last executing test programs: 51.391077549s ago: executing program 3 (id=132): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x0, 0x29, 0x0, "8f40b0acbdadccc4e9be70d6859c550be3ec0c723d5f1bd9518bcf8ebd31ae60a5460235a025579b1761b781b5167fa079d4bb0f65db4af72b0c23d2c9cfbde96219448a3fbed4607c93d06984f69ebe"}, 0xd8) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000300)={0x5, 0x6, 0x80}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) 50.662641579s ago: executing program 3 (id=140): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 50.400463201s ago: executing program 3 (id=141): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x80000) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304004000"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 47.804486496s ago: executing program 3 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000edff"], 0x48) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10262}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r12, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x8, 0x1, '.-}\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r11, 0x83cff000) r13 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r13, 0x1, 0x25, &(0x7f00000002c0)=r11, 0x4) 46.944376672s ago: executing program 3 (id=152): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 46.318538902s ago: executing program 3 (id=157): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0xa00) 41.016795846s ago: executing program 1 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea08000600070000000800", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) 40.697968755s ago: executing program 1 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r10}, 0xc) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r10}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x40c0800) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000070000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r14, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 40.10571022s ago: executing program 1 (id=209): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x45, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendto$inet(r0, &(0x7f0000001540)="96c4067df0efddad2503fbbd2c574aeef893f5c71173cc803a271a89b8c956354e80284660f170f97a76b689ce94cdf14558bf057daded65b6cc4e766b7fe08e487fa2ec5f66a7edf821419cc943d2926379114496983eae1e7f4a3f0057bed3413a0ff30f997849f0286adcea8db778064faf27a1fb931d23da98707f06882a086328c948adf1c5ce90e719197a117b441e42ba703f2d2c89c722c3563a17deeb6145f405dcad5a3a6ade6ccb65020c106e24ec4cf39602f8be264417dbe0ce0808c9f3adda7ebf837e", 0xca, 0x4, &(0x7f0000001300)={0x2, 0x4e24, @local}, 0x10) r2 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg$inet(r2, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="1c98f3e16f15a525976d0d65a15cb896ae8172bd97442cafe70b5f44d6ec28b20064f7edfee6e10466800e6b07caeb4a285d630d083a6726f41c0191319992f11745f847d2a5b0208cfca3cdbb3d7ac731c6476ea214421af83fbe1ea27bfdf0d7fa611e305772e6bf7266fcafbfe9575907cd9edad23c23c103e283ea330f7c637c2b755b58e7a8fe36c29be04d1969ccb014142367c66abccf6b1eca6672c8c30d5fb1fa12f51fdf224d03e96ed735b49e9fd00fe605f80edabc56fbf1df2a4e14a667b35d5eaf137f5471563bd97057b95edf037165c85381ed3220532aebb1d80002046ca2391c10b61fd13649", 0xef}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="6240b72ba0970de597d76b93aa08b7189147868351e8c65f3cda8c89c074d63f02d734524b3da826bfbdfc6044eeb7e27776567f74c62f42ac4299a69a613f2a50cb0286826bc056cfb5968f77ea3b848d8350eda59a1d4cfc00b1792faf6edcee49d5102d9d92e282c45dc094896e3081a24730711acbf71a2a091921ad89634673a92db98867a47bd3cabc062fd28a7e41473f4e1775b952313f82a52a684737c16e31f3073edecc8203e52767f8897e451f28eb81ad6e844c3b2fad648a61b5c6605d986cc41a473cf212e7e638c23f6ec8cf54fb4a2e4fbeaea4fd2f20", 0xdf}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000004c0)="1265ec1905436f27495ea8a9175ad52703491117bf30f7db", 0x18}, {&(0x7f0000000500)="e29ac77a8295b99a7a29ecb78b151f066a538ea62d827ffe8cfa298a74c947b4ea02755dcd514b3b49d328d5ae738ec29985d0fe9af832b53f8e43ae40f5f099f38fd161b3874c4511e9a8d2c9ba3237f904def43825b3b2dd269d6cc2cf4e3b903b0999ac6e0e861ef797776be8c93c4c73acfc90ac1c205e19f55b08f793352a5c5522e1f69afc834e9e749ec15c407f0d3518344f2116", 0x98}, {&(0x7f00000005c0)="999ea9a82da45a03ed9eb5d95decf505d35cbb69e02bce0498a294c99eacd9d9e6b99c6e5f945b08a46861a6bec2fbfb5c2905d8859ec0191494c28671b15ce11ab05503bd99746d", 0x48}, {&(0x7f0000000640)="a2d21c59dc95e62c6d39b6c32571dbf73db400c06df6cc85f97128fe88b0100073a1ca769e3468404d8e1ad0cce7cead816a727a2bf1242e4f3c1621735fdc77e2401111468fb25e2d626d43356cd729a1eac10e245ae7c54909aaa1cd44c145a103d4d96da5eef7209031017569391e1bf64dc902391a4f3e8320c0631bcec5ae7427b4659f43f72299783961c957a9ce5275d6d90eeec2673d037cb5593f2a53b7829d4345260a7e15a1eab325d8788611e6bed32cf7efaf01da9c593218e6c950c6ebe337e274bad5cb363c86b2fc766de6", 0xd3}, {&(0x7f0000000740)="75a4ebdafbf7c51fc3abadea4c353c205963ca27e7fbff8478321eacee95867a9e7145279c137a6c46d3442c9c19a419dc1e86f6c5d753399228b9ca3914e35bdb055459bb6332a9bd1626ea188a2222bd2ce391deec18d0ed02135a870338dea2300fa28964fe1ca57c517e9a93188bd402a476a63cd76fccfaf59d4c97116e04dd3a3331e2", 0x86}, {&(0x7f0000000800)="3c16bbf0047d4ba4456ef2200576f4480b56b8c304d0482a2a90032bf97bf8fff3b895203a808d4f3a56a8d7ae67919d4dc33b6e503fda688bab0d9cee962e1aa3e418269eab87827d8401c3d37a4f5171e09345c64b843a17a471a4734b66ac24be97fb8e919ce62a26a906b9919257cc99a7776357a60731b04a11d5d0e9", 0x7f}, {&(0x7f0000000880)="94657dd3916f3ee1384da8f456ccdfcc0c0341914418ec99f4843c1ee17a122fa1fb8d0a253bfab1c434d22caebc68eac233e4b243c2854c2b50c9c5f1ef6c85a6bf3ee73f1644e68027c0fcd43e86b5d3c3f271dcbf2b8b78ede691803293c1d656825f62e37ab6ad62a37993de2cee03db7caec8e0d7c03eea144cfb436ecd11f7", 0x82}, {&(0x7f0000000940)="9b7117f0f757540844bcf0167c5dfb4ad19db696f0a9b587f4bbac212e6139398977b8aad3f8e04aa5805e2b104c2ba4bc9e766dca4a0e4308808ed54db5dff13995ed1850d15a6d58bc8ea6274af9924dcb862fa290183b94f275b46cb36b3a7b5ba8d5731add8585c81b0c60fdc8abec24ae466969d45f570640c05bdd039b9d29cb2883729e2792c313f76b3f8cc153d67ce4b40202338020964fa94786b84f96013bde3862f65a00241560ceb90214ebfc8b618e05459585b9b1ad171c95b77d5b18618c5077ee65da6c02e5c55de4021fe277ece0bf80eb7101080013ca3f89537374ed6b09b35040af6bdcfdfdd429a252c1dd0f", 0xf7}], 0x8, &(0x7f0000000ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}}, {{&(0x7f0000000b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000b40)="cad3542900121f6ba609a19e80b877b52f94830979a38908163424673fdb69991a420fd21486c6f7fff8be28d7ffa761141daaa1b9da3efd1dda6c5e24e3cf73c91ffb7d1edaa96e777eaaa5969dd7bbbea73419846046ebab38b93dfc96640c5ed3cfef12dc783e5e3b46e18b17e642cd85f5d1fa72ad1a42af109ab76b26493768171aa1b9cb77dc399616c70e3fd8d83fb82f5253a560b3dc15f5cbc1cff308a6ae2a9e0f1a18981fa4f16a9f2c3b940245f2205d112f2d301505bd23c667c76ced3176443871fa3fead676349bc53b6c8b6b42ac9e4cf7744399442bb6d87dd8b092cee51be2f13b3c750238f8", 0xef}, {&(0x7f0000000c40)="25ed8ccb2752e58b6fcfc3581033921e4fdb2f3c4ba9a4f8450e1a9c4ce370f29350fe3f99d43e6afb127a3fe4032d1c7b148aab364bde6cb784ca235620467de58865f2b3b5fada756df1b8d6689fff31f69dfd490c0f14049955bf55e763c0764f8663969a85f4dca6ef683a8e51af50eaa0791cf30cda9af276850e1db631cbaf39b85dd6696e87718647b65db097cf031503f23bf08f64f08cf101146188397187f975591d03848fa914dac5077bcfd16ae6461b15208f8130471c77c97bc08bb024d73624f81c6c9d57c3da81fe6c1952786351", 0xd6}, {&(0x7f0000000d40)="18a05b4d91904bdf8c5909084b", 0xd}, {&(0x7f0000000d80)="7698ca0b17a9f06f8d9fc3cd359ca1bcc95293c1b8135c10128828e640f8510af6771623f4114f652a322151e00392a38b657bd56b4bf4aa9f531da22515a6dd0b6bfe9e6bc5e8de730f7f2a0ad6466a0eddbac83876a10ae61e3dfb77fa4949b4819e4df873085af447cd150b3f175a0af8d820a4eeb53d7ed5c1fa8212", 0x7e}], 0x4, &(0x7f0000000e40)=[@ip_retopts={{0x48, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x99, [@dev={0xac, 0x14, 0x14, 0x1c}, @multicast2, @private=0xa010102]}, @rr={0x7, 0xb, 0xdf, [@local, @multicast2]}, @cipso={0x86, 0x6, 0x2}, @end, @timestamp_prespec={0x44, 0x14, 0x7b, 0x3, 0x2, [{@private=0xa010101, 0x6}, {@empty, 0xfffffffc}]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@cipso={0x86, 0x38, 0x0, [{0x6, 0x2}, {0x7, 0x5, "95537a"}, {0x1, 0x2}, {0x0, 0xf, "9a906077cf678bff93a6000023"}, {0x6, 0xd, "6580452580e485ff7c4584"}, {0x1, 0xd, "e145248012b196888a2187"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x64, [@remote, @private=0xa010101]}, @ssrr={0x89, 0x17, 0x67, [@broadcast, @loopback, @multicast1, @local, @multicast1]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x13, [@rand_addr=0x64010101, @rand_addr=0x64010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xac, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}]}, @end, @cipso={0x86, 0x16, 0x0, [{0x7, 0x10, "10241af643482942c88baaad8dbc"}]}]}}}], 0x150}}, {{&(0x7f0000000fc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001000)="d41125b20aac1648a58cc6ffcca4fadc61ef3be14a282f7be46a7e3a833565f1afb686dc060d3319ed7aba7e9ee7098e255a5f9caa5f263389a8276039a0a132c6cfa7985045204e37d3f8d966777c08e0cc587fd4b6637093feeb9541061e3138bcfcbd73e9b6c5802aedd7f702e376141e4c1f6dca47def3e5ede468c33be33243fb4ca6a22039bc01b27a183fbd2d3762106e358a34c32908114f238d3a3b4c99397356a66ddde48a5e4680455864b007c45afb07f1c11768e005515212ad16c7", 0xc2}, {&(0x7f0000001100)="ed90840780713b70aae89237aa4b1e746e003a9537e7f5f5c3924f8d6138ec84fe082a269881aa724613a39895f74afd8075210f338a206e15740fcdfea0d132f70086b3604e80cc100dc890b5304d12d0b1f57ea53c23cff43c594d8f98065ba461b959386a8e50e022eec50b1b511064138c651ee3a856668f24baa62af709e5f47a653b7a19b409fe2d495c2322e3e8b1f3b660352e4cd152248d6467e9df4b86cafb93919196422ae3b6ff6181b71b4e370aa5aad15cf77e29fbecc13076cfe909bf38096ef6195ac36e53cac5ab6829cf5a604231d9b58233c3dcb4c965", 0xe0}, {&(0x7f0000001200)="4b6d598f5f3c249bea787cd64a90cc8ec27019faab7fc2aca4b7ca9e324c5c13e1c63403846b33c2e7aa5aa98c0721695041a15eefa869337fb1ce86ee0c64e6fa0457e18ca4aab0b3956cebafc18f74e647032025cb8b1dc987cb175c4a895ed70aae96c80d4e82ab1168ec58d0e043fc77d6ae1fabc619c7b6b696f3571e1bc7685ae85b148ac5729625e1d107f5383f81987ab36ad66536ef4ee4dcba11a04848ead18a09d527a721b54c3fc60b2947b3e059e5a2cbd33f6f", 0xba}], 0x3}}, {{0x0, 0x0, &(0x7f0000001380)}}], 0x6, 0x20000000) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000300)={0x5, 0x6, 0x80}, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) 40.011347337s ago: executing program 1 (id=211): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000000)={0x0, 0x0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0843b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000680), 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0)={r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000000740), 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x0, 0x0, 0x29, 0x0, "8f40b0acbdadccc4e9be70d6859c550be3ec0c723d5f1bd9518bcf8ebd31ae60a5460235a025579b1761b781b5167fa079d4bb0f65db4af72b0c23d2c9cfbde96219448a3fbed4607c93d06984f69ebe"}, 0xd8) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r9, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000300)={0x5, 0x6, 0x80}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) 39.458980979s ago: executing program 1 (id=215): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000880000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r5, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) close(0x3) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x2}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000880000000200000004"], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r5, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) (async) close(0x3) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x2}, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) (async) 39.254387234s ago: executing program 1 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='nilfs2_transaction_transition\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd7, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f5", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) write(r6, &(0x7f0000000040)="05000000010000", 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 30.361731897s ago: executing program 4 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x26) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090094020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x10000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44085}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44085}, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 29.592576195s ago: executing program 4 (id=325): getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000002140)) socket$key(0xf, 0x3, 0x2) socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000954eb4b7d486b2edf08e78a7d5be45c3ea7ccf1a375f51c105880119ee41a066494ce51f270aa26471e06909e25d5df7aa7bc37529719d859900004010212ae5d77fb41e547b2945e9211ae1d7f861e057fc06cf5a2f63178b923ce8e2003736fd6829215b629889339a678abf970bf7c98b748ee7520f8bf368147007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r3, 0x1ad72f7) accept4(r3, 0x0, 0x0, 0x80000) r4 = accept4$netrom(r3, 0x0, 0x0, 0x80000) writev(r4, &(0x7f0000000480)=[{0x0}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000180)=0x7, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r7, &(0x7f00000004c0)=[{{&(0x7f0000000100)=@x25, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=""/185}], 0x0, &(0x7f0000000300)=""/211}, 0xf}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/91}]}, 0x975}], 0x40000000000014a, 0x12021, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) 28.667593385s ago: executing program 4 (id=333): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FIONCLEX(r2, 0x5450) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r9, r8, 0x2, 0x6, 0x4000, @void, @value}, 0x10) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1}, 0x11) 28.625150493s ago: executing program 4 (id=334): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r2], 0x20}, 0x1, 0x3000000000000}, 0x0) 28.340167362s ago: executing program 4 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r10}, 0xc) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r10}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf25080001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x40c0800) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r14, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 24.088074323s ago: executing program 32 (id=219): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='nilfs2_transaction_transition\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd7, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f5", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}]}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) write(r6, &(0x7f0000000040)="05000000010000", 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 17.132670259s ago: executing program 2 (id=395): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="5001002010001304000000000000000000000000000000000000ffffac141423e0000002000000000000000000000000fffd00004e0400000200002029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000200032000000fc0000000000000000000000000000010000000000000000070000000000000002000000000000000400000000000000ffffffffffffffff040000000000000008000000000200000000000000000000010000000100000008000000000000007f000000000000000000000000000000f6000000000000000000000000000000000000000200000100000000000000005f001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000980000008000"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x804) 16.928533751s ago: executing program 2 (id=396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000100)={0x318, 0x13, 0x200, 0x70bd29, 0x25dfdbff, "", [@generic="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"]}, 0x318}], 0x1, 0x0, 0x0, 0x4000}, 0x20044800) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private0, @in=@empty, 0x0, 0x4000, 0x0, 0x800, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0xa, @in=@empty, 0x34ff, 0x1, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg$inet6(r4, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x25dfdbfc, {0x2, 0x1, 0x0, 0xcb, r3}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc53502", 0x39}, {&(0x7f0000001880)="371f6caa2f6c27", 0x7}], 0x4}], 0x1, 0x840) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}], 0x1}, 0x10001) 16.664582469s ago: executing program 2 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@dellinkprop={0x11c, 0x6d, 0x8, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x21000, 0x420}, [@IFLA_PHYS_SWITCH_ID={0x1b, 0x24, "c868a1e7c3852b8cd5e2aa7c0037c032eb7cd024706173"}, @IFLA_AF_SPEC={0x4}, @IFLA_PROP_LIST={0xa4, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_virt_wifi\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'bridge_slave_0\x00'}, {0x14, 0x35, 'syz_tun\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}]}, @IFLA_WEIGHT={0x8, 