last executing test programs: 48.597176177s ago: executing program 3 (id=1132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x3000000}, 0x0) 48.395982494s ago: executing program 3 (id=1133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x11, 0x4, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x1ffffe, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x858}, 0x48806) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d800800"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r5, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000280)="441a26067cdb063d23ca103ec2f8eaef0432d95232846015c3695e57720c39ceadaf79a42787136356c6bba47244e5e2dc1e4005b61ab46bd3c1bf32230b0de57a066672aba1dd8449cc4a1ff1970581e99202cc1dec99581f86996aa30af135cc49d9f3d199f4b70ce04531e2c6b6a555bc5fa13f2af5e6c63fcd28", &(0x7f0000000440)=""/240}, 0x20) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r10, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x1800000, 0x200000006c832, 0xffffffffffffffff, 0x0) 46.383712647s ago: executing program 3 (id=1157): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 46.222961841s ago: executing program 3 (id=1159): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a00000800000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000480)=ANY=[@ANYBLOB="b000014185cb74b7a4d7ffffffffffff08021100000010000000c3000000"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r9, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) 45.747967957s ago: executing program 1 (id=1162): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000006000008004a000000000008000300"], 0x30}}, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x87000040}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 45.28680542s ago: executing program 0 (id=1165): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000001c0)="b9e403c6631e394901a05dc7cf1c8cef782da475", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, 0xffffffffffffffff, 0x0) (async) unshare(0x10000c00) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x5) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="05000200000000000200"/28], 0x50) r4 = socket$alg(0x26, 0x5, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x8000}, 0x2e) (async) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300020400000000000000000000000200010000000000000009007fffffff8053a0240e9b9fa0d1ce4a5bd0e6b2ecc89cedae40061762555adc5dafcf34f019088892940e7d2d74b73d4a93402a8552213a44fdac9231ddf92b3599327178e80e8da3901a3dc44b22bef7a20b697f9f9506119006bd32cd11bc0e4a2ad680fd792a3335436742c80958c1e4a31288bb6f71436e533c39cc06fe3f7f73551216a79f8cc43bdf1166c1d686cbf1ebd4b54d26c501ebdcdbfbdd7403ec8cddf9e5e8df24d85c5949f83dbafa661b98ad221bbe8747ee7a0b422b45"], 0x20}, 0x1, 0x7}, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) unshare(0xc000000) (async) socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, 0x0, &(0x7f00000002c0)) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) sendmmsg$inet(r9, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x2400c040) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x180, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ip={@local, @empty, 0xffffff00, 0xffffff00, 'veth1_to_team\x00', 'veth1_macvtap\x00', {0xff}, {}, 0x2f, 0x2, 0x40}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [0xff, 0xffffff00, 0xff, 0xffffff00], @ipv6=@private0, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv6=@remote, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], 0x200, 0x0, 0x88, 0x4e24, 0x4e24, 0x4e21, 0x4e23, 0x80, 0x310}, 0x1c1, 0x80}}, @common=@icmp={{0x28}, {0x8, '-k'}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0xffffff00, 0x0, 'gre0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5e, 0x0, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x1, 0x6, 0x0, 0x5, 0x6], 0x2, 0x3}, {0x1, [0x7, 0x4, 0x1, 0xdaf71a8b8128ae96, 0x2, 0x3], 0x3, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) (rerun: 32) 45.036403132s ago: executing program 4 (id=1167): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000400000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff0000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000000001013500000200730001800000040000000700000000000000000000000000000000000000000004d33c00000002"], 0x1fc}}, 0x0) 45.014850176s ago: executing program 4 (id=1168): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x691, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x683, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000007c0)=ANY=[], 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0xba01}, 0x810) 44.922839331s ago: executing program 0 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c000c007b4b0000000060000c00010002000000000000000c000100bf000000000400000c00010002000000ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0) 44.836320921s ago: executing program 0 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400000000efffffffffffffff", @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0) 44.83571067s ago: executing program 4 (id=1171): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$unix(0x1, 0x5, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 44.73555638s ago: executing program 1 (id=1173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400800fff000900020073797a31000000000500010007"], 0x58}}, 0x0) 44.73029106s ago: executing program 3 (id=1174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010100000000000000000000a8279b2f73194d7e5913cf6c497dcbf19f5b9cfcee9622c1b7e800010a000200000000040300000005000100010000000800044000000008"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, 0x1c) 44.579625074s ago: executing program 1 (id=1175): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, 0x9, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xd24f4d577c661d56}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000250000000500000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x7, 0x94, 0x6, {{0x2c, 0x4, 0x0, 0x14, 0xb0, 0x66, 0x0, 0x34, 0x4, 0x0, @multicast2, @empty, {[@rr={0x7, 0x17, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1a}]}, @cipso={0x86, 0x17, 0x3, [{0x1, 0x11, "62add4345aba9b179a19dc4eddb1fe"}]}, @timestamp={0x44, 0x28, 0x7c, 0x0, 0x4, [0xab, 0x8001, 0x5, 0x5, 0x80000000, 0xf5ce, 0x3, 0x8000, 0x0]}, @ssrr={0x89, 0xf, 0x84, [@dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @cipso={0x86, 0x26, 0x2, [{0x1, 0x5, "eafdea"}, {0x7, 0xa, "96f760917eec67bb"}, {0x6, 0x8, "29c9b8063420"}, {0x2, 0x9, "2cc78f8d6dfdf1"}]}, @timestamp_addr={0x44, 0xc, 0x5a, 0x1, 0x3, [{@multicast1, 0x6}]}, @ra={0x94, 0x4}, @noop]}}}}}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x2, 0x80000000, 0x2000, r2, 0x67, '\x00', r3, r4, 0x1, 0x5, 0x2, 0x1}, 0x50) 44.578346541s ago: executing program 0 (id=1176): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cf3af200d87f05002c385aa3d4910000000000000000056a", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000380)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f00000017c0)=""/94, 0x5e}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f00000015c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/100, 0x64}], 0x8, &(0x7f0000001740)=""/83, 0x53}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x10000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 44.465974504s ago: executing program 4 (id=1177): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) 44.465536679s ago: executing program 2 (id=1178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x2000, 0x0, @empty}, 0x1c) 44.399086361s ago: executing program 2 (id=1179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 44.098625197s ago: executing program 1 (id=1180): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x18, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 43.992953661s ago: executing program 3 (id=1181): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711215000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100001040000000000003fffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r0], 0x54}}, 0x20000000) 43.875661777s ago: executing program 4 (id=1182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cf3af200d87f05002c385aa3d4910000000000000000056a", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000380)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000140)=""/27, 0x1b}, {&(0x7f0000000200)=""/244, 0xf4}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f00000017c0)=""/94, 0x5e}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f00000015c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/100, 0x64}], 0x8, &(0x7f0000001740)=""/83, 0x53}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getpeername$packet(r4, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.numa_stat\x00', 0x7a44, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000080)=ANY=[@ANYBLOB="cc020000210a0108fdffffff1000000000000000630003"], 0x2cc}, 0x1, 0x0, 0x0, 0x44040}, 0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aab7aaaaaaaa0180c206000000000000bbc61414aa00004e2200000000000000000000000000b0fd74c2ee7f85cb232ba63719c6967380b8bde7b7412ba1c57efc0233456a8b24bb05e15d577c0e390783092d1ab1f0f82eb637107d66a5e297b7cbee4a599d2bf678912d00e1541ee93b25c3cb498858f37c5c04a9dc119778caeb07e35169868e4c59dd7ca738a9819adb3e3bac9222473cef795d753f096a963356a668ae690919d0428851", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) 43.759591149s ago: executing program 1 (id=1183): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x500, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e1d, @loopback}}]}, 0x50}}, 0x0) 43.758806142s ago: executing program 2 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000840000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000000205"], 0xc8}}, 0x0) 43.656645435s ago: executing program 2 (id=1185): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000040000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c00"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 43.588103587s ago: executing program 1 (id=1186): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0xfffffffffffffd49, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r0, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 43.519078639s ago: executing program 0 (id=1187): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @random="9633c066902f", @loopback, @local, @loopback}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000e802010300000000000000000a000004080001000200002e"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) 43.292029811s ago: executing program 2 (id=1188): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07ef28bd7000ffdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) (fail_nth: 6) 43.152597349s ago: executing program 0 (id=1189): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000020000000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2000010000090000140012800b000100697008000000000004000280e1f74a633fcba5b7eebd66f0c99e23e0463dc755439b824c43f98a9f7ee323cd0a8a829c031da6f9296ccea14b48cd80e6b3cf1fb15124606bde14b55807b74305d6709e71bfa31851d4c873ab8d937791cba8c1d35f82c698b34efb63"], 0x34}}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000080041401002dbd7000fedbac25080001004a93d060c66852b9624f06b80100000008000000efffffff07800100"], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000003c0)=@xdp={0x2c, 0x4, 0x0, 0x37}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)}, {&(0x7f0000000440)="2e3e41b69999fa84ef431c7818db8462796f616840477f6552935a631a8349c87c5112ef00294a6d63af98845c6b88b745383ace7f035692d63581327a01dbfb07552db31c5d7350e7efe8c03dd54d30223633cce2ed69b6b2643c6ac475464ccdb677fbbb406c69f638bf96c6422560e6a91f001c607bafb51d774f40bec0488d7cf45af3a57a7bd8435d6b22e4f2f6be5f51ca2c1ce70902c8fb35d3", 0x9d}, {&(0x7f00000001c0)="a9d0d2775cc5d7587661af847a8a7b9be4d6954a6cb9526e", 0x18}, {&(0x7f0000000240)="cbfe4a32297025ae6e394a9e370c5b4f", 0x10}], 0x4, &(0x7f00000008c0)=[{0x70, 0x10a, 0x9, "18bf32f00994ad537ffa693c11958a9ed7cbd1c2d8c6acaf973261793ccce85433f4c25ce7bad5f81f4c9390dfb13c4f7a2482e455b2949382f1e604073c860d849d38ca75d57bebe03cc1035781c113f1cf2ddb67bffe89a86862960f36"}, {0xb0, 0x10e, 0x0, "4eaa944e9bff55b3f8de96ec958ef00f44eef2236717f946548df5dcc6023cf9e9e9734a1192bcb809dbb79ef0773d4469da0ff1b28a14cb149095ce52f062dfa8892d59eb6645a12a695df36953acfc1fe4ccec21dc148f5d48c742d31e5566d33a1c5d72ac10f4521fc8829385d90dc99613747595c6b950c1c5ee501f416a594ac75ee8909a99abeb17546781977523fbc42d525c17a8c28ff852485d"}, {0xf0, 0x88, 0xd83, "e4422ef5193293afc244c9d89075476942827cdefe845fa50d07cf44791fdcb695bb6a806dac6d47f6a38d53da40b62b978640418d8a4847acfa57f1c0e7ab630ca904cb34d17206502f4ac374b6fdd314186e50ff35cd821a985839bd4e0b0f3f5b36ad66626211054bbad7232fcd114165aa2c1f4d86a58bbc619be98970050db74b65b6694b52b39191f80f4b633ed1213a40b9967bca101afcf7777bac14f13adba8a717e258ad5c42f91cd7ac9cd8f4444eb3514d97e849942cfc7f46090518204f789c0606fe4bdc63c3598e8a8cf7d9d2a6c44192cfb4e2febdf1"}, {0x50, 0x116, 0x5d9a, "4fb6233a581328c924f11755b8d2ccd8f0eb1ffa1a363a539fb09c69686d5e15f02b0c1db16cc5479ee9050b0c881c224ff224cbe4cdfe17c2d419aa12c759"}, {0x70, 0x29, 0x81, "dc814041c55f3690e0e27eaf2011289076851a77b50a7f1a9c6da057584b2e3aaf18e5bae99b3f87c0acdbc51ee7319646bee680ad6db21068f7f9302fcdb3f6f3f1b688095147b1b167f4f93eae11338aadc8436f1f87c23a7ae3"}, {0x50, 0x113, 0x824, "a6901fc3e921f912d94745f198302c413a08f279f652ac31f3adb2f5f1fa6d993166e55493a24370ffff42da81897422d008551a38621051189008946c9e10"}, {0x28, 0x110, 0x1ae, "4d86deab7b935529b141d2364a04056ab81316"}], 0x348}}], 0x2, 0x20044000) listen(0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x6c000600) 40.788169834s ago: executing program 2 (id=1190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c000000000201040000000000000000020000052400028014840180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000300001"], 0x8c}}, 0x0) 37.166337218s ago: executing program 4 (id=1191): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_user\x00', 0x0, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff7ffff, 0x10000, @value=r2}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) unshare(0x62040200) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0xdc, 0x0, 0xe, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x88}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x850b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc080}, 0x8040) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x3f8}, 0x1c) shutdown(r9, 0x2) 0s ago: executing program 32 (id=1189): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001000020000000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2000010000090000140012800b000100697008000000000004000280e1f74a633fcba5b7eebd66f0c99e23e0463dc755439b824c43f98a9f7ee323cd0a8a829c031da6f9296ccea14b48cd80e6b3cf1fb15124606bde14b55807b74305d6709e71bfa31851d4c873ab8d937791cba8c1d35f82c698b34efb63"], 