825791][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.834450][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.842598][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.843232][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.850680][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.870319][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.448855][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.588945][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 78.624209][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.706723][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 78.737822][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.745665][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.753168][ T5832] bridge_slave_0: entered allmulticast mode [ 78.760246][ T5832] bridge_slave_0: entered promiscuous mode [ 78.801386][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 78.814067][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.821274][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.828812][ T5832] bridge_slave_1: entered allmulticast mode [ 78.835803][ T5832] bridge_slave_1: entered promiscuous mode [ 78.954805][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.011094][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.018551][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.026397][ T5836] bridge_slave_0: entered allmulticast mode [ 79.034826][ T5836] bridge_slave_0: entered promiscuous mode [ 79.045154][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.092418][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.099624][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.106913][ T5836] bridge_slave_1: entered allmulticast mode [ 79.115220][ T5836] bridge_slave_1: entered promiscuous mode [ 79.153799][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.160958][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.168528][ T5842] bridge_slave_0: entered allmulticast mode [ 79.175601][ T5842] bridge_slave_0: entered promiscuous mode [ 79.183952][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.191079][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.198657][ T5842] bridge_slave_1: entered allmulticast mode [ 79.206972][ T5842] bridge_slave_1: entered promiscuous mode [ 79.232162][ T5832] team0: Port device team_slave_0 added [ 79.289316][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.304767][ T5832] team0: Port device team_slave_1 added [ 79.310700][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.318234][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.325481][ T5847] bridge_slave_0: entered allmulticast mode [ 79.333926][ T5847] bridge_slave_0: entered promiscuous mode [ 79.368177][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.423953][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.431114][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.438440][ T5847] bridge_slave_1: entered allmulticast mode [ 79.447819][ T5847] bridge_slave_1: entered promiscuous mode [ 79.457578][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.470246][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.479581][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.487132][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.494465][ T5828] bridge_slave_0: entered allmulticast mode [ 79.501551][ T5828] bridge_slave_0: entered promiscuous mode [ 79.522560][ T5836] team0: Port device team_slave_0 added [ 79.529087][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.536626][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.563875][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.599355][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.606520][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.618332][ T5828] bridge_slave_1: entered allmulticast mode [ 79.625780][ T5828] bridge_slave_1: entered promiscuous mode [ 79.634514][ T5836] team0: Port device team_slave_1 added [ 79.652929][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.660424][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.687016][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.725522][ T5842] team0: Port device team_slave_0 added [ 79.767905][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.781201][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.791984][ T5842] team0: Port device team_slave_1 added [ 79.816131][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.826025][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.833373][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.859849][ T5841] Bluetooth: hci2: command tx timeout [ 79.865748][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.925586][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.934818][ T5837] Bluetooth: hci0: command tx timeout [ 79.935060][ T5837] Bluetooth: hci1: command tx timeout [ 79.935261][ T5849] Bluetooth: hci4: command tx timeout [ 79.942653][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.946296][ T5841] Bluetooth: hci3: command tx timeout [ 79.951757][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.989790][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.080645][ T5832] hsr_slave_0: entered promiscuous mode [ 80.088984][ T5832] hsr_slave_1: entered promiscuous mode [ 80.097177][ T5847] team0: Port device team_slave_0 added [ 80.106038][ T5847] team0: Port device team_slave_1 added [ 80.112928][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.119872][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.146177][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.159761][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.167069][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.193140][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.205987][ T5828] team0: Port device team_slave_0 added [ 80.214737][ T5828] team0: Port device team_slave_1 added [ 80.334893][ T5836] hsr_slave_0: entered promiscuous mode [ 80.341283][ T5836] hsr_slave_1: entered promiscuous mode [ 80.348068][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.356088][ T5836] Cannot create hsr debugfs directory [ 80.369233][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.378367][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.404448][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.416117][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.423496][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.449936][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.499064][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.506387][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.532789][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.551169][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.559211][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.587368][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.635844][ T5842] hsr_slave_0: entered promiscuous mode [ 80.642733][ T5842] hsr_slave_1: entered promiscuous mode [ 80.649023][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.658385][ T5842] Cannot create hsr debugfs directory [ 80.814759][ T5847] hsr_slave_0: entered promiscuous mode [ 80.821033][ T5847] hsr_slave_1: entered promiscuous mode [ 80.827327][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.835046][ T5847] Cannot create hsr debugfs directory [ 80.863631][ T5828] hsr_slave_0: entered promiscuous mode [ 80.869878][ T5828] hsr_slave_1: entered promiscuous mode [ 80.876645][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.884380][ T5828] Cannot create hsr debugfs directory [ 81.299129][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.338469][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.372315][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.406278][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.455115][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.476523][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.503281][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.515705][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.596492][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.628115][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.639381][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.651521][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.768109][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.797624][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.825853][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.847524][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.940232][ T5841] Bluetooth: hci2: command tx timeout [ 81.989207][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.011896][ T5841] Bluetooth: hci3: command tx timeout [ 82.017340][ T5841] Bluetooth: hci4: command tx timeout [ 82.022983][ T5849] Bluetooth: hci1: command tx timeout [ 82.026171][ T5845] Bluetooth: hci0: command tx timeout [ 82.129786][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.137244][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.149232][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.175928][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.187636][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.223036][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.232673][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.239914][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.279180][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.286357][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.303218][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.355135][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.381252][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.394156][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.401335][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.447117][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.454250][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.482465][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.500193][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.507435][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.530713][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.537834][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.593809][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.647098][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.654253][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.708025][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.746585][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.753720][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.775558][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.834348][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.916555][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.923749][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.997774][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.004970][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.078254][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.207589][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.281202][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.448597][ T5832] veth0_vlan: entered promiscuous mode [ 83.501061][ T5832] veth1_vlan: entered promiscuous mode [ 83.536797][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.553459][ T5842] veth0_vlan: entered promiscuous mode [ 83.620388][ T5842] veth1_vlan: entered promiscuous mode [ 83.650507][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.707248][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.719679][ T5832] veth0_macvtap: entered promiscuous mode [ 83.746076][ T5836] veth0_vlan: entered promiscuous mode [ 83.767555][ T5832] veth1_macvtap: entered promiscuous mode [ 83.806869][ T5842] veth0_macvtap: entered promiscuous mode [ 83.831386][ T5842] veth1_macvtap: entered promiscuous mode [ 83.868329][ T5836] veth1_vlan: entered promiscuous mode [ 83.911337][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.926643][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.955753][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.978241][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.998564][ T5828] veth0_vlan: entered promiscuous mode [ 84.012312][ T5845] Bluetooth: hci2: command tx timeout [ 84.031306][ T1102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.040887][ T1102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.079187][ T5836] veth0_macvtap: entered promiscuous mode [ 84.091880][ T5845] Bluetooth: hci0: command tx timeout [ 84.093157][ T5841] Bluetooth: hci4: command tx timeout [ 84.097302][ T5845] Bluetooth: hci1: command tx timeout [ 84.106620][ T5849] Bluetooth: hci3: command tx timeout [ 84.114684][ T1102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.124701][ T1102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.154574][ T1102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.163705][ T1102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.178064][ T5828] veth1_vlan: entered promiscuous mode [ 84.189348][ T5836] veth1_macvtap: entered promiscuous mode [ 84.198943][ T1102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.210497][ T1102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.312604][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.331476][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.397647][ T73] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.427894][ T5828] veth0_macvtap: entered promiscuous mode [ 84.435876][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.444333][ T73] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.451693][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.457796][ T73] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.493716][ T73] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.505911][ T5847] veth0_vlan: entered promiscuous mode [ 84.533652][ T5828] veth1_macvtap: entered promiscuous mode [ 84.541456][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.562559][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.568340][ T5847] veth1_vlan: entered promiscuous mode [ 84.585980][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.598642][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.690618][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.708918][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.738037][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.744969][ T5847] veth0_macvtap: entered promiscuous mode [ 84.757997][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.768826][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.788153][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.799545][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.823604][ T5847] veth1_macvtap: entered promiscuous mode [ 84.910970][ T1102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.927073][ T1102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.939163][ T1102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.987336][ T1102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.032114][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 85.058599][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.073657][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.163575][ T5958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.204705][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.261188][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.417690][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.442370][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.484524][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.520055][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.617888][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.782068][ T30] audit: type=1800 audit(1751434243.836:2): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7" name="memory.events" dev="tmpfs" ino=29 res=0 errno=0 [ 85.887075][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.903729][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'. [ 85.983971][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.009919][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.091972][ T5841] Bluetooth: hci2: command tx timeout [ 86.172059][ T5849] Bluetooth: hci1: command tx timeout [ 86.178031][ T5837] Bluetooth: hci3: command tx timeout [ 86.183602][ T5837] Bluetooth: hci0: command tx timeout [ 86.189844][ T5841] Bluetooth: hci4: command tx timeout [ 86.207012][ T5974] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 86.276510][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.347635][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.800888][ T3471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.822479][ T3471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.971447][ T43] cfg80211: failed to load regulatory.db [ 87.457219][ T5990] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.489049][ T5990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.737899][ T5992] tun0: tun_chr_ioctl cmd 1074025677 [ 87.753663][ T5992] tun0: linktype set to 778 [ 88.003275][ T5958] infiniband syz0: set down [ 88.030051][ T5958] infiniband syz0: added ipvlan1 [ 88.058678][ T5958] syz0: rxe_create_cq: returned err = -12 [ 88.082955][ T5958] infiniband syz0: Couldn't create ib_mad CQ [ 88.115212][ T5958] infiniband syz0: Couldn't open port 1 [ 88.136738][ T6003] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 88.186574][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 88.289637][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 88.300253][ T5958] RDS/IB: syz0: added [ 88.313305][ T5958] smc: adding ib device syz0 with port count 1 [ 88.325660][ T6010] warning: `syz.4.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.326346][ T5958] smc: ib device syz0 port 1 has pnetid [ 88.366677][ T6012] Zero length message leads to an empty skb [ 88.377646][ T5841] block nbd0: Receive control failed (result -32) [ 88.922338][ T6020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.932389][ T6020] bond0: (slave bond1): Enslaving as an active interface with an up link [ 89.013729][ T6024] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 89.043626][ T6024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19'. [ 91.637439][ T6056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26'. [ 91.789031][ T6061] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 91.987074][ T6063] veth3: entered promiscuous mode [ 92.017871][ T6064] bridge_slave_0: left allmulticast mode [ 92.025499][ T6064] bridge_slave_0: left promiscuous mode [ 92.032345][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.050828][ T6064] bridge_slave_1: left allmulticast mode [ 92.060622][ T6064] bridge_slave_1: left promiscuous mode [ 92.068642][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.080726][ T6064] bond0: (slave bond_slave_0): Releasing backup interface [ 92.109392][ T6064] bond0: (slave bond_slave_1): Releasing backup interface [ 92.129312][ T6064] team0: Port device team_slave_0 removed [ 92.139720][ T6064] team0: Port device team_slave_1 removed [ 92.148916][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.156435][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.167492][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.177753][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.435427][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 92.561844][ T6073] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 92.918675][ T43] IPVS: starting estimator thread 0... [ 92.926050][ T6083] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 93.031819][ T6086] IPVS: using max 30 ests per chain, 72000 per kthread [ 93.491183][ T6090] team0 (unregistering): Port device team_slave_0 removed [ 93.525136][ T6090] team0 (unregistering): Port device team_slave_1 removed [ 94.487988][ T6139] netlink: 'syz.4.47': attribute type 10 has an invalid length. [ 94.488117][ T6141] smc: removing ib device syz0 [ 94.533328][ T6139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.580992][ T6139] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 94.662319][ T6144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'. [ 95.000567][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 95.746535][ T6140] sctp: [Deprecated]: syz.3.48 (pid 6140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.746535][ T6140] Use struct sctp_sack_info instead [ 96.142370][ T6170] x_tables: duplicate underflow at hook 1 [ 96.497916][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 99.630313][ T30] audit: type=1800 audit(1751434257.676:3): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.71" name="memory.events" dev="tmpfs" ino=93 res=0 errno=0 [ 99.796194][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 99.822496][ T6278] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 99.841278][ T6278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.023809][ T6289] netlink: 44 bytes leftover after parsing attributes in process `syz.0.79'. [ 100.033906][ T6290] netlink: 44 bytes leftover after parsing attributes in process `syz.0.79'. [ 100.145904][ T6292] netlink: 56 bytes leftover after parsing attributes in process `syz.0.80'. [ 100.263119][ T6294] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.318770][ T6303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.763343][ T6325] netlink: 5 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.235432][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 101.262295][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 101.423760][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 101.514593][ T6361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.539060][ T6361] vlan2: entered allmulticast mode [ 101.549377][ T6361] veth1: entered allmulticast mode [ 101.559379][ T6361] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 101.683696][ T6371] bond2: (slave veth3): Enslaving as an active interface with an up link [ 102.124100][ T5201] udevd[5201]: worker [5887] terminated by signal 33 (Unknown signal 33) [ 102.146207][ T5201] udevd[5201]: worker [5887] failed while handling '/devices/virtual/block/loop4' [ 102.458922][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 102.461356][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.111'. [ 102.478803][ T6404] netlink: 'syz.4.111': attribute type 6 has an invalid length. [ 103.456375][ T6460] xt_CT: No such helper "pptp" [ 103.746863][ T5162] IPVS: starting estimator thread 0... [ 103.862170][ T6475] IPVS: using max 28 ests per chain, 67200 per kthread [ 104.090037][ T6477] veth1_macvtap: left promiscuous mode [ 104.203133][ T6477] macsec0: entered allmulticast mode [ 104.290754][ T6486] veth1_macvtap: entered promiscuous mode [ 104.325354][ T6486] veth1_macvtap: entered allmulticast mode [ 104.347404][ T6486] macsec0: left allmulticast mode [ 104.404525][ T6486] veth1_macvtap: left allmulticast mode [ 105.308837][ T6534] __nla_validate_parse: 6 callbacks suppressed [ 105.308854][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 105.510392][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.144'. [ 105.567270][ T6534] netlink: 'syz.3.144': attribute type 10 has an invalid length. [ 105.708838][ T6534] veth0_vlan: left promiscuous mode [ 105.716523][ T6534] veth0_vlan: entered promiscuous mode [ 105.729672][ T6534] team0: Device veth0_vlan failed to register rx_handler [ 105.899926][ T6551] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 106.071465][ T6554] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 106.118577][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 106.156250][ T6565] sit0: entered promiscuous mode [ 106.166313][ T6565] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 106.228509][ T6565] netlink: 1 bytes leftover after parsing attributes in process `syz.1.154'. [ 106.411119][ T6578] tipc: Started in network mode [ 106.442883][ T6578] tipc: Node identity ac14140f, cluster identity 4711 [ 106.491012][ T6578] tipc: New replicast peer: 255.255.255.255 [ 106.544498][ T6578] tipc: Enabled bearer , priority 10 [ 106.590465][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 106.633291][ T6579] tipc: Disabling bearer [ 107.782161][ T6615] netlink: 124 bytes leftover after parsing attributes in process `syz.3.168'. [ 107.829461][ T6617] netlink: 56 bytes leftover after parsing attributes in process `syz.0.169'. [ 107.898878][ T6619] netlink: 'syz.4.170': attribute type 3 has an invalid length. [ 107.974240][ T6624] netlink: 'syz.4.170': attribute type 5 has an invalid length. [ 108.024625][ T6617] pim6reg: entered allmulticast mode [ 108.066271][ T6625] pim6reg: left allmulticast mode [ 108.632849][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 108.669330][ T6655] netlink: 64 bytes leftover after parsing attributes in process `syz.4.178'. [ 132.895297][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.322541][ T6717] x_tables: duplicate underflow at hook 1 [ 179.499534][ T6735] IPVS: length: 24 != 10680 [ 179.512816][ T6735] netlink: 'syz.3.192': attribute type 9 has an invalid length. [ 179.552122][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.192'. [ 179.578819][ T6731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.845780][ T6742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.193'. [ 179.877742][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.885597][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.091126][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.138637][ T6731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.905100][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.940359][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.967739][ T6769] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.196'. [ 181.011297][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.033850][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.064182][ T6746] netlink: 64 bytes leftover after parsing attributes in process `syz.4.194'. [ 181.593487][ T6779] netlink: 'syz.2.201': attribute type 2 has an invalid length. [ 181.602876][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 181.636201][ T6779] vxlan: entered promiscuous mode [ 181.741810][ T6778] dummy0: entered promiscuous mode [ 181.765685][ T6778] dummy0: left promiscuous mode [ 181.818136][ T6791] ip6tnl1: entered promiscuous mode [ 181.823551][ T6791] ip6tnl1: entered allmulticast mode [ 181.908685][ T6796] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 182.007345][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 182.024043][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 182.175792][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.207'. [ 182.802792][ T6815] syz.4.210 (6815) used greatest stack depth: 16672 bytes left [ 182.921883][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 182.959554][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 183.079286][ T6843] batadv0: Device is already in use. [ 183.450777][ T6868] netlink: 'syz.3.228': attribute type 21 has an invalid length. [ 183.530861][ T6869] GUP no longer grows the stack in syz.2.227 (6869): 200000006000-20000000a000 (200000005000) [ 183.543290][ T6869] CPU: 0 UID: 0 PID: 6869 Comm: syz.2.227 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 183.543317][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.543335][ T6869] Call Trace: [ 183.543344][ T6869] [ 183.543352][ T6869] dump_stack_lvl+0x189/0x250 [ 183.543395][ T6869] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.543417][ T6869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.543463][ T6869] __get_user_pages+0x2a60/0x30b0 [ 183.543526][ T6869] ? __pfx___get_user_pages+0x10/0x10 [ 183.543548][ T6869] ? __gup_longterm_locked+0xbf7/0x15b0 [ 183.543571][ T6869] ? down_read_killable+0x1d1/0x350 [ 183.543592][ T6869] ? try_get_folio+0x633/0x660 [ 183.543622][ T6869] __gup_longterm_locked+0xd66/0x15b0 [ 183.543653][ T6869] ? try_grab_folio_fast+0x1be/0x4f0 [ 183.543690][ T6869] ? gup_fast_fallback+0x1afc/0x2260 [ 183.543718][ T6869] gup_fast_fallback+0x1cd4/0x2260 [ 183.543781][ T6869] ? __pfx_gup_fast_fallback+0x10/0x10 [ 183.543803][ T6869] ? trace_contention_end+0x39/0x120 [ 183.543823][ T6869] ? __mutex_lock+0x330/0xe80 [ 183.543850][ T6869] ? is_valid_gup_args+0x11f/0x200 [ 183.543876][ T6869] ? get_user_pages_fast+0x4d/0xb0 [ 183.543904][ T6869] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 183.543939][ T6869] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 183.543957][ T6869] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.543973][ T6869] ? wait_for_space+0x24d/0x2d0 [ 183.544002][ T6869] iov_iter_get_pages2+0x5e/0xa0 [ 183.544033][ T6869] __se_sys_vmsplice+0x548/0x10d0 [ 183.544074][ T6869] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 183.544093][ T6869] ? __lock_acquire+0xab9/0xd20 [ 183.544118][ T6869] ? __pfx_futex_wake+0x10/0x10 [ 183.544152][ T6869] ? __lock_acquire+0xab9/0xd20 [ 183.544221][ T6869] ? rcu_is_watching+0x15/0xb0 [ 183.544253][ T6869] ? do_syscall_64+0xbe/0x3b0 [ 183.544278][ T6869] do_syscall_64+0xfa/0x3b0 [ 183.544299][ T6869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.544317][ T6869] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 183.544335][ T6869] ? clear_bhb_loop+0x60/0xb0 [ 183.544357][ T6869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.544374][ T6869] RIP: 0033:0x7f04b818e929 [ 183.544397][ T6869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.544415][ T6869] RSP: 002b:00007f04b8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 183.544440][ T6869] RAX: ffffffffffffffda RBX: 00007f04b83b5fa0 RCX: 00007f04b818e929 [ 183.544453][ T6869] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 183.544465][ T6869] RBP: 00007f04b8210b39 R08: 0000000000000000 R09: 0000000000000000 [ 183.544477][ T6869] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 183.544488][ T6869] R13: 0000000000000000 R14: 00007f04b83b5fa0 R15: 00007ffe471064c8 [ 183.544519][ T6869] [ 184.292371][ T6882] Cannot find set identified by id 0 to match [ 184.595259][ T6892] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.619432][ T6897] 8021q: VLANs not supported on nlmon0 [ 184.735054][ T6892] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.776407][ T6903] __nla_validate_parse: 6 callbacks suppressed [ 184.776425][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 184.832169][ T6908] netlink: 596 bytes leftover after parsing attributes in process `syz.0.240'. [ 184.848460][ T6892] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.911503][ T6914] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 184.919459][ T6914] netlink: 224 bytes leftover after parsing attributes in process `syz.4.241'. [ 184.944605][ T6892] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.148458][ T1002] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.177170][ T6921] IPVS: set_ctl: invalid protocol: 448 0.32.0.0:1280 [ 185.212458][ T1002] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.237865][ T1002] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.256738][ T1175] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.274711][ T6930] FAULT_INJECTION: forcing a failure. [ 185.274711][ T6930] name failslab, interval 1, probability 0, space 0, times 1 [ 185.306760][ T6930] CPU: 0 UID: 0 PID: 6930 Comm: syz.4.245 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 185.306786][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.306797][ T6930] Call Trace: [ 185.306804][ T6930] [ 185.306812][ T6930] dump_stack_lvl+0x189/0x250 [ 185.306841][ T6930] ? __pfx____ratelimit+0x10/0x10 [ 185.306867][ T6930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.306892][ T6930] ? __pfx__printk+0x10/0x10 [ 185.306917][ T6930] ? __pfx___might_resched+0x10/0x10 [ 185.306946][ T6930] should_fail_ex+0x414/0x560 [ 185.306972][ T6930] should_failslab+0xa8/0x100 [ 185.306993][ T6930] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 185.307019][ T6930] ? __alloc_skb+0x112/0x2d0 [ 185.307045][ T6930] __alloc_skb+0x112/0x2d0 [ 185.307070][ T6930] netlink_sendmsg+0x5c6/0xb30 [ 185.307101][ T6930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.307125][ T6930] ? aa_sock_msg_perm+0x94/0x160 [ 185.307147][ T6930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.307168][ T6930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.307189][ T6930] __sock_sendmsg+0x219/0x270 [ 185.307211][ T6930] ____sys_sendmsg+0x505/0x830 [ 185.307240][ T6930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.307271][ T6930] ? import_iovec+0x74/0xa0 [ 185.307292][ T6930] ___sys_sendmsg+0x21f/0x2a0 [ 185.307317][ T6930] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.307376][ T6930] ? __fget_files+0x2a/0x420 [ 185.307393][ T6930] ? __fget_files+0x3a0/0x420 [ 185.307422][ T6930] __x64_sys_sendmsg+0x19b/0x260 [ 185.307448][ T6930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.307482][ T6930] ? rcu_is_watching+0x15/0xb0 [ 185.307511][ T6930] ? do_syscall_64+0xbe/0x3b0 [ 185.307535][ T6930] do_syscall_64+0xfa/0x3b0 [ 185.307553][ T6930] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.307571][ T6930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.307588][ T6930] ? clear_bhb_loop+0x60/0xb0 [ 185.307608][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.307624][ T6930] RIP: 0033:0x7f85a098e929 [ 185.307640][ T6930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.307654][ T6930] RSP: 002b:00007f85a186d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.307673][ T6930] RAX: ffffffffffffffda RBX: 00007f85a0bb5fa0 RCX: 00007f85a098e929 [ 185.307685][ T6930] RDX: 0000000008000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 185.307696][ T6930] RBP: 00007f85a186d090 R08: 0000000000000000 R09: 0000000000000000 [ 185.307707][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.307717][ T6930] R13: 0000000000000000 R14: 00007f85a0bb5fa0 R15: 00007fff805b98e8 [ 185.307746][ T6930] [ 185.793620][ T6941] IPVS: length: 11 != 8 [ 185.841099][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.2.251'. [ 186.229272][ T6967] netlink: 'syz.2.260': attribute type 1 has an invalid length. [ 186.245969][ T6967] netlink: 172 bytes leftover after parsing attributes in process `syz.2.260'. [ 186.256608][ T6967] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20000 [ 186.498634][ T6975] xt_CT: No such helper "snmp" [ 186.543248][ T6986] openvswitch: netlink: IP tunnel dst address not specified [ 186.633543][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 186.672371][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 187.033644][ T7007] FAULT_INJECTION: forcing a failure. [ 187.033644][ T7007] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.073779][ T7007] CPU: 1 UID: 0 PID: 7007 Comm: syz.4.271 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 187.073805][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.073815][ T7007] Call Trace: [ 187.073823][ T7007] [ 187.073831][ T7007] dump_stack_lvl+0x189/0x250 [ 187.073859][ T7007] ? __pfx____ratelimit+0x10/0x10 [ 187.073878][ T7007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.073903][ T7007] ? __pfx__printk+0x10/0x10 [ 187.073921][ T7007] ? __might_fault+0xb0/0x130 [ 187.073952][ T7007] should_fail_ex+0x414/0x560 [ 187.073977][ T7007] _copy_from_iter+0x1db/0x16f0 [ 187.074004][ T7007] ? rcu_is_watching+0x15/0xb0 [ 187.074030][ T7007] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 187.074055][ T7007] ? __pfx__copy_from_iter+0x10/0x10 [ 187.074077][ T7007] ? __build_skb_around+0x257/0x3e0 [ 187.074103][ T7007] ? netlink_sendmsg+0x642/0xb30 [ 187.074122][ T7007] ? skb_put+0x11b/0x210 [ 187.074145][ T7007] netlink_sendmsg+0x6b2/0xb30 [ 187.074171][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.074193][ T7007] ? aa_sock_msg_perm+0x94/0x160 [ 187.074217][ T7007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.074237][ T7007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.074257][ T7007] __sock_sendmsg+0x219/0x270 [ 187.074279][ T7007] ____sys_sendmsg+0x505/0x830 [ 187.074306][ T7007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.074336][ T7007] ? import_iovec+0x74/0xa0 [ 187.074355][ T7007] ___sys_sendmsg+0x21f/0x2a0 [ 187.074380][ T7007] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.074439][ T7007] ? __fget_files+0x2a/0x420 [ 187.074457][ T7007] ? __fget_files+0x3a0/0x420 [ 187.074483][ T7007] __x64_sys_sendmsg+0x19b/0x260 [ 187.074507][ T7007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.074539][ T7007] ? __pfx_ksys_write+0x10/0x10 [ 187.074562][ T7007] ? rcu_is_watching+0x15/0xb0 [ 187.074589][ T7007] ? do_syscall_64+0xbe/0x3b0 [ 187.074612][ T7007] do_syscall_64+0xfa/0x3b0 [ 187.074630][ T7007] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.074648][ T7007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.074666][ T7007] ? clear_bhb_loop+0x60/0xb0 [ 187.074685][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.074700][ T7007] RIP: 0033:0x7f85a098e929 [ 187.074723][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.074737][ T7007] RSP: 002b:00007f85a186d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.074756][ T7007] RAX: ffffffffffffffda RBX: 00007f85a0bb5fa0 RCX: 00007f85a098e929 [ 187.074768][ T7007] RDX: 0000000008000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 187.074778][ T7007] RBP: 00007f85a186d090 R08: 0000000000000000 R09: 0000000000000000 [ 187.074788][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.074798][ T7007] R13: 0000000000000000 R14: 00007f85a0bb5fa0 R15: 00007fff805b98e8 [ 187.074823][ T7007] [ 187.795799][ T7042] FAULT_INJECTION: forcing a failure. [ 187.795799][ T7042] name failslab, interval 1, probability 0, space 0, times 0 [ 187.836867][ T7042] CPU: 1 UID: 0 PID: 7042 Comm: syz.0.278 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 187.836894][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.836904][ T7042] Call Trace: [ 187.836911][ T7042] [ 187.836919][ T7042] dump_stack_lvl+0x189/0x250 [ 187.836949][ T7042] ? __pfx____ratelimit+0x10/0x10 [ 187.836970][ T7042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.836994][ T7042] ? __pfx__printk+0x10/0x10 [ 187.837015][ T7042] ? __pfx___might_resched+0x10/0x10 [ 187.837040][ T7042] ? fs_reclaim_acquire+0x7d/0x100 [ 187.837064][ T7042] should_fail_ex+0x414/0x560 [ 187.837090][ T7042] should_failslab+0xa8/0x100 [ 187.837111][ T7042] __kmalloc_noprof+0xcb/0x4f0 [ 187.837127][ T7042] ? tomoyo_encode+0x28b/0x550 [ 187.837154][ T7042] tomoyo_encode+0x28b/0x550 [ 187.837182][ T7042] tomoyo_realpath_from_path+0x58d/0x5d0 [ 187.837206][ T7042] ? tomoyo_domain+0xd9/0x130 [ 187.837234][ T7042] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 187.837251][ T7042] tomoyo_path_number_perm+0x1e8/0x5a0 [ 187.837273][ T7042] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.837307][ T7042] ? __lock_acquire+0xab9/0xd20 [ 187.837354][ T7042] ? __fget_files+0x2a/0x420 [ 187.837371][ T7042] ? __fget_files+0x2a/0x420 [ 187.837385][ T7042] ? __fget_files+0x3a0/0x420 [ 187.837398][ T7042] ? __fget_files+0x2a/0x420 [ 187.837416][ T7042] security_file_ioctl+0xcb/0x2d0 [ 187.837432][ T7042] __se_sys_ioctl+0x47/0x170 [ 187.837454][ T7042] do_syscall_64+0xfa/0x3b0 [ 187.837469][ T7042] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.837483][ T7042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.837497][ T7042] ? clear_bhb_loop+0x60/0xb0 [ 187.837514][ T7042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.837527][ T7042] RIP: 0033:0x7fe6e318e929 [ 187.837540][ T7042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.837551][ T7042] RSP: 002b:00007fe6e3fec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.837567][ T7042] RAX: ffffffffffffffda RBX: 00007fe6e33b6080 RCX: 00007fe6e318e929 [ 187.837578][ T7042] RDX: 0000200000000040 RSI: 0000000000005452 RDI: 0000000000000006 [ 187.837587][ T7042] RBP: 00007fe6e3fec090 R08: 0000000000000000 R09: 0000000000000000 [ 187.837595][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.837603][ T7042] R13: 0000000000000001 R14: 00007fe6e33b6080 R15: 00007fff3508e2c8 [ 187.837626][ T7042] [ 187.837648][ T7042] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.197453][ T7060] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 188.241845][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 188.389654][ T7061] netlink: 36 bytes leftover after parsing attributes in process `syz.4.284'. [ 188.399768][ T7063] bridge0: port 3(erspan0) entered blocking state [ 188.412048][ T7063] bridge0: port 3(erspan0) entered disabled state [ 188.418808][ T7063] erspan0: entered allmulticast mode [ 188.438872][ T7063] erspan0: entered promiscuous mode [ 188.823726][ T7092] No such timeout policy "syz1" [ 189.089636][ T7102] FAULT_INJECTION: forcing a failure. [ 189.089636][ T7102] name failslab, interval 1, probability 0, space 0, times 0 [ 189.147420][ T7102] CPU: 0 UID: 0 PID: 7102 Comm: syz.4.296 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 189.147454][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.147465][ T7102] Call Trace: [ 189.147473][ T7102] [ 189.147481][ T7102] dump_stack_lvl+0x189/0x250 [ 189.147511][ T7102] ? __pfx____ratelimit+0x10/0x10 [ 189.147531][ T7102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.147555][ T7102] ? __pfx__printk+0x10/0x10 [ 189.147577][ T7102] ? __pfx___might_resched+0x10/0x10 [ 189.147599][ T7102] ? fs_reclaim_acquire+0x7d/0x100 [ 189.147623][ T7102] should_fail_ex+0x414/0x560 [ 189.147648][ T7102] should_failslab+0xa8/0x100 [ 189.147668][ T7102] kmem_cache_alloc_noprof+0x73/0x3c0 [ 189.147692][ T7102] ? fasync_helper+0x3a/0xb0 [ 189.147717][ T7102] fasync_helper+0x3a/0xb0 [ 189.147740][ T7102] pipe_fasync+0xa9/0x1e0 [ 189.147759][ T7102] ? __pfx_pipe_fasync+0x10/0x10 [ 189.147775][ T7102] do_vfs_ioctl+0x14cb/0x1990 [ 189.147801][ T7102] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 189.147830][ T7102] ? kasan_quarantine_put+0xdd/0x220 [ 189.147865][ T7102] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.147886][ T7102] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.147905][ T7102] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 189.147922][ T7102] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 