0xf, 0x5}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_macvtap\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffff}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x11c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="0001000006100000200012800b00010065727370616e00001000028004001200060011004e230000"], 0x40}}, 0x40080c0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x33, 0x0, &(0x7f0000000000)=0x4a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r6, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) 16.308197122s ago: executing program 2 (id=400): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x0, 0x0, @void, @value}, 0x10) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)=0xfffffffffffffe85) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c40000000002010400000000000000000a0000003c0003800c000280050001003a0000002c00018014000300fe8000000000000000000000000000bb1400040000000000000000000000000000000000440002802c00018014000300fc00000000000000000000000000000014000400ff02fce3e7f8000000000000000000011400018008000100ac1414bb0800020064010100300001802c00018014000300ff02000000000000000000000000000114000400fe8000"/196], 0xc4}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xc0, 0x8, 0xfa04, 0x0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r6, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) socket$nl_netfilter(0x10, 0x3, 0xc) 16.099471107s ago: executing program 2 (id=402): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="ff7f010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4100}, 0x0) 15.488542546s ago: executing program 2 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xf5ffffff}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 14.915400857s ago: executing program 4 (id=337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r6, r10}, 0xc) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r6, r10}, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf25080001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x40c0800) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r14, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.516933654s ago: executing program 5 (id=455): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x2, 0x6b, 0x4, 0x8}, {0x8, 0x6e, 0x2, 0xffffffff}]}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x29, 0x7, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1.319752957s ago: executing program 0 (id=457): socket(0xf, 0x6, 0x80000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00', @ANYBLOB="000428bd7000fedbdf250500000008000500fc05000007ff0900080000000500060007"], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0xc0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002e0ffe90b5d5a8c7a7e2a12d422300b83cabf692bfd0d8af565cb0a9702fac21fa75ec1f31e27735bf54356f03f5a300b7251d4b89a0fcda345ea3595a2500421f06cd98b8221e700140d1501898e6bf75706c35b5397420bec8f3e14522ef5d44c44273b7d18491260168cdd13bd83a8882f6d4cd31a625d1c0eb5a81990607dd885f044c2a48b79b69c00c5965e412ac87299756fcffd75544598558175a3676f31cfeb9f3fda553d85948fcea988d8b3f13e6eb477be64a29a28efe43977554e6dd60943cca07f2d800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000500), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000043000000080000000100000080000000fe9c671351deca", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYRESDEC=r8], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xb, 0x0, &(0x7f00000003c0)="e0b9547ed387dbe9abc89b", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r11, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.168867026s ago: executing program 5 (id=458): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) (fail_nth: 1) 838.957102ms ago: executing program 5 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xa4, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x67, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x5d7f, @void, @val, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb2, 0x4}}, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0xb7, 0xea}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0xaa, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x80, 0x6, 0x7}}}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x300}]}, 0xa4}}, 0x0) 769.473455ms ago: executing program 0 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00", @ANYRES32, @ANYBLOB="00000000000000001c"], 0x44}, 0x1, 0xefff}, 0x0) 675.424993ms ago: executing program 5 (id=461): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00fc0000000000000000000c0009000800", @ANYRES32=0x0, @ANYBLOB="14000500"], 0x3c}, 0x1, 0x11}, 0x0) 484.630133ms ago: executing program 0 (id=462): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000004c0)=0x1ff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r1, 0x0, r0, 0x0, 0x7ffff041, 0x1200000000000000) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0xd8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@local, r3}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'ip6_vti0\x00', &(0x7f0000001300)={'ip6gre0\x00', 0x0, 0x4, 0x9, 0x5, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x1, 0x4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001680)={r0, 0xe0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0, 0x0], 0x0, 0xd4, &(0x7f0000001480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000014c0), &(0x7f0000001500), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000001540)}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20081}, 0x0) 420.037308ms ago: executing program 5 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffd}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10) sendmmsg$inet(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="39730e36ce64ffe5a6d291a6dba2ee585eb91146059f09a4fe06bfdb86313dc3d6f1232cd86495a869e22ecf08bfb260c63eb0203e2fa5a6cbe3adfc4c9bf86007427d796fc0aa50a9631e323673a4b20922c9292693e66412e1b8ead7d3", 0x5e}, {&(0x7f00000005c0)="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", 0x1000}], 0x2, &(0x7f00000015c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa51b}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x2b, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@cipso={0x86, 0x59, 0x1, [{0x7, 0x7, "ecfa42c7fc"}, {0x1, 0x10, "c323648649e21c1f74a725aae205"}, {0x1, 0x11, "9e09e0040ef29d2177858a659cfb1f"}, {0x5, 0xb, "34645ddbe62cc42198"}, {0x7, 0x8, "e28e76cb8361"}, {0x5, 0xe, "df61b30127f3a17579d2c742"}, {0x0, 0xa, "1fdbbf11ba424d67"}]}, @ssrr={0x89, 0xb, 0xa6, [@multicast2, @multicast2]}, @generic={0x44, 0x0, "af94"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}], 0x178}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000380)="6c49014e73a27ad1c3d5df4ad7046cda9d22b7873abe2c5b741e42dd23a5a1f4ffcd4231b997350dfdba8d2e6f4667c89c8dbd545a9630223703a4fa7e042158d34c9dbe8698ce078ac4374d0ec714186f4033bf955130ac40ad229eef77d1b81c8d585cfa6614968f3758fd8635671f008b8bae116758295ccdc50a5d6259202531de9ed6b8badecadf9130867d558a4576de91db894826a117b923f4591d0ec70dc5e59a17d10291d3cdce6ad3e4b56d695a07a4e244979aba20c24816c27e5173cfb8", 0xc4}], 0x1, &(0x7f0000000480)}}], 0x2, 0x8000) 386.93477ms ago: executing program 0 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x11a, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000005c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x200840b0) 176.71327ms ago: executing program 0 (id=465): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x140, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe9, 0xa8, @random="d406236c42444576dd2741218c50f0536b7b66d446d2348a5fdc5c3d16c01bcf5fd39194cd7ea2037b2aea727c7084170c2727b6f6ac4503b06c5b6566b7bf765002ab6e200b64d046637fdcdf527ea1727cb08dd549abcfbe1cc51fb12253222f932eedfabfa1f79cbb03169bbe33044d73fcaef208b652593307fb91c2acb50e7048d151b2fac87bdd851dfe8bd2b1c81e4e732de9cece3673eabfce1332cfc0a704374a45db98a1ed586e13ed5565cdfab6a02174b0d5c8e9837ad0be3f0f49320055cfad0f547c692dd24c669c2bb64a6360fc085e1687113e4b23557f82b20031ef0c"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1000}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x2) sendmsg$inet6(r3, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007180000000000000029"], 0x30}, 0x0) 73.873085ms ago: executing program 0 (id=466): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r4, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) socket$isdn_base(0x22, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = epoll_create(0x5) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)={0x30000001}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r8, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r10 = socket(0x1, 0x803, 0x0) getsockopt(r9, 0x8, 0x0, &(0x7f0000000000)=""/15, &(0x7f0000000080)=0xf) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32=r11, @ANYBLOB="14000200ff02000000000000000000000000000108000800028d"], 0x34}}, 0x4000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 5 (id=467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) read$alg(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0600"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000003000000030000000b00"/24, @ANYRES32=r4, @ANYBLOB], 0x50) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x6, 0x57, 0x8, 0xabb5]}, 0xc) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) kernel console output (not intermixed with test programs): 0][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.932836][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.940097][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.002790][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.010066][ T4187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.047009][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.093178][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.100432][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.170841][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.178072][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.223148][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.580715][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.627779][ T5838] veth0_vlan: entered promiscuous mode [ 94.737364][ T5838] veth1_vlan: entered promiscuous mode [ 94.780501][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.849846][ T5838] veth0_macvtap: entered promiscuous mode [ 94.876411][ T5837] Bluetooth: hci0: command tx timeout [ 94.876431][ T5156] Bluetooth: hci1: command tx timeout [ 94.892361][ T5834] veth0_vlan: entered promiscuous mode [ 94.921865][ T5838] veth1_macvtap: entered promiscuous mode [ 94.955731][ T5837] Bluetooth: hci2: command tx timeout [ 94.955739][ T5156] Bluetooth: hci3: command tx timeout [ 94.959937][ T5834] veth1_vlan: entered promiscuous mode [ 95.099029][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.114851][ T5837] Bluetooth: hci4: command tx timeout [ 95.123542][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.159281][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.218181][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.240709][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.251856][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.264533][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289900][ T5834] veth0_macvtap: entered promiscuous mode [ 95.323924][ T5834] veth1_macvtap: entered promiscuous mode [ 95.341033][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.430742][ T5842] veth0_vlan: entered promiscuous mode [ 95.490507][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.549107][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.556870][ T5851] veth0_vlan: entered promiscuous mode [ 95.568882][ T5842] veth1_vlan: entered promiscuous mode [ 95.592849][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.602595][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.611541][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.620432][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.633818][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.644911][ T5845] veth0_vlan: entered promiscuous mode [ 95.656619][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.680250][ T5851] veth1_vlan: entered promiscuous mode [ 95.712380][ T5845] veth1_vlan: entered promiscuous mode [ 95.773003][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.797570][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.862538][ T5851] veth0_macvtap: entered promiscuous mode [ 95.880992][ T5842] veth0_macvtap: entered promiscuous mode [ 95.887582][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.893301][ T5842] veth1_macvtap: entered promiscuous mode [ 95.945521][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.949256][ T5851] veth1_macvtap: entered promiscuous mode [ 95.953408][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.053570][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.075517][ T5845] veth0_macvtap: entered promiscuous mode [ 96.083224][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.092396][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.109192][ T5956] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 96.137088][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.154247][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.162472][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.187003][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.194166][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.202382][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.209574][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.220904][ T5956] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 96.243715][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.254017][ T5845] veth1_macvtap: entered promiscuous mode [ 96.290599][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.300523][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.324514][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.333290][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.389607][ T5959] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 96.423309][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.460970][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.471290][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.482442][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.492096][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.525497][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.583054][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.597306][ T5963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.621049][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.638803][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.650054][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.663092][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.750952][ T5966] netlink: 'syz.3.7': attribute type 12 has an invalid length. [ 96.789327][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.818475][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.947306][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.958447][ T5837] Bluetooth: hci0: command tx timeout [ 96.965769][ T5837] Bluetooth: hci1: command tx timeout [ 97.004534][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.034849][ T5837] Bluetooth: hci2: command tx timeout [ 97.038526][ T5156] Bluetooth: hci3: command tx timeout [ 97.182470][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.195916][ T5156] Bluetooth: hci4: command tx timeout [ 97.195953][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 97.212628][ T10] cfg80211: failed to load regulatory.db [ 97.229761][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.239222][ T5976] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8'. [ 97.307764][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.322581][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.485723][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.498428][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.591820][ T5979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.599303][ T5979] IPv6: NLM_F_CREATE should be set when creating new route [ 97.606712][ T5979] IPv6: NLM_F_CREATE should be set when creating new route [ 97.613959][ T5979] IPv6: NLM_F_CREATE should be set when creating new route [ 97.697163][ T5983] lo speed is unknown, defaulting to 1000 [ 97.727840][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.737106][ T5983] lo speed is unknown, defaulting to 1000 [ 97.745223][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.754148][ T5983] lo speed is unknown, defaulting to 1000 [ 97.768929][ T5983] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.805618][ T5983] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.938460][ T5986] Zero length message leads to an empty skb [ 98.002281][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 