0x34}}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000080041401002dbd7000fedbac25080001004a93d060c66852b9624f06b80100000008000000efffffff07800100"], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000003c0)=@xdp={0x2c, 0x4, 0x0, 0x37}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)}, {&(0x7f0000000440)="2e3e41b69999fa84ef431c7818db8462796f616840477f6552935a631a8349c87c5112ef00294a6d63af98845c6b88b745383ace7f035692d63581327a01dbfb07552db31c5d7350e7efe8c03dd54d30223633cce2ed69b6b2643c6ac475464ccdb677fbbb406c69f638bf96c6422560e6a91f001c607bafb51d774f40bec0488d7cf45af3a57a7bd8435d6b22e4f2f6be5f51ca2c1ce70902c8fb35d3", 0x9d}, {&(0x7f00000001c0)="a9d0d2775cc5d7587661af847a8a7b9be4d6954a6cb9526e", 0x18}, {&(0x7f0000000240)="cbfe4a32297025ae6e394a9e370c5b4f", 0x10}], 0x4, &(0x7f00000008c0)=[{0x70, 0x10a, 0x9, "18bf32f00994ad537ffa693c11958a9ed7cbd1c2d8c6acaf973261793ccce85433f4c25ce7bad5f81f4c9390dfb13c4f7a2482e455b2949382f1e604073c860d849d38ca75d57bebe03cc1035781c113f1cf2ddb67bffe89a86862960f36"}, {0xb0, 0x10e, 0x0, "4eaa944e9bff55b3f8de96ec958ef00f44eef2236717f946548df5dcc6023cf9e9e9734a1192bcb809dbb79ef0773d4469da0ff1b28a14cb149095ce52f062dfa8892d59eb6645a12a695df36953acfc1fe4ccec21dc148f5d48c742d31e5566d33a1c5d72ac10f4521fc8829385d90dc99613747595c6b950c1c5ee501f416a594ac75ee8909a99abeb17546781977523fbc42d525c17a8c28ff852485d"}, {0xf0, 0x88, 0xd83, "e4422ef5193293afc244c9d89075476942827cdefe845fa50d07cf44791fdcb695bb6a806dac6d47f6a38d53da40b62b978640418d8a4847acfa57f1c0e7ab630ca904cb34d17206502f4ac374b6fdd314186e50ff35cd821a985839bd4e0b0f3f5b36ad66626211054bbad7232fcd114165aa2c1f4d86a58bbc619be98970050db74b65b6694b52b39191f80f4b633ed1213a40b9967bca101afcf7777bac14f13adba8a717e258ad5c42f91cd7ac9cd8f4444eb3514d97e849942cfc7f46090518204f789c0606fe4bdc63c3598e8a8cf7d9d2a6c44192cfb4e2febdf1"}, {0x50, 0x116, 0x5d9a, "4fb6233a581328c924f11755b8d2ccd8f0eb1ffa1a363a539fb09c69686d5e15f02b0c1db16cc5479ee9050b0c881c224ff224cbe4cdfe17c2d419aa12c759"}, {0x70, 0x29, 0x81, "dc814041c55f3690e0e27eaf2011289076851a77b50a7f1a9c6da057584b2e3aaf18e5bae99b3f87c0acdbc51ee7319646bee680ad6db21068f7f9302fcdb3f6f3f1b688095147b1b167f4f93eae11338aadc8436f1f87c23a7ae3"}, {0x50, 0x113, 0x824, "a6901fc3e921f912d94745f198302c413a08f279f652ac31f3adb2f5f1fa6d993166e55493a24370ffff42da81897422d008551a38621051189008946c9e10"}, {0x28, 0x110, 0x1ae, "4d86deab7b935529b141d2364a04056ab81316"}], 0x348}}], 0x2, 0x20044000) listen(0xffffffffffffffff, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) unshare(0x6c000600) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. [ 67.779911][ T5834] cgroup: Unknown subsys name 'net' [ 67.887988][ T5834] cgroup: Unknown subsys name 'cpuset' [ 67.896993][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.247033][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.335776][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.342206][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.718788][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.739171][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.749757][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.757151][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.765775][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.773389][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.781120][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.789595][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.797406][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.804821][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.812786][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.820288][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.824209][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.829520][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.844734][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.852610][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.860197][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.872114][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.873230][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.881572][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.894616][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.903977][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.914949][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.915424][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.938760][ T5166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.509983][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 72.600693][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 72.728008][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 72.780566][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 72.792704][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 72.915919][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.923013][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.930675][ T5856] bridge_slave_0: entered allmulticast mode [ 72.938706][ T5856] bridge_slave_0: entered promiscuous mode [ 72.972730][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.980187][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.987369][ T5860] bridge_slave_0: entered allmulticast mode [ 72.994277][ T5860] bridge_slave_0: entered promiscuous mode [ 73.002199][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.009541][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.017393][ T5856] bridge_slave_1: entered allmulticast mode [ 73.024320][ T5856] bridge_slave_1: entered promiscuous mode [ 73.046443][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.053579][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.060922][ T5860] bridge_slave_1: entered allmulticast mode [ 73.069275][ T5860] bridge_slave_1: entered promiscuous mode [ 73.159796][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.167049][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.174325][ T5844] bridge_slave_0: entered allmulticast mode [ 73.181757][ T5844] bridge_slave_0: entered promiscuous mode [ 73.232976][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.246918][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.256745][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.263879][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.273207][ T5844] bridge_slave_1: entered allmulticast mode [ 73.280392][ T5844] bridge_slave_1: entered promiscuous mode [ 73.313063][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.320343][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.327874][ T5847] bridge_slave_0: entered allmulticast mode [ 73.335752][ T5847] bridge_slave_0: entered promiscuous mode [ 73.342675][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.350529][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.357735][ T5845] bridge_slave_0: entered allmulticast mode [ 73.364783][ T5845] bridge_slave_0: entered promiscuous mode [ 73.374251][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.397329][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.433599][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.442935][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.450517][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.457967][ T5847] bridge_slave_1: entered allmulticast mode [ 73.465518][ T5847] bridge_slave_1: entered promiscuous mode [ 73.471971][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.479195][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.486821][ T5845] bridge_slave_1: entered allmulticast mode [ 73.493735][ T5845] bridge_slave_1: entered promiscuous mode [ 73.515757][ T5860] team0: Port device team_slave_0 added [ 73.523500][ T5860] team0: Port device team_slave_1 added [ 73.553906][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.619868][ T5856] team0: Port device team_slave_0 added [ 73.642995][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.657222][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.670366][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.680499][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.687899][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.714018][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.731510][ T5856] team0: Port device team_slave_1 added [ 73.752542][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.784767][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.791723][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.820064][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.846271][ T5844] team0: Port device team_slave_0 added [ 73.876087][ T5851] Bluetooth: hci2: command tx timeout [ 73.899081][ T5845] team0: Port device team_slave_0 added [ 73.913532][ T5844] team0: Port device team_slave_1 added [ 73.921003][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.928322][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.954759][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.958236][ T5851] Bluetooth: hci0: command tx timeout [ 73.965548][ T5166] Bluetooth: hci3: command tx timeout [ 73.970882][ T51] Bluetooth: hci4: command tx timeout [ 73.978936][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.989585][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.015903][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.029528][ T5847] team0: Port device team_slave_0 added [ 74.038593][ T5847] team0: Port device team_slave_1 added [ 74.038873][ T51] Bluetooth: hci1: command tx timeout [ 74.046235][ T5845] team0: Port device team_slave_1 added [ 74.084417][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.091451][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.117545][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.174031][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.181352][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.207708][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.232878][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.240066][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.266078][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.289382][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.297781][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.323987][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.366088][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.373055][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.399458][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.431790][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.439156][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.465577][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.506293][ T5856] hsr_slave_0: entered promiscuous mode [ 74.512719][ T5856] hsr_slave_1: entered promiscuous mode [ 74.542655][ T5860] hsr_slave_0: entered promiscuous mode [ 74.550937][ T5860] hsr_slave_1: entered promiscuous mode [ 74.557229][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.565319][ T5860] Cannot create hsr debugfs directory [ 74.629431][ T5844] hsr_slave_0: entered promiscuous mode [ 74.636075][ T5844] hsr_slave_1: entered promiscuous mode [ 74.642348][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.650030][ T5844] Cannot create hsr debugfs directory [ 74.661154][ T5847] hsr_slave_0: entered promiscuous mode [ 74.667578][ T5847] hsr_slave_1: entered promiscuous mode [ 74.673519][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.681188][ T5847] Cannot create hsr debugfs directory [ 74.713207][ T5845] hsr_slave_0: entered promiscuous mode [ 74.719673][ T5845] hsr_slave_1: entered promiscuous mode [ 74.726448][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.734009][ T5845] Cannot create hsr debugfs directory [ 75.311541][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.327635][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.347038][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.366556][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.417820][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.431640][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.443239][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.468175][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.542881][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.556041][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.568555][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.598216][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.677594][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.692710][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.703965][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.736804][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.841430][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.854328][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.874917][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.904671][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.943049][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.955102][ T51] Bluetooth: hci2: command tx timeout [ 76.025783][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.034884][ T51] Bluetooth: hci4: command tx timeout [ 76.040299][ T51] Bluetooth: hci3: command tx timeout [ 76.045416][ T5851] Bluetooth: hci0: command tx timeout [ 76.064381][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.080334][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.125316][ T5166] Bluetooth: hci1: command tx timeout [ 76.151146][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.158469][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.169736][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.176894][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.192758][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.211905][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.233677][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.240856][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.261946][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.269091][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.291898][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.306613][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.313745][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.360426][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.367585][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.403069][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.438090][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.478735][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.486270][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.539407][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.574475][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.581640][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.613705][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.620913][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.668537][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.675740][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.995481][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.030826][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.220199][ T5844] veth0_vlan: entered promiscuous mode [ 77.270650][ T5844] veth1_vlan: entered promiscuous mode [ 77.349483][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.442846][ T5844] veth0_macvtap: entered promiscuous mode [ 77.455298][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.480976][ T5844] veth1_macvtap: entered promiscuous mode [ 77.498982][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.591628][ T5860] veth0_vlan: entered promiscuous mode [ 77.612983][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.641754][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.666008][ T1323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.690456][ T5845] veth0_vlan: entered promiscuous mode [ 77.696979][ T1323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.706436][ T1323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.721029][ T5860] veth1_vlan: entered promiscuous mode [ 77.741413][ T1323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.772914][ T5845] veth1_vlan: entered promiscuous mode [ 77.780554][ T5847] veth0_vlan: entered promiscuous mode [ 77.836900][ T5847] veth1_vlan: entered promiscuous mode [ 77.872918][ T5860] veth0_macvtap: entered promiscuous mode [ 77.932536][ T5856] veth0_vlan: entered promiscuous mode [ 77.942374][ T5860] veth1_macvtap: entered promiscuous mode [ 77.950838][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.966712][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.990683][ T5856] veth1_vlan: entered promiscuous mode [ 78.015574][ T5845] veth0_macvtap: entered promiscuous mode [ 78.035237][ T5166] Bluetooth: hci2: command tx timeout [ 78.053133][ T5847] veth0_macvtap: entered promiscuous mode [ 78.061893][ T5845] veth1_macvtap: entered promiscuous mode [ 78.083119][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.094307][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.107893][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.115907][ T5847] veth1_macvtap: entered promiscuous mode [ 78.116224][ T5166] Bluetooth: hci0: command tx timeout [ 78.127760][ T5166] Bluetooth: hci3: command tx timeout [ 78.130559][ T5851] Bluetooth: hci4: command tx timeout [ 78.152332][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.178158][ T5856] veth0_macvtap: entered promiscuous mode [ 78.198776][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.204769][ T5851] Bluetooth: hci1: command tx timeout [ 78.221076][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.235046][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.258629][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.270112][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.281657][ T5856] veth1_macvtap: entered promiscuous mode [ 78.295849][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.312171][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.335962][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.349539][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.419684][ T1311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.429660][ T1311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.460655][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.481200][ T1311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.490160][ T1311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.516259][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 78.525367][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.538928][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.548145][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.569043][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.593675][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.631129][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.660685][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.714698][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.764092][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.773125][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.793004][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.793060][ T5971] Zero length message leads to an empty skb [ 78.802089][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.824767][ T44] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.883575][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.909320][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.988973][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.024679][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.099324][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.120350][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.141496][ T5974] bridge_slave_0: left allmulticast mode [ 79.147490][ T5974] bridge_slave_0: left promiscuous mode [ 79.153967][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.174331][ T5974] bridge_slave_1: left allmulticast mode [ 79.180313][ T5974] bridge_slave_1: left promiscuous mode [ 79.189894][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.203033][ T5974] bond0: (slave bond_slave_0): Releasing backup interface [ 79.213426][ T5974] bond0: (slave bond_slave_1): Releasing backup interface [ 79.233989][ T5974] team0: Port device team_slave_0 removed [ 79.247352][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 79.250612][ T5974] team0: Port device team_slave_1 removed [ 79.262393][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.271006][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.279975][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.288631][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.330992][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.355285][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.371249][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.380111][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.480537][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.518005][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.695514][ T5985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.951539][ T5978] syz.2.3 (5978) used greatest stack depth: 19144 bytes left [ 79.989255][ T5995] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 80.114854][ T5851] Bluetooth: hci2: command tx timeout [ 80.167120][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.195555][ T5851] Bluetooth: hci4: command tx timeout [ 80.200984][ T5851] Bluetooth: hci3: command tx timeout [ 80.206523][ T5851] Bluetooth: hci0: command tx timeout [ 80.276458][ T5166] Bluetooth: hci1: command tx timeout [ 80.470273][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 80.504342][ T6009] vxcan1: entered allmulticast mode [ 80.544111][ T6009] vxcan1: left allmulticast mode [ 80.561867][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 80.580965][ T6016] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 80.583481][ T6010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11'. [ 80.852698][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 81.083091][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 81.108711][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 81.281191][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 81.356760][ T6036] sctp: [Deprecated]: syz.0.18 (pid 6036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.356760][ T6036] Use struct sctp_sack_info instead [ 81.392232][ T6040] bridge_slave_0: left allmulticast mode [ 81.401676][ T6040] bridge_slave_0: left promiscuous mode [ 81.413509][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 81.418744][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.450111][ T6040] bridge_slave_1: left allmulticast mode [ 81.463183][ T6040] bridge_slave_1: left promiscuous mode [ 81.469092][ T6045] IPVS: set_ctl: invalid protocol: 8345 172.30.1.4:20003 [ 81.469709][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.486690][ T6045] Cannot find add_set index 3 as target [ 81.503880][ T6040] bond0: (slave bond_slave_0): Releasing backup interface [ 81.514826][ T6040] bond0: (slave bond_slave_1): Releasing backup interface [ 81.532816][ T6040] team0: Port device team_slave_0 removed [ 81.543486][ T6040] team0: Port device team_slave_1 removed [ 81.553810][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.566036][ T6049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.591736][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.615052][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.625013][ T6040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.689303][ T6048] 8021q: VLANs not supported on ipvlan1 [ 82.184438][ T6056] bridge_slave_0: left allmulticast mode [ 82.217888][ T6056] bridge_slave_0: left promiscuous mode [ 82.233850][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.243663][ T9] cfg80211: failed to load regulatory.db [ 82.286108][ T6056] bridge_slave_1: left allmulticast mode [ 82.335170][ T6056] bridge_slave_1: left promiscuous mode [ 82.340984][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.474050][ T6056] bond0: (slave bond_slave_0): Releasing backup interface [ 82.492003][ T6056] bond0: (slave bond_slave_1): Releasing backup interface [ 82.555130][ T6056] team0: Port device team_slave_0 removed [ 82.599604][ T6056] team0: Port device team_slave_1 removed [ 82.616750][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.624286][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.633780][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.645775][ T6056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.726879][ T6075] bridge_slave_0: left allmulticast mode [ 82.732578][ T6075] bridge_slave_0: left promiscuous mode [ 82.759010][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.780671][ T6075] bridge_slave_1: left allmulticast mode [ 82.787377][ T6075] bridge_slave_1: left promiscuous mode [ 82.793241][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.810417][ T6075] bond0: (slave bond_slave_0): Releasing backup interface [ 82.832322][ T6075] bond0: (slave bond_slave_1): Releasing backup interface [ 82.871755][ T6075] team0: Port device team_slave_0 removed [ 82.899615][ T6075] team0: Port device team_slave_1 removed [ 82.916465][ T6083] unsupported nlmsg_type 40 [ 82.928983][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.946921][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.968083][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.984768][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.017290][ T6085] netlink: 'syz.4.29': attribute type 1 has an invalid length. [ 83.030955][ T6085] sctp: [Deprecated]: syz.4.29 (pid 6085) Use of int in max_burst socket option deprecated. [ 83.030955][ T6085] Use struct sctp_assoc_value instead [ 83.604121][ T6095] syzkaller0: entered promiscuous mode [ 83.645826][ T6095] syzkaller0: entered allmulticast mode [ 83.684192][ T6094] __nla_validate_parse: 5 callbacks suppressed [ 83.684209][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33'. [ 84.261232][ T6115] sctp: [Deprecated]: syz.4.37 (pid 6115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.261232][ T6115] Use struct sctp_sack_info instead [ 85.114916][ T6122] netlink: 'syz.4.40': attribute type 1 has an invalid length. [ 85.184287][ T6126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.41'. [ 85.189801][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 85.275415][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 85.570441][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 85.639256][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 86.129759][ T6160] sctp: [Deprecated]: syz.3.51 (pid 6160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.129759][ T6160] Use struct sctp_sack_info instead [ 86.191006][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 86.804698][ T5982] IPVS: starting estimator thread 0... [ 86.895659][ T6182] IPVS: using max 27 ests per chain, 64800 per kthread [ 87.201329][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 87.707377][ T6192] bond0 (unregistering): Released all slaves [ 88.326747][ T6261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.68'. [ 88.861790][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 89.137945][ T6283] x_tables: ip_tables: REJECT target: only valid in filter table, not @ [ 89.218161][ T6290] netlink: 64 bytes leftover after parsing attributes in process `syz.3.74'. [ 89.528954][ T6302] warning: `syz.4.