189.147942][ T7102] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 189.147979][ T7102] ? __lock_acquire+0xab9/0xd20 [ 189.148023][ T7102] ? __fget_files+0x2a/0x420 [ 189.148045][ T7102] ? __fget_files+0x2a/0x420 [ 189.148061][ T7102] ? __fget_files+0x3a0/0x420 [ 189.148077][ T7102] ? __fget_files+0x2a/0x420 [ 189.148098][ T7102] ? bpf_lsm_file_ioctl+0x9/0x20 [ 189.148124][ T7102] __se_sys_ioctl+0x82/0x170 [ 189.148150][ T7102] do_syscall_64+0xfa/0x3b0 [ 189.148169][ T7102] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.148186][ T7102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.148203][ T7102] ? clear_bhb_loop+0x60/0xb0 [ 189.148224][ T7102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.148241][ T7102] RIP: 0033:0x7f85a098e929 [ 189.148257][ T7102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.148271][ T7102] RSP: 002b:00007f85a184c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.148290][ T7102] RAX: ffffffffffffffda RBX: 00007f85a0bb6080 RCX: 00007f85a098e929 [ 189.148302][ T7102] RDX: 0000200000000040 RSI: 0000000000005452 RDI: 0000000000000006 [ 189.148314][ T7102] RBP: 00007f85a184c090 R08: 0000000000000000 R09: 0000000000000000 [ 189.148324][ T7102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.148335][ T7102] R13: 0000000000000001 R14: 00007f85a0bb6080 R15: 00007fff805b98e8 [ 189.148364][ T7102] [ 189.734243][ T7119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.739213][ T7116] netlink: 516 bytes leftover after parsing attributes in process `syz.4.300'. [ 189.745154][ T7119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.762411][ T7119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.771254][ T7119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 189.967123][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 190.025310][ T7131] FAULT_INJECTION: forcing a failure. [ 190.025310][ T7131] name failslab, interval 1, probability 0, space 0, times 0 [ 190.038967][ T7131] CPU: 0 UID: 0 PID: 7131 Comm: syz.3.306 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 190.038994][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.039005][ T7131] Call Trace: [ 190.039012][ T7131] [ 190.039019][ T7131] dump_stack_lvl+0x189/0x250 [ 190.039054][ T7131] ? __pfx____ratelimit+0x10/0x10 [ 190.039074][ T7131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.039098][ T7131] ? __pfx__printk+0x10/0x10 [ 190.039120][ T7131] ? __pfx___might_resched+0x10/0x10 [ 190.039144][ T7131] ? fs_reclaim_acquire+0x7d/0x100 [ 190.039170][ T7131] should_fail_ex+0x414/0x560 [ 190.039196][ T7131] should_failslab+0xa8/0x100 [ 190.039216][ T7131] __kmalloc_noprof+0xcb/0x4f0 [ 190.039233][ T7131] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 190.039264][ T7131] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 190.039297][ T7131] genl_family_rcv_msg_doit+0xb8/0x300 [ 190.039330][ T7131] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.039363][ T7131] ? rcu_is_watching+0x15/0xb0 [ 190.039391][ T7131] ? apparmor_capable+0x137/0x1b0 [ 190.039418][ T7131] ? bpf_lsm_capable+0x9/0x20 [ 190.039433][ T7131] ? security_capable+0x7e/0x2e0 [ 190.039461][ T7131] genl_rcv_msg+0x60e/0x790 [ 190.039493][ T7131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.039513][ T7131] ? ref_tracker_free+0x63a/0x7d0 [ 190.039533][ T7131] ? __pfx_batadv_pre_doit+0x10/0x10 [ 190.039556][ T7131] ? __pfx_batadv_netlink_tp_meter_cancel+0x10/0x10 [ 190.039579][ T7131] ? __pfx_batadv_post_doit+0x10/0x10 [ 190.039603][ T7131] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.039636][ T7131] netlink_rcv_skb+0x208/0x470 [ 190.039658][ T7131] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.039683][ T7131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.039723][ T7131] ? down_read+0x1ad/0x2e0 [ 190.039747][ T7131] genl_rcv+0x28/0x40 [ 190.039768][ T7131] netlink_unicast+0x75b/0x8d0 [ 190.039799][ T7131] netlink_sendmsg+0x805/0xb30 [ 190.039830][ T7131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.039854][ T7131] ? aa_sock_msg_perm+0x94/0x160 [ 190.039877][ T7131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.039897][ T7131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.039919][ T7131] __sock_sendmsg+0x219/0x270 [ 190.039941][ T7131] ____sys_sendmsg+0x505/0x830 [ 190.039970][ T7131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.040004][ T7131] ? import_iovec+0x74/0xa0 [ 190.040025][ T7131] ___sys_sendmsg+0x21f/0x2a0 [ 190.040052][ T7131] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.040116][ T7131] ? __fget_files+0x2a/0x420 [ 190.040134][ T7131] ? __fget_files+0x3a0/0x420 [ 190.040165][ T7131] __x64_sys_sendmsg+0x19b/0x260 [ 190.040192][ T7131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.040226][ T7131] ? __pfx_ksys_write+0x10/0x10 [ 190.040248][ T7131] ? rcu_is_watching+0x15/0xb0 [ 190.040277][ T7131] ? do_syscall_64+0xbe/0x3b0 [ 190.040301][ T7131] do_syscall_64+0xfa/0x3b0 [ 190.040319][ T7131] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.040337][ T7131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.040359][ T7131] ? clear_bhb_loop+0x60/0xb0 [ 190.040381][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.040398][ T7131] RIP: 0033:0x7febda78e929 [ 190.040414][ T7131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.040426][ T7131] RSP: 002b:00007febd85f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.040445][ T7131] RAX: ffffffffffffffda RBX: 00007febda9b5fa0 RCX: 00007febda78e929 [ 190.040456][ T7131] RDX: 0000000008000000 RSI: 0000200000001240 RDI: 0000000000000003 [ 190.040468][ T7131] RBP: 00007febd85f6090 R08: 0000000000000000 R09: 0000000000000000 [ 190.040478][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.040488][ T7131] R13: 0000000000000000 R14: 00007febda9b5fa0 R15: 00007ffc734e6018 [ 190.040519][ T7131] [ 190.582587][ T7125] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 190.636617][ T7143] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 190.745846][ T7147] FAULT_INJECTION: forcing a failure. [ 190.745846][ T7147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.769342][ T7147] CPU: 0 UID: 0 PID: 7147 Comm: syz.2.310 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 190.769369][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.769379][ T7147] Call Trace: [ 190.769386][ T7147] [ 190.769394][ T7147] dump_stack_lvl+0x189/0x250 [ 190.769424][ T7147] ? __pfx____ratelimit+0x10/0x10 [ 190.769444][ T7147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.769468][ T7147] ? __pfx__printk+0x10/0x10 [ 190.769499][ T7147] should_fail_ex+0x414/0x560 [ 190.769526][ T7147] _copy_to_user+0x31/0xb0 [ 190.769545][ T7147] simple_read_from_buffer+0xe1/0x170 [ 190.769569][ T7147] proc_fail_nth_read+0x1df/0x250 [ 190.769591][ T7147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.769613][ T7147] ? rw_verify_area+0x258/0x650 [ 190.769635][ T7147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.769655][ T7147] vfs_read+0x1fd/0x980 [ 190.769688][ T7147] ? __pfx___mutex_lock+0x10/0x10 [ 190.769709][ T7147] ? __pfx_vfs_read+0x10/0x10 [ 190.769734][ T7147] ? __fget_files+0x2a/0x420 [ 190.769758][ T7147] ? __fget_files+0x3a0/0x420 [ 190.769774][ T7147] ? __fget_files+0x2a/0x420 [ 190.769801][ T7147] ksys_read+0x145/0x250 [ 190.769826][ T7147] ? __pfx_ksys_read+0x10/0x10 [ 190.769846][ T7147] ? rcu_is_watching+0x15/0xb0 [ 190.769874][ T7147] ? do_syscall_64+0xbe/0x3b0 [ 190.769895][ T7147] do_syscall_64+0xfa/0x3b0 [ 190.769912][ T7147] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.769929][ T7147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.769945][ T7147] ? clear_bhb_loop+0x60/0xb0 [ 190.769965][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.769980][ T7147] RIP: 0033:0x7f04b818d33c [ 190.769996][ T7147] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.770009][ T7147] RSP: 002b:00007f04b8f73030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.770067][ T7147] RAX: ffffffffffffffda RBX: 00007f04b83b6080 RCX: 00007f04b818d33c [ 190.770080][ T7147] RDX: 000000000000000f RSI: 00007f04b8f730a0 RDI: 0000000000000008 [ 190.770091][ T7147] RBP: 00007f04b8f73090 R08: 0000000000000000 R09: 0000000000000000 [ 190.770101][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.770111][ T7147] R13: 0000000000000001 R14: 00007f04b83b6080 R15: 00007ffe471064c8 [ 190.770139][ T7147] [ 191.480246][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.315'. [ 191.709931][ T7175] FAULT_INJECTION: forcing a failure. [ 191.709931][ T7175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.716887][ T7181] netlink: 'syz.1.320': attribute type 3 has an invalid length. [ 191.750713][ T7175] CPU: 1 UID: 0 PID: 7175 Comm: syz.2.318 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 191.750739][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.750749][ T7175] Call Trace: [ 191.750756][ T7175] [ 191.750764][ T7175] dump_stack_lvl+0x189/0x250 [ 191.750792][ T7175] ? __pfx____ratelimit+0x10/0x10 [ 191.750813][ T7175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.750837][ T7175] ? __pfx__printk+0x10/0x10 [ 191.750868][ T7175] should_fail_ex+0x414/0x560 [ 191.750895][ T7175] _copy_to_user+0x31/0xb0 [ 191.750913][ T7175] simple_read_from_buffer+0xe1/0x170 [ 191.750936][ T7175] proc_fail_nth_read+0x1df/0x250 [ 191.750959][ T7175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.750982][ T7175] ? rw_verify_area+0x258/0x650 [ 191.751005][ T7175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.751027][ T7175] vfs_read+0x1fd/0x980 [ 191.751054][ T7175] ? __pfx___mutex_lock+0x10/0x10 [ 191.751075][ T7175] ? __pfx_vfs_read+0x10/0x10 [ 191.751099][ T7175] ? __fget_files+0x2a/0x420 [ 191.751121][ T7175] ? __fget_files+0x3a0/0x420 [ 191.751137][ T7175] ? __fget_files+0x2a/0x420 [ 191.751171][ T7175] ksys_read+0x145/0x250 [ 191.751196][ T7175] ? __pfx_ksys_read+0x10/0x10 [ 191.751216][ T7175] ? rcu_is_watching+0x15/0xb0 [ 191.751245][ T7175] ? do_syscall_64+0xbe/0x3b0 [ 191.751266][ T7175] do_syscall_64+0xfa/0x3b0 [ 191.751283][ T7175] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.751299][ T7175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.751313][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 191.751334][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.751349][ T7175] RIP: 0033:0x7f04b818d33c [ 191.751363][ T7175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.751376][ T7175] RSP: 002b:00007f04b8f94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.751393][ T7175] RAX: ffffffffffffffda RBX: 00007f04b83b5fa0 RCX: 00007f04b818d33c [ 191.751405][ T7175] RDX: 000000000000000f RSI: 00007f04b8f940a0 RDI: 0000000000000005 [ 191.751415][ T7175] RBP: 00007f04b8f94090 R08: 0000000000000000 R09: 0000000000000000 [ 191.751424][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.751432][ T7175] R13: 0000000000000000 R14: 00007f04b83b5fa0 R15: 00007ffe471064c8 [ 191.751460][ T7175] [ 191.762439][ T7181] netlink: 'syz.1.320': attribute type 3 has an invalid length. [ 192.166724][ T7198] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 192.180359][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 192.874292][ T7219] netlink: 3 bytes leftover after parsing attributes in process `syz.1.329'. [ 192.915413][ T7222] openvswitch: netlink: IP tunnel dst address not specified [ 193.174329][ T7230] netlink: 'syz.2.333': attribute type 1 has an invalid length. [ 193.199093][ T7233] trusted_key: syz.1.335 sent an empty control message without MSG_MORE. [ 193.258779][ T7230] 8021q: adding VLAN 0 to HW filter on device bond2 [ 193.434712][ T7230] veth3: entered promiscuous mode [ 193.464955][ T7237] netlink: 11 bytes leftover after parsing attributes in process `syz.3.336'. [ 193.467105][ T7242] netlink: 'syz.0.338': attribute type 10 has an invalid length. [ 193.476213][ T7230] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 193.690136][ T7252] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 193.994366][ T7272] pim6reg: entered allmulticast mode [ 194.004366][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.345'. [ 194.020895][ T7271] netlink: 152 bytes leftover after parsing attributes in process `syz.0.345'. [ 194.086786][ T43] hid-generic 0005:0458:000E.0001: collection stack underflow [ 194.095532][ T43] hid-generic 0005:0458:000E.0001: item 0 0 0 12 parsing failed [ 194.104869][ T43] hid-generic 0005:0458:000E.0001: probe with driver hid-generic failed with error -22 [ 194.145013][ T10] IPVS: starting estimator thread 0... [ 194.230911][ T7281] can: request_module (can-proto-4) failed. [ 194.237626][ T7278] IPVS: using max 49 ests per chain, 117600 per kthread [ 194.336792][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.636298][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.352'. [ 194.733065][ T7302] xt_hashlimit: size too large, truncated to 1048576 [ 194.904907][ T7304] : renamed from bridge_slave_0 (while UP) [ 195.165809][ T7319] Driver unsupported XDP return value 0 on prog (id 120) dev N/A, expect packet loss! [ 195.382547][ T7332] 8021q: VLANs not supported on ip6tnl0 [ 195.533777][ T7338] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 195.671712][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 195.677082][ T7352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.372'. [ 195.680985][ T7349] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 195.700937][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.370'. [ 196.230166][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 196.240173][ T7371] netlink: 188 bytes leftover after parsing attributes in process `syz.0.377'. [ 196.418523][ T7376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.379'. [ 196.620309][ T7387] netlink: 'syz.1.382': attribute type 12 has an invalid length. [ 196.663759][ T7387] netlink: 132 bytes leftover after parsing attributes in process `syz.1.382'. [ 196.769821][ T7387] netlink: 64 bytes leftover after parsing attributes in process `syz.1.382'. [ 196.783422][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 196.925441][ T7412] netlink: 'syz.1.388': attribute type 9 has an