98.020773][ T5983] lo speed is unknown, defaulting to 1000 [ 98.071976][ T5991] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 98.447886][ T5983] lo speed is unknown, defaulting to 1000 [ 98.500442][ T5983] lo speed is unknown, defaulting to 1000 [ 98.692612][ T5997] syzkaller0: entered promiscuous mode [ 98.699244][ T5997] syzkaller0: entered allmulticast mode [ 98.707299][ T5983] lo speed is unknown, defaulting to 1000 [ 98.736715][ T5983] lo speed is unknown, defaulting to 1000 [ 98.750905][ T6009] batman_adv: batadv0: Adding interface: ip6gretap1 [ 98.757855][ T6009] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.784102][ T6009] batman_adv: batadv0: Interface activated: ip6gretap1 [ 99.868852][ T5983] lo speed is unknown, defaulting to 1000 [ 99.889112][ T5985] siw: device registration error -23 [ 100.243831][ T6020] netlink: 'syz.3.17': attribute type 4 has an invalid length. [ 100.302230][ T6027] netlink: 'syz.3.17': attribute type 4 has an invalid length. [ 100.306782][ T6022] netlink: 'syz.0.16': attribute type 11 has an invalid length. [ 100.624307][ T6033] netlink: 'syz.4.19': attribute type 12 has an invalid length. [ 100.826224][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 100.907595][ T6039] syzkaller0: entered promiscuous mode [ 100.913584][ T6039] syzkaller0: entered allmulticast mode [ 101.026764][ T6043] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 101.058386][ T6043] netlink: 224 bytes leftover after parsing attributes in process `syz.0.23'. [ 101.396705][ T6044] macvtap1: entered promiscuous mode [ 101.432850][ T6044] vlan0: entered promiscuous mode [ 101.448285][ T6044] macvtap1: entered allmulticast mode [ 101.453838][ T6044] vlan0: entered allmulticast mode [ 101.463829][ T6044] veth0_vlan: entered allmulticast mode [ 101.860710][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 102.160829][ T6058] netlink: 308 bytes leftover after parsing attributes in process `syz.2.28'. [ 102.172055][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 103.100344][ T6056] vlan0: entered promiscuous mode [ 103.123614][ T6056] dummy0: entered promiscuous mode [ 103.265390][ T6062] IPv6: NLM_F_CREATE should be specified when creating new route [ 103.291989][ T6058] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 103.665466][ T6074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.672894][ T6074] IPv6: NLM_F_CREATE should be set when creating new route [ 103.680765][ T6074] IPv6: NLM_F_CREATE should be set when creating new route [ 103.688339][ T6074] IPv6: NLM_F_CREATE should be set when creating new route [ 103.782531][ T6078] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.901763][ T6083] netlink: 64 bytes leftover after parsing attributes in process `syz.2.37'. [ 103.962673][ T6083] netlink: 'syz.2.37': attribute type 2 has an invalid length. [ 104.001258][ T5156] block nbd0: Receive control failed (result -32) [ 104.601919][ T6096] batman_adv: batadv0: Adding interface: ip6gretap1 [ 104.648451][ T6096] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.795724][ T6096] batman_adv: batadv0: Interface activated: ip6gretap1 [ 104.833859][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 104.996605][ T6109] netlink: 'syz.4.42': attribute type 3 has an invalid length. [ 105.025367][ T6109] netlink: 666 bytes leftover after parsing attributes in process `syz.4.42'. [ 105.257695][ T6117] netlink: 'syz.0.46': attribute type 3 has an invalid length. [ 105.760670][ T6134] syzkaller1: entered promiscuous mode [ 105.769579][ T6134] syzkaller1: entered allmulticast mode [ 105.797365][ T6139] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 106.073385][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.54'. [ 106.121561][ T6147] netlink: 36 bytes leftover after parsing attributes in process `syz.0.54'. [ 106.210125][ T6147] vlan2: entered allmulticast mode [ 106.218332][ T6147] bond_slave_1: entered allmulticast mode [ 106.468314][ T6156] xt_HMARK: spi-set and port-set can't be combined [ 106.498658][ T6154] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 106.547167][ T6154] batadv_slave_0: entered promiscuous mode [ 106.658411][ T6164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.877474][ T6170] siw: device registration error -23 [ 107.192863][ T6177] syzkaller0: entered promiscuous mode [ 107.222323][ T6177] syzkaller0: entered allmulticast mode [ 107.251927][ T6182] batman_adv: batadv0: Adding interface: ip6gretap1 [ 107.259529][ T6182] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.291452][ T6182] batman_adv: batadv0: Interface activated: ip6gretap1 [ 107.313249][ T6188] netlink: 'syz.0.72': attribute type 15 has an invalid length. [ 107.343376][ T6185] batman_adv: batadv0: Adding interface: ip6gretap1 [ 107.346514][ T6188] syz.0.72: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.352923][ T6185] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.413055][ T6188] CPU: 1 UID: 0 PID: 6188 Comm: syz.0.72 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 107.413086][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.413106][ T6188] Call Trace: [ 107.413116][ T6188] [ 107.413126][ T6188] dump_stack_lvl+0x189/0x250 [ 107.413179][ T6188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.413213][ T6188] ? __pfx__printk+0x10/0x10 [ 107.413237][ T6188] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 107.413262][ T6188] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 107.413287][ T6188] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 107.413315][ T6188] warn_alloc+0x214/0x310 [ 107.413339][ T6188] ? stack_depot_save_flags+0x429/0x900 [ 107.413373][ T6188] ? __pfx_warn_alloc+0x10/0x10 [ 107.413398][ T6188] ? kasan_save_track+0x4f/0x80 [ 107.413431][ T6188] ? xskq_create+0x56/0x170 [ 107.413461][ T6188] ? xsk_init_queue+0xb0/0x110 [ 107.413490][ T6188] ? xsk_setsockopt+0x43f/0x710 [ 107.413516][ T6188] ? do_sock_setsockopt+0x25a/0x3e0 [ 107.413542][ T6188] ? __x64_sys_setsockopt+0x18b/0x220 [ 107.413566][ T6188] ? do_syscall_64+0xfa/0x3b0 [ 107.413585][ T6188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.413627][ T6188] __vmalloc_node_range_noprof+0x125/0x12f0 [ 107.413687][ T6188] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.413719][ T6188] ? __kasan_kmalloc+0x93/0xb0 [ 107.413743][ T6188] vmalloc_user_noprof+0xad/0xf0 [ 107.413767][ T6188] ? xskq_create+0xbf/0x170 [ 107.413800][ T6188] xskq_create+0xbf/0x170 [ 107.413837][ T6188] xsk_init_queue+0xb0/0x110 [ 107.413873][ T6188] xsk_setsockopt+0x43f/0x710 [ 107.413907][ T6188] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.413936][ T6188] ? __lock_acquire+0xab9/0xd20 [ 107.413978][ T6188] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 107.414005][ T6188] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.414044][ T6188] do_sock_setsockopt+0x25a/0x3e0 [ 107.414074][ T6188] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.414108][ T6188] ? __fget_files+0x2a/0x420 [ 107.414142][ T6188] __x64_sys_setsockopt+0x18b/0x220 [ 107.414176][ T6188] do_syscall_64+0xfa/0x3b0 [ 107.414195][ T6188] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.414225][ T6188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.414245][ T6188] ? clear_bhb_loop+0x60/0xb0 [ 107.414271][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.414290][ T6188] RIP: 0033:0x7fe1dd98e929 [ 107.414318][ T6188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.414335][ T6188] RSP: 002b:00007fe1de775038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.414358][ T6188] RAX: ffffffffffffffda RBX: 00007fe1ddbb6080 RCX: 00007fe1dd98e929 [ 107.414372][ T6188] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 107.414385][ T6188] RBP: 00007fe1dda10b39 R08: 0000000000000004 R09: 0000000000000000 [ 107.414398][ T6188] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.414411][ T6188] R13: 0000000000000000 R14: 00007fe1ddbb6080 R15: 00007fff8c3c7358 [ 107.414444][ T6188] [ 107.434534][ T6185] batman_adv: batadv0: Interface activated: ip6gretap1 [ 107.475578][ T6188] Mem-Info: [ 107.824508][ T6188] active_anon:5206 inactive_anon:0 isolated_anon:0 [ 107.824508][ T6188] active_file:1257 inactive_file:39825 isolated_file:0 [ 107.824508][ T6188] unevictable:768 dirty:564 writeback:0 [ 107.824508][ T6188] slab_reclaimable:9889 slab_unreclaimable:99219 [ 107.824508][ T6188] mapped:31365 shmem:1359 pagetables:1117 [ 107.824508][ T6188] sec_pagetables:0 bounce:0 [ 107.824508][ T6188] kernel_misc_reclaimable:0 [ 107.824508][ T6188] free:1330223 free_pcp:21667 free_cma:0 [ 107.935990][ T6197] Bluetooth: MGMT ver 1.23 [ 107.954229][ T6188] Node 0 active_anon:20824kB inactive_anon:0kB active_file:5028kB inactive_file:159100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125560kB dirty:2236kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11972kB pagetables:4412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.025920][ T6188] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 108.071814][ T6188] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.175897][ T6188] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 108.182547][ T6188] Node 0 DMA32 free:1407572kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20788kB inactive_anon:0kB active_file:5028kB inactive_file:157284kB unevictable:1536kB writepending:2296kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:63968kB local_pcp:39676kB free_cma:0kB [ 108.227670][ T6189] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 108.271653][ T6188] lowmem_reserve[]: 0 0 1 1 1 [ 108.291646][ T6188] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 108.323263][ T6188] lowmem_reserve[]: 0 0 0 0 0 [ 108.328334][ T6188] Node 1 Normal free:3898120kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:20kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21696kB local_pcp:9056kB free_cma:0kB [ 108.375600][ T6188] lowmem_reserve[]: 0 0 0 0 0 [ 108.380506][ T6188] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.398352][ T6188] Node 0 DMA32: 950*4kB (UME) 293*8kB (UME) 138*16kB (UM) 33*32kB (UME) 16*64kB (UME) 5*128kB (UME) 2*256kB (M) 3*512kB (M) 4*1024kB (UME) 7*2048kB (ME) 336*4096kB (M) = 1407808kB [ 108.416906][ T6188] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 108.436701][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 108.445892][ T6211] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 108.453431][ T6211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.484899][ T6188] Node 1 Normal: 208*4kB (UE) 65*8kB (UME) 50*16kB (UME) 59*32kB (UME) 17*64kB (UME) 4*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3898120kB [ 108.525864][ T6188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.545033][ T6188] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.565976][ T6188] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.599147][ T6188] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.620777][ T6188] 42487 total pagecache pages [ 108.629551][ T6188] 0 pages in swap cache [ 108.640562][ T6188] Free swap = 124996kB [ 108.653973][ T6188] Total swap = 124996kB [ 108.678583][ T6188] 2097051 pages RAM [ 108.684900][ T6188] 0 pages HighMem/MovableOnly [ 108.689842][ T6188] 424689 pages reserved [ 108.694116][ T6188] 0 pages cma reserved [ 109.910821][ T6226] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 109.938672][ T6193] lo speed is unknown, defaulting to 1000 [ 110.118930][ T6233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.189073][ T6229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.81'. [ 110.232263][ T6237] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 110.234993][ T5156] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 110.248905][ T6225] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 110.390055][ T6239] FAULT_INJECTION: forcing a failure. [ 110.390055][ T6239] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.424712][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.0.84 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 110.424742][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.424755][ T6239] Call Trace: [ 110.424763][ T6239] [ 110.424771][ T6239] dump_stack_lvl+0x189/0x250 [ 110.424810][ T6239] ? __pfx____ratelimit+0x10/0x10 [ 110.424844][ T6239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.424877][ T6239] ? __pfx__printk+0x10/0x10 [ 110.424901][ T6239] ? __might_fault+0xb0/0x130 [ 110.424932][ T6239] should_fail_ex+0x414/0x560 [ 110.424966][ T6239] _copy_from_iter+0x1db/0x16f0 [ 110.425004][ T6239] ? rcu_is_watching+0x15/0xb0 [ 110.425038][ T6239] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 110.425062][ T6239] ? __pfx__copy_from_iter+0x10/0x10 [ 110.425095][ T6239] ? __build_skb_around+0x257/0x3e0 [ 110.425124][ T6239] ? netlink_sendmsg+0x642/0xb30 [ 110.425149][ T6239] ? skb_put+0x11b/0x210 [ 110.425179][ T6239] netlink_sendmsg+0x6b2/0xb30 [ 110.425216][ T6239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.425246][ T6239] ? aa_sock_msg_perm+0x94/0x160 [ 110.425276][ T6239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.425302][ T6239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.425329][ T6239] __sock_sendmsg+0x219/0x270 [ 110.425354][ T6239] ____sys_sendmsg+0x505/0x830 [ 110.425387][ T6239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.425424][ T6239] ? import_iovec+0x74/0xa0 [ 110.425449][ T6239] ___sys_sendmsg+0x21f/0x2a0 [ 110.425480][ T6239] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.425550][ T6239] ? __fget_files+0x2a/0x420 [ 110.425573][ T6239] ? __fget_files+0x3a0/0x420 [ 110.425608][ T6239] __x64_sys_sendmsg+0x19b/0x260 [ 110.425640][ T6239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.425689][ T6239] ? __pfx_ksys_write+0x10/0x10 [ 110.425706][ T6239] ? rcu_is_watching+0x15/0xb0 [ 110.425744][ T6239] ? do_syscall_64+0xbe/0x3b0 [ 110.425769][ T6239] do_syscall_64+0xfa/0x3b0 [ 110.425788][ T6239] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.425821][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.425842][ T6239] ? clear_bhb_loop+0x60/0xb0 [ 110.425873][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.425894][ T6239] RIP: 0033:0x7fe1dd98e929 [ 110.425912][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.425930][ T6239] RSP: 002b:00007fe1de796038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.425952][ T6239] RAX: ffffffffffffffda RBX: 00007fe1ddbb5fa0 RCX: 00007fe1dd98e929 [ 110.425967][ T6239] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 110.425981][ T6239] RBP: 00007fe1de796090 R08: 0000000000000000 R09: 0000000000000000 [ 110.425994][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.426006][ T6239] R13: 0000000000000000 R14: 00007fe1ddbb5fa0 R15: 00007fff8c3c7358 [ 110.426038][ T6239] [ 111.082153][ T6249] lo speed is unknown, defaulting to 1000 [ 111.097594][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 111.101081][ T6247] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 111.510497][ T6262] netlink: 165 bytes leftover after parsing attributes in process `syz.4.92'. [ 111.520251][ T6258] syzkaller0: entered promiscuous mode [ 111.551754][ T6258] syzkaller0: entered allmulticast mode [ 111.682834][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 112.971228][ T6268] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 112.976334][ T30] audit: type=1800 audit(1749840726.630:2): pid=6268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.94" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 112.981563][ T6268] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 113.019334][ T6268] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.134188][ T6275] netlink: 308 bytes leftover after parsing attributes in process `syz.0.96'. [ 113.202155][ T5156] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.288479][ T6278] netlink: ct family unspecified [ 113.293527][ T6278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.430851][ T6281] lo speed is unknown, defaulting to 1000 [ 113.441441][ T30] audit: type=1107 audit(1749840727.100:3): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 113.538426][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.100'. [ 113.855355][ T6294] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 113.868828][ T6294] netlink: 224 bytes leftover after parsing attributes in process `syz.2.103'. [ 113.948824][ T6297] macvtap1: entered promiscuous mode [ 114.025337][ T6297] vlan0: entered promiscuous mode [ 114.036538][ T6297] macvtap1: entered allmulticast mode [ 114.058156][ T6297] vlan0: entered allmulticast mode [ 114.063342][ T6297] veth0_vlan: entered allmulticast mode [ 114.124690][ T6297] vlan0: left allmulticast mode [ 114.132941][ T6297] veth0_vlan: left allmulticast mode [ 114.148328][ T6297] vlan0: left promiscuous mode [ 114.252078][ T6305] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 114.263541][ T6301] dummy0: entered promiscuous mode [ 114.288567][ T6301] vlan2: entered promiscuous mode [ 114.361871][ T6310] netlink: 308 bytes leftover after parsing attributes in process `syz.1.109'. [ 114.625538][ T6308] syzkaller0: entered promiscuous mode [ 114.643157][ T6308] syzkaller0: entered allmulticast mode [ 114.652601][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 114.674034][ T6313] netlink: 'syz.2.110': attribute type 4 has an invalid length. [ 114.712230][ T6313] netlink: 40 bytes leftover after parsing attributes in process `syz.2.110'. [ 115.094909][ T6331] xt_recent: Unsupported userspace flags (00000048) [ 115.634229][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 115.891564][ T6352] netlink: 308 bytes leftover after parsing attributes in process `syz.3.121'. [ 116.315175][ T5156] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.040721][ T5156] Bluetooth: hci4: command tx timeout [ 117.097485][ T6363] siw: device registration error -23 [ 117.157606][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 117.259677][ T6371] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 117.800748][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 118.476004][ T6419] warning: `syz.0.134' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.570232][ T6422] netlink: 156 bytes leftover after parsing attributes in process `syz.1.133'. [ 119.043230][ T6431] syzkaller0: entered promiscuous mode [ 119.049387][ T6431] syzkaller0: entered allmulticast mode [ 119.307987][ T6451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 119.354799][ T5156] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.391673][ T6454] warn_alloc: 4 callbacks suppressed [ 119.391696][ T6454] syz.2.142: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 119.454734][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.2.142 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 119.454768][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.454782][ T6454] Call Trace: [ 119.454790][ T6454] [ 119.454800][ T6454] dump_stack_lvl+0x189/0x250 [ 119.454846][ T6454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.454882][ T6454] ? __pfx__printk+0x10/0x10 [ 119.454906][ T6454] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.454932][ T6454] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.454958][ T6454] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 119.454985][ T6454] warn_alloc+0x214/0x310 [ 119.455010][ T6454] ? stack_depot_save_flags+0x40/0x900 [ 119.455044][ T6454] ? __pfx_warn_alloc+0x10/0x10 [ 119.455072][ T6454] ? kasan_save_track+0x4f/0x80 [ 119.455105][ T6454] ? xskq_create+0x56/0x170 [ 119.455136][ T6454] ? xsk_init_queue+0xb0/0x110 [ 119.455164][ T6454] ? xsk_setsockopt+0x43f/0x710 [ 119.455192][ T6454] ? do_sock_setsockopt+0x25a/0x3e0 [ 119.455217][ T6454] ? __x64_sys_setsockopt+0x18b/0x220 [ 119.455243][ T6454] ? do_syscall_64+0xfa/0x3b0 [ 119.455262][ T6454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.455295][ T6454] __vmalloc_node_range_noprof+0x125/0x12f0 [ 119.455355][ T6454] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.455387][ T6454] ? __kasan_kmalloc+0x93/0xb0 [ 119.455412][ T6454] vmalloc_user_noprof+0xad/0xf0 [ 119.455436][ T6454] ? xskq_create+0xbf/0x170 [ 119.455470][ T6454] xskq_create+0xbf/0x170 [ 119.455507][ T6454] xsk_init_queue+0xb0/0x110 [ 119.455542][ T6454] xsk_setsockopt+0x43f/0x710 [ 119.455596][ T6454] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.455626][ T6454] ? __lock_acquire+0xab9/0xd20 [ 119.455668][ T6454] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 119.455696][ T6454] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.455733][ T6454] do_sock_setsockopt+0x25a/0x3e0 [ 119.455765][ T6454] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 119.455799][ T6454] ? __fget_files+0x2a/0x420 [ 119.455833][ T6454] __x64_sys_setsockopt+0x18b/0x220 [ 119.455868][ T6454] do_syscall_64+0xfa/0x3b0 [ 119.455888][ T6454] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.455922][ T6454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.455942][ T6454] ? clear_bhb_loop+0x60/0xb0 [ 119.455970][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.455991][ T6454] RIP: 0033:0x7f04e958e929 [ 119.456011][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.456041][ T6454] RSP: 002b:00007f04ea338038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.456066][ T6454] RAX: ffffffffffffffda RBX: 00007f04e97b6080 RCX: 00007f04e958e929 [ 119.456082][ T6454] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 119.456095][ T6454] RBP: 00007f04e9610b39 R08: 0000000000000004 R09: 0000000000000000 [ 119.456108][ T6454] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.456122][ T6454] R13: 0000000000000000 R14: 00007f04e97b6080 R15: 00007ffde8c07b58 [ 119.456158][ T6454] [ 119.457705][ T6454] Mem-Info: [ 119.783187][ T6454] active_anon:8178 inactive_anon:0 isolated_anon:0 [ 119.783187][ T6454] active_file:1416 inactive_file:39831 isolated_file:0 [ 119.783187][ T6454] unevictable:768 dirty:311 writeback:0 [ 119.783187][ T6454] slab_reclaimable:9863 slab_unreclaimable:98960 [ 119.783187][ T6454] mapped:34338 shmem:4209 pagetables:1173 [ 119.783187][ T6454] sec_pagetables:0 bounce:0 [ 119.783187][ T6454] kernel_misc_reclaimable:0 [ 119.783187][ T6454] free:1335064 free_pcp:12337 free_cma:0 [ 119.831079][ T6454] Node 0 active_anon:32712kB inactive_anon:0kB active_file:5664kB inactive_file:159124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137352kB dirty:1244kB writeback:0kB shmem:15300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12172kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.865841][ T6454] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.899119][ T6454] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.940116][ T6454] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 119.950863][ T6454] Node 0 DMA32 free:1426236kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32664kB inactive_anon:0kB active_file:5664kB inactive_file:157308kB unevictable:1536kB writepending:1244kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:28020kB local_pcp:12040kB free_cma:0kB [ 119.984133][ T6454] lowmem_reserve[]: 0 0 1 1 1 [ 119.989084][ T6454] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 120.018528][ T6454] lowmem_reserve[]: 0 0 0 0 0 [ 120.023318][ T6454] Node 1 Normal free:3898376kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21632kB local_pcp:8864kB free_cma:0kB [ 120.059767][ T6454] lowmem_reserve[]: 0 0 0 0 0 [ 120.064653][ T6454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.077701][ T6454] Node 0 DMA32: 49*4kB (M) 7*8kB (UM) 72*16kB (UME) 12*32kB (ME) 19*64kB (UME) 13*128kB (UME) 4*256kB (UME) 4*512kB (UM) 5*1024kB (UME) 8*2048kB (UME) 341*4096kB (M) = 1425980kB [ 120.096103][ T6454] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 120.109147][ T6454] Node 1 Normal: 208*4kB (UE) 65*8kB (UME) 50*16kB (UME) 65*32kB (UME) 18*64kB (UME) 4*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3898376kB [ 120.127808][ T6454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.159462][ T6455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 120.160104][ T6454] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.183442][ T6454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.199211][ T6454] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.212214][ T6454] 45472 total pagecache pages [ 120.219591][ T6454] 0 pages in swap cache [ 120.224264][ T6454] Free swap = 124996kB [ 120.228801][ T6454] Total swap = 124996kB [ 120.240425][ T6454] 2097051 pages RAM [ 120.245683][ T6454] 0 pages HighMem/MovableOnly [ 120.250624][ T6454] 424689 pages reserved [ 120.254970][ T6454] 0 pages cma reserved [ 120.627948][ T6465] can: request_module (can-proto-3) failed. [ 121.431112][ T6451] vlan0: entered promiscuous mode [ 121.664584][ T6473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.145'. [ 121.803476][ T6475] FAULT_INJECTION: forcing a failure. [ 121.803476][ T6475] name failslab, interval 1, probability 0, space 0, times 1 [ 121.845616][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.1.146 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 121.845639][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.845648][ T6475] Call Trace: [ 121.845654][ T6475] [ 121.845661][ T6475] dump_stack_lvl+0x189/0x250 [ 121.845689][ T6475] ? __pfx____ratelimit+0x10/0x10 [ 121.845713][ T6475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.845737][ T6475] ? __pfx__printk+0x10/0x10 [ 121.845757][ T6475] ? __pfx___might_resched+0x10/0x10 [ 121.845785][ T6475] should_fail_ex+0x414/0x560 [ 121.845808][ T6475] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 121.845826][ T6475] should_failslab+0xa8/0x100 [ 121.845844][ T6475] __kvmalloc_node_noprof+0x161/0x5f0 [ 121.845860][ T6475] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 121.845882][ T6475] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 121.845904][ T6475] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 121.845924][ T6475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.845947][ T6475] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 121.845964][ T6475] ? 0xffffffffa02057c0 [ 121.845978][ T6475] ? 0xffffffffa02057c0 [ 121.846025][ T6475] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 121.846050][ T6475] ? _copy_from_user+0x94/0xb0 [ 121.846066][ T6475] ? bpf_test_init+0x133/0x170 [ 121.846081][ T6475] ? xdp_convert_md_to_buff+0x5b/0x330 [ 121.846101][ T6475] bpf_prog_test_run_xdp+0x713/0x1000 [ 121.846132][ T6475] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 121.846154][ T6475] ? __fget_files+0x2a/0x420 [ 121.846174][ T6475] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 121.846193][ T6475] bpf_prog_test_run+0x2c7/0x340 [ 121.846218][ T6475] __sys_bpf+0x4a4/0x860 [ 121.846239][ T6475] ? __pfx___sys_bpf+0x10/0x10 [ 121.846269][ T6475] ? ksys_write+0x22a/0x250 [ 121.846302][ T6475] ? __pfx_ksys_write+0x10/0x10 [ 121.846314][ T6475] ? rcu_is_watching+0x15/0xb0 [ 121.846343][ T6475] __x64_sys_bpf+0x7c/0x90 [ 121.846361][ T6475] do_syscall_64+0xfa/0x3b0 [ 121.846375][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 121.846397][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.846412][ T6475] ? clear_bhb_loop+0x60/0xb0 [ 121.846430][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.846444][ T6475] RIP: 0033:0x7fcf5b98e929 [ 121.846456][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.846472][ T6475] RSP: 002b:00007fcf5c7fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 121.846488][ T6475] RAX: ffffffffffffffda RBX: 00007fcf5bbb5fa0 RCX: 00007fcf5b98e929 [ 121.846499][ T6475] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 121.846509][ T6475] RBP: 00007fcf5c7fb090 R08: 0000000000000000 R09: 0000000000000000 [ 121.846518][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.846526][ T6475] R13: 0000000000000000 R14: 00007fcf5bbb5fa0 R15: 00007ffd6353d528 [ 121.846556][ T6475] [ 122.170860][ T6480] tipc: Started in network mode [ 122.176426][ T6480] tipc: Node identity ac14140f, cluster identity 4711 [ 122.214817][ T6480] tipc: New replicast peer: 255.255.255.255 [ 122.238684][ T5156] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 122.263352][ T6480] tipc: Enabled bearer , priority 10 [ 122.332531][ T6485] netlink: 56 bytes leftover after parsing attributes in process `syz.0.149'. [ 122.392106][ T6480] vxcan3: entered allmulticast mode [ 122.401156][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 122.459774][ T6485] smc: net device bond0 applied user defined pnetid SYZ2 [ 122.679237][ T6495] netlink: 64 bytes leftover after parsing attributes in process `syz.1.151'. [ 122.760615][ T6496] netlink: 'syz.4.150': attribute type 11 has an invalid length. [ 123.171153][ T6502] siw: device registration error -23 [ 123.198870][ T6503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.155'. [ 123.306714][ T6505] netlink: 36 bytes leftover after parsing attributes in process `syz.4.156'. [ 123.375335][ T24] tipc: Node number set to 2886997007 [ 123.748347][ T6511] netlink: 64 bytes leftover after parsing attributes in process `syz.2.159'. [ 124.068828][ T6520] ipt_REJECT: TCP_RESET invalid for non-tcp [ 124.359223][ T6527] netlink: 300 bytes leftover after parsing attributes in process `syz.4.167'. [ 124.391063][ T6529] netlink: 'syz.0.166': attribute type 11 has an invalid length. [ 124.601581][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.613816][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.624055][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.636909][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.646298][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.789440][ T6535] lo speed is unknown, defaulting to 1000 [ 124.947408][ T6544] vlan2: entered promiscuous mode [ 125.073017][ T6550] Bluetooth: MGMT ver 1.23 [ 125.131100][ T6548] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 125.170681][ T6555] netlink: 64 bytes leftover after parsing attributes in process `syz.0.174'. [ 125.439116][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 125.833388][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.837953][ T6574] netlink: 264 bytes leftover after parsing attributes in process `syz.0.179'. [ 125.851755][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.872100][ T6535] bridge_slave_0: entered allmulticast mode [ 125.881611][ T6535] bridge_slave_0: entered promiscuous mode [ 125.898082][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.923279][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.942030][ T6535] bridge_slave_1: entered allmulticast mode [ 125.958033][ T6535] bridge_slave_1: entered promiscuous mode [ 126.180744][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.218231][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.306592][ T6596] FAULT_INJECTION: forcing a failure. [ 126.306592][ T6596] name failslab, interval 1, probability 0, space 0, times 0 [ 126.346429][ T6596] CPU: 1 UID: 0 PID: 6596 Comm: syz.2.188 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 126.346461][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.346474][ T6596] Call Trace: [ 126.346482][ T6596] [ 126.346492][ T6596] dump_stack_lvl+0x189/0x250 [ 126.346531][ T6596] ? __pfx____ratelimit+0x10/0x10 [ 126.346565][ T6596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.346598][ T6596] ? __pfx__printk+0x10/0x10 [ 126.346629][ T6596] ? ref_tracker_alloc+0x318/0x460 [ 126.346662][ T6596] should_fail_ex+0x414/0x560 [ 126.346696][ T6596] should_failslab+0xa8/0x100 [ 126.346721][ T6596] kmem_cache_alloc_noprof+0x73/0x3c0 [ 126.346754][ T6596] ? skb_clone+0x212/0x3a0 [ 126.346789][ T6596] skb_clone+0x212/0x3a0 [ 126.346822][ T6596] __netlink_deliver_tap+0x404/0x850 [ 126.346863][ T6596] ? netlink_deliver_tap+0x2e/0x1b0 [ 126.346891][ T6596] netlink_deliver_tap+0x19c/0x1b0 [ 126.346917][ T6596] netlink_unicast+0x72f/0x8d0 [ 126.346959][ T6596] netlink_sendmsg+0x805/0xb30 [ 126.346997][ T6596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.347028][ T6596] ? aa_sock_msg_perm+0x94/0x160 [ 126.347057][ T6596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 126.347085][ T6596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.347112][ T6596] __sock_sendmsg+0x219/0x270 [ 126.347136][ T6596] ____sys_sendmsg+0x505/0x830 [ 126.347171][ T6596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 126.347211][ T6596] ? import_iovec+0x74/0xa0 [ 126.347238][ T6596] ___sys_sendmsg+0x21f/0x2a0 [ 126.347269][ T6596] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.347345][ T6596] ? __fget_files+0x2a/0x420 [ 126.347368][ T6596] ? __fget_files+0x3a0/0x420 [ 126.347404][ T6596] __x64_sys_sendmsg+0x19b/0x260 [ 126.347453][ T6596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 126.347493][ T6596] ? __pfx_ksys_write+0x10/0x10 [ 126.347509][ T6596] ? rcu_is_watching+0x15/0xb0 [ 126.347549][ T6596] ? do_syscall_64+0xbe/0x3b0 [ 126.347574][ T6596] do_syscall_64+0xfa/0x3b0 [ 126.347592][ T6596] ? lockdep_hardirqs_on+0x9c/0x150 [ 126.347624][ T6596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.347644][ T6596] ? clear_bhb_loop+0x60/0xb0 [ 126.347670][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.347690][ T6596] RIP: 0033:0x7f04e958e929 [ 126.347708][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.347725][ T6596] RSP: 002b:00007f04ea359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.347747][ T6596] RAX: ffffffffffffffda RBX: 00007f04e97b5fa0 RCX: 00007f04e958e929 [ 126.347762][ T6596] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 126.347776][ T6596] RBP: 00007f04ea359090 R08: 0000000000000000 R09: 0000000000000000 [ 126.347788][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.347806][ T6596] R13: 0000000000000000 R14: 00007f04e97b5fa0 R15: 00007ffde8c07b58 [ 