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.933199][ T6315] FAULT_INJECTION: forcing a failure. [ 89.933199][ T6315] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.973237][ T6317] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 89.982196][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.4.85 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 89.982227][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.982244][ T6315] Call Trace: [ 89.982251][ T6315] [ 89.982258][ T6315] dump_stack_lvl+0x189/0x250 [ 89.982288][ T6315] ? __pfx____ratelimit+0x10/0x10 [ 89.982309][ T6315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.982328][ T6315] ? __pfx__printk+0x10/0x10 [ 89.982349][ T6315] ? __might_fault+0xb0/0x130 [ 89.982384][ T6315] should_fail_ex+0x414/0x560 [ 89.982412][ T6315] _copy_from_user+0x2d/0xb0 [ 89.982439][ T6315] __sys_bpf+0x1ed/0x860 [ 89.982464][ T6315] ? __pfx___sys_bpf+0x10/0x10 [ 89.982497][ T6315] ? ksys_write+0x22a/0x250 [ 89.982517][ T6315] ? __pfx_ksys_write+0x10/0x10 [ 89.982532][ T6315] ? rcu_is_watching+0x15/0xb0 [ 89.982559][ T6315] __x64_sys_bpf+0x7c/0x90 [ 89.982581][ T6315] do_syscall_64+0xfa/0x3b0 [ 89.982600][ T6315] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.982619][ T6315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.982635][ T6315] ? clear_bhb_loop+0x60/0xb0 [ 89.982656][ T6315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.982671][ T6315] RIP: 0033:0x7fe7ba78e929 [ 89.982692][ T6315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.982705][ T6315] RSP: 002b:00007fe7bb68b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.982728][ T6315] RAX: ffffffffffffffda RBX: 00007fe7ba9b5fa0 RCX: 00007fe7ba78e929 [ 89.982740][ T6315] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 89.982751][ T6315] RBP: 00007fe7bb68b090 R08: 0000000000000000 R09: 0000000000000000 [ 89.982761][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.982771][ T6315] R13: 0000000000000000 R14: 00007fe7ba9b5fa0 R15: 00007ffc9d86b948 [ 89.982800][ T6315] [ 90.176268][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 90.228831][ T6317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.86'. [ 90.976202][ T6332] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 90.998845][ T6332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.92'. [ 91.014382][ T6341] netlink: 10 bytes leftover after parsing attributes in process `syz.2.95'. [ 91.102567][ T6332] batman_adv: batadv0: Adding interface: virt_wifi0 [ 91.140173][ T6332] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.220404][ T6332] batman_adv: batadv0: Interface activated: virt_wifi0 [ 91.296504][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 92.342523][ T6378] netlink: 44 bytes leftover after parsing attributes in process `syz.1.110'. [ 92.628018][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 92.819212][ T6395] netlink: 'syz.4.117': attribute type 29 has an invalid length. [ 92.860431][ T6395] netlink: 'syz.4.117': attribute type 29 has an invalid length. [ 92.913032][ T6395] netlink: 500 bytes leftover after parsing attributes in process `syz.4.117'. [ 92.959840][ T6395] unsupported nla_type 58 [ 93.036244][ T6410] set match dimension is over the limit! [ 93.223347][ T6416] Cannot find set identified by id 0 to match [ 93.681175][ T6435] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 93.954924][ T6449] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 94.070599][ T6455] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 94.072093][ T6456] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 94.093849][ T6455] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 94.116094][ T6456] __nla_validate_parse: 1 callbacks suppressed [ 94.116109][ T6456] netlink: 224 bytes leftover after parsing attributes in process `syz.0.138'. [ 94.216743][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 94.411315][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 94.483929][ T6467] batadv0: entered promiscuous mode [ 94.494806][ T6467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.503295][ T6467] batadv0: left promiscuous mode [ 94.946388][ T6491] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 95.064028][ T6497] netlink: 'syz.3.151': attribute type 1 has an invalid length. [ 95.092283][ T6497] netlink: 'syz.3.151': attribute type 2 has an invalid length. [ 95.128419][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 95.153050][ T6501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.191038][ T6501] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.153'. [ 95.389291][ T6509] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 95.407651][ T6505] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.586055][ T6505] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.820374][ T6505] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.880725][ T6525] IPVS: set_ctl: invalid protocol: 219 10.1.1.1:20003 [ 95.894804][ T5946] IPVS: starting estimator thread 0... [ 95.995706][ T6526] IPVS: using max 30 ests per chain, 72000 per kthread [ 96.172981][ T6505] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.440370][ T6247] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.532255][ T6545] vlan3: entered promiscuous mode [ 96.544794][ T6545] vlan2: entered promiscuous mode [ 96.561392][ T6545] gretap0: entered promiscuous mode [ 96.643134][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.665030][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.690636][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.169'. [ 96.698254][ T6550] bridge_slave_0: left allmulticast mode [ 96.706773][ T6550] bridge_slave_0: left promiscuous mode [ 96.712545][ T6550] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.772396][ T6550] bridge_slave_1: left allmulticast mode [ 96.778302][ T6550] bridge_slave_1: left promiscuous mode [ 96.784153][ T6550] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.846626][ T6550] bond0: (slave bond_slave_0): Releasing backup interface [ 96.853878][ T6555] netlink: 'syz.3.171': attribute type 39 has an invalid length. [ 96.874437][ T6550] bond0: (slave bond_slave_1): Releasing backup interface [ 96.917311][ T6550] team0: Port device team_slave_0 removed [ 96.943954][ T6550] team0: Port device team_slave_1 removed [ 96.955427][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.973056][ T6550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.993838][ T6550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.013506][ T6550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.028341][ T6550] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 97.054182][ T6549] netlink: 104 bytes leftover after parsing attributes in process `syz.4.167'. [ 97.068913][ T6550] batman_adv: batadv0: Removing interface: virt_wifi0 [ 97.082677][ T6549] netlink: 'syz.4.167': attribute type 4 has an invalid length. [ 97.264870][ T6567] dummy0: entered promiscuous mode [ 97.293808][ T6567] vlan2: entered promiscuous mode [ 97.307217][ T6572] FAULT_INJECTION: forcing a failure. [ 97.307217][ T6572] name failslab, interval 1, probability 0, space 0, times 0 [ 97.362640][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.2.176 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 97.362664][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.362673][ T6572] Call Trace: [ 97.362680][ T6572] [ 97.362689][ T6572] dump_stack_lvl+0x189/0x250 [ 97.362722][ T6572] ? __pfx____ratelimit+0x10/0x10 [ 97.362742][ T6572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.362761][ T6572] ? __pfx__printk+0x10/0x10 [ 97.362786][ T6572] ? __pfx___might_resched+0x10/0x10 [ 97.362803][ T6572] ? fs_reclaim_acquire+0x7d/0x100 [ 97.362827][ T6572] should_fail_ex+0x414/0x560 [ 97.362855][ T6572] should_failslab+0xa8/0x100 [ 97.362876][ T6572] __kmalloc_noprof+0xcb/0x4f0 [ 97.362894][ T6572] ? bpf_test_init+0xc2/0x170 [ 97.362917][ T6572] bpf_test_init+0xc2/0x170 [ 97.362942][ T6572] bpf_prog_test_run_skb+0x1e9/0x1560 [ 97.362960][ T6572] ? __fget_files+0x2a/0x420 [ 97.362983][ T6572] ? __fget_files+0x2a/0x420 [ 97.363011][ T6572] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 97.363031][ T6572] bpf_prog_test_run+0x2c4/0x340 [ 97.363051][ T6572] __sys_bpf+0x4a4/0x860 [ 97.363076][ T6572] ? __pfx___sys_bpf+0x10/0x10 [ 97.363112][ T6572] ? ksys_write+0x22a/0x250 [ 97.363133][ T6572] ? __pfx_ksys_write+0x10/0x10 [ 97.363148][ T6572] ? rcu_is_watching+0x15/0xb0 [ 97.363173][ T6572] __x64_sys_bpf+0x7c/0x90 [ 97.363195][ T6572] do_syscall_64+0xfa/0x3b0 [ 97.363213][ T6572] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.363232][ T6572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.363248][ T6572] ? clear_bhb_loop+0x60/0xb0 [ 97.363268][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.363281][ T6572] RIP: 0033:0x7f72cb98e929 [ 97.363295][ T6572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.363308][ T6572] RSP: 002b:00007f72cc893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.363327][ T6572] RAX: ffffffffffffffda RBX: 00007f72cbbb5fa0 RCX: 00007f72cb98e929 [ 97.363336][ T6572] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 97.363345][ T6572] RBP: 00007f72cc893090 R08: 0000000000000000 R09: 0000000000000000 [ 97.363355][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.363364][ T6572] R13: 0000000000000000 R14: 00007f72cbbb5fa0 R15: 00007fff5a4d54f8 [ 97.363392][ T6572] [ 97.644709][ T1323] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.191580][ T6595] netlink: 'syz.4.184': attribute type 1 has an invalid length. [ 98.548438][ T6604] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 98.645250][ T6606] netlink: 3 bytes leftover after parsing attributes in process `syz.0.188'. [ 98.694689][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 98.758703][ T6604] bond1: entered promiscuous mode [ 98.795112][ T6604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.819289][ T6606] batadv1: entered promiscuous mode [ 98.830730][ T6606] batadv1: entered allmulticast mode [ 98.872806][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.951794][ T6606] bond1: (slave batadv1): making interface the new active one [ 98.980317][ T6625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.188'. [ 99.018813][ T6606] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 99.258655][ T6639] netlink: 'syz.4.198': attribute type 29 has an invalid length. [ 99.307882][ T6639] netlink: 'syz.4.198': attribute type 29 has an invalid length. [ 99.340362][ T6639] __nla_validate_parse: 1 callbacks suppressed [ 99.340378][ T6639] netlink: 500 bytes leftover after parsing attributes in process `syz.4.198'. [ 99.384709][ T6642] netlink: 256 bytes leftover after parsing attributes in process `syz.3.199'. [ 99.509910][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 99.709232][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 99.756138][ T6664] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 99.903157][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 100.057146][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 100.090514][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 100.210083][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 100.245311][ T6678] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 100.253066][ T6678] netlink: 136 bytes leftover after parsing attributes in process `syz.2.211'. [ 100.263549][ T6678] netlink: 'syz.2.211': attribute type 2 has an invalid length. [ 100.271718][ T6678] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 100.753388][ T6693] syzkaller1: entered promiscuous mode [ 100.794590][ T6693] syzkaller1: entered allmulticast mode [ 101.283854][ T6717] Bluetooth: MGMT ver 1.23 [ 101.419651][ T6722] Cannot find set identified by id 0 to match [ 101.576974][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 101.590915][ T6729] trusted_key: syz.3.232 sent an empty control message without MSG_MORE. [ 102.405927][ T6765] netlink: 'syz.2.249': attribute type 163 has an invalid length. [ 102.576443][ T6773] vlan0: entered promiscuous mode [ 103.751047][ T6825] netlink: 'syz.1.268': attribute type 12 has an invalid length. [ 104.300420][ T6834] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 104.490752][ T6822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.517784][ T6838] team0: entered promiscuous mode [ 104.539911][ T6838] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.567915][ T6838] team0: left promiscuous mode [ 104.726777][ T6839] bond0 (unregistering): Released all slaves [ 105.112459][ T6867] netlink: zone id is out of range [ 105.117833][ T6867] netlink: zone id is out of range [ 105.122969][ T6867] netlink: zone id is out of range [ 105.141170][ T6867] netlink: zone id is out of range [ 105.155105][ T6867] netlink: zone id is out of range [ 105.160676][ T6869] netlink: 'syz.0.284': attribute type 9 has an invalid length. [ 105.162159][ T6867] netlink: zone id is out of range [ 105.183209][ T6867] netlink: zone id is out of range [ 105.200811][ T6867] netlink: zone id is out of range [ 105.213108][ T6867] netlink: zone id is out of range [ 105.213948][ T6869] __nla_validate_parse: 5 callbacks suppressed [ 105.213960][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 105.230341][ T6867] netlink: zone id is out of range [ 105.317946][ T6869] hsr0: entered promiscuous mode [ 105.323296][ T6869] macvlan2: entered promiscuous mode [ 105.360012][ T6869] macvlan2: entered allmulticast mode [ 105.365663][ T6869] hsr0: entered allmulticast mode [ 105.370799][ T6869] hsr_slave_0: entered allmulticast mode [ 105.377293][ T6869] hsr_slave_1: entered allmulticast mode [ 105.409759][ T6879] netlink: 'syz.1.286': attribute type 39 has an invalid length. [ 105.504447][ T6880] netlink: 596 bytes leftover after parsing attributes in process `syz.4.285'. [ 105.787012][ T6891] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 106.047029][ T6898] dummy0: entered promiscuous mode [ 106.070402][ T6898] vlan2: entered promiscuous mode [ 106.758709][ T6927] netlink: 'syz.3.304': attribute type 29 has an invalid length. [ 106.788423][ T6927] netlink: 'syz.3.304': attribute type 29 has an invalid length. [ 106.832860][ T6927] netlink: 500 bytes leftover after parsing attributes in process `syz.3.304'. [ 106.954887][ T6937] netlink: 256 bytes leftover after parsing attributes in process `syz.4.307'. [ 107.114745][ T6944] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.308'. [ 107.247361][ T6947] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.310'. [ 108.467193][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 108.621567][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.782453][ T6992] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 108.809449][ T6992] macsec1: entered promiscuous mode [ 108.828537][ T6992] macsec1: entered allmulticast mode [ 108.833955][ T6992] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 109.822527][ T7042] vlan0: entered promiscuous mode [ 110.534302][ T7065] bond1: (slave batadv1): Releasing active interface [ 110.786088][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 110.882624][ T7077] team0: entered promiscuous mode [ 110.894357][ T7077] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.938949][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.359'. [ 110.939435][ T7077] team0: left promiscuous mode [ 111.154719][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 111.238697][ T7093] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 111.513247][ T7103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 111.618094][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 111.622876][ T7103] netlink: 428 bytes leftover after parsing attributes in process `syz.3.366'. [ 111.676245][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.366'. [ 111.851370][ T7119] Cannot find map_set index 0 as target [ 111.906677][ T7116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.070790][ T7122] vlan3: entered promiscuous mode [ 112.076934][ T7122] vlan2: entered promiscuous mode [ 112.082056][ T7122] gretap0: entered promiscuous mode [ 112.100738][ T7127] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 112.181611][ T7127] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 112.204098][ T7127] netlink: 'syz.1.376': attribute type 2 has an invalid length. [ 112.208314][ T7125] syzkaller0: entered promiscuous mode [ 112.232768][ T7125] syzkaller0: entered allmulticast mode [ 112.240280][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 112.288199][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 112.314852][ T7133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 112.979811][ T7149] netlink: 'syz.1.385': attribute type 5 has an invalid length. [ 112.988467][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 113.092747][ T7151] netlink: 56 bytes leftover after parsing attributes in process `syz.1.386'. [ 113.868445][ T7147] vlan2: entered promiscuous mode [ 113.873702][ T7147] team0: entered promiscuous mode [ 