invalid length. [ 196.935441][ T7411] netlink: 'syz.1.388': attribute type 9 has an invalid length. [ 196.944280][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 196.976048][ T7412] hsr0: entered promiscuous mode [ 196.981998][ T7412] macvlan2: entered promiscuous mode [ 196.987751][ T7412] macvlan2: entered allmulticast mode [ 196.994796][ T7412] hsr0: entered allmulticast mode [ 197.000463][ T7412] hsr_slave_0: entered allmulticast mode [ 197.015195][ T7412] hsr_slave_1: entered allmulticast mode [ 197.050338][ T7411] macvlan3: entered promiscuous mode [ 197.056336][ T7419] Bluetooth: MGMT ver 1.23 [ 197.062381][ T7411] macvlan3: entered allmulticast mode [ 197.412663][ T7433] FAULT_INJECTION: forcing a failure. [ 197.412663][ T7433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.453040][ T7433] CPU: 1 UID: 0 PID: 7433 Comm: syz.4.394 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 197.453066][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.453076][ T7433] Call Trace: [ 197.453083][ T7433] [ 197.453091][ T7433] dump_stack_lvl+0x189/0x250 [ 197.453121][ T7433] ? __pfx____ratelimit+0x10/0x10 [ 197.453141][ T7433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.453165][ T7433] ? __pfx__printk+0x10/0x10 [ 197.453184][ T7433] ? __might_fault+0xb0/0x130 [ 197.453221][ T7433] should_fail_ex+0x414/0x560 [ 197.453249][ T7433] _copy_from_user+0x2d/0xb0 [ 197.453267][ T7433] do_ip_vs_set_ctl+0x2d3/0xa60 [ 197.453298][ T7433] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 197.453320][ T7433] ? rcu_is_watching+0x15/0xb0 [ 197.453361][ T7433] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 197.453388][ T7433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.453406][ T7433] ? aa_sk_perm+0x81e/0x950 [ 197.453431][ T7433] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.453457][ T7433] nf_setsockopt+0x26f/0x290 [ 197.453481][ T7433] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 197.453503][ T7433] do_sock_setsockopt+0x25a/0x3e0 [ 197.453529][ T7433] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 197.453556][ T7433] ? __fget_files+0x2a/0x420 [ 197.453583][ T7433] __x64_sys_setsockopt+0x18b/0x220 [ 197.453620][ T7433] do_syscall_64+0xfa/0x3b0 [ 197.453639][ T7433] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.453658][ T7433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.453676][ T7433] ? clear_bhb_loop+0x60/0xb0 [ 197.453698][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.453715][ T7433] RIP: 0033:0x7f85a098e929 [ 197.453732][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.453746][ T7433] RSP: 002b:00007f85a186d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.453765][ T7433] RAX: ffffffffffffffda RBX: 00007f85a0bb5fa0 RCX: 00007f85a098e929 [ 197.453778][ T7433] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 197.453788][ T7433] RBP: 00007f85a186d090 R08: 0000000000000018 R09: 0000000000000000 [ 197.453799][ T7433] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.453809][ T7433] R13: 0000000000000000 R14: 00007f85a0bb5fa0 R15: 00007fff805b98e8 [ 197.453838][ T7433] [ 198.114090][ T7449] ip6t_rpfilter: unknown options [ 198.288916][ T7461] xt_bpf: check failed: parse error [ 198.824086][ T7489] Dead loop on virtual device ip6_vti0, fix it urgently! [ 198.832085][ T7496] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 198.851836][ T7496] syzkaller1: linktype set to 257 [ 198.933249][ T7506] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 199.026550][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 199.059050][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 199.086831][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 199.092742][ T7511] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 199.417746][ T7525] netlink: 'syz.2.417': attribute type 10 has an invalid length. [ 199.498016][ T7509] infiniband syz0: set active [ 199.501166][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.516968][ T7514] netlink: 'syz.1.414': attribute type 4 has an invalid length. [ 199.536420][ T5909] IPVS: starting estimator thread 0... [ 199.542172][ T7509] infiniband syz0: added dummy0 [ 199.549141][ T7531] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.570631][ T7525] bridge_slave_1: left allmulticast mode [ 199.585841][ T7525] bridge_slave_1: left promiscuous mode [ 199.592898][ T7531] netlink: 'syz.1.414': attribute type 4 has an invalid length. [ 199.614287][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.659277][ T7525] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 199.661780][ T7538] IPVS: using max 38 ests per chain, 91200 per kthread [ 199.679327][ T55] dummy0 speed is unknown, defaulting to 1000 [ 199.692315][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.736206][ T7509] RDS/IB: syz0: added [ 199.765958][ T7509] smc: adding ib device syz0 with port count 1 [ 199.808376][ T7509] smc: ib device syz0 port 1 has pnetid [ 199.837391][ T7543] dummy0 speed is unknown, defaulting to 1000 [ 199.845855][ T10] IPVS: starting estimator thread 0... [ 199.848670][ T5162] dummy0 speed is unknown, defaulting to 1000 [ 199.951925][ T7549] IPVS: using max 24 ests per chain, 57600 per kthread [ 200.120956][ T7559] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 200.451287][ T7577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.451506][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 200.755459][ T7587] netlink: 'syz.2.429': attribute type 2 has an invalid length. [ 200.806552][ T7587] þ: entered promiscuous mode [ 201.110245][ T7586] dummy0 speed is unknown, defaulting to 1000 [ 201.412138][ T7608] __nla_validate_parse: 17 callbacks suppressed [ 201.412156][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'. [ 201.435592][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'. [ 201.444948][ T7608] netlink: 'syz.1.433': attribute type 4 has an invalid length. [ 201.459583][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 201.533933][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 201.540757][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 201.547880][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.547901][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 201.918110][ T7632] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 201.926455][ T7632] netlink: 172 bytes leftover after parsing attributes in process `syz.2.438'. [ 202.035516][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'. [ 202.074261][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 202.128197][ T7639] x_tables: duplicate underflow at hook 2 [ 202.281449][ T7647] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 202.303071][ T7647] netlink: 224 bytes leftover after parsing attributes in process `syz.4.443'. [ 202.414773][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 202.811205][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 203.021052][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 203.435565][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 203.521069][ T7681] netlink: 'syz.1.455': attribute type 12 has an invalid length. [ 203.541392][ T7681] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.455'. [ 203.866184][ T7509] dummy0 speed is unknown, defaulting to 1000 [ 204.075369][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 204.512900][ T7704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.463'. [ 204.928240][ T7720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.097791][ T7724] dummy0 speed is unknown, defaulting to 1000 [ 206.130222][ T7755] lo speed is unknown, defaulting to 1000 [ 206.259592][ T7755] lo speed is unknown, defaulting to 1000 [ 206.381016][ T7755] lo speed is unknown, defaulting to 1000 [ 206.423434][ T7755] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 206.447817][ T7755] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 206.549519][ T7755] lo speed is unknown, defaulting to 1000 [ 206.574771][ T7755] lo speed is unknown, defaulting to 1000 [ 206.598421][ T7755] lo speed is unknown, defaulting to 1000 [ 206.611489][ T7774] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 206.637298][ T7755] lo speed is unknown, defaulting to 1000 [ 206.647883][ T7755] lo speed is unknown, defaulting to 1000 [ 206.669236][ T7755] lo speed is unknown, defaulting to 1000 [ 207.047137][ T7793] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.116901][ T7794] syzkaller1: entered promiscuous mode [ 207.122661][ T7794] syzkaller1: entered allmulticast mode [ 207.433595][ T7806] __nla_validate_parse: 2 callbacks suppressed [ 207.433612][ T7806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.491'. [ 207.450740][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 207.467017][ T7804] dummy0: entered promiscuous mode [ 207.477836][ T7804] dummy0: left promiscuous mode [ 207.493136][ T7806] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 207.508125][ T7806] netlink: 'syz.1.491': attribute type 8 has an invalid length. [ 207.538753][ T5977] dummy0 speed is unknown, defaulting to 1000 [ 207.566049][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.492'. [ 207.690477][ T7813] tipc: Enabling of bearer rejected, failed to enable media [ 207.977572][ T7830] netlink: 92 bytes leftover after parsing attributes in process `syz.4.499'. [ 207.992933][ T7831] netlink: 'syz.2.497': attribute type 12 has an invalid length. [ 208.097350][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 208.216385][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 208.237332][ T7836] netlink: 144 bytes leftover after parsing attributes in process `syz.0.501'. [ 208.598006][ T7497] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.614555][ T7497] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.650028][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 208.685768][ T7497] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.716982][ T7497] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.195486][ T7894] openvswitch: netlink: Key 6 has unexpected len 18 expected 2 [ 209.365780][ T7915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 209.383601][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'. [ 209.428359][ T7909] x_tables: duplicate underflow at hook 1 [ 209.621060][ T7935] netlink: 'syz.3.528': attribute type 1 has an invalid length. [ 209.681183][ T7935] bond2: entered promiscuous mode [ 209.686508][ T7935] bond2: entered allmulticast mode [ 209.704773][ T7935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.741016][ T7935] bridge2: entered promiscuous mode [ 209.750220][ T7935] bridge2: entered allmulticast mode [ 209.758224][ T7935] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 209.793948][ T7497] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 209.915281][ T7483] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.698571][ T7990] batadv1: entered promiscuous mode [ 210.750349][ T7994] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 210.806718][ T7995] openvswitch: netlink: nsh attr 14082 is out of range max 3 [ 210.814327][ T7995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.851324][ T7997] netlink: 'syz.1.548': attribute type 13 has an invalid length. [ 210.866884][ T7999] netlink: 'syz.2.549': attribute type 21 has an invalid length. [ 210.877883][ T7997] netlink: 'syz.1.548': attribute type 17 has an invalid length. [ 210.996540][ T7997] gretap0: refused to change device tx_queue_len [ 211.034731][ T7997] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 211.538046][ T8030] dummy0 speed is unknown, defaulting to 1000 [ 212.129248][ T8029] dummy0 speed is unknown, defaulting to 1000 [ 212.129738][ T8030] lo speed is unknown, defaulting to 1000 [ 212.344632][ T8069] netlink: 'syz.4.565': attribute type 4 has an invalid length. [ 212.644664][ T8082] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 212.940683][ T8080] dummy0 speed is unknown, defaulting to 1000 [ 212.960518][ T8084] netlink: 'syz.3.571': attribute type 5 has an invalid length. [ 212.980827][ T8084] netlink: 'syz.3.571': attribute type 39 has an invalid length. [ 213.311423][ T8080] lo speed is unknown, defaulting to 1000 [ 213.411903][ T8029] lo speed is unknown, defaulting to 1000 [ 213.487229][ T8103] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 213.516148][ T8103] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 213.960161][ T8114] dummy0 speed is unknown, defaulting to 1000 [ 214.210469][ T8120] xt_CT: No such helper "snmp" [ 214.832626][ T8132] __nla_validate_parse: 17 callbacks suppressed [ 214.832646][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.1.583'. [ 214.871644][ T8114] lo speed is unknown, defaulting to 1000 [ 214.882889][ T8127] dummy0 speed is unknown, defaulting to 1000 [ 215.198727][ T8126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.262778][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.587'. [ 215.337263][ T8127] lo speed is unknown, defaulting to 1000 [ 215.681355][ T8157] xt_CT: No such helper "syz1" [ 215.775702][ T8161] Bluetooth: MGMT ver 1.23 [ 215.782910][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 215.882134][ T8161] geneve2: entered promiscuous mode [ 215.936349][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 216.332524][ T8179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.359908][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 216.438191][ T8184] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 216.529864][ T8188] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 216.542605][ T8188] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.600'. [ 216.774589][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.601'. [ 216.815772][ T8194] dummy0 speed is unknown, defaulting to 1000 [ 216.823181][ T8202] syz.2.604: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 216.856444][ T8209] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 216.868714][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 216.881858][ T8202] CPU: 0 UID: 0 PID: 8202 Comm: syz.2.604 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 216.881886][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.881898][ T8202] Call Trace: [ 216.881905][ T8202] [ 216.881914][ T8202] dump_stack_lvl+0x189/0x250 [ 216.881952][ T8202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.881979][ T8202] ? __pfx__printk+0x10/0x10 [ 216.881999][ T8202] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.882020][ T8202] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.882041][ T8202] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 216.882064][ T8202] warn_alloc+0x214/0x310 [ 216.882083][ T8202] ? stack_depot_save_flags+0x40/0x900 [ 216.882109][ T8202] ? __pfx_warn_alloc+0x10/0x10 [ 216.882131][ T8202] ? kasan_save_track+0x4f/0x80 [ 216.882156][ T8202] ? xskq_create+0x56/0x170 [ 216.882174][ T8202] ? xsk_init_queue+0xb0/0x110 [ 216.882189][ T8202] ? xsk_setsockopt+0x43f/0x710 [ 216.882204][ T8202] ? do_sock_setsockopt+0x25a/0x3e0 [ 216.882226][ T8202] ? __x64_sys_setsockopt+0x18b/0x220 [ 216.882247][ T8202] ? do_syscall_64+0xfa/0x3b0 [ 216.882266][ T8202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.882292][ T8202] __vmalloc_node_range_noprof+0x125/0x12f0 [ 216.882347][ T8202] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.882373][ T8202] ? __kasan_kmalloc+0x93/0xb0 [ 216.882393][ T8202] vmalloc_user_noprof+0xad/0xf0 [ 216.882413][ T8202] ? xskq_create+0xbf/0x170 [ 216.882433][ T8202] xskq_create+0xbf/0x170 [ 216.882455][ T8202] xsk_init_queue+0xb0/0x110 [ 216.882477][ T8202] xsk_setsockopt+0x43f/0x710 [ 216.882497][ T8202] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.882514][ T8202] ? __lock_acquire+0xab9/0xd20 [ 216.882547][ T8202] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 216.882568][ T8202] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.882587][ T8202] do_sock_setsockopt+0x25a/0x3e0 [ 216.882614][ T8202] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 216.882642][ T8202] ? __fget_files+0x2a/0x420 [ 216.882671][ T8202] __x64_sys_setsockopt+0x18b/0x220 [ 216.882701][ T8202] do_syscall_64+0xfa/0x3b0 [ 216.882720][ T8202] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.882745][ T8202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.882763][ T8202] ? clear_bhb_loop+0x60/0xb0 [ 216.882786][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.882803][ T8202] RIP: 0033:0x7f04b818e929 [ 216.882820][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.882836][ T8202] RSP: 002b:00007f04b8f94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.882855][ T8202] RAX: ffffffffffffffda RBX: 00007f04b83b5fa0 RCX: 00007f04b818e929 [ 216.882868][ T8202] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 216.882879][ T8202] RBP: 00007f04b8210b39 R08: 0000000000000004 R09: 0000000000000000 [ 216.882890][ T8202] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.882901][ T8202] R13: 0000000000000000 R14: 00007f04b83b5fa0 R15: 00007ffe471064c8 [ 216.882931][ T8202] [ 216.882978][ T8202] Mem-Info: [ 217.216693][ T8202] active_anon:7824 inactive_anon:0 isolated_anon:0 [ 217.216693][ T8202] active_file:1650 inactive_file:39878 isolated_file:0 [ 217.216693][ T8202] unevictable:768 dirty:162 writeback:0 [ 217.216693][ T8202] slab_reclaimable:11054 slab_unreclaimable:100224 [ 217.216693][ T8202] mapped:33336 shmem:1363 pagetables:1122 [ 217.216693][ T8202] sec_pagetables:0 bounce:0 [ 217.216693][ T8202] kernel_misc_reclaimable:0 [ 217.216693][ T8202] free:1304161 free_pcp:31672 free_cma:0 [ 217.344959][ T8202] Node 0 active_anon:29096kB inactive_anon:0kB active_file:6600kB inactive_file:159308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132944kB dirty:648kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13260kB pagetables:4344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.444505][ T8202] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.473813][ T8194] lo speed is unknown, defaulting to 1000 [ 217.488714][ T8202] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.518760][ T8202] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 217.532692][ T8202] Node 0 DMA32 free:1308676kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17952kB inactive_anon:0kB active_file:6600kB inactive_file:157488kB unevictable:1536kB writepending:648kB present:3129332kB managed:2560928kB mlocked:0kB bounce:0kB free_pcp:110256kB local_pcp:76244kB free_cma:0kB [ 217.567787][ T8224] netlink: 5 bytes leftover after parsing attributes in process `syz.4.609'. [ 217.575635][ T8202] lowmem_reserve[]: 0 0 1 1 1 [ 217.590142][ T8202] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 217.631833][ T8202] lowmem_reserve[]: 0 0 0 0 0 [ 217.636707][ T8202] Node 1 Normal free:3905140kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16448kB local_pcp:9600kB free_cma:0kB [ 217.676912][ T8202] lowmem_reserve[]: 0 0 0 0 0 [ 217.684961][ T8202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.702480][ T8202] Node 0 DMA32: 2077*4kB (UME) 735*8kB (UME) 492*16kB (UME) 581*32kB (UME) 275*64kB (UM) 28*128kB (UME) 12*256kB (UME) 37*512kB (UM) 14*1024kB (UM) 3*2048kB (UE) 294*4096kB (UM) = 1308556kB [ 217.725033][ T8202] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 217.738218][ T8202] Node 1 Normal: 221*4kB (UME) 48*8kB (UME) 32*16kB (UME) 68*32kB (UME) 30*64kB (UME) 11*128kB (UME) 4*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3905140kB [ 217.762185][ T8202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.772968][ T8202] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 217.789781][ T8202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.793442][ T8228] netlink: 'syz.3.610': attribute type 21 has an invalid length. [ 217.799936][ T8202] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 217.818967][ T8202] 42887 total pagecache pages [ 217.824042][ T8202] 0 pages in swap cache [ 217.828278][ T8202] Free swap = 124996kB [ 217.837099][ T8202] Total swap = 124996kB [ 217.841356][ T8202] 2097051 pages RAM [ 217.845689][ T8202] 0 pages HighMem/MovableOnly [ 217.850380][ T8202] 424713 pages reserved [ 217.855090][ T8202] 0 pages cma reserved [ 217.905707][ T8205] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 217.910419][ T8233] dvmrp1: entered allmulticast mode [ 218.056954][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 218.083955][ T8236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.097963][ T8236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.147009][ T8236] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 219.123224][ T8299] xt_limit: Overflow, try lower: 0/0 [ 219.248077][ T8306] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 219.387197][ T8312] netlink: 'syz.1.637': attribute type 12 has an invalid length. [ 219.412479][ T8315] dummy0 speed is unknown, defaulting to 1000 [ 219.444184][ T5845] Bluetooth: hci4: link tx timeout [ 219.449961][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.460989][ T5845] Bluetooth: hci4: link tx timeout [ 219.466345][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.474445][ T5845] Bluetooth: hci4: link tx timeout [ 219.480372][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.488324][ T5845] Bluetooth: hci4: link tx timeout [ 219.493775][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 219.788400][ T8341] xt_TCPMSS: Only works on TCP SYN packets [ 220.137651][ T8362] netlink: 'syz.4.650': attribute type 9 has an invalid length. [ 220.262257][ T8368] __nla_validate_parse: 14 callbacks suppressed [ 220.262274][ T8368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.651'. [ 220.268614][ T8315] lo speed is unknown, defaulting to 1000 [ 220.356971][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 220.526140][ T8361] delete_channel: no stack [ 220.740672][ T8379] netlink: 'syz.2.653': attribute type 1 has an invalid length. [ 220.779120][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 221.034239][ T8385] dummy0 speed is unknown, defaulting to 1000 [ 221.062702][ T8391] netlink: 'syz.2.658': attribute type 29 has an invalid length. [ 221.070742][ T8394] netlink: 84 bytes leftover after parsing attributes in process `syz.3.656'. [ 221.084045][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 221.084613][ T8393] netlink: 184 bytes leftover after parsing attributes in process `syz.1.657'. [ 221.378563][ T8384] dummy0 speed is unknown, defaulting to 1000 [ 221.533671][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 221.723033][ T8385] lo speed is unknown, defaulting to 1000 [ 221.788967][ T8384] lo speed is unknown, defaulting to 1000 [ 222.116185][ T8418] bridge1: entered promiscuous mode [ 222.158149][ T8418] bridge1: entered allmulticast mode [ 222.213652][ T8418] team0: Port device bridge1 added [ 222.289155][ T8426] bridge0: entered allmulticast mode [ 222.538005][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'. [ 222.621934][ T8448] tipc: Started in network mode [ 222.639813][ T8448] tipc: Node identity 3af31a67a4b8, cluster identity 4711 [ 222.676992][ T8448] tipc: Enabled bearer , priority 10 [ 222.818066][ T8454] tipc: Resetting bearer [ 222.862026][ T8451] tipc: Enabling of bearer rejected, already enabled [ 223.164971][ T7498] tipc: Resetting bearer [ 223.317113][ T8451] tipc: Resetting bearer [ 223.621776][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 223.752817][ T43] tipc: Node number set to 2655722087 [ 224.803556][ T8476] netlink: 44 bytes leftover after parsing attributes in process `syz.0.677'. [ 224.812793][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 225.083974][ T8451] tipc: Disabling bearer [ 225.623422][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.684'. [ 225.676072][ T8508] dummy0 speed is unknown, defaulting to 1000 [ 225.966788][ T8535] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 226.091405][ T8507] dummy0 speed is unknown, defaulting to 1000 [ 226.098590][ T8508] lo speed is unknown, defaulting to 1000 [ 226.742310][ T8550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 226.885343][ T8507] lo speed is unknown, defaulting to 1000 [ 227.152298][ T8561] netlink: 44 bytes leftover after parsing attributes in process `syz.1.700'. [ 227.180101][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.702'. [ 227.326029][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 227.345318][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 227.363107][ T8576] x_tables: duplicate underflow at hook 4 [ 227.407519][ T8578] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 227.421227][ T7501] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.458557][ T7501] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.458619][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 227.494706][ T7501] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.509128][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 227.519801][ T7501] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.619225][ T8583] netlink: 52 bytes leftover after parsing attributes in process `syz.2.706'. [ 227.764008][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 227.925525][ T8591] gretap2: entered promiscuous mode [ 227.930959][ T8591] gretap2: entered allmulticast mode [ 227.973791][ T8591] dummy0 speed is unknown, defaulting to 1000 [ 228.072220][ T8598] netlink: 'syz.0.711': attribute type 4 has an invalid length. [ 228.662788][ T8624] geneve3: entered promiscuous mode [ 228.692444][ T8624] geneve3: entered allmulticast mode [ 228.704476][ T7501] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 56599 - 0 [ 228.737253][ T7501] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 56599 - 0 [ 228.764427][ T7501] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 56599 - 0 [ 228.783841][ T7501] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 56599 - 0 [ 228.964383][ T8609] dummy0 speed is unknown, defaulting to 1000 [ 228.965989][ T8638] x_tables: duplicate underflow at hook 1 [ 228.978026][ T8591] lo speed is unknown, defaulting to 1000 [ 229.068153][ T8640] tipc: Cannot configure node identity twice [ 229.253093][ T8645] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 229.380912][ T8651] netlink: 'syz.4.725': attribute type 11 has an invalid length. [ 229.453034][ T8609] lo speed is unknown, defaulting to 1000 [ 230.012309][ T8676] IPVS: Scheduler module ip_vs_sip not found [ 230.051196][ T8676] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 230.144995][ T8681] bridge_slave_0: left allmulticast mode [ 230.150693][ T8681] bridge_slave_0: left promiscuous mode [ 230.199751][ T8681] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.202366][ T8689] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 230.241081][ T8681] bond0: (slave bridge_slave_1): Releasing backup interface [ 230.283452][ T8681] bond0: (slave bond_slave_0): Releasing backup interface [ 230.344476][ T8681] bond0: (slave bond_slave_1): Releasing backup interface [ 230.436773][ T8681] team0: Port device team_slave_0 removed [ 230.449699][ T8681] team0: Port device team_slave_1 removed [ 230.469725][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.479213][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.488276][ T8681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.496513][ T8681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.532471][ T8681] bond1: (slave ip6gretap1): Releasing backup interface [ 230.547276][ T8681] bond2: (slave veth3): Releasing backup interface [ 230.586301][ T8683] macvlan1: entered promiscuous mode [ 230.595018][ T8683] ipvlan0: entered promiscuous mode [ 230.604039][ T8683] ipvlan0: left promiscuous mode [ 230.610138][ T8683] macvlan1: left promiscuous mode [ 230.631429][ T5977] lo speed is unknown, defaulting to 1000 [ 230.646122][ T8701] team0: Mode changed to "broadcast" [ 230.654769][ T8690] syzkaller1: entered promiscuous mode [ 230.660262][ T8690] syzkaller1: entered allmulticast mode [ 231.550503][ T8739] __nla_validate_parse: 8 callbacks suppressed [ 231.550520][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.0.748'. [ 232.187661][ T8760] syzkaller1: entered promiscuous mode [ 232.190368][ T8765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.204060][ T8760] syzkaller1: entered allmulticast mode [ 232.314626][ T8767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.457879][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.760'. [ 232.496965][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.761'. [ 232.943182][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 233.109123][ T8819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.772'. [ 233.294788][ T8803] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 233.302991][ T8803] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 233.459263][ T8821] netlink: 14 bytes leftover after parsing attributes in process `syz.1.773'. [ 233.585575][ T8833] x_tables: duplicate underflow at hook 1 [ 233.821395][ T8821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.859787][ T8821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.885369][ T8821] bond0 (unregistering): Released all slaves [ 234.014568][ T8843] netlink: 'syz.0.778': attribute type 16 has an invalid length. [ 234.059943][ T8843] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.778'. [ 234.137119][ T8850] tipc: Can't bind to reserved service type 0 [ 234.390565][ T8864] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 234.426641][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'. [ 234.554797][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.788'. [ 234.650059][ T8883] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 234.683357][ T8875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.788'. [ 234.973429][ T8893] xt_CT: No such helper "snmp" [ 235.101001][ T8907] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 236.243347][ T8966] dummy0 speed is unknown, defaulting to 1000 [ 236.814965][ T8966] lo speed is unknown, defaulting to 1000 [ 236.976621][ T8987] __nla_validate_parse: 5 callbacks suppressed [ 236.976638][ T8987] netlink: 596 bytes leftover after parsing attributes in process `syz.1.817'. [ 237.179658][ T9002] xt_hashlimit: size too large, truncated to 1048576 [ 237.205385][ T9004] FAULT_INJECTION: forcing a failure. [ 237.205385][ T9004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.250534][ T9004] CPU: 0 UID: 0 PID: 9004 Comm: syz.0.821 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 237.250561][ T9004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.250570][ T9004] Call Trace: [ 237.250577][ T9004] [ 237.250586][ T9004] dump_stack_lvl+0x189/0x250 [ 237.250617][ T9004] ? __pfx____ratelimit+0x10/0x10 [ 237.250638][ T9004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.250661][ T9004] ? __pfx__printk+0x10/0x10 [ 237.250679][ T9004] ? __might_fault+0xb0/0x130 [ 237.250714][ T9004] should_fail_ex+0x414/0x560 [ 237.250740][ T9004] _copy_from_user+0x2d/0xb0 [ 237.250756][ T9004] ___sys_sendmsg+0x158/0x2a0 [ 237.250781][ T9004] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.250833][ T9004] ? __fget_files+0x2a/0x420 [ 237.250850][ T9004] ? __fget_files+0x3a0/0x420 [ 237.250878][ T9004] __x64_sys_sendmsg+0x19b/0x260 [ 237.250904][ T9004] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.250936][ T9004] ? __pfx_ksys_write+0x10/0x10 [ 237.250958][ T9004] ? rcu_is_watching+0x15/0xb0 [ 237.250988][ T9004] ? do_syscall_64+0xbe/0x3b0 [ 237.251011][ T9004] do_syscall_64+0xfa/0x3b0 [ 237.251029][ T9004] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.251047][ T9004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.251064][ T9004] ? clear_bhb_loop+0x60/0xb0 [ 237.251084][ T9004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.251101][ T9004] RIP: 0033:0x7fe6e318e929 [ 237.251117][ T9004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.251131][ T9004] RSP: 002b:00007fe6e400d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.251150][ T9004] RAX: ffffffffffffffda RBX: 00007fe6e33b5fa0 RCX: 00007fe6e318e929 [ 237.251162][ T9004] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 237.251173][ T9004] RBP: 00007fe6e400d090 R08: 0000000000000000 R09: 0000000000000000 [ 237.251183][ T9004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.251193][ T9004] R13: 0000000000000000 R14: 00007fe6e33b5fa0 R15: 00007fff3508e2c8 [ 237.251221][ T9004] [ 237.593568][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 238.006149][ T9027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 238.106206][ T9030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.828'. [ 238.398410][ T9035] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.830'. [ 238.509780][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 238.887132][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'. [ 239.126393][ T9077] netlink: 348 bytes leftover after parsing attributes in process `syz.3.841'. [ 239.142540][ T9076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.844'. [ 239.172005][ T9076] (unnamed net_device) (uninitialized): option ad_select: invalid value (119) [ 239.198777][ T9073] dummy0 speed is unknown, defaulting to 1000 [ 239.206818][ T9067] 8021q: VLANs not supported on nlmon0 [ 239.269677][ T9085] netlink: 'syz.0.845': attribute type 5 has an invalid length. [ 239.291812][ T9085] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 239.299833][ T9085] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.845'. [ 239.784278][ T9083] netlink: 'syz.2.843': attribute type 4 has an invalid length. [ 239.808633][ T9079] dummy0 speed is unknown, defaulting to 1000 [ 239.815221][ T9073] lo speed is unknown, defaulting to 1000 [ 239.874013][ T9106] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:20003 [ 240.160830][ T9115] netlink: 'syz.4.853': attribute type 12 has an invalid length. [ 240.175658][ T9121] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 240.186806][ T9119] netlink: 'syz.1.854': attribute type 6 has an invalid length. [ 240.288493][ T9116] netlink: 'syz.4.853': attribute type 12 has an invalid length. [ 240.361098][ T9079] lo speed is unknown, defaulting to 1000 [ 240.871581][ T9149] xt_l2tp: v2 doesn't support IP mode [ 241.176404][ T9153] dummy0 speed is unknown, defaulting to 1000 [ 241.785515][ T9153] lo speed is unknown, defaulting to 1000 [ 242.503067][ T9190] __nla_validate_parse: 90 callbacks suppressed [ 242.503086][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.873'. [ 242.504188][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.875'. [ 242.747363][ T9199] ipt_REJECT: ECHOREPLY no longer supported. [ 242.813414][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 242.932616][ T9202] netlink: 64 bytes leftover after parsing attributes in process `syz.3.879'. [ 242.978483][ T9203] dummy0 speed is unknown, defaulting to 1000 [ 242.979902][ T9211] netlink: 11 bytes leftover after parsing attributes in process `syz.1.880'. [ 243.003338][ T9211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.880'. [ 243.039864][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 243.048883][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'. [ 243.213536][ T9219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.883'. [ 243.215686][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.882'. [ 243.332152][ T9227] netlink: 'syz.3.886': attribute type 153 has an invalid length. [ 243.785040][ T9216] dummy0 speed is unknown, defaulting to 1000 [ 243.803555][ T9203] lo speed is unknown, defaulting to 1000 [ 243.913729][ T9248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.175891][ T9254] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 244.295871][ T9216] lo speed is unknown, defaulting to 1000 [ 245.073187][ T9284] dummy0 speed is unknown, defaulting to 1000 [ 245.676824][ T9302] dummy0 speed is unknown, defaulting to 1000 [ 245.692391][ T9284] lo speed is unknown, defaulting to 1000 [ 245.862457][ T9323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.300216][ T9302] lo speed is unknown, defaulting to 1000 [ 246.300437][ T9317] dummy0 speed is unknown, defaulting to 1000 [ 246.618781][ T9338] IPv6: sit1: Disabled Multicast RS [ 246.626893][ T9317] lo speed is unknown, defaulting to 1000 [ 246.927869][ T9345] netlink: 'syz.1.920': attribute type 11 has an invalid length. [ 247.829950][ T9384] netlink: 'syz.3.930': attribute type 15 has an invalid length. [ 248.201265][ T9400] dummy0 speed is unknown, defaulting to 1000 [ 248.443760][ T9400] lo speed is unknown, defaulting to 1000 [ 248.450669][ T9392] dummy0 speed is unknown, defaulting to 1000 [ 248.485638][ T9407] __nla_validate_parse: 12 callbacks suppressed [ 248.485656][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 248.968045][ T9392] lo speed is unknown, defaulting to 1000 [ 248.989652][ T9425] netlink: 'syz.0.940': attribute type 1 has an invalid length. [ 249.018821][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 249.500065][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'. [ 249.542630][ T9424] dummy0 speed is unknown, defaulting to 1000 [ 249.732400][ T9434] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 249.830275][ T9434] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 249.833345][ T9438] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 249.848010][ T9439] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 249.880155][ T9429] netlink: 248 bytes leftover after parsing attributes in process `syz.4.941'. [ 250.010504][ T9446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.204867][ T9427] dummy0 speed is unknown, defaulting to 1000 [ 250.413094][ T9424] lo speed is unknown, defaulting to 1000 [ 250.497375][ T9427] lo speed is unknown, defaulting to 1000 [ 250.812138][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 250.830606][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.952'. [ 250.902176][ T9461] dummy0 speed is unknown, defaulting to 1000 [ 250.976651][ T9469] sctp: [Deprecated]: syz.1.952 (pid 9469) Use of int in max_burst socket option. [ 250.976651][ T9469] Use struct sctp_assoc_value instead [ 251.125242][ T9461] lo speed is unknown, defaulting to 1000 [ 251.348390][ T9480] netlink: 20 bytes leftover after parsing attributes in process `syz.3.955'. [ 251.782279][ T9490] dummy0 speed is unknown, defaulting to 1000 [ 252.226049][ T9490] lo speed is unknown, defaulting to 1000 [ 252.312599][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.964'. [ 252.575072][ T9495] netlink: 'syz.2.958': attribute type 6 has an invalid length. [ 252.939003][ T9529] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 253.087438][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 253.157028][ T9534] netlink: 'syz.1.969': attribute type 4 has an invalid length. [ 253.520732][ T9555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.974'. [ 253.626424][ T9558] netlink: 56 bytes leftover after parsing attributes in process `syz.3.975'. [ 253.839216][ T9560] netlink: 'syz.4.976': attribute type 12 has an invalid length. [ 253.999588][ T9563] dummy0 speed is unknown, defaulting to 1000 [ 254.219694][ T9574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.982'. [ 254.357055][ T9588] xt_TCPMSS: Only works on TCP SYN packets [ 254.409177][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.985'. [ 254.444753][ T9585] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.984'. [ 254.499727][ T9580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.565821][ T9594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 254.637764][ T9563] lo speed is unknown, defaulting to 1000 [ 254.724303][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 254.733611][ T9599] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 254.742872][ T9599] netlink: 'syz.2.988': attribute type 2 has an invalid length. [ 254.754399][ T9599] netlink: 80 bytes leftover after parsing attributes in process `syz.2.988'. [ 254.775412][ T9564] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.977'. [ 254.784139][ T9601] block nbd4: not configured, cannot reconfigure [ 255.211196][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 255.250008][ T9615] dummy0 speed is unknown, defaulting to 1000 [ 255.777528][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.852649][ T9649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.880612][ T9649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.909929][ T9649] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 255.937738][ T9649] bond0 (unregistering): Released all slaves [ 255.984618][ T9615] lo speed is unknown, defaulting to 1000 [ 256.461055][ T9682] bond3: entered promiscuous mode [ 256.469722][ T9682] bond3: entered allmulticast mode [ 256.475963][ T9682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.508440][ T9684] netlink: 'syz.0.1009': attribute type 12 has an invalid length. [ 257.154229][ T9708] tap0: tun_chr_ioctl cmd 1074025677 [ 257.160004][ T9708] tap0: linktype set to 826 [ 257.330025][ T9715] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 257.447803][ T9719] netlink: 'syz.4.1024': attribute type 1 has an invalid length. [ 258.234781][ T9750] netlink: 'syz.2.1032': attribute type 4 has an invalid length. [ 258.521953][ T9761] netlink: 'syz.2.1036': attribute type 1 has an invalid length. [ 258.552535][ T9761] __nla_validate_parse: 17 callbacks suppressed [ 258.552556][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'. [ 258.672793][ T9763] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 258.926282][ T9774] dummy0 speed is unknown, defaulting to 1000 [ 258.942715][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 258.984283][ T9778] netlink: 'syz.2.1043': attribute type 1 has an invalid length. [ 259.134401][ T9783] bond3: (slave gretap1): making interface the new active one [ 259.190797][ T9783] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 259.330268][ T9774] lo speed is unknown, defaulting to 1000 [ 259.504730][ T9798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1046'. [ 259.712658][ T9807] dummy0 speed is unknown, defaulting to 1000 [ 259.739780][ T9814] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 259.758744][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 260.234576][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 260.269819][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1058'. [ 260.281785][ T9807] lo speed is unknown, defaulting