126.347840][ T6596] [ 126.702863][ T6535] team0: Port device team_slave_0 added [ 126.721918][ T6535] team0: Port device team_slave_1 added [ 126.943318][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.959985][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.003866][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.017794][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.024815][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.117378][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 127.124527][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.159575][ T6607] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 127.208687][ T6614] netlink: 264 bytes leftover after parsing attributes in process `syz.4.194'. [ 127.217251][ T6607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.265238][ T6607] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 127.280404][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.472133][ T6621] netlink: 'syz.2.196': attribute type 11 has an invalid length. [ 127.493733][ T6535] hsr_slave_0: entered promiscuous mode [ 127.520870][ T6535] hsr_slave_1: entered promiscuous mode [ 127.535854][ T6624] netlink: 'syz.4.195': attribute type 11 has an invalid length. [ 127.552405][ T6535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.561353][ T6535] Cannot create hsr debugfs directory [ 128.283972][ T30] audit: type=1107 audit(1749840741.940:4): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 128.369219][ T6640] lo speed is unknown, defaulting to 1000 [ 128.612615][ T6655] netlink: 264 bytes leftover after parsing attributes in process `syz.1.205'. [ 128.628588][ T6535] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.915598][ T6535] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.159986][ T6535] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.182383][ T6667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.206'. [ 129.659838][ T6535] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.728467][ T6685] netlink: 'syz.1.211': attribute type 11 has an invalid length. [ 129.939139][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 130.102696][ T6535] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.168937][ T6535] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 130.191583][ T6535] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 130.215958][ T6535] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 130.255978][ T6694] netlink: 292 bytes leftover after parsing attributes in process `syz.0.216'. [ 130.413881][ T6712] siw: device registration error -23 [ 130.453115][ T6716] warn_alloc: 3 callbacks suppressed [ 130.453136][ T6716] syz.1.219: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 130.460490][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 130.478368][ T6716] ,cpuset=/,mems_allowed=0-1 [ 130.502333][ T6716] CPU: 0 UID: 0 PID: 6716 Comm: syz.1.219 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 130.502363][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.502377][ T6716] Call Trace: [ 130.502386][ T6716] [ 130.502395][ T6716] dump_stack_lvl+0x189/0x250 [ 130.502459][ T6716] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 130.502492][ T6716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.502527][ T6716] ? __pfx__printk+0x10/0x10 [ 130.502552][ T6716] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.502576][ T6716] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.502609][ T6716] warn_alloc+0x214/0x310 [ 130.502634][ T6716] ? stack_depot_save_flags+0x40/0x900 [ 130.502670][ T6716] ? __pfx_warn_alloc+0x10/0x10 [ 130.502705][ T6716] ? kasan_save_track+0x4f/0x80 [ 130.502739][ T6716] ? xskq_create+0x56/0x170 [ 130.502768][ T6716] ? xsk_init_queue+0xb0/0x110 [ 130.502795][ T6716] ? xsk_setsockopt+0x43f/0x710 [ 130.502821][ T6716] ? do_sock_setsockopt+0x25a/0x3e0 [ 130.502846][ T6716] ? __x64_sys_setsockopt+0x18b/0x220 [ 130.502870][ T6716] ? do_syscall_64+0xfa/0x3b0 [ 130.502888][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.502919][ T6716] __vmalloc_node_range_noprof+0x125/0x12f0 [ 130.502981][ T6716] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.503014][ T6716] ? __kasan_kmalloc+0x93/0xb0 [ 130.503038][ T6716] vmalloc_user_noprof+0xad/0xf0 [ 130.503062][ T6716] ? xskq_create+0xbf/0x170 [ 130.503095][ T6716] xskq_create+0xbf/0x170 [ 130.503132][ T6716] xsk_init_queue+0xb0/0x110 [ 130.503167][ T6716] xsk_setsockopt+0x43f/0x710 [ 130.503201][ T6716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.503230][ T6716] ? __lock_acquire+0xab9/0xd20 [ 130.503272][ T6716] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 130.503300][ T6716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.503333][ T6716] do_sock_setsockopt+0x25a/0x3e0 [ 130.503364][ T6716] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 130.503397][ T6716] ? __fget_files+0x2a/0x420 [ 130.503432][ T6716] __x64_sys_setsockopt+0x18b/0x220 [ 130.503468][ T6716] do_syscall_64+0xfa/0x3b0 [ 130.503488][ T6716] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.503521][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.503542][ T6716] ? clear_bhb_loop+0x60/0xb0 [ 130.503569][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.503590][ T6716] RIP: 0033:0x7fcf5b98e929 [ 130.503610][ T6716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.503627][ T6716] RSP: 002b:00007fcf5c7da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.503650][ T6716] RAX: ffffffffffffffda RBX: 00007fcf5bbb6080 RCX: 00007fcf5b98e929 [ 130.503665][ T6716] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 130.503678][ T6716] RBP: 00007fcf5ba10b39 R08: 0000000000000004 R09: 0000000000000000 [ 130.503697][ T6716] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.503711][ T6716] R13: 0000000000000000 R14: 00007fcf5bbb6080 R15: 00007ffd6353d528 [ 130.503746][ T6716] [ 130.503755][ T6716] Mem-Info: [ 130.762922][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.829111][ T6716] active_anon:3596 inactive_anon:0 isolated_anon:0 [ 130.829111][ T6716] active_file:1432 inactive_file:39837 isolated_file:0 [ 130.829111][ T6716] unevictable:768 dirty:198 writeback:0 [ 130.829111][ T6716] slab_reclaimable:9996 slab_unreclaimable:98958 [ 130.829111][ T6716] mapped:30016 shmem:1359 pagetables:898 [ 130.829111][ T6716] sec_pagetables:0 bounce:0 [ 130.829111][ T6716] kernel_misc_reclaimable:0 [ 130.829111][ T6716] free:1335074 free_pcp:16481 free_cma:0 [ 130.875815][ T6716] Node 0 active_anon:14184kB inactive_anon:0kB active_file:5728kB inactive_file:159148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120064kB dirty:792kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11768kB pagetables:3436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.897530][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.935359][ T6716] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.971956][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.979202][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.984021][ T6716] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.997336][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.030209][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.033527][ T6716] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 131.060476][ T6716] Node 0 DMA32 free:1426532kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14136kB inactive_anon:0kB active_file:5728kB inactive_file:157332kB unevictable:1536kB writepending:788kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:44484kB local_pcp:28904kB free_cma:0kB [ 131.110675][ T6716] lowmem_reserve[]: 0 0 1 1 1 [ 131.126694][ T6716] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 131.184920][ T6716] lowmem_reserve[]: 0 0 0 0 0 [ 131.190782][ T6716] Node 1 Normal free:3898376kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21700kB local_pcp:12768kB free_cma:0kB [ 131.326127][ T6716] lowmem_reserve[]: 0 0 0 0 0 [ 131.330955][ T6716] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.418628][ T6716] Node 0 DMA32: 619*4kB (UM) 244*8kB (UM) 143*16kB (M) 57*32kB (UM) 45*64kB (ME) 22*128kB (UME) 15*256kB (UME) 6*512kB (M) 7*1024kB (UME) 6*2048kB (ME) 338*4096kB (M) = 1425052kB [ 131.514983][ T6716] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 131.536608][ T6716] Node 1 Normal: 208*4kB (UE) 65*8kB (UME) 50*16kB (UME) 65*32kB (UME) 18*64kB (UME) 4*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3898376kB [ 131.577366][ T6735] netlink: 'syz.0.225': attribute type 11 has an invalid length. [ 131.590265][ T6716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.613167][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 131.635867][ T6716] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.664559][ T6716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.694530][ T6716] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.744539][ T6716] 42627 total pagecache pages [ 131.749364][ T6716] 0 pages in swap cache [ 131.753554][ T6716] Free swap = 124996kB [ 131.781137][ T6716] Total swap = 124996kB [ 131.811069][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.829434][ T6716] 2097051 pages RAM [ 131.833529][ T6716] 0 pages HighMem/MovableOnly [ 131.856069][ T6716] 424689 pages reserved [ 131.878265][ T6716] 0 pages cma reserved [ 132.041516][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.228'. [ 132.068479][ T6535] veth0_vlan: entered promiscuous mode [ 132.102449][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 132.116177][ T6747] netlink: 'syz.4.227': attribute type 16 has an invalid length. [ 132.124068][ T6747] netlink: 'syz.4.227': attribute type 17 has an invalid length. [ 132.130766][ T6745] openvswitch: netlink: Flow key attr not present in new flow. [ 132.164930][ T6747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.225587][ T6535] veth1_vlan: entered promiscuous mode [ 132.283224][ T6752] netlink: 292 bytes leftover after parsing attributes in process `syz.2.230'. [ 132.337034][ T6535] veth0_macvtap: entered promiscuous mode [ 132.350814][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 132.362583][ T6535] veth1_macvtap: entered promiscuous mode [ 132.431180][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.465653][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.497889][ T6535] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.512337][ T6535] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.533503][ T6535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.543518][ T6535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.564617][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 132.818539][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.856725][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.951701][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.993816][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.042540][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.297052][ T6784] netlink: 308 bytes leftover after parsing attributes in process `syz.4.238'. [ 133.313820][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.238'. [ 133.333629][ T6784] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 133.660490][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 133.705652][ T6801] netlink: 292 bytes leftover after parsing attributes in process `syz.4.242'. [ 133.920651][ T6809] bridge_slave_0: left allmulticast mode [ 133.927864][ T6809] bridge_slave_0: left promiscuous mode [ 133.943816][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.961339][ T6809] bridge_slave_1: left allmulticast mode [ 133.967247][ T6809] bridge_slave_1: left promiscuous mode [ 133.973234][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.006075][ T6809] bond0: (slave bond_slave_0): Releasing backup interface [ 134.040278][ T6809] bond0: (slave bond_slave_1): Releasing backup interface [ 134.068624][ T6809] team0: Port device team_slave_0 removed [ 134.084190][ T6809] team0: Port device team_slave_1 removed [ 134.091704][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.101161][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.112318][ T6809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.121127][ T6809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.146350][ T6809] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 134.153651][ T6809] batman_adv: batadv0: Removing interface: ip6gretap1 [ 134.501078][ T6831] IPVS: length: 79 != 8 [ 134.512020][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'. [ 134.613749][ T6833] syz.4.253 (6833) used greatest stack depth: 17800 bytes left [ 134.691702][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 134.939933][ T6840] unsupported nla_type 52263 [ 135.241865][ T6853] netlink: 64 bytes leftover after parsing attributes in process `syz.0.262'. [ 135.269678][ T6851] vlan2: entered promiscuous mode [ 135.278842][ T6851] dummy0: entered promiscuous mode [ 135.310391][ T6853] netlink: 'syz.0.262': attribute type 2 has an invalid length. [ 135.477731][ T6861] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.578660][ T6863] xt_HMARK: spi-set and port-set can't be combined [ 135.803645][ T6877] FAULT_INJECTION: forcing a failure. [ 135.803645][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 135.819256][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.4.271 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 135.819294][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 135.819307][ T6877] Call Trace: [ 135.819315][ T6877] [ 135.819324][ T6877] dump_stack_lvl+0x189/0x250 [ 135.819362][ T6877] ? __pfx____ratelimit+0x10/0x10 [ 135.819396][ T6877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.819429][ T6877] ? __pfx__printk+0x10/0x10 [ 135.819455][ T6877] ? __pfx___might_resched+0x10/0x10 [ 135.819488][ T6877] ? fs_reclaim_acquire+0x7d/0x100 [ 135.819519][ T6877] should_fail_ex+0x414/0x560 [ 135.819552][ T6877] should_failslab+0xa8/0x100 [ 135.819576][ T6877] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 135.819598][ T6877] ? page_pool_create_percpu+0x76/0xbe0 [ 135.819634][ T6877] page_pool_create_percpu+0x76/0xbe0 [ 135.819663][ T6877] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 135.819684][ T6877] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 135.819718][ T6877] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 135.819748][ T6877] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 135.819777][ T6877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.819811][ T6877] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 135.819836][ T6877] ? 0xffffffffa02057c0 [ 135.819855][ T6877] ? 