113.954292][ T7153] netlink: 'syz.1.387': attribute type 2 has an invalid length. [ 115.438068][ T7213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.583130][ T7219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.686104][ T7219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.915944][ T7230] __nla_validate_parse: 6 callbacks suppressed [ 115.915963][ T7230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 116.756836][ T7256] Can't find ip_set type hash:ip$mec [ 117.123275][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.431'. [ 117.144401][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 117.589434][ T7298] Cannot find add_set index 0 as target [ 117.640612][ T7301] netlink: 'syz.4.439': attribute type 29 has an invalid length. [ 117.704807][ T7301] netlink: 'syz.4.439': attribute type 29 has an invalid length. [ 117.740189][ T7298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.438'. [ 117.765707][ T7298] netlink: 60 bytes leftover after parsing attributes in process `syz.1.438'. [ 117.835764][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 117.953679][ T7318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.445'. [ 118.072867][ T7314] Cannot find set identified by id 0 to match [ 118.219244][ T7322] netlink: 'syz.0.447': attribute type 29 has an invalid length. [ 118.265602][ T7322] netlink: 'syz.0.447': attribute type 29 has an invalid length. [ 118.385724][ T7322] netlink: 500 bytes leftover after parsing attributes in process `syz.0.447'. [ 118.546986][ T7327] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 118.812771][ T7334] FAULT_INJECTION: forcing a failure. [ 118.812771][ T7334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.845157][ T7334] CPU: 1 UID: 0 PID: 7334 Comm: syz.1.450 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 118.845183][ T7334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.845192][ T7334] Call Trace: [ 118.845200][ T7334] [ 118.845207][ T7334] dump_stack_lvl+0x189/0x250 [ 118.845232][ T7334] ? __pfx____ratelimit+0x10/0x10 [ 118.845252][ T7334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.845270][ T7334] ? __pfx__printk+0x10/0x10 [ 118.845291][ T7334] ? __might_fault+0xb0/0x130 [ 118.845321][ T7334] should_fail_ex+0x414/0x560 [ 118.845348][ T7334] _copy_from_iter+0x1db/0x16f0 [ 118.845370][ T7334] ? rcu_is_watching+0x15/0xb0 [ 118.845390][ T7334] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 118.845411][ T7334] ? __pfx__copy_from_iter+0x10/0x10 [ 118.845430][ T7334] ? __build_skb_around+0x257/0x3e0 [ 118.845455][ T7334] ? netlink_sendmsg+0x642/0xb30 [ 118.845474][ T7334] ? skb_put+0x11b/0x210 [ 118.845507][ T7334] netlink_sendmsg+0x6b2/0xb30 [ 118.845537][ T7334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.845561][ T7334] ? aa_sock_msg_perm+0x94/0x160 [ 118.845585][ T7334] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 118.845606][ T7334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.845627][ T7334] __sock_sendmsg+0x219/0x270 [ 118.845650][ T7334] ____sys_sendmsg+0x505/0x830 [ 118.845678][ T7334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.845710][ T7334] ? import_iovec+0x74/0xa0 [ 118.845731][ T7334] ___sys_sendmsg+0x21f/0x2a0 [ 118.845749][ T7334] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.845804][ T7334] ? __fget_files+0x2a/0x420 [ 118.845822][ T7334] ? __fget_files+0x3a0/0x420 [ 118.845852][ T7334] __x64_sys_sendmsg+0x19b/0x260 [ 118.845871][ T7334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 118.845897][ T7334] ? __pfx_ksys_write+0x10/0x10 [ 118.845913][ T7334] ? rcu_is_watching+0x15/0xb0 [ 118.845937][ T7334] ? do_syscall_64+0xbe/0x3b0 [ 118.845961][ T7334] do_syscall_64+0xfa/0x3b0 [ 118.845979][ T7334] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.845998][ T7334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.846014][ T7334] ? clear_bhb_loop+0x60/0xb0 [ 118.846034][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.846049][ T7334] RIP: 0033:0x7f21d2b8e929 [ 118.846065][ T7334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.846079][ T7334] RSP: 002b:00007f21d3ac8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.846096][ T7334] RAX: ffffffffffffffda RBX: 00007f21d2db5fa0 RCX: 00007f21d2b8e929 [ 118.846108][ T7334] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000004 [ 118.846118][ T7334] RBP: 00007f21d3ac8090 R08: 0000000000000000 R09: 0000000000000000 [ 118.846128][ T7334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.846137][ T7334] R13: 0000000000000000 R14: 00007f21d2db5fa0 R15: 00007ffec3790f98 [ 118.846163][ T7334] [ 118.863703][ T7325] syzkaller1: entered promiscuous mode [ 119.176113][ T7325] syzkaller1: entered allmulticast mode [ 119.733581][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 119.739532][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 119.889771][ T7367] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 120.502087][ T7396] netlink: 'syz.0.473': attribute type 39 has an invalid length. [ 121.025804][ T7405] __nla_validate_parse: 5 callbacks suppressed [ 121.025821][ T7405] netlink: 44 bytes leftover after parsing attributes in process `syz.2.476'. [ 121.358248][ T7428] netlink: 'syz.1.481': attribute type 4 has an invalid length. [ 121.359268][ T7429] netlink: 'syz.1.481': attribute type 4 has an invalid length. [ 121.407284][ T7429] netlink: 'syz.1.481': attribute type 17 has an invalid length. [ 121.418467][ T7428] netlink: 'syz.1.481': attribute type 17 has an invalid length. [ 121.580104][ T7430] dummy0: entered promiscuous mode [ 121.599889][ T7430] vlan3: entered promiscuous mode [ 121.852260][ T7447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.485'. [ 121.903616][ T7448] netlink: 44 bytes leftover after parsing attributes in process `syz.3.485'. [ 121.985364][ T7447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.485'. [ 122.108503][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 122.392380][ T7465] netlink: 'syz.4.492': attribute type 2 has an invalid length. [ 122.417353][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 122.424118][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 122.970354][ T5851] Bluetooth: hci4: link tx timeout [ 122.976192][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.985394][ T5851] Bluetooth: hci4: link tx timeout [ 122.990655][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.999642][ T5851] Bluetooth: hci4: link tx timeout [ 123.004875][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.013166][ T5851] Bluetooth: hci4: link tx timeout [ 123.018428][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.032725][ T5851] Bluetooth: hci4: link tx timeout [ 123.038283][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.046156][ T5851] Bluetooth: hci4: link tx timeout [ 123.052328][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 123.506445][ T7509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.505'. [ 123.535628][ T7509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 123.596125][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 124.052662][ T7536] geneve2: entered promiscuous mode [ 124.592119][ T7559] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 124.963959][ T7568] veth0: entered promiscuous mode [ 125.088579][ T7568] veth0: left promiscuous mode [ 125.154987][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 125.961075][ T7605] geneve2: entered promiscuous mode [ 126.840766][ T7640] vlan0: entered promiscuous mode [ 126.852901][ T7641] __nla_validate_parse: 10 callbacks suppressed [ 126.852916][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.552'. [ 127.064370][ T7646] geneve3: entered promiscuous mode [ 127.099464][ T7653] FAULT_INJECTION: forcing a failure. [ 127.099464][ T7653] name failslab, interval 1, probability 0, space 0, times 0 [ 127.148580][ T7653] CPU: 0 UID: 0 PID: 7653 Comm: syz.3.558 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 127.148604][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.148614][ T7653] Call Trace: [ 127.148621][ T7653] [ 127.148628][ T7653] dump_stack_lvl+0x189/0x250 [ 127.148659][ T7653] ? __pfx____ratelimit+0x10/0x10 [ 127.148688][ T7653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.148706][ T7653] ? __pfx__printk+0x10/0x10 [ 127.148734][ T7653] ? ref_tracker_alloc+0x318/0x460 [ 127.148759][ T7653] should_fail_ex+0x414/0x560 [ 127.148786][ T7653] should_failslab+0xa8/0x100 [ 127.148808][ T7653] kmem_cache_alloc_noprof+0x73/0x3c0 [ 127.148826][ T7653] ? skb_clone+0x212/0x3a0 [ 127.148847][ T7653] skb_clone+0x212/0x3a0 [ 127.148867][ T7653] __netlink_deliver_tap+0x404/0x850 [ 127.148900][ T7653] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.148922][ T7653] netlink_deliver_tap+0x19c/0x1b0 [ 127.148944][ T7653] netlink_unicast+0x730/0x8e0 [ 127.148975][ T7653] netlink_sendmsg+0x805/0xb30 [ 127.149005][ T7653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.149030][ T7653] ? aa_sock_msg_perm+0x94/0x160 [ 127.149058][ T7653] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.149080][ T7653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.149101][ T7653] __sock_sendmsg+0x219/0x270 [ 127.149124][ T7653] ____sys_sendmsg+0x505/0x830 [ 127.149152][ T7653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.149184][ T7653] ? import_iovec+0x74/0xa0 [ 127.149206][ T7653] ___sys_sendmsg+0x21f/0x2a0 [ 127.149225][ T7653] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.149281][ T7653] ? __fget_files+0x2a/0x420 [ 127.149299][ T7653] ? __fget_files+0x3a0/0x420 [ 127.149329][ T7653] __x64_sys_sendmsg+0x19b/0x260 [ 127.149348][ T7653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.149375][ T7653] ? __pfx_ksys_write+0x10/0x10 [ 127.149390][ T7653] ? rcu_is_watching+0x15/0xb0 [ 127.149415][ T7653] ? do_syscall_64+0xbe/0x3b0 [ 127.149439][ T7653] do_syscall_64+0xfa/0x3b0 [ 127.149457][ T7653] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.149476][ T7653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.149492][ T7653] ? clear_bhb_loop+0x60/0xb0 [ 127.149512][ T7653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.149528][ T7653] RIP: 0033:0x7f77d8b8e929 [ 127.149550][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.149563][ T7653] RSP: 002b:00007f77d9921038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.149584][ T7653] RAX: ffffffffffffffda RBX: 00007f77d8db5fa0 RCX: 00007f77d8b8e929 [ 127.149596][ T7653] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000004 [ 127.149606][ T7653] RBP: 00007f77d9921090 R08: 0000000000000000 R09: 0000000000000000 [ 127.149617][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.149626][ T7653] R13: 0000000000000000 R14: 00007f77d8db5fa0 R15: 00007ffe86e34308 [ 127.149653][ T7653] [ 127.963345][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.569'. [ 128.096271][ T5934] IPVS: starting estimator thread 0... [ 128.184660][ T7692] IPVS: using max 28 ests per chain, 67200 per kthread [ 128.308516][ T7698] geneve2: entered promiscuous mode [ 128.468258][ T7705] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.576'. [ 128.524331][ T7702] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.576'. [ 128.557517][ T7705] IPVS: set_ctl: invalid protocol: 8345 172.30.1.5:20003 [ 128.569159][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 128.606503][ T7702] Cannot find add_set index 3 as target [ 128.643624][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.669120][ T7705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.678491][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.692440][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 128.817132][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 128.976058][ T7727] vlan3: entered promiscuous mode [ 128.981314][ T7727] vlan2: entered promiscuous mode [ 128.987095][ T7727] gretap0: entered promiscuous mode [ 129.028969][ T7729] IPVS: Error connecting to the multicast addr [ 129.342495][ T7739] Driver unsupported XDP return value 0 on prog (id 206) dev N/A, expect packet loss! [ 129.403700][ T7739] validate_nla: 2 callbacks suppressed [ 129.403715][ T7739] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 129.423056][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 129.757308][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 130.110807][ T7778] vlan3: entered promiscuous mode [ 130.147400][ T7778] team0: entered promiscuous mode [ 130.151864][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 130.400955][ T7787] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 130.496610][ T7792] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 130.509140][ T7792] netlink: 'syz.4.612': attribute type 2 has an invalid length. [ 130.762011][ T7802] netlink: 'syz.1.619': attribute type 5 has an invalid length. [ 130.801058][ T7802] bridge0: entered promiscuous mode [ 130.810567][ T7802] bridge0: entered allmulticast mode [ 130.872525][ T7808] net_ratelimit: 57 callbacks suppressed [ 130.872544][ T7808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.216099][ T7876] __nla_validate_parse: 10 callbacks suppressed [ 132.216116][ T7876] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.645'. [ 132.237307][ T7869] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.645'. [ 132.278634][ T7869] IPVS: set_ctl: invalid protocol: 8345 172.30.1.1:20003 [ 132.286709][ T7869] Cannot find add_set index 3 as target [ 132.331080][ T7869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.733158][ T7894] Cannot find set identified by id 0 to match [ 132.761129][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.767845][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.028885][ T7889] netlink: 'syz.1.651': attribute type 1 has an invalid length. [ 133.037744][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.651'. [ 133.166923][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 133.186583][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 133.427351][ T7908] netlink: 'syz.2.661': attribute type 29 has an invalid length. [ 133.440651][ T7908] netlink: 'syz.2.661': attribute type 29 has an invalid length. [ 133.485366][ T7908] netlink: 500 bytes leftover after parsing attributes in process `syz.2.661'. [ 134.153210][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 134.301444][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'. [ 134.413541][ T7945] IPVS: set_ctl: invalid protocol: 219 10.1.1.1:20003 [ 134.571519][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 134.582809][ T7929] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.631492][ T7933] team0: entered promiscuous mode [ 134.651810][ T7933] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.660789][ T7933] team0: left promiscuous mode [ 134.762634][ T7956] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.897300][ T7929] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.939991][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 