to 1000 [ 260.297750][ T9808] dummy0 speed is unknown, defaulting to 1000 [ 260.321882][ T9836] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 260.963362][ T9808] lo speed is unknown, defaulting to 1000 [ 261.032348][ T9852] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 261.040721][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 261.118682][ T9857] xt_cgroup: invalid path, errno=-2 [ 261.130810][ T9857] netlink: 'syz.1.1064': attribute type 45 has an invalid length. [ 261.417212][ T9866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1068'. [ 261.967475][ T9878] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 261.987642][ T9878] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1072'. [ 262.308928][ T9889] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 262.320662][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 262.425120][ T9887] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.469387][ T9887] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56599 - 0 [ 262.662759][ T9887] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.691936][ T9887] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56599 - 0 [ 262.756241][ T9910] ipt_REJECT: TCP_RESET invalid for non-tcp [ 262.792842][ T9887] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.809453][ T9887] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56599 - 0 [ 262.927872][ T9887] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.961616][ T9887] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56599 - 0 [ 263.007264][ T9915] tap0: tun_chr_ioctl cmd 1074025678 [ 263.013620][ T9915] tap0: group set to 0 [ 263.121092][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 56599 - 0 [ 263.135360][ T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 263.163916][ T3010] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 56599 - 0 [ 263.177111][ T3010] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 263.181919][ T9922] SET target dimension over the limit! [ 263.199894][ T7491] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 56599 - 0 [ 263.205333][ T9922] SET target dimension over the limit! [ 263.214210][ T9922] SET target dimension over the limit! [ 263.219181][ T7491] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 263.219996][ T9922] SET target dimension over the limit! [ 263.266428][ T7504] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 56599 - 0 [ 263.284812][ T7504] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 263.452656][ T9929] netlink: 'syz.1.1086': attribute type 1 has an invalid length. [ 263.604876][ T9944] blkio.reset_stats is deprecated [ 263.737841][ T9955] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 263.782164][ T9962] __nla_validate_parse: 2 callbacks suppressed [ 263.782182][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'. [ 263.808480][ T9964] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1101'. [ 264.008144][ T9977] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1102'. [ 264.245846][ T9982] dummy0 speed is unknown, defaulting to 1000 [ 264.278590][ T9989] pimreg: entered allmulticast mode [ 264.313674][ T9989] pimreg: left allmulticast mode [ 264.982947][T10026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.984484][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 264.997233][ T9982] lo speed is unknown, defaulting to 1000 [ 265.171700][ T9986] netlink: 'syz.0.1103': attribute type 4 has an invalid length. [ 265.224071][T10039] siw: device registration error -23 [ 265.335042][T10048] xt_TCPMSS: Only works on TCP SYN packets [ 265.347196][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 265.350156][T10048] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 265.662873][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 265.707917][T10061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1127'. [ 265.805784][T10065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1129'. [ 266.054464][T10076] netlink: 'syz.3.1133': attribute type 29 has an invalid length. [ 266.103137][T10076] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1133'. [ 266.136214][T10081] netlink: 'syz.3.1133': attribute type 29 has an invalid length. [ 266.209470][T10090] netlink: 'syz.1.1137': attribute type 10 has an invalid length. [ 266.238166][T10090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1137'. [ 266.252203][T10090] veth0_vlan: entered allmulticast mode [ 266.277158][T10090] bridge0: port 3(veth0_vlan) entered blocking state [ 266.331993][T10090] bridge0: port 3(veth0_vlan) entered disabled state [ 266.359626][T10090] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 266.669868][T10117] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 267.001245][T10125] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 267.035988][T10125] netlink: 'syz.1.1150': attribute type 2 has an invalid length. [ 267.080939][T10137] pim6reg1: entered allmulticast mode [ 267.416379][T10152] bridge7: entered promiscuous mode [ 267.440949][T10152] bridge7: entered allmulticast mode Connection to 10.128.0.244 closed by remote host. [ 268.606201][T10210] netlink: 'syz.4.1174': attribute type 8 has an invalid length. [ 268.734297][T10217] dummy0 speed is unknown, defaulting to 1000 [ 269.380080][T10210] ------------[ cut here ]------------ [ 269.386132][T10210] refcount_t: underflow; use-after-free. [ 269.392230][T10210] WARNING: CPU: 1 PID: 10210 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 269.402097][T10210] Modules linked in: [ 269.406282][T10210] CPU: 1 UID: 0 PID: 10210 Comm: syz.4.1174 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 269.418776][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.429132][T10210] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 269.435606][T10210] Code: c0 42 e2 8b e8 f7 7c c2 fc 90 0f 0b 90 90 eb d7 e8 5b d4 fe fc c6 05 82 b8 c9 0a 01 90 48 c7 c7 20 43 e2 8b e8 d7 7c c2 fc 90 <0f> 0b 90 90 eb b7 e8 3b d4 fe fc c6 05 5f b8 c9 0a 01 90 48 c7 c7 [ 269.455709][T10210] RSP: 0018:ffffc90003faf598 EFLAGS: 00010246 [ 269.462172][T10210] RAX: 4f99054a2f7dfc00 RBX: 0000000000000003 RCX: ffff88804fe43c00 [ 269.470404][T10210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 269.478599][T10210] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 269.486974][T10210] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888033355400 [ 269.495315][T10210] R13: ffff888035538460 R14: ffff888035538478 R15: dffffc0000000000 [ 269.503428][T10210] FS: 0000000000000000(0000) GS:ffff888125d48000(0000) knlGS:0000000000000000 [ 269.512623][T10210] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.519213][T10210] CR2: 000000110c3b7b00 CR3: 000000007e958000 CR4: 00000000003526f0 [ 269.527509][T10210] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 269.536718][T10210] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.544793][T10210] Call Trace: [ 269.548080][T10210] [ 269.551009][T10210] klist_dec_and_del+0x3c7/0x3d0 [ 269.556129][T10210] klist_remove+0x1bd/0x340 [ 269.560623][T10210] ? __pfx_klist_children_put+0x10/0x10 [ 269.566200][T10210] ? __pfx_klist_remove+0x10/0x10 [ 269.571215][T10210] ? __pfx_kobject_move+0x10/0x10 [ 269.576281][T10210] ? get_device_parent+0x366/0x3a0 [ 269.581379][T10210] device_move+0x193/0x700 [ 269.585956][T10210] hci_conn_del_sysfs+0xb8/0x170 [ 269.590886][T10210] hci_conn_del+0x8ff/0xcb0 [ 269.595430][T10210] hci_conn_hash_flush+0x191/0x230 [ 269.600535][T10210] hci_dev_close_sync+0xaef/0x1330 [ 269.605695][T10210] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 269.611246][T10210] ? up_write+0x1c4/0x420 [ 269.616108][T10210] hci_unregister_dev+0x21a/0x510 [ 269.621145][T10210] vhci_release+0x80/0xd0 [ 269.625539][T10210] ? __pfx_vhci_release+0x10/0x10 [ 269.630562][T10210] __fput+0x44c/0xa70 [ 269.634834][T10210] task_work_run+0x1d1/0x260 [ 269.639433][T10210] ? __pfx_task_work_run+0x10/0x10 [ 269.644823][T10210] ? kmem_cache_free+0x18f/0x400 [ 269.649746][T10210] do_exit+0x6b5/0x22e0 [ 269.653966][T10210] ? do_raw_spin_lock+0x121/0x290 [ 269.658993][T10210] ? __pfx_do_exit+0x10/0x10 [ 269.663693][T10210] do_group_exit+0x21c/0x2d0 [ 269.668267][T10210] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.673783][T10210] get_signal+0x1286/0x1340 [ 269.678291][T10210] arch_do_signal_or_restart+0x9a/0x750 [ 269.684020][T10210] ? __x64_sys_sendmsg+0x230/0x260 [ 269.689150][T10210] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 269.695470][T10210] ? exit_to_user_mode_loop+0x40/0x110 [ 269.700947][T10210] exit_to_user_mode_loop+0x75/0x110 [ 269.706493][T10210] do_syscall_64+0x2bd/0x3b0 [ 269.711083][T10210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.717237][T10210] ? __switch_to_asm+0x39/0x70 [ 269.722051][T10210] ? clear_bhb_loop+0x60/0xb0 [ 269.726735][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.732956][T10210] RIP: 0033:0x7f85a098e929 [ 269.737487][T10210] Code: Unable to access opcode bytes at 0x7f85a098e8ff. [ 269.744564][T10210] RSP: 002b:00007f85a186d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.753079][T10210] RAX: 000000000000007c RBX: 00007f85a0bb5fa0 RCX: 00007f85a098e929 [ 269.761233][T10210] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 269.769375][T10210] RBP: 00007f85a0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 269.777543][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.785551][T10210] R13: 0000000000000000 R14: 00007f85a0bb5fa0 R15: 00007fff805b98e8 [ 269.793793][T10210] [ 269.796810][T10210] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 269.804074][T10210] CPU: 1 UID: 0 PID: 10210 Comm: syz.4.1174 Not tainted 6.16.0-rc3-syzkaller-00922-g8f240030794c #0 PREEMPT(full) [ 269.816142][T10210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.826182][T10210] Call Trace: [ 269.829565][T10210] [ 269.832485][T10210] dump_stack_lvl+0x99/0x250 [ 269.837068][T10210] ? __asan_memcpy+0x40/0x70 [ 269.841661][T10210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.846855][T10210] ? __pfx__printk+0x10/0x10 [ 269.851533][T10210] panic+0x2db/0x790 [ 269.855434][T10210] ? __pfx_panic+0x10/0x10 [ 269.860031][T10210] __warn+0x31b/0x4b0 [ 269.864008][T10210] ? refcount_warn_saturate+0x11a/0x1d0 [ 269.869550][T10210] ? refcount_warn_saturate+0x11a/0x1d0 [ 269.875176][T10210] report_bug+0x2be/0x4f0 [ 269.879503][T10210] ? refcount_warn_saturate+0x11a/0x1d0 [ 269.885042][T10210] ? refcount_warn_saturate+0x11a/0x1d0 [ 269.890581][T10210] ? refcount_warn_saturate+0x11c/0x1d0 [ 269.896116][T10210] handle_bug+0x84/0x160 [ 269.900349][T10210] exc_invalid_op+0x1a/0x50 [ 269.904842][T10210] asm_exc_invalid_op+0x1a/0x20 [ 269.909765][T10210] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 269.915919][T10210] Code: c0 42 e2 8b e8 f7 7c c2 fc 90 0f 0b 90 90 eb d7 e8 5b d4 fe fc c6 05 82 b8 c9 0a 01 90 48 c7 c7 20 43 e2 8b e8 d7 7c c2 fc 90 <0f> 0b 90 90 eb b7 e8 3b d4 fe fc c6 05 5f b8 c9 0a 01 90 48 c7 c7 [ 269.935514][T10210] RSP: 0018:ffffc90003faf598 EFLAGS: 00010246 [ 269.941574][T10210] RAX: 4f99054a2f7dfc00 RBX: 0000000000000003 RCX: ffff88804fe43c00 [ 269.949623][T10210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 269.957580][T10210] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 269.965537][T10210] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff888033355400 [ 269.973497][T10210] R13: ffff888035538460 R14: ffff888035538478 R15: dffffc0000000000 [ 269.981475][T10210] ? refcount_warn_saturate+0x119/0x1d0 [ 269.987199][T10210] klist_dec_and_del+0x3c7/0x3d0 [ 269.992132][T10210] klist_remove+0x1bd/0x340 [ 269.996621][T10210] ? __pfx_klist_children_put+0x10/0x10 [ 270.002163][T10210] ? __pfx_klist_remove+0x10/0x10 [ 270.007181][T10210] ? __pfx_kobject_move+0x10/0x10 [ 270.012193][T10210] ? get_device_parent+0x366/0x3a0 [ 270.017297][T10210] device_move+0x193/0x700 [ 270.021706][T10210] hci_conn_del_sysfs+0xb8/0x170 [ 270.026639][T10210] hci_conn_del+0x8ff/0xcb0 [ 270.031133][T10210] hci_conn_hash_flush+0x191/0x230 [ 270.036238][T10210] hci_dev_close_sync+0xaef/0x1330 [ 270.041345][T10210] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 270.046969][T10210] ? up_write+0x1c4/0x420 [ 270.051292][T10210] hci_unregister_dev+0x21a/0x510 [ 270.056308][T10210] vhci_release+0x80/0xd0 [ 270.060626][T10210] ? __pfx_vhci_release+0x10/0x10 [ 270.065636][T10210] __fput+0x44c/0xa70 [ 270.069618][T10210] task_work_run+0x1d1/0x260 [ 270.074201][T10210] ? __pfx_task_work_run+0x10/0x10 [ 270.079304][T10210] ? kmem_cache_free+0x18f/0x400 [ 270.084320][T10210] do_exit+0x6b5/0x22e0 [ 270.088470][T10210] ? do_raw_spin_lock+0x121/0x290 [ 270.093487][T10210] ? __pfx_do_exit+0x10/0x10 [ 270.098077][T10210] do_group_exit+0x21c/0x2d0 [ 270.102654][T10210] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.107843][T10210] get_signal+0x1286/0x1340 [ 270.112357][T10210] arch_do_signal_or_restart+0x9a/0x750 [ 270.117905][T10210] ? __x64_sys_sendmsg+0x230/0x260 [ 270.123008][T10210] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 270.129165][T10210] ? exit_to_user_mode_loop+0x40/0x110 [ 270.134614][T10210] exit_to_user_mode_loop+0x75/0x110 [ 270.139892][T10210] do_syscall_64+0x2bd/0x3b0 [ 270.144472][T10210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.150523][T10210] ? __switch_to_asm+0x39/0x70 [ 270.155272][T10210] ? clear_bhb_loop+0x60/0xb0 [ 270.159939][T10210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.165816][T10210] RIP: 0033:0x7f85a098e929 [ 270.170215][T10210] Code: Unable to access opcode bytes at 0x7f85a098e8ff. [ 270.177217][T10210] RSP: 002b:00007f85a186d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.185619][T10210] RAX: 000000000000007c RBX: 00007f85a0bb5fa0 RCX: 00007f85a098e929 [ 270.193577][T10210] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 270.201535][T10210] RBP: 00007f85a0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 270.209580][T10210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.217535][T10210] R13: 0000000000000000 R14: 00007f85a0bb5fa0 R15: 00007fff805b98e8 [ 270.225508][T10210] [ 270.228755][T10210] Kernel Offset: disabled [ 270.233067][T10210] Rebooting in 86400 seconds..