0xffffffffa02057c0 [ 135.819928][ T6877] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 135.819965][ T6877] ? bpf_prog_test_run_xdp+0x651/0x1000 [ 135.819999][ T6877] bpf_prog_test_run_xdp+0x713/0x1000 [ 135.820043][ T6877] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.820075][ T6877] ? __fget_files+0x2a/0x420 [ 135.820105][ T6877] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 135.820132][ T6877] bpf_prog_test_run+0x2c7/0x340 [ 135.820166][ T6877] __sys_bpf+0x4a4/0x860 [ 135.820197][ T6877] ? __pfx___sys_bpf+0x10/0x10 [ 135.820240][ T6877] ? ksys_write+0x22a/0x250 [ 135.820262][ T6877] ? __pfx_ksys_write+0x10/0x10 [ 135.820303][ T6877] ? rcu_is_watching+0x15/0xb0 [ 135.820344][ T6877] __x64_sys_bpf+0x7c/0x90 [ 135.820370][ T6877] do_syscall_64+0xfa/0x3b0 [ 135.820389][ T6877] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.820420][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.820441][ T6877] ? clear_bhb_loop+0x60/0xb0 [ 135.820467][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.820487][ T6877] RIP: 0033:0x7f060f98e929 [ 135.820505][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.820522][ T6877] RSP: 002b:00007f060d7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.820544][ T6877] RAX: ffffffffffffffda RBX: 00007f060fbb5fa0 RCX: 00007f060f98e929 [ 135.820559][ T6877] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 135.820571][ T6877] RBP: 00007f060d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.820584][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.820595][ T6877] R13: 0000000000000000 R14: 00007f060fbb5fa0 R15: 00007ffd43b132e8 [ 135.820629][ T6877] [ 136.297013][ T6885] netlink: 'syz.2.274': attribute type 2 has an invalid length. [ 136.337953][ T5923] IPVS: starting estimator thread 0... [ 136.352537][ T6883] netlink: 'syz.4.275': attribute type 3 has an invalid length. [ 136.435692][ T6887] IPVS: using max 36 ests per chain, 86400 per kthread [ 136.707689][ T6901] FAULT_INJECTION: forcing a failure. [ 136.707689][ T6901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.739461][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.4.282 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 136.739492][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.739505][ T6901] Call Trace: [ 136.739513][ T6901] [ 136.739522][ T6901] dump_stack_lvl+0x189/0x250 [ 136.739560][ T6901] ? __pfx____ratelimit+0x10/0x10 [ 136.739593][ T6901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.739627][ T6901] ? __pfx__printk+0x10/0x10 [ 136.739650][ T6901] ? __might_fault+0xb0/0x130 [ 136.739681][ T6901] should_fail_ex+0x414/0x560 [ 136.739716][ T6901] _copy_from_user+0x2d/0xb0 [ 136.739738][ T6901] ___sys_sendmsg+0x158/0x2a0 [ 136.739770][ T6901] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.739836][ T6901] ? __fget_files+0x2a/0x420 [ 136.739859][ T6901] ? __fget_files+0x3a0/0x420 [ 136.739902][ T6901] __x64_sys_sendmsg+0x19b/0x260 [ 136.739934][ T6901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.739973][ T6901] ? __pfx_ksys_write+0x10/0x10 [ 136.739990][ T6901] ? rcu_is_watching+0x15/0xb0 [ 136.740029][ T6901] ? do_syscall_64+0xbe/0x3b0 [ 136.740054][ T6901] do_syscall_64+0xfa/0x3b0 [ 136.740072][ T6901] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.740104][ T6901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.740125][ T6901] ? clear_bhb_loop+0x60/0xb0 [ 136.740152][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.740172][ T6901] RIP: 0033:0x7f060f98e929 [ 136.740191][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.740208][ T6901] RSP: 002b:00007f060d7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.740230][ T6901] RAX: ffffffffffffffda RBX: 00007f060fbb5fa0 RCX: 00007f060f98e929 [ 136.740246][ T6901] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 136.740259][ T6901] RBP: 00007f060d7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 136.740272][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.740283][ T6901] R13: 0000000000000000 R14: 00007f060fbb5fa0 R15: 00007ffd43b132e8 [ 136.740316][ T6901] [ 137.062455][ T6909] netlink: 'syz.4.286': attribute type 2 has an invalid length. [ 137.241759][ T6915] pimreg: entered allmulticast mode [ 137.250881][ T6915] pimreg: left allmulticast mode [ 137.313638][ T6918] xt_TCPMSS: Only works on TCP SYN packets [ 137.340264][ T6915] sch_fq: defrate 0 ignored. [ 137.429389][ T6922] __nla_validate_parse: 9 callbacks suppressed [ 137.429411][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 137.571822][ T6927] syzkaller1: entered promiscuous mode [ 137.582425][ T6927] syzkaller1: entered allmulticast mode [ 137.622922][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.637768][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.813227][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 137.834266][ T6934] vlan2: entered promiscuous mode [ 137.917456][ T6940] veth0: entered promiscuous mode [ 137.923857][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'. [ 138.060946][ T6943] netlink: 64 bytes leftover after parsing attributes in process `syz.0.300'. [ 138.094822][ T6943] netlink: 'syz.0.300': attribute type 2 has an invalid length. [ 138.231060][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 138.263946][ T6952] netlink: 72 bytes leftover after parsing attributes in process `syz.0.303'. [ 138.388074][ T6955] lo speed is unknown, defaulting to 1000 [ 138.439881][ T6959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.304'. [ 138.455751][ T6959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.304'. [ 138.468187][ T6959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.304'. [ 138.627514][ T6964] netlink: 492 bytes leftover after parsing attributes in process `syz.0.306'. [ 138.949503][ T6975] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 139.657136][ T7001] netlink: 'syz.0.321': attribute type 5 has an invalid length. [ 140.147753][ T7022] x_tables: duplicate entry at hook 2 [ 140.825897][ T7030] raw_sendmsg: syz.2.332 forgot to set AF_INET. Fix it! [ 141.222325][ T969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.297055][ T969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.313840][ T7036] lo speed is unknown, defaulting to 1000 [ 141.324864][ T30] audit: type=1107 audit(1749840754.980:5): pid=7035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Žd»¥]:xJÐP@cd$JnyãÒOº^øDØ#z' [ 141.399432][ T969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.513053][ T969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.805368][ T969] bridge_slave_1: left allmulticast mode [ 141.811317][ T969] bridge_slave_1: left promiscuous mode [ 141.825831][ T969] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.886553][ T969] bridge_slave_0: left allmulticast mode [ 141.917365][ T969] bridge_slave_0: left promiscuous mode [ 141.923237][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.233332][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.243530][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.257994][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.290413][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.299717][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.673488][ T969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.687097][ T969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.699304][ T969] bond0 (unregistering): Released all slaves [ 142.720185][ T7047] FAULT_INJECTION: forcing a failure. [ 142.720185][ T7047] name failslab, interval 1, probability 0, space 0, times 0 [ 142.736526][ T7047] CPU: 1 UID: 0 PID: 7047 Comm: syz.2.340 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 142.736549][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.736560][ T7047] Call Trace: [ 142.736567][ T7047] [ 142.736574][ T7047] dump_stack_lvl+0x189/0x250 [ 142.736604][ T7047] ? __pfx____ratelimit+0x10/0x10 [ 142.736629][ T7047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.736654][ T7047] ? __pfx__printk+0x10/0x10 [ 142.736673][ T7047] ? __mutex_trylock_common+0x153/0x260 [ 142.736696][ T7047] should_fail_ex+0x414/0x560 [ 142.736721][ T7047] should_failslab+0xa8/0x100 [ 142.736739][ T7047] __kmalloc_cache_noprof+0x70/0x3d0 [ 142.736754][ T7047] ? __hw_addr_add_ex+0x1f4/0x770 [ 142.736779][ T7047] __hw_addr_add_ex+0x1f4/0x770 [ 142.736805][ T7047] dev_addr_init+0x14f/0x230 [ 142.736828][ T7047] ? __pfx_dev_addr_init+0x10/0x10 [ 142.736846][ T7047] ? alloc_netdev_mqs+0xa6/0x11e0 [ 142.736881][ T7047] alloc_netdev_mqs+0x2f3/0x11e0 [ 142.736902][ T7047] ? __pfx_batadv_meshif_init_early+0x10/0x10 [ 142.736924][ T7047] rtnl_create_link+0x31f/0xd10 [ 142.736952][ T7047] rtnl_newlink_create+0x25c/0xb00 [ 142.736976][ T7047] ? __mutex_lock+0x51b/0xe80 [ 142.736995][ T7047] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 142.737012][ T7047] ? rtnl_newlink+0x8db/0x1c70 [ 142.737030][ T7047] ? __pfx___mutex_lock+0x10/0x10 [ 142.737053][ T7047] ? ns_capable+0x8a/0xf0 [ 142.737079][ T7047] rtnl_newlink+0x16d6/0x1c70 [ 142.737097][ T7047] ? netlink_sendmsg+0x805/0xb30 [ 142.737126][ T7047] ? __pfx_rtnl_newlink+0x10/0x10 [ 142.737163][ T7047] ? kasan_quarantine_put+0xdd/0x220 [ 142.737186][ T7047] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.737214][ T7047] ? nlmon_xmit+0xb0/0x100 [ 142.737236][ T7047] ? kmem_cache_free+0x18f/0x400 [ 142.737257][ T7047] ? __local_bh_enable_ip+0x12d/0x1c0 [ 142.737280][ T7047] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.737309][ T7047] ? __local_bh_enable_ip+0x12d/0x1c0 [ 142.737333][ T7047] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 142.737360][ T7047] ? __dev_queue_xmit+0x27e/0x3a70 [ 142.737393][ T7047] ? __lock_acquire+0xab9/0xd20 [ 142.737451][ T7047] ? __pfx_rtnl_newlink+0x10/0x10 [ 142.737476][ T7047] rtnetlink_rcv_msg+0x7cf/0xb70 [ 142.737505][ T7047] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 142.737534][ T7047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.737549][ T7047] ? ref_tracker_free+0x63a/0x7d0 [ 142.737571][ T7047] ? __copy_skb_header+0xa7/0x550 [ 142.737594][ T7047] ? __pfx_ref_tracker_free+0x10/0x10 [ 142.737616][ T7047] ? __skb_clone+0x63/0x7a0 [ 142.737643][ T7047] netlink_rcv_skb+0x205/0x470 [ 142.737663][ T7047] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.737681][ T7047] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.737712][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.737730][ T7047] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.737753][ T7047] netlink_unicast+0x758/0x8d0 [ 142.737779][ T7047] netlink_sendmsg+0x805/0xb30 [ 142.737807][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.737830][ T7047] ? aa_sock_msg_perm+0x94/0x160 [ 142.737852][ T7047] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.737872][ T7047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.737892][ T7047] __sock_sendmsg+0x219/0x270 [ 142.737910][ T7047] ____sys_sendmsg+0x505/0x830 [ 142.737935][ T7047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.737969][ T7047] ? import_iovec+0x74/0xa0 [ 142.737988][ T7047] ___sys_sendmsg+0x21f/0x2a0 [ 142.738011][ T7047] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.738063][ T7047] ? __fget_files+0x2a/0x420 [ 142.738080][ T7047] ? __fget_files+0x3a0/0x420 [ 142.738107][ T7047] __x64_sys_sendmsg+0x19b/0x260 [ 142.738130][ T7047] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.738159][ T7047] ? __pfx_ksys_write+0x10/0x10 [ 142.738171][ T7047] ? rcu_is_watching+0x15/0xb0 [ 142.738200][ T7047] ? do_syscall_64+0xbe/0x3b0 [ 142.738219][ T7047] do_syscall_64+0xfa/0x3b0 [ 142.738232][ T7047] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.738256][ T7047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.738271][ T7047] ? clear_bhb_loop+0x60/0xb0 [ 142.738290][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.738314][ T7047] RIP: 0033:0x7f04e958e929 [ 142.738328][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.738341][ T7047] RSP: 002b:00007f04ea338038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.738357][ T7047] RAX: ffffffffffffffda RBX: 00007f04e97b6080 RCX: 00007f04e958e929 [ 142.738369][ T7047] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000a [ 142.738378][ T7047] RBP: 00007f04ea338090 R08: 0000000000000000 R09: 0000000000000000 [ 142.738387][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.738396][ T7047] R13: 0000000000000000 R14: 00007f04e97b6080 R15: 00007ffde8c07b58 [ 142.738421][ T7047] [ 143.345705][ T7063] __nla_validate_parse: 6 callbacks suppressed [ 143.345724][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 143.373683][ T7051] lo speed is unknown, defaulting to 1000 [ 143.380860][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.343'. [ 143.597963][ T7071] netlink: 'syz.2.346': attribute type 12 has an invalid length. [ 143.718183][ T969] hsr_slave_0: left promiscuous mode [ 143.742847][ T969] hsr_slave_1: left promiscuous mode [ 143.753460][ T969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.774308][ T969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.796688][ T969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.804163][ T969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.835299][ T7078] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'. [ 143.862273][ T969] veth1_macvtap: left promiscuous mode [ 143.883768][ T969] veth0_macvtap: left promiscuous mode [ 143.893538][ T969] veth1_vlan: left promiscuous mode [ 143.907836][ T969] veth0_vlan: left promiscuous mode [ 143.948209][ T7082] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 144.163136][ T7089] netlink: 'syz.2.353': attribute type 11 has an invalid length. [ 144.271733][ T7091] netlink: 'syz.2.354': attribute type 11 has an invalid length. [ 144.410523][ T5840] Bluetooth: hci3: command tx timeout [ 144.425083][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 144.658050][ T969] team0 (unregistering): Port device team_slave_1 removed [ 144.700433][ T969] team0 (unregistering): Port device team_slave_0 removed [ 145.257509][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 145.283737][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 145.474097][ T7051] chnl_net:caif_netlink_parms(): no params data found [ 145.612336][ T7107] netlink: 'syz.2.360': attribute type 2 has an invalid length. [ 145.654890][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 145.799009][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.806378][ T7051] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.813712][ T7051] bridge_slave_0: entered allmulticast mode [ 145.821451][ T7051] bridge_slave_0: entered promiscuous mode [ 145.855447][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.859763][ T969] IPVS: stop unused estimator thread 0... [ 145.862835][ T7051] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.895183][ T7051] bridge_slave_1: entered allmulticast mode [ 145.914919][ T7051] bridge_slave_1: entered promiscuous mode [ 145.948974][ T7115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.362'. [ 146.057318][ T7051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.093956][ T7051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.164317][ T7051] team0: Port device team_slave_0 added [ 146.202593][ T7051] team0: Port device team_slave_1 added [ 146.237769][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.254747][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.262979][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.267388][ T7125] netlink: 'syz.2.365': attribute type 12 has an invalid length. [ 146.285987][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.293906][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.393907][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.403376][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.437433][ T7051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.470799][ T7051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.480439][ T5156] Bluetooth: hci3: command tx timeout [ 146.488924][ T7051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.516188][ T7051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.566138][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 146.590621][ T7126] lo speed is unknown, defaulting to 1000 [ 146.632580][ T7051] hsr_slave_0: entered promiscuous mode [ 146.657979][ T7051] hsr_slave_1: entered promiscuous mode [ 146.664632][ T7051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.672242][ T7051] Cannot create hsr debugfs directory [ 146.872913][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 147.073255][ T7138] netlink: 'syz.0.368': attribute type 11 has an invalid length. [ 147.300245][ T7142] FAULT_INJECTION: forcing a failure. [ 147.300245][ T7142] name failslab, interval 1, probability 0, space 0, times 0 [ 147.313279][ T7142] CPU: 0 UID: 0 PID: 7142 Comm: syz.0.370 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 147.313313][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.313326][ T7142] Call Trace: [ 147.313337][ T7142] [ 147.313347][ T7142] dump_stack_lvl+0x189/0x250 [ 147.313388][ T7142] ? __pfx____ratelimit+0x10/0x10 [ 147.313423][ T7142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.313458][ T7142] ? __pfx__printk+0x10/0x10 [ 147.313489][ T7142] ? __pfx___might_resched+0x10/0x10 [ 147.313529][ T7142] should_fail_ex+0x414/0x560 [ 147.313564][ T7142] should_failslab+0xa8/0x100 [ 147.313590][ T7142] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 147.313613][ T7142] ? __alloc_skb+0x112/0x2d0 [ 147.313644][ T7142] __alloc_skb+0x112/0x2d0 [ 147.313676][ T7142] netlink_sendmsg+0x5c6/0xb30 [ 147.313715][ T7142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.313747][ T7142] ? aa_sock_msg_perm+0x94/0x160 [ 147.313778][ T7142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.313806][ T7142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.313834][ T7142] __sock_sendmsg+0x219/0x270 [ 147.313859][ T7142] ____sys_sendmsg+0x505/0x830 [ 147.313894][ T7142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.313934][ T7142] ? import_iovec+0x74/0xa0 [ 147.313962][ T7142] ___sys_sendmsg+0x21f/0x2a0 [ 147.313994][ T7142] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.314068][ T7142] ? __fget_files+0x2a/0x420 [ 147.314091][ T7142] ? __fget_files+0x3a0/0x420 [ 147.314128][ T7142] __x64_sys_sendmsg+0x19b/0x260 [ 147.314161][ T7142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.314202][ T7142] ? __pfx_ksys_write+0x10/0x10 [ 147.314219][ T7142] ? rcu_is_watching+0x15/0xb0 [ 147.314275][ T7142] ? do_syscall_64+0xbe/0x3b0 [ 147.314301][ T7142] do_syscall_64+0xfa/0x3b0 [ 147.314321][ T7142] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.314354][ T7142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.314376][ T7142] ? clear_bhb_loop+0x60/0xb0 [ 147.314403][ T7142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.314425][ T7142] RIP: 0033:0x7fe1dd98e929 [ 147.314445][ T7142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.314462][ T7142] RSP: 002b:00007fe1de796038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.314485][ T7142] RAX: ffffffffffffffda RBX: 00007fe1ddbb5fa0 