135.242576][ T7929] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.627595][ T7929] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.725638][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.962363][ T7984] vlan3: entered promiscuous mode [ 135.992547][ T7984] vlan2: entered promiscuous mode [ 136.006746][ T7984] gretap0: entered promiscuous mode [ 136.023598][ T7989] nbd: must specify a size in bytes for the device [ 136.089057][ T1323] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.161012][ T1323] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.240438][ T1323] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.290541][ T1323] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.659384][ T8012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.913682][ T8012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.035563][ T8028] FAULT_INJECTION: forcing a failure. [ 137.035563][ T8028] name failslab, interval 1, probability 0, space 0, times 0 [ 137.091840][ T8028] CPU: 0 UID: 0 PID: 8028 Comm: syz.2.699 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 137.091865][ T8028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.091875][ T8028] Call Trace: [ 137.091882][ T8028] [ 137.091889][ T8028] dump_stack_lvl+0x189/0x250 [ 137.091913][ T8028] ? __pfx____ratelimit+0x10/0x10 [ 137.091934][ T8028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.091951][ T8028] ? __pfx__printk+0x10/0x10 [ 137.091978][ T8028] ? __pfx___might_resched+0x10/0x10 [ 137.092002][ T8028] should_fail_ex+0x414/0x560 [ 137.092028][ T8028] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 137.092047][ T8028] should_failslab+0xa8/0x100 [ 137.092068][ T8028] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 137.092084][ T8028] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 137.092103][ T8028] ? alloc_inode+0x67/0x1b0 [ 137.092126][ T8028] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 137.092143][ T8028] alloc_inode+0x67/0x1b0 [ 137.092164][ T8028] new_inode+0x22/0x170 [ 137.092188][ T8028] __debugfs_create_file+0x14d/0x4f0 [ 137.092212][ T8028] debugfs_create_file_full+0x3f/0x60 [ 137.092234][ T8028] ref_tracker_dir_debugfs+0x14e/0x270 [ 137.092257][ T8028] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 137.092309][ T8028] ? rcu_is_watching+0x15/0xb0 [ 137.092327][ T8028] ? alloc_netdev_mqs+0xa3/0x1170 [ 137.092351][ T8028] ? __raw_spin_lock_init+0x45/0x100 [ 137.092376][ T8028] alloc_netdev_mqs+0x26f/0x1170 [ 137.092392][ T8028] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 137.092415][ T8028] __ip_tunnel_create+0x349/0x560 [ 137.092437][ T8028] ? __pfx___ip_tunnel_create+0x10/0x10 [ 137.092456][ T8028] ? bpf_lsm_capable+0x9/0x20 [ 137.092472][ T8028] ? security_capable+0x7e/0x2e0 [ 137.092502][ T8028] ip_tunnel_ctl+0x4dd/0xc30 [ 137.092527][ T8028] ipgre_tunnel_ctl+0x2ef/0x5c0 [ 137.092552][ T8028] ip_tunnel_siocdevprivate+0xf2/0x180 [ 137.092569][ T8028] ? __mutex_lock+0x51b/0xe80 [ 137.092592][ T8028] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 137.092622][ T8028] ? netdev_name_node_lookup+0xdf/0x120 [ 137.092652][ T8028] dev_ifsioc+0xb54/0xf00 [ 137.092682][ T8028] dev_ioctl+0x84c/0x1150 [ 137.092707][ T8028] sock_ioctl+0x719/0x790 [ 137.092730][ T8028] ? __pfx_sock_ioctl+0x10/0x10 [ 137.092750][ T8028] ? __fget_files+0x3a0/0x420 [ 137.092768][ T8028] ? __fget_files+0x2a/0x420 [ 137.092790][ T8028] ? bpf_lsm_file_ioctl+0x9/0x20 [ 137.092806][ T8028] ? __pfx_sock_ioctl+0x10/0x10 [ 137.092822][ T8028] __se_sys_ioctl+0xfc/0x170 [ 137.092840][ T8028] do_syscall_64+0xfa/0x3b0 [ 137.092858][ T8028] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.092876][ T8028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.092890][ T8028] ? clear_bhb_loop+0x60/0xb0 [ 137.092910][ T8028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.092926][ T8028] RIP: 0033:0x7f72cb98e929 [ 137.092941][ T8028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.092953][ T8028] RSP: 002b:00007f72cc893038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.092971][ T8028] RAX: ffffffffffffffda RBX: 00007f72cbbb5fa0 RCX: 00007f72cb98e929 [ 137.092983][ T8028] RDX: 0000200000001040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 137.092993][ T8028] RBP: 00007f72cc893090 R08: 0000000000000000 R09: 0000000000000000 [ 137.093003][ T8028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.093012][ T8028] R13: 0000000000000000 R14: 00007f72cbbb5fa0 R15: 00007fff5a4d54f8 [ 137.093042][ T8028] [ 137.093049][ T8028] debugfs: out of free dentries, can not create file 'netdev@ffff8880780fe610' [ 137.372111][ T8039] __nla_validate_parse: 5 callbacks suppressed [ 137.372127][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 137.589304][ T8012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.649639][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 137.698887][ T8012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.819178][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 137.888300][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.923607][ T8057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 137.943234][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.009122][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.057122][ T8061] netlink: 32 bytes leftover after parsing attributes in process `syz.3.713'. [ 138.067098][ T6247] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.101166][ T5906] IPVS: starting estimator thread 0... [ 138.214818][ T8066] IPVS: using max 32 ests per chain, 76800 per kthread [ 138.252161][ T8070] vlan2: entered promiscuous mode [ 138.354406][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'. [ 138.549873][ T8081] netlink: 'syz.3.719': attribute type 29 has an invalid length. [ 138.583545][ T8081] netlink: 'syz.3.719': attribute type 29 has an invalid length. [ 138.635141][ T8081] netlink: 500 bytes leftover after parsing attributes in process `syz.3.719'. [ 138.780065][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 139.037950][ T8101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.729'. [ 139.062651][ T8103] netlink: 288 bytes leftover after parsing attributes in process `syz.3.730'. [ 139.135440][ T8106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.611471][ T8176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.713386][ T8191] Cannot find del_set index 2 as target [ 142.167168][ T8176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.772251][ T8218] __nla_validate_parse: 8 callbacks suppressed [ 142.772268][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 142.776868][ T8176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.846896][ T8212] FAULT_INJECTION: forcing a failure. [ 142.846896][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 142.879832][ T8218] batadv0: entered promiscuous mode [ 142.886826][ T8218] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.895597][ T8218] batadv0: left promiscuous mode [ 142.911276][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: syz.4.773 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 142.911299][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.911309][ T8212] Call Trace: [ 142.911316][ T8212] [ 142.911323][ T8212] dump_stack_lvl+0x189/0x250 [ 142.911347][ T8212] ? __pfx____ratelimit+0x10/0x10 [ 142.911368][ T8212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.911387][ T8212] ? __pfx__printk+0x10/0x10 [ 142.911415][ T8212] ? __pfx___might_resched+0x10/0x10 [ 142.911433][ T8212] ? fs_reclaim_acquire+0x7d/0x100 [ 142.911459][ T8212] should_fail_ex+0x414/0x560 [ 142.911486][ T8212] should_failslab+0xa8/0x100 [ 142.911507][ T8212] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 142.911527][ T8212] ? __alloc_skb+0x112/0x2d0 [ 142.911553][ T8212] __alloc_skb+0x112/0x2d0 [ 142.911578][ T8212] netlink_ack+0x146/0xa50 [ 142.911597][ T8212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.911612][ T8212] ? ref_tracker_free+0x63a/0x7d0 [ 142.911632][ T8212] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 142.911649][ T8212] ? __pfx_nl80211_post_doit+0x10/0x10 [ 142.911666][ T8212] ? __pfx_ref_tracker_free+0x10/0x10 [ 142.911700][ T8212] netlink_rcv_skb+0x28c/0x470 [ 142.911722][ T8212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.911740][ T8212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.911778][ T8212] ? down_read+0x1ad/0x2e0 [ 142.911807][ T8212] genl_rcv+0x28/0x40 [ 142.911822][ T8212] netlink_unicast+0x75c/0x8e0 [ 142.911853][ T8212] netlink_sendmsg+0x805/0xb30 [ 142.911884][ T8212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.911909][ T8212] ? aa_sock_msg_perm+0x94/0x160 [ 142.911933][ T8212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.911954][ T8212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.911976][ T8212] __sock_sendmsg+0x219/0x270 [ 142.911998][ T8212] ____sys_sendmsg+0x505/0x830 [ 142.912027][ T8212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.912066][ T8212] ? import_iovec+0x74/0xa0 [ 142.912089][ T8212] ___sys_sendmsg+0x21f/0x2a0 [ 142.912108][ T8212] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.912165][ T8212] ? __fget_files+0x2a/0x420 [ 142.912184][ T8212] ? __fget_files+0x3a0/0x420 [ 142.912215][ T8212] __x64_sys_sendmsg+0x19b/0x260 [ 142.912234][ T8212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.912261][ T8212] ? __pfx_ksys_write+0x10/0x10 [ 142.912277][ T8212] ? rcu_is_watching+0x15/0xb0 [ 142.912301][ T8212] ? do_syscall_64+0xbe/0x3b0 [ 142.912326][ T8212] do_syscall_64+0xfa/0x3b0 [ 142.912344][ T8212] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.912363][ T8212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.912379][ T8212] ? clear_bhb_loop+0x60/0xb0 [ 142.912400][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.912416][ T8212] RIP: 0033:0x7fe7ba78e929 [ 142.912431][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.912444][ T8212] RSP: 002b:00007fe7bb68b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.912462][ T8212] RAX: ffffffffffffffda RBX: 00007fe7ba9b5fa0 RCX: 00007fe7ba78e929 [ 142.912474][ T8212] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000004 [ 142.912485][ T8212] RBP: 00007fe7bb68b090 R08: 0000000000000000 R09: 0000000000000000 [ 142.912495][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.912504][ T8212] R13: 0000000000000000 R14: 00007fe7ba9b5fa0 R15: 00007ffc9d86b948 [ 142.912534][ T8212] [ 143.701874][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 143.717760][ T8176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.007808][ T8239] netlink: 'syz.4.784': attribute type 16 has an invalid length. [ 144.034569][ T8239] netlink: 'syz.4.784': attribute type 17 has an invalid length. [ 144.404074][ T8239] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 144.438229][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.454022][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.486855][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.500048][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.546866][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.666542][ T8258] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 144.676488][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.702133][ T8265] vlan3: entered promiscuous mode [ 144.705094][ T8259] block nbd0: server does not support multiple connections per device. [ 144.708530][ T8265] vlan2: entered promiscuous mode [ 144.721345][ T8265] gretap0: entered promiscuous mode [ 144.729075][ T8259] block nbd0: shutting down sockets [ 144.780050][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.844568][ T6235] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.021509][ T8279] FAULT_INJECTION: forcing a failure. [ 145.021509][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.026202][ T8275] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.795'. [ 145.071225][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.3.796 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 145.071254][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.071263][ T8279] Call Trace: [ 145.071271][ T8279] [ 145.071278][ T8279] dump_stack_lvl+0x189/0x250 [ 145.071301][ T8279] ? __pfx____ratelimit+0x10/0x10 [ 145.071322][ T8279] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.071340][ T8279] ? __pfx__printk+0x10/0x10 [ 145.071362][ T8279] ? __might_fault+0xb0/0x130 [ 145.071392][ T8279] should_fail_ex+0x414/0x560 [ 145.071419][ T8279] _copy_from_user+0x2d/0xb0 [ 145.071440][ T8279] hci_sock_setsockopt+0x502/0x9e0 [ 145.071473][ T8279] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 145.071499][ T8279] ? aa_sock_msg_perm+0xe0/0x160 [ 145.071524][ T8279] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 145.071545][ T8279] ? __pfx_hci_sock_setsockopt+0x10/0x10 [ 145.071569][ T8279] do_sock_setsockopt+0x257/0x3e0 [ 145.071596][ T8279] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 145.071623][ T8279] ? __fget_files+0x2a/0x420 [ 145.071652][ T8279] __x64_sys_setsockopt+0x18b/0x220 [ 145.071681][ T8279] do_syscall_64+0xfa/0x3b0 [ 145.071700][ T8279] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.071720][ T8279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.071736][ T8279] ? clear_bhb_loop+0x60/0xb0 [ 145.071756][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.071772][ T8279] RIP: 0033:0x7f77d8b8e929 [ 145.071787][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.071800][ T8279] RSP: 002b:00007f77d9921038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 145.071818][ T8279] RAX: ffffffffffffffda RBX: 00007f77d8db5fa0 RCX: 00007f77d8b8e929 [ 145.071830][ T8279] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000004 [ 145.071840][ T8279] RBP: 00007f77d9921090 R08: 0000000000000010 R09: 0000000000000000 [ 145.071850][ T8279] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 145.071867][ T8279] R13: 0000000000000000 R14: 00007f77d8db5fa0 R15: 00007ffe86e34308 [ 145.071896][ T8279] [ 145.483792][ T8288] bridge0: port 1(macvlan2) entered blocking state [ 145.500438][ T8288] bridge0: port 1(macvlan2) entered disabled state [ 145.507535][ T8288] macvlan2: entered allmulticast mode [ 145.513086][ T8288] bridge0: entered allmulticast mode [ 145.530187][ T8288] macvlan2: left allmulticast mode [ 145.536105][ T8288] bridge0: left allmulticast mode [ 145.582873][ T8294] netlink: 'syz.1.803': attribute type 1 has an invalid length. [ 146.012686][ T8314] vlan3: entered promiscuous mode [ 146.209667][ T8326] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.813'. [ 146.226942][ T8319] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.813'. [ 146.264070][ T8319] IPVS: set_ctl: invalid protocol: 8345 172.30.1.1:20003 [ 146.285377][ T8319] Cannot find add_set index 3 as target [ 146.302997][ T8319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.371872][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 146.756872][ T8348] syzkaller0: entered promiscuous mode [ 146.762514][ T8348] syzkaller0: entered allmulticast mode [ 146.857947][ T8349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.823'. [ 146.879599][ T8351] netlink: 'syz.1.824': attribute type 29 has an invalid length. [ 146.888455][ T8351] netlink: 'syz.1.824': attribute type 29 has an invalid length. [ 146.901700][ T8351] netlink: 500 bytes leftover after parsing attributes in process `syz.1.824'. [ 146.936406][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.825'. [ 147.294152][ T8366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.393942][ T8370] netlink: 596 bytes leftover after parsing attributes in process `syz.1.833'. [ 147.505809][ T8376] xt_CT: No such helper "snmp" [ 147.741341][ T8384] dvmrp0: entered allmulticast mode [ 147.797389][ T8387] netlink: 'syz.2.839': attribute type 3 has an invalid length. [ 147.839893][ T8387] __nla_validate_parse: 2 callbacks suppressed [ 147.839908][ T8387] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.839'. [ 147.963141][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.841'. [ 148.022686][ T8401] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 148.193093][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'. [ 148.222616][ T8407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.846'. [ 148.316835][ T8416] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 148.353924][ T8416] netlink: 'syz.2.848': attribute type 2 has an invalid length. [ 148.387156][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 149.453489][ T8468] netlink: 'syz.3.870': attribute type 29 has an invalid length. [ 149.523952][ T8472] netlink: 'syz.3.870': attribute type 29 has an invalid length. [ 149.556266][ T8468] netlink: 500 bytes leftover after parsing attributes in process `syz.3.870'. [ 149.856968][ T8484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.874'. [ 149.905634][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.876'. [ 149.941340][ T8489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.876'. [ 150.125101][ T8501] netlink: 72 bytes leftover after parsing attributes in process `syz.4.881'. [ 150.145325][ T8501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.335270][ T8513] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.409765][ T8517] netlink: 'syz.0.888': attribute type 39 has an invalid length. [ 150.514729][ T8519] batadv0: entered promiscuous mode [ 150.521340][ T8519] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.533933][ T8519] batadv0: left promiscuous mode [ 150.617010][ T8522] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 150.857691][ T8540] FAULT_INJECTION: forcing a failure. [ 150.857691][ T8540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.879543][ T8540] CPU: 0 UID: 0 PID: 8540 Comm: syz.3.895 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 150.879569][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.879580][ T8540] Call Trace: [ 150.879586][ T8540] [ 150.879594][ T8540] dump_stack_lvl+0x189/0x250 [ 150.879618][ T8540] ? __pfx____ratelimit+0x10/0x10 [ 150.879640][ T8540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.879658][ T8540] ? __pfx__printk+0x10/0x10 [ 150.879678][ T8540] ? __might_fault+0xb0/0x130 [ 150.879708][ T8540] should_fail_ex+0x414/0x560 [ 150.879739][ T8540] _copy_from_user+0x2d/0xb0 [ 150.879759][ T8540] __sys_connect+0x123/0x440 [ 150.879780][ T8540] ? __fget_files+0x3a0/0x420 [ 150.879801][ T8540] ? __pfx___sys_connect+0x10/0x10 [ 150.879835][ T8540] ? __pfx_ksys_write+0x10/0x10 [ 150.879851][ T8540] ? rcu_is_watching+0x15/0xb0 [ 150.879877][ T8540] __x64_sys_connect+0x7a/0x90 [ 150.879900][ T8540] do_syscall_64+0xfa/0x3b0 [ 150.879920][ T8540] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.879938][ T8540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.879955][ T8540] ? clear_bhb_loop+0x60/0xb0 [ 150.879975][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.879989][ T8540] RIP: 0033:0x7f77d8b8e929 [ 150.880003][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.880016][ T8540] RSP: 002b:00007f77d9921038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 150.880034][ T8540] RAX: ffffffffffffffda RBX: 00007f77d8db5fa0 RCX: 00007f77d8b8e929 [ 150.880045][ T8540] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000003 [ 150.880055][ T8540] RBP: 00007f77d9921090 R08: 0000000000000000 R09: 0000000000000000 [ 150.880064][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.880074][ T8540] R13: 0000000000000000 R14: 00007f77d8db5fa0 R15: 00007ffe86e34308 [ 150.880101][ T8540] [ 151.181001][ T8547] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.685287][ T8561] syzkaller0: entered promiscuous mode [ 151.693487][ T8561] syzkaller0: entered allmulticast mode [ 151.701806][ T8572] !: renamed from dummy0 (while UP) [ 151.735619][ T8574] No such timeout policy "syz0" [ 153.808801][ T6254] wlan0: Trigger new scan to find an IBSS to join [ 154.262969][ T8600] geneve3: entered promiscuous mode [ 154.746508][ T8642] vlan3: entered promiscuous mode [ 154.814688][ T8648] __nla_validate_parse: 9 callbacks suppressed [ 154.814704][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.924'. [ 154.878309][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'. [ 154.941747][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.924'. [ 154.952129][ T8654] netlink: 32 bytes leftover after parsing attributes in process `syz.4.924'. [ 155.062650][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 155.144785][ T8662] netlink: 'syz.2.929': attribute type 1 has an invalid length. [ 155.163328][ T8662] netlink: 'syz.2.929': attribute type 2 has an invalid length. [ 155.205981][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 155.261790][ T8664] netlink: 'syz.0.928': attribute type 2 has an invalid length. [ 155.282984][ T8664] : entered promiscuous mode [ 155.459770][ T8673] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 155.541991][ T8680] netlink: 596 bytes leftover after parsing attributes in process `syz.4.932'. [ 155.607651][ T8675] netlink: 'syz.4.932': attribute type 29 has an invalid length. [ 155.672463][ T8679] netlink: 'syz.4.932': attribute type 29 has an invalid length. [ 155.975925][ T8696] netlink: 596 bytes leftover after parsing attributes in process `syz.0.937'. [ 156.152766][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 156.296987][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 156.360269][ T8706] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.099391][ T8735] IPVS: set_ctl: invalid protocol: 8345 172.30.1.5:20003 [ 157.129017][ T8735] Cannot find add_set index 3 as target [ 157.202566][ T8735] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 157.225740][ T6235] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 157.236989][ T8737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.296334][ T8745] macvtap1: entered promiscuous mode [ 157.301768][ T8745] macvtap1: entered allmulticast mode [ 157.324664][ T8745] veth1_vlan: entered allmulticast mode [ 157.343799][ T8745] veth1_vlan: left allmulticast mode [ 157.391969][ T8747] netlink: 'syz.3.957': attribute type 29 has an invalid length. [ 157.410828][ T8747] netlink: 'syz.3.957': attribute type 29 has an invalid length. [ 158.114873][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 158.187988][ T8786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.383938][ T8796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.385195][ T8797] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 158.628373][ T8806] ip6t_REJECT: ECHOREPLY is not supported [ 158.835649][ T1323] wlan0: Trigger new scan to find an IBSS to join [ 159.140763][ T8823] tipc: Enabling of bearer rejected, failed to enable media [ 159.676003][ T8839] syzkaller0: entered promiscuous mode [ 159.681515][ T8839] syzkaller0: entered allmulticast mode [ 159.839614][ T6232] wlan0: Creating new IBSS network, BSSID 9a:a1:7e:63:c9:13 [ 160.512150][ T8870] __nla_validate_parse: 24 callbacks suppressed [ 160.512167][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 161.587630][ T8878] netlink: 'syz.2.1005': attribute type 1 has an invalid length. [ 161.637182][ T8878] netlink: 'syz.2.1005': attribute type 2 has an invalid length. [ 161.647674][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 162.031377][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 162.082540][ T8900] team0: entered promiscuous mode [ 162.092600][ T8900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.109321][ T8900] team0: left promiscuous mode [ 162.339488][ T8912] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1016'. [ 162.524327][ T8922] sctp: [Deprecated]: syz.3.1020 (pid 8922) Use of int in max_burst socket option. [ 162.524327][ T8922] Use struct sctp_assoc_value instead [ 162.632873][ T8926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 162.859511][ T8931] geneve2: entered promiscuous mode [ 163.143139][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1028'. [ 163.646226][ T8965] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 163.713288][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 164.275386][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1041'. [ 164.315839][ T8995] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 164.430621][ T8997] macvlan0: entered promiscuous mode [ 164.484383][ T8997] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 164.528650][ T8997] netlink: 'syz.3.1042': attribute type 2 has an invalid length. [ 164.832596][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1050'. [ 164.850829][ T9020] batadv0: entered promiscuous mode [ 164.896137][ T9020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.904063][ T9020] batadv0: left promiscuous mode [ 165.552673][ T9031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1052'. [ 165.670065][ T9042] netlink: 'syz.2.1052': attribute type 12 has an invalid length. [ 165.850610][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 165.919668][ T9063] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1061'. [ 166.255131][ T9082] netlink: 'syz.4.1066': attribute type 21 has an invalid length. [ 166.277276][ T9082] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 166.397962][ T9087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1068'. [ 166.413416][ T9088] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1065'. [ 166.471150][ T9090] netlink: 'syz.3.1069': attribute type 9 has an invalid length. [ 166.496159][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 166.530267][ T9093] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1070'. [ 166.604651][ T9097] sctp: [Deprecated]: syz.1.1071 (pid 9097) Use of int in max_burst socket option. [ 166.604651][ T9097] Use struct sctp_assoc_value instead [ 166.642809][ T9090] hsr0: entered promiscuous mode [ 166.684037][ T9090] macvlan2: entered promiscuous mode [ 166.702633][ T9090] macvlan2: entered allmulticast mode [ 166.711388][ T9090] hsr0: entered allmulticast mode [ 166.720792][ T9090] hsr_slave_0: entered allmulticast mode [ 166.726679][ T9090] hsr_slave_1: entered allmulticast mode [ 167.098678][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 167.131525][ T9118] FAULT_INJECTION: forcing a failure. [ 167.131525][ T9118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.188405][ T9118] CPU: 1 UID: 0 PID: 9118 Comm: syz.3.1079 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 167.188429][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.188439][ T9118] Call Trace: [ 167.188445][ T9118] [ 167.188452][ T9118] dump_stack_lvl+0x189/0x250 [ 167.188475][ T9118] ? __pfx____ratelimit+0x10/0x10 [ 167.188494][ T9118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.188511][ T9118] ? __pfx__printk+0x10/0x10 [ 167.188531][ T9118] ? __might_fault+0xb0/0x130 [ 167.188579][ T9118] should_fail_ex+0x414/0x560 [ 167.188606][ T9118] _copy_from_iter+0x1db/0x16f0 [ 167.188627][ T9118] ? rcu_is_watching+0x15/0xb0 [ 167.188646][ T9118] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 167.188666][ T9118] ? __pfx__copy_from_iter+0x10/0x10 [ 167.188683][ T9118] ? __build_skb_around+0x257/0x3e0 [ 167.188708][ T9118] ? netlink_sendmsg+0x642/0xb30 [ 167.188726][ T9118] ? skb_put+0x11b/0x210 [ 167.188749][ T9118] netlink_sendmsg+0x6b2/0xb30 [ 167.188777][ T9118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.188800][ T9118] ? aa_sock_msg_perm+0x94/0x160 [ 167.188823][ T9118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.188844][ T9118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.188864][ T9118] __sock_sendmsg+0x219/0x270 [ 167.188886][ T9118] ____sys_sendmsg+0x505/0x830 [ 167.188925][ T9118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.188958][ T9118] ? import_iovec+0x74/0xa0 [ 167.188980][ T9118] ___sys_sendmsg+0x21f/0x2a0 [ 167.188998][ T9118] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.189055][ T9118] ? __fget_files+0x2a/0x420 [ 167.189074][ T9118] ? __fget_files+0x3a0/0x420 [ 167.189104][ T9118] __x64_sys_sendmsg+0x19b/0x260 [ 167.189123][ T9118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.189149][ T9118] ? __pfx_ksys_write+0x10/0x10 [ 167.189165][ T9118] ? rcu_is_watching+0x15/0xb0 [ 167.189186][ T9118] ? do_syscall_64+0xbe/0x3b0 [ 167.189211][ T9118] do_syscall_64+0xfa/0x3b0 [ 167.189229][ T9118] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.189247][ T9118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.189263][ T9118] ? clear_bhb_loop+0x60/0xb0 [ 167.189282][ T9118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.189298][ T9118] RIP: 0033:0x7f77d8b8e929 [ 167.189313][ T9118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.189326][ T9118] RSP: 002b:00007f77d9921038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.189343][ T9118] RAX: ffffffffffffffda RBX: 00007f77d8db5fa0 RCX: 00007f77d8b8e929 [ 167.189355][ T9118] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 167.189366][ T9118] RBP: 00007f77d9921090 R08: 0000000000000000 R09: 0000000000000000 [ 167.189376][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.189386][ T9118] R13: 0000000000000000 R14: 00007f77d8db5fa0 R15: 00007ffe86e34308 [ 167.189415][ T9118] [ 167.658762][ T9132] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1082'. [ 167.853967][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 167.874196][ T9141] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 168.005637][ T9141] bond1: entered promiscuous mode [ 168.010784][ T9141] bond1: entered allmulticast mode [ 168.016774][ T9141] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.728737][ T9168] x_tables: ip_tables: udp match: only valid for protocol 17 [ 168.960275][ T9178] Cannot find del_set index 2 as target [ 169.550970][ T9201] netlink: 'syz.1.1110': attribute type 39 has an invalid length. [ 170.029196][ T9228] bond0: option lp_interval: invalid value (18446744073709551604) [ 170.047026][ T9229] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 170.058761][ T9228] bond0: option lp_interval: allowed values 1 - 2147483647 [ 170.085791][ T9229] netlink: 'syz.4.1122': attribute type 4 has an invalid length. [ 170.246229][ T9241] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 170.335989][ T9240] netlink: 'syz.4.1126': attribute type 12 has an invalid length. [ 170.390694][ T9241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.443295][ T9244] bond1: (slave veth3): Enslaving as an active interface with a down link [ 172.129450][ T9243] team0: entered promiscuous mode [ 172.143643][ T9243] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 172.153194][ T9243] team0: left promiscuous mode [ 172.384976][ T9273] veth0_to_bond: entered allmulticast mode [ 172.403149][ T9276] __nla_validate_parse: 14 callbacks suppressed [ 172.403166][ T9276] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1135'. [ 172.500205][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 172.759806][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 173.192150][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'. [ 173.235632][ T9307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1149'. [ 173.268751][ T9307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1149'. [ 173.292737][ T9312] IPVS: set_ctl: invalid protocol: 1382 224.0.0.1:20002 [ 173.591282][ T9320] bond1: (slave veth3): Releasing active interface [ 173.736244][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1156'. [ 173.760781][ T9335] FAULT_INJECTION: forcing a failure. [ 173.760781][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.774301][ T9335] CPU: 0 UID: 0 PID: 9335 Comm: syz.2.1160 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 173.774325][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.774335][ T9335] Call Trace: [ 173.774342][ T9335] [ 173.774349][ T9335] dump_stack_lvl+0x189/0x250 [ 173.774373][ T9335] ? __pfx____ratelimit+0x10/0x10 [ 173.774393][ T9335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.774411][ T9335] ? __pfx__printk+0x10/0x10 [ 173.774432][ T9335] ? __might_fault+0xb0/0x130 [ 173.774459][ T9335] should_fail_ex+0x414/0x560 [ 173.774488][ T9335] _copy_from_iter+0x1db/0x16f0 [ 173.774508][ T9335] ? rcu_is_watching+0x15/0xb0 [ 173.774527][ T9335] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 173.774546][ T9335] ? __pfx__copy_from_iter+0x10/0x10 [ 173.774563][ T9335] ? __build_skb_around+0x257/0x3e0 [ 173.774588][ T9335] ? netlink_sendmsg+0x642/0xb30 [ 173.774607][ T9335] ? skb_put+0x11b/0x210 [ 173.774631][ T9335] netlink_sendmsg+0x6b2/0xb30 [ 173.774659][ T9335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.774683][ T9335] ? aa_sock_msg_perm+0x94/0x160 [ 173.774706][ T9335] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.774727][ T9335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.774748][ T9335] __sock_sendmsg+0x219/0x270 [ 173.774770][ T9335] ____sys_sendmsg+0x505/0x830 [ 173.774798][ T9335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.774830][ T9335] ? import_iovec+0x74/0xa0 [ 173.774852][ T9335] ___sys_sendmsg+0x21f/0x2a0 [ 173.774870][ T9335] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.774928][ T9335] ? __fget_files+0x2a/0x420 [ 173.774946][ T9335] ? __fget_files+0x3a0/0x420 [ 173.774974][ T9335] __x64_sys_sendmsg+0x19b/0x260 [ 173.774991][ T9335] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.775014][ T9335] ? __pfx_ksys_write+0x10/0x10 [ 173.775028][ T9335] ? rcu_is_watching+0x15/0xb0 [ 173.775050][ T9335] ? do_syscall_64+0xbe/0x3b0 [ 173.775073][ T9335] do_syscall_64+0xfa/0x3b0 [ 173.775091][ T9335] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.775110][ T9335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.775126][ T9335] ? clear_bhb_loop+0x60/0xb0 [ 173.775144][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.775159][ T9335] RIP: 0033:0x7f72cb98e929 [ 173.775173][ T9335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.775186][ T9335] RSP: 002b:00007f72cc893038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.775203][ T9335] RAX: ffffffffffffffda RBX: 00007f72cbbb5fa0 RCX: 00007f72cb98e929 [ 173.775214][ T9335] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 173.775224][ T9335] RBP: 00007f72cc893090 R08: 0000000000000000 R09: 0000000000000000 [ 173.775233][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.775243][ T9335] R13: 0000000000000000 R14: 00007f72cbbb5fa0 R15: 00007fff5a4d54f8 [ 173.775270][ T9335] [ 174.059441][ T9336] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1158'. [ 174.073284][ T9331] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1158'. [ 174.085280][ T9336] IPVS: set_ctl: invalid protocol: 8345 172.30.1.5:20003 [ 174.093707][ T9336] Cannot find add_set index 3 as target [ 174.122505][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.182980][ T9333] netlink: 'syz.3.1159': attribute type 13 has an invalid length. [ 174.217854][ T9333] netlink: 'syz.3.1159': attribute type 17 has an invalid length. [ 174.292095][ T9333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.347092][ T9333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.410859][ T9333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.588304][ T9353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1164'. [ 174.601972][ T9353] x_tables: ip_tables: udp match: only valid for protocol 17 [ 174.934154][ T9366] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 174.949144][ T9366] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 174.961237][ T9366] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 175.080514][ T9333] syz.3.1159 (9333) used greatest stack depth: 19048 bytes left [ 175.130504][ T9370] netlink: 'syz.0.1170': attribute type 9 has an invalid length. [ 175.202152][ T9370] macvlan3: entered promiscuous mode [ 175.225492][ T9370] macvlan3: entered allmulticast mode [ 176.028813][ T9399] batadv0: entered promiscuous mode [ 176.049123][ T9399] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 176.072579][ T9399] batadv0: left promiscuous mode [ 176.681325][ T9419] FAULT_INJECTION: forcing a failure. [ 176.681325][ T9419] name failslab, interval 1, probability 0, space 0, times 0 [ 176.697566][ T9419] CPU: 1 UID: 0 PID: 9419 Comm: syz.2.1188 Not tainted 6.16.0-rc5-syzkaller-01302-gfadd1e6231b1 #0 PREEMPT(full) [ 176.697598][ T9419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.697608][ T9419] Call Trace: [ 176.697616][ T9419] [ 176.697623][ T9419] dump_stack_lvl+0x189/0x250 [ 176.697648][ T9419] ? __pfx____ratelimit+0x10/0x10 [ 176.697670][ T9419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.697689][ T9419] ? __pfx__printk+0x10/0x10 [ 176.697717][ T9419] ? __pfx___might_resched+0x10/0x10 [ 176.697741][ T9419] should_fail_ex+0x414/0x560 [ 176.697768][ T9419] should_failslab+0xa8/0x100 [ 176.697790][ T9419] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 176.697811][ T9419] ? __alloc_skb+0x112/0x2d0 [ 176.697836][ T9419] __alloc_skb+0x112/0x2d0 [ 176.697861][ T9419] ctrl_getfamily+0x3a1/0x590 [ 176.697882][ T9419] ? __pfx_ctrl_getfamily+0x10/0x10 [ 176.697899][ T9419] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 176.697924][ T9419] genl_family_rcv_msg_doit+0x212/0x300 [ 176.697949][ T9419] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 176.697992][ T9419] genl_rcv_msg+0x60e/0x790 [ 176.698016][ T9419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.698032][ T9419] ? __pfx_ctrl_getfamily+0x10/0x10 [ 176.698065][ T9419] netlink_rcv_skb+0x208/0x470 [ 176.698087][ T9419] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.698106][ T9419] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.698145][ T9419] ? down_read+0x1ad/0x2e0 [ 176.698170][ T9419] genl_rcv+0x28/0x40 [ 176.698185][ T9419] netlink_unicast+0x75c/0x8e0 [ 176.698217][ T9419] netlink_sendmsg+0x805/0xb30 [ 176.698248][ T9419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.698278][ T9419] ? aa_sock_msg_perm+0x94/0x160 [ 176.698303][ T9419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.698324][ T9419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.698345][ T9419] __sock_sendmsg+0x219/0x270 [ 176.698368][ T9419] __sys_sendto+0x3bd/0x520 [ 176.698393][ T9419] ? __pfx___sys_sendto+0x10/0x10 [ 176.698411][ T9419] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 176.698446][ T9419] ? __fget_files+0x3a0/0x420 [ 176.698478][ T9419] ? ksys_write+0x22a/0x250 [ 176.698503][ T9419] ? __pfx_ksys_write+0x10/0x10 [ 176.698518][ T9419] ? rcu_is_watching+0x15/0xb0 [ 176.698543][ T9419] __x64_sys_sendto+0xde/0x100 [ 176.698568][ T9419] do_syscall_64+0xfa/0x3b0 [ 176.698595][ T9419] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.698615][ T9419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.698631][ T9419] ? clear_bhb_loop+0x60/0xb0 [ 176.698651][ T9419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.698667][ T9419] RIP: 0033:0x7f72cb9907bc [ 176.698682][ T9419] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 176.698695][ T9419] RSP: 002b:00007f72cc891ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 176.698713][ T9419] RAX: ffffffffffffffda RBX: 00007f72cc891fc0 RCX: 00007f72cb9907bc [ 176.698725][ T9419] RDX: 000000000000001c RSI: 00007f72cc892010 RDI: 0000000000000004 [ 176.698736][ T9419] RBP: 0000000000000000 R08: 00007f72cc891f14 R09: 000000000000000c [ 176.698746][ T9419] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 176.698755][ T9419] R13: 00007f72cc891f68 R14: 00007f72cc892010 R15: 0000000000000000 [ 176.698786][ T9419] [ 182.300284][ T5860] sched: DL replenish lagged too much [ 194.640885][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.837732][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.851568][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 196.870587][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 196.889386][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 256.256063][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.277066][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.706737][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.724630][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.264503][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 328.271474][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5845/1:b..l [ 328.279729][ C1] rcu: (detected by 1, t=10503 jiffies, g=26813, q=249689 ncpus=2) [ 328.287709][ C1] task:syz-executor state:R running task stack:21096 pid:5845 tgid:5845 ppid:1 task_flags:0x40054c flags:0x00004004 [ 328.301963][ C1] Call Trace: [ 328.305251][ C1] [ 328.308189][ C1] __schedule+0x16f5/0x4d00 [ 328.312715][ C1] ? __lock_acquire+0xab9/0xd20 [ 328.317581][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 328.322877][ C1] ? __pfx___schedule+0x10/0x10 [ 328.327746][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 328.333038][ C1] preempt_schedule_irq+0xb5/0x150 [ 328.338163][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 328.343895][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 328.349885][ C1] irqentry_exit+0x6f/0x90 [ 328.354304][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 328.360288][ C1] RIP: 0010:unwind_next_frame+0x395/0x2390 [ 328.366108][ C1] Code: e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 80 19 00 00 41 0f b6 44 24 01 <83> e0 07 0f 84 75 15 00 00 83 f8 01 4c 8b 7c 24 48 48 bd 00 00 00 [ 328.385725][ C1] RSP: 0018:ffffc90003ecf198 EFLAGS: 00000246 [ 328.391797][ C1] RAX: 0000000000000002 RBX: ffffffff8fb5ff24 RCX: ffffffff8fb5ff28 [ 328.399775][ C1] RDX: ffffffff9031dbfe RSI: ffffffff9031dbce RDI: ffffffff8be29da0 [ 328.407753][ C1] RBP: dffffc0000000000 R08: 0000000000000009 R09: ffffffff8172aae5 [ 328.415730][ C1] R10: ffffc90003ecf2c8 R11: fffff520007d9e65 R12: ffffffff9031dc02 [ 328.423702][ C1] R13: ffffffff9031dc03 R14: ffffc90003ecf2c8 R15: ffffffff8fb5ff24 [ 328.431684][ C1] ? unwind_next_frame+0xa5/0x2390 [ 328.436815][ C1] ? unwind_next_frame+0xd4/0x2390 [ 328.441939][ C1] ? unwind_next_frame+0xa5/0x2390 [ 328.447051][ C1] ? __unwind_start+0xf8/0x760 [ 328.451825][ C1] __unwind_start+0x5b9/0x760 [ 328.456509][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 328.462755][ C1] arch_stack_walk+0xe4/0x150 [ 328.467454][ C1] ? __unwind_start+0xf8/0x760 [ 328.472227][ C1] stack_trace_save+0x9c/0xe0 [ 328.476907][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 328.482281][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 328.487489][ C1] kasan_save_stack+0x3e/0x60 [ 328.492318][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 328.497524][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 328.503680][ C1] call_rcu+0x157/0x9c0 [ 328.507849][ C1] ? __pfx_call_rcu+0x10/0x10 [ 328.512546][ C1] ? exit_mmap+0x53f/0xb50 [ 328.516964][ C1] kmem_cache_free+0x309/0x400 [ 328.521737][ C1] exit_mmap+0x53f/0xb50 [ 328.525982][ C1] ? uprobe_clear_state+0x20f/0x290 [ 328.531187][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 328.535948][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 328.541594][ C1] ? __pfx_exit_aio+0x10/0x10 [ 328.546285][ C1] ? uprobe_clear_state+0x274/0x290 [ 328.551494][ C1] __mmput+0x118/0x420 [ 328.555569][ C1] exit_mm+0x1da/0x2c0 [ 328.559646][ C1] ? __pfx_exit_mm+0x10/0x10 [ 328.564244][ C1] ? rcu_is_watching+0x15/0xb0 [ 328.569012][ C1] do_exit+0x648/0x22e0 [ 328.573176][ C1] ? do_raw_spin_lock+0x121/0x290 [ 328.578211][ C1] ? __pfx_do_exit+0x10/0x10 [ 328.582824][ C1] do_group_exit+0x21c/0x2d0 [ 328.587419][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.592620][ C1] get_signal+0x1286/0x1340 [ 328.597147][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 328.602695][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 328.607898][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 328.614069][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 328.619532][ C1] exit_to_user_mode_loop+0x75/0x110 [ 328.624815][ C1] do_syscall_64+0x2bd/0x3b0 [ 328.629414][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.634624][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.640691][ C1] ? clear_bhb_loop+0x60/0xb0 [ 328.645382][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.651282][ C1] RIP: 0033:0x7fbb8c3c11e5 [ 328.655706][ C1] RSP: 002b:00007ffeceb64230 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 328.664130][ C1] RAX: 0000000000000000 RBX: 000000000000026b RCX: 00007fbb8c3c11e5 [ 328.672106][ C1] RDX: 00007ffeceb64270 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.680096][ C1] RBP: 00007ffeceb642dc R08: 0000000000000000 R09: 0000000000000000 [ 328.688070][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 328.696039][ C1] R13: 00000000000927c0 R14: 000000000002b710 R15: 00007ffeceb64330 [ 328.704026][ C1]