RCX: 00007fe1dd98e929 [ 147.314501][ T7142] RDX: 0000000004000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 147.314515][ T7142] RBP: 00007fe1de796090 R08: 0000000000000000 R09: 0000000000000000 [ 147.314528][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.314540][ T7142] R13: 0000000000000000 R14: 00007fe1ddbb5fa0 R15: 00007fff8c3c7358 [ 147.314574][ T7142] [ 147.625521][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 148.157241][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.172493][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.180428][ T7126] bridge_slave_0: entered allmulticast mode [ 148.192740][ T7126] bridge_slave_0: entered promiscuous mode [ 148.201526][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.209530][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.216891][ T7126] bridge_slave_1: entered allmulticast mode [ 148.225108][ T7126] bridge_slave_1: entered promiscuous mode [ 148.350636][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.399008][ T5156] Bluetooth: hci5: command tx timeout [ 148.469596][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.554596][ T5156] Bluetooth: hci3: command tx timeout [ 148.569864][ T7164] __nla_validate_parse: 3 callbacks suppressed [ 148.569886][ T7164] netlink: 44 bytes leftover after parsing attributes in process `syz.2.376'. [ 148.586034][ T7164] netlink: 43 bytes leftover after parsing attributes in process `syz.2.376'. [ 148.637638][ T7164] netlink: 'syz.2.376': attribute type 6 has an invalid length. [ 148.645659][ T7164] netlink: 'syz.2.376': attribute type 5 has an invalid length. [ 148.653338][ T7164] netlink: 43 bytes leftover after parsing attributes in process `syz.2.376'. [ 148.719837][ T7164] netlink: 'syz.2.376': attribute type 16 has an invalid length. [ 148.744865][ T7164] netlink: 'syz.2.376': attribute type 17 has an invalid length. [ 148.775264][ T7126] team0: Port device team_slave_0 added [ 148.807587][ T7164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.840249][ T7126] team0: Port device team_slave_1 added [ 148.864768][ T7051] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.948187][ T7051] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.021757][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.031752][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.071085][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.093556][ T7051] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.141991][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.149369][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.207353][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.253630][ T7051] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.265290][ T7170] lo speed is unknown, defaulting to 1000 [ 149.678463][ T7126] hsr_slave_0: entered promiscuous mode [ 149.689926][ T7126] hsr_slave_1: entered promiscuous mode [ 149.697379][ T7126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.706804][ T7126] Cannot create hsr debugfs directory [ 150.080676][ T7194] netlink: 32 bytes leftover after parsing attributes in process `syz.2.383'. [ 150.108317][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 150.260001][ T7197] netlink: 44 bytes leftover after parsing attributes in process `syz.2.384'. [ 150.474638][ T5156] Bluetooth: hci5: command tx timeout [ 150.588389][ T7126] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.618734][ T7051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.634587][ T5156] Bluetooth: hci3: command tx timeout [ 150.640222][ T7126] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.658798][ T7126] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.667615][ T7207] warn_alloc: 1 callbacks suppressed [ 150.667634][ T7207] syz.2.387: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 150.679275][ T7126] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.704133][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.2.387 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 150.704166][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.704180][ T7207] Call Trace: [ 150.704189][ T7207] [ 150.704200][ T7207] dump_stack_lvl+0x189/0x250 [ 150.704247][ T7207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.704284][ T7207] ? __pfx__printk+0x10/0x10 [ 150.704310][ T7207] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 150.704341][ T7207] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 150.704368][ T7207] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 150.704397][ T7207] warn_alloc+0x214/0x310 [ 150.704423][ T7207] ? stack_depot_save_flags+0x40/0x900 [ 150.704459][ T7207] ? __pfx_warn_alloc+0x10/0x10 [ 150.704488][ T7207] ? kasan_save_track+0x4f/0x80 [ 150.704521][ T7207] ? xskq_create+0x56/0x170 [ 150.704552][ T7207] ? xsk_init_queue+0xb0/0x110 [ 150.704582][ T7207] ? xsk_setsockopt+0x43f/0x710 [ 150.704609][ T7207] ? do_sock_setsockopt+0x25a/0x3e0 [ 150.704635][ T7207] ? __x64_sys_setsockopt+0x18b/0x220 [ 150.704661][ T7207] ? do_syscall_64+0xfa/0x3b0 [ 150.704681][ T7207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.704714][ T7207] __vmalloc_node_range_noprof+0x125/0x12f0 [ 150.704777][ T7207] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 150.704810][ T7207] ? __kasan_kmalloc+0x93/0xb0 [ 150.704844][ T7207] vmalloc_user_noprof+0xad/0xf0 [ 150.704869][ T7207] ? xskq_create+0xbf/0x170 [ 150.704911][ T7207] xskq_create+0xbf/0x170 [ 150.704948][ T7207] xsk_init_queue+0xb0/0x110 [ 150.704985][ T7207] xsk_setsockopt+0x43f/0x710 [ 150.705021][ T7207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 150.705052][ T7207] ? __lock_acquire+0xab9/0xd20 [ 150.705096][ T7207] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 150.705124][ T7207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 150.705159][ T7207] do_sock_setsockopt+0x25a/0x3e0 [ 150.705191][ T7207] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 150.705225][ T7207] ? __fget_files+0x2a/0x420 [ 150.705262][ T7207] __x64_sys_setsockopt+0x18b/0x220 [ 150.705299][ T7207] do_syscall_64+0xfa/0x3b0 [ 150.705319][ T7207] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.705353][ T7207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.705375][ T7207] ? clear_bhb_loop+0x60/0xb0 [ 150.705403][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.705425][ T7207] RIP: 0033:0x7f04e958e929 [ 150.705447][ T7207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.705465][ T7207] RSP: 002b:00007f04ea338038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.705489][ T7207] RAX: ffffffffffffffda RBX: 00007f04e97b6080 RCX: 00007f04e958e929 [ 150.705506][ T7207] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 150.705519][ T7207] RBP: 00007f04e9610b39 R08: 0000000000000004 R09: 0000000000000000 [ 150.705533][ T7207] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.705546][ T7207] R13: 0000000000000000 R14: 00007f04e97b6080 R15: 00007ffde8c07b58 [ 150.705581][ T7207] [ 151.023128][ T7051] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.049400][ T7207] Mem-Info: [ 151.052626][ T7207] active_anon:3732 inactive_anon:0 isolated_anon:0 [ 151.052626][ T7207] active_file:1483 inactive_file:39852 isolated_file:0 [ 151.052626][ T7207] unevictable:768 dirty:164 writeback:0 [ 151.052626][ T7207] slab_reclaimable:10578 slab_unreclaimable:101348 [ 151.052626][ T7207] mapped:35159 shmem:1359 pagetables:831 [ 151.052626][ T7207] sec_pagetables:0 bounce:0 [ 151.052626][ T7207] kernel_misc_reclaimable:0 [ 151.052626][ T7207] free:1321794 free_pcp:16584 free_cma:0 [ 151.080629][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.100214][ T7207] Node 0 active_anon:14948kB inactive_anon:0kB active_file:5932kB inactive_file:159212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140564kB dirty:620kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11884kB pagetables:3236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 151.105159][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.128646][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.141907][ T7207] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 151.147924][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.155354][ T7207] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.225498][ T7207] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 151.244584][ T7207] Node 0 DMA32 free:1375372kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14948kB inactive_anon:0kB active_file:5932kB inactive_file:157404kB unevictable:1536kB writepending:640kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:42328kB local_pcp:13604kB free_cma:0kB [ 151.273419][ T7051] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.289872][ T7051] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.304260][ T7207] lowmem_reserve[]: 0 0 1 1 1 [ 151.309184][ T7207] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 151.338647][ T7207] lowmem_reserve[]: 0 0 0 0 0 [ 151.343509][ T7207] Node 1 Normal free:3899432kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20736kB local_pcp:12288kB free_cma:0kB [ 151.377705][ T7207] lowmem_reserve[]: 0 0 0 0 0 [ 151.386157][ T7207] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.437877][ T7207] Node 0 DMA32: 941*4kB (UME) 338*8kB (UM) 128*16kB (UME) 18*32kB (UME) 21*64kB (ME) 28*128kB (UME) 18*256kB (M) 8*512kB (ME) 6*1024kB (UME) 1*2048kB (M) 326*4096kB (M) = 1366212kB [ 151.471651][ T7207] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 151.503661][ T7207] Node 1 Normal: 208*4kB (UE) 65*8kB (UME) 50*16kB (UME) 88*32kB (UME) 21*64kB (UME) 5*128kB (UME) 5*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3899432kB [ 151.545993][ T7207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.588736][ T7207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.623070][ T7207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.635274][ T7207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.646431][ T7207] 42694 total pagecache pages [ 151.654481][ T7207] 0 pages in swap cache [ 151.660536][ T7207] Free swap = 124996kB [ 151.714552][ T7207] Total swap = 124996kB [ 151.724089][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.731075][ T7207] 2097051 pages RAM [ 151.735860][ T7207] 0 pages HighMem/MovableOnly [ 151.740593][ T7207] 424689 pages reserved [ 151.759608][ T7207] 0 pages cma reserved [ 151.780709][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.828778][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.836003][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.900861][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.908108][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.036545][ T7051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.293127][ T7236] netlink: 32 bytes leftover after parsing attributes in process `syz.2.393'. [ 152.554635][ T5156] Bluetooth: hci5: command tx timeout [ 152.599305][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.759040][ T7252] trusted_key: syz.2.396 sent an empty control message without MSG_MORE. [ 152.826099][ T7051] veth0_vlan: entered promiscuous mode [ 152.899602][ T7051] veth1_vlan: entered promiscuous mode [ 153.013290][ T7051] veth0_macvtap: entered promiscuous mode [ 153.113129][ T7051] veth1_macvtap: entered promiscuous mode [ 153.180736][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.241376][ T7051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.287319][ T7051] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.314574][ T7051] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.323350][ T7051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.353679][ T7051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.569737][ T7272] FAULT_INJECTION: forcing a failure. [ 153.569737][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 153.585840][ T7272] CPU: 1 UID: 0 PID: 7272 Comm: syz.0.403 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 153.585871][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.585884][ T7272] Call Trace: [ 153.585893][ T7272] [ 153.585902][ T7272] dump_stack_lvl+0x189/0x250 [ 153.585941][ T7272] ? __pfx____ratelimit+0x10/0x10 [ 153.585975][ T7272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.586008][ T7272] ? __pfx__printk+0x10/0x10 [ 153.586038][ T7272] ? __pfx___might_resched+0x10/0x10 [ 153.586077][ T7272] should_fail_ex+0x414/0x560 [ 153.586111][ T7272] should_failslab+0xa8/0x100 [ 153.586136][ T7272] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 153.586158][ T7272] ? __alloc_skb+0x112/0x2d0 [ 153.586188][ T7272] __alloc_skb+0x112/0x2d0 [ 153.586218][ T7272] netlink_sendmsg+0x5c6/0xb30 [ 153.586257][ T7272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.586288][ T7272] ? aa_sock_msg_perm+0x94/0x160 [ 153.586318][ T7272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 153.586345][ T7272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.586373][ T7272] __sock_sendmsg+0x219/0x270 [ 153.586397][ T7272] ____sys_sendmsg+0x505/0x830 [ 153.586432][ T7272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.586472][ T7272] ? import_iovec+0x74/0xa0 [ 153.586499][ T7272] ___sys_sendmsg+0x21f/0x2a0 [ 153.586539][ T7272] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.586610][ T7272] ? __fget_files+0x2a/0x420 [ 153.586633][ T7272] ? __fget_files+0x3a0/0x420 [ 153.586668][ T7272] __x64_sys_sendmsg+0x19b/0x260 [ 153.586700][ T7272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.586739][ T7272] ? __pfx_ksys_write+0x10/0x10 [ 153.586756][ T7272] ? rcu_is_watching+0x15/0xb0 [ 153.586796][ T7272] ? do_syscall_64+0xbe/0x3b0 [ 153.586822][ T7272] do_syscall_64+0xfa/0x3b0 [ 153.586841][ T7272] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.586873][ T7272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.586894][ T7272] ? clear_bhb_loop+0x60/0xb0 [ 153.586920][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.586939][ T7272] RIP: 0033:0x7fe1dd98e929 [ 153.586958][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.586976][ T7272] RSP: 002b:00007fe1de796038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.586998][ T7272] RAX: ffffffffffffffda RBX: 00007fe1ddbb5fa0 RCX: 00007fe1dd98e929 [ 153.587013][ T7272] RDX: 0000000004040084 RSI: 0000200000000000 RDI: 0000000000000003 [ 153.587026][ T7272] RBP: 00007fe1de796090 R08: 0000000000000000 R09: 0000000000000000 [ 153.587038][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.587050][ T7272] R13: 0000000000000000 R14: 00007fe1ddbb5fa0 R15: 00007fff8c3c7358 [ 153.587084][ T7272] [ 153.900431][ T6411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.917028][ T6411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.963401][ T7126] veth0_vlan: entered promiscuous mode [ 153.982684][ T7274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.404'. [ 153.988916][ T7126] veth1_vlan: entered promiscuous mode [ 154.047792][ T7126] veth0_macvtap: entered promiscuous mode [ 154.071515][ T7126] veth1_macvtap: entered promiscuous mode [ 154.159686][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.212771][ T4187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.221757][ T4187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.281556][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.381160][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.486474][ T7126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.499568][ T7126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.514807][ T7126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.535034][ T7126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.634748][ T5156] Bluetooth: hci5: command tx timeout [ 154.672544][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.834325][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.976108][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.986478][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.995161][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.006689][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.016445][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.025816][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.242249][ T7285] lo speed is unknown, defaulting to 1000 [ 155.250752][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.286580][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.469706][ T6403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.492646][ T6403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.613753][ T13] bridge_slave_1: left allmulticast mode [ 155.622891][ T13] bridge_slave_1: left promiscuous mode [ 155.644307][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.709748][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.711536][ T13] bridge_slave_0: left allmulticast mode [ 155.723895][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.732386][ T13] bridge_slave_0: left promiscuous mode [ 155.738533][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.749467][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.758681][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.769883][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.794979][ T13] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 155.883136][ T13] batman_adv: batadv0: Removing interface: ip6gretap1 [ 156.110308][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 156.288380][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.300761][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.312578][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 156.323936][ T13] bond0 (unregistering): Released all slaves [ 156.484940][ T7289] lo speed is unknown, defaulting to 1000 [ 156.636804][ T7301] FAULT_INJECTION: forcing a failure. [ 156.636804][ T7301] name failslab, interval 1, probability 0, space 0, times 0 [ 156.659695][ T7301] CPU: 0 UID: 0 PID: 7301 Comm: syz.0.410 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 156.659728][ T7301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.659743][ T7301] Call Trace: [ 156.659751][ T7301] [ 156.659760][ T7301] dump_stack_lvl+0x189/0x250 [ 156.659802][ T7301] ? __pfx____ratelimit+0x10/0x10 [ 156.659841][ T7301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.659876][ T7301] ? __pfx__printk+0x10/0x10 [ 156.659900][ T7301] ? crng_make_state+0x3fc/0x700 [ 156.659932][ T7301] ? crng_make_state+0x13a/0x700 [ 156.659968][ T7301] should_fail_ex+0x414/0x560 [ 156.660034][ T7301] should_failslab+0xa8/0x100 [ 156.660060][ T7301] __kmalloc_cache_noprof+0x70/0x3d0 [ 156.660083][ T7301] ? sctp_add_bind_addr+0x8c/0x370 [ 156.660112][ T7301] sctp_add_bind_addr+0x8c/0x370 [ 156.660141][ T7301] sctp_copy_local_addr_list+0x30b/0x4e0 [ 156.660170][ T7301] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 156.660193][ T7301] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 156.660222][ T7301] ? sctp_v4_is_any+0x35/0x60 [ 156.660245][ T7301] ? sctp_copy_one_addr+0x93/0x360 [ 156.660273][ T7301] sctp_bind_addr_copy+0xb3/0x3c0 [ 156.660297][ T7301] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 156.660351][ T7301] sctp_connect_new_asoc+0x2e0/0x690 [ 156.660385][ T7301] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 156.660411][ T7301] ? __local_bh_enable_ip+0x12d/0x1c0 [ 156.660454][ T7301] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 156.660485][ T7301] ? security_sctp_bind_connect+0x7e/0x2e0 [ 156.660513][ T7301] sctp_sendmsg+0x155c/0x2810 [ 156.660557][ T7301] ? __pfx_sctp_sendmsg+0x10/0x10 [ 156.660590][ T7301] ? aa_sk_perm+0x81e/0x950 [ 156.660623][ T7301] ? __pfx_aa_sk_perm+0x10/0x10 [ 156.660653][ T7301] ? sock_rps_record_flow+0x19/0x410 [ 156.660679][ T7301] ? inet_sendmsg+0x2f4/0x370 [ 156.660707][ T7301] __sock_sendmsg+0x19c/0x270 [ 156.660733][ T7301] ____sys_sendmsg+0x52d/0x830 [ 156.660770][ T7301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.660811][ T7301] ? import_iovec+0x74/0xa0 [ 156.660840][ T7301] ___sys_sendmsg+0x21f/0x2a0 [ 156.660872][ T7301] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.660948][ T7301] ? __fget_files+0x2a/0x420 [ 156.660972][ T7301] ? __fget_files+0x3a0/0x420 [ 156.661010][ T7301] __sys_sendmmsg+0x227/0x430 [ 156.661047][ T7301] ? __pfx___sys_sendmmsg+0x10/0x10 [ 156.661074][ T7301] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 156.661131][ T7301] ? ksys_write+0x22a/0x250 [ 156.661155][ T7301] ? __pfx_ksys_write+0x10/0x10 [ 156.661172][ T7301] ? rcu_is_watching+0x15/0xb0 [ 156.661215][ T7301] __x64_sys_sendmmsg+0xa0/0xc0 [ 156.661254][ T7301] do_syscall_64+0xfa/0x3b0 [ 156.661274][ T7301] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.661306][ T7301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.661335][ T7301] ? clear_bhb_loop+0x60/0xb0 [ 156.661363][ T7301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.661384][ T7301] RIP: 0033:0x7fe1dd98e929 [ 156.661404][ T7301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.661423][ T7301] RSP: 002b:00007fe1de796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 156.661447][ T7301] RAX: ffffffffffffffda RBX: 00007fe1ddbb5fa0 RCX: 00007fe1dd98e929 [ 156.661463][ T7301] RDX: 0000000000000002 RSI: 0000200000000c80 RDI: 0000000000000004 [ 156.661477][ T7301] RBP: 00007fe1de796090 R08: 0000000000000000 R09: 0000000000000000 [ 156.661490][ T7301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.661502][ T7301] R13: 0000000000000000 R14: 00007fe1ddbb5fa0 R15: 00007fff8c3c7358 [ 156.661538][ T7301] [ 157.057694][ T7285] chnl_net:caif_netlink_parms(): no params data found [ 157.119550][ T5156] Bluetooth: hci1: command tx timeout [ 157.534092][ T7320] netlink: 20 bytes leftover after parsing attributes in process `syz.5.415'. [ 157.556332][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.563640][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.571407][ T7285] bridge_slave_0: entered allmulticast mode [ 157.579775][ T7285] bridge_slave_0: entered promiscuous mode [ 157.590315][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.599926][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.627974][ T7285] bridge_slave_1: entered allmulticast mode [ 157.636769][ T7285] bridge_slave_1: entered promiscuous mode [ 157.834459][ T13] hsr_slave_0: left promiscuous mode [ 157.835346][ T5156] Bluetooth: hci3: command tx timeout [ 157.851119][ T13] hsr_slave_1: left promiscuous mode [ 157.878670][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.906744][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.936224][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.959774][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.981790][ T13] veth1_macvtap: left promiscuous mode [ 157.991089][ T13] veth0_macvtap: left promiscuous mode [ 158.002685][ T13] veth1_vlan: left promiscuous mode [ 158.008535][ T13] veth0_vlan: left promiscuous mode [ 159.095695][ T13] team0 (unregistering): Port device team_slave_1 removed [ 159.192268][ T13] team0 (unregistering): Port device team_slave_0 removed [ 159.195005][ T5156] Bluetooth: hci1: command tx timeout [ 159.917008][ T5156] Bluetooth: hci3: command tx timeout [ 161.277468][ T5156] Bluetooth: hci1: command tx timeout [ 161.443284][ T7285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.472351][ T7285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.534997][ T7289] chnl_net:caif_netlink_parms(): no params data found [ 161.695668][ T7285] team0: Port device team_slave_0 added [ 161.709565][ T7285] team0: Port device team_slave_1 added [ 161.877852][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.893702][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.921849][ T7343] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 161.934834][ T7285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.983781][ T7285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.994468][ T5156] Bluetooth: hci3: command tx timeout [ 162.002060][ T7285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.043810][ T7285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.239952][ T7285] hsr_slave_0: entered promiscuous mode [ 162.256120][ T7285] hsr_slave_1: entered promiscuous mode [ 162.270402][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.279703][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.290064][ T7289] bridge_slave_0: entered allmulticast mode [ 162.299968][ T7289] bridge_slave_0: entered promiscuous mode [ 162.344543][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.351792][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.374750][ T7289] bridge_slave_1: entered allmulticast mode [ 162.382979][ T7289] bridge_slave_1: entered promiscuous mode [ 162.513651][ T7289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.526706][ T7353] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 162.633250][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.692474][ T7289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.793103][ T7358] netlink: 'syz.0.423': attribute type 11 has an invalid length. [ 162.823817][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.967200][ T7289] team0: Port device team_slave_0 added [ 163.004455][ T7361] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.052039][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.163265][ T7289] team0: Port device team_slave_1 added [ 163.307651][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.322158][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.426'. [ 163.326922][ T7364] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 163.359201][ T5156] Bluetooth: hci1: command tx timeout [ 163.438592][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.471937][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.553316][ T7289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.584011][ T7373] dummy0: entered promiscuous mode [ 163.591144][ T7373] vlan2: entered promiscuous mode [ 163.617384][ T7289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.636148][ T7289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.677235][ T7289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.937117][ T7289] hsr_slave_0: entered promiscuous mode [ 163.944006][ T7289] hsr_slave_1: entered promiscuous mode [ 163.965547][ T7289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.981916][ T7289] Cannot create hsr debugfs directory [ 164.075462][ T5156] Bluetooth: hci3: command tx timeout [ 164.144757][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 164.253415][ T13] bridge_slave_1: left allmulticast mode [ 164.260082][ T13] bridge_slave_1: left promiscuous mode [ 164.268229][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.281035][ T13] bridge_slave_0: left allmulticast mode [ 164.287675][ T13] bridge_slave_0: left promiscuous mode [ 164.293474][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.319430][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.436'. [ 164.802025][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.814641][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.825445][ T13] bond0 (unregistering): Released all slaves [ 165.055020][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.437'. [ 165.483882][ T13] hsr_slave_0: left promiscuous mode [ 165.505177][ T13] hsr_slave_1: left promiscuous mode [ 165.511318][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.529777][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.543869][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.553247][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.563472][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 165.617747][ T13] veth1_macvtap: left promiscuous mode [ 165.623378][ T13] veth0_macvtap: left promiscuous mode [ 165.639284][ T13] veth1_vlan: left promiscuous mode [ 165.650126][ T13] veth0_vlan: left promiscuous mode [ 165.873487][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.444'. [ 166.233511][ T13] team0 (unregistering): Port device team_slave_1 removed [ 166.278258][ T13] team0 (unregistering): Port device team_slave_0 removed [ 166.571621][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 166.816672][ T7285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.837758][ T7285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.900028][ T7285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.916057][ T7285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.291110][ T7285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.366059][ T7434] xt_CT: No such helper "snmp" [ 167.368855][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 167.435660][ T7285] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.487930][ T7441] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 167.528147][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.535352][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.601998][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.609251][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.701811][ T7289] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.722970][ T7289] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.763781][ T7289] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.813120][ T7289] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.232164][ T7289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.282993][ T7289] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.297717][ T7285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.338683][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.345915][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.407960][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.415197][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.427776][ T7472] FAULT_INJECTION: forcing a failure. [ 168.427776][ T7472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.444900][ T7472] CPU: 0 UID: 0 PID: 7472 Comm: syz.5.458 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 168.444931][ T7472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.444944][ T7472] Call Trace: [ 168.444953][ T7472] [ 168.444962][ T7472] dump_stack_lvl+0x189/0x250 [ 168.445000][ T7472] ? __pfx____ratelimit+0x10/0x10 [ 168.445034][ T7472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.445068][ T7472] ? __pfx__printk+0x10/0x10 [ 168.445092][ T7472] ? __might_fault+0xb0/0x130 [ 168.445126][ T7472] should_fail_ex+0x414/0x560 [ 168.445161][ T7472] _copy_from_user+0x2d/0xb0 [ 168.445193][ T7472] __sys_bpf+0x1ed/0x860 [ 168.445224][ T7472] ? __pfx___sys_bpf+0x10/0x10 [ 168.445267][ T7472] ? ksys_write+0x22a/0x250 [ 168.445290][ T7472] ? __pfx_ksys_write+0x10/0x10 [ 168.445306][ T7472] ? rcu_is_watching+0x15/0xb0 [ 168.445348][ T7472] __x64_sys_bpf+0x7c/0x90 [ 168.445373][ T7472] do_syscall_64+0xfa/0x3b0 [ 168.445393][ T7472] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.445424][ T7472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.445445][ T7472] ? clear_bhb_loop+0x60/0xb0 [ 168.445471][ T7472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.445492][ T7472] RIP: 0033:0x7ffbe9f8e929 [ 168.445510][ T7472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.445528][ T7472] RSP: 002b:00007ffbeade6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 168.445550][ T7472] RAX: ffffffffffffffda RBX: 00007ffbea1b5fa0 RCX: 00007ffbe9f8e929 [ 168.445566][ T7472] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 0000000000000000 [ 168.445579][ T7472] RBP: 00007ffbeade6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.445592][ T7472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.445604][ T7472] R13: 0000000000000000 R14: 00007ffbea1b5fa0 R15: 00007fffff183068 [ 168.445638][ T7472] [ 168.490771][ T7285] veth0_vlan: entered promiscuous mode [ 168.624926][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 168.765767][ T7285] veth1_vlan: entered promiscuous mode [ 168.869333][ T7481] netlink: 36 bytes leftover after parsing attributes in process `syz.0.460'. [ 168.913323][ T7285] veth0_macvtap: entered promiscuous mode [ 168.944207][ T7285] veth1_macvtap: entered promiscuous mode [ 168.982225][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.5.461'. [ 169.027954][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.072038][ T7285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.145003][ T7285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.153773][ T7285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.184913][ T7285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.194488][ T7285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.212633][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.463'. [ 169.294807][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.463'. [ 169.448454][ T4187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.468267][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.484897][ T4187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.581828][ T6718] ================================================================== [ 169.590013][ T6718] BUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x99/0x360 [ 169.598287][ T6718] Read of size 8 at addr ffff88807cb8d858 by task syz.1.219/6718 [ 169.606025][ T6718] [ 169.608363][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.1.219 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 169.608386][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.608398][ T6718] Call Trace: [ 169.608405][ T6718] [ 169.608414][ T6718] dump_stack_lvl+0x189/0x250 [ 169.608447][ T6718] ? __virt_addr_valid+0x1c8/0x5c0 [ 169.608465][ T6718] ? rcu_is_watching+0x15/0xb0 [ 169.608491][ T6718] ? __kasan_check_byte+0x12/0x40 [ 169.608510][ T6718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.608538][ T6718] ? rcu_is_watching+0x15/0xb0 [ 169.608565][ T6718] ? lock_release+0x4b/0x3e0 [ 169.608592][ T6718] ? __virt_addr_valid+0x1c8/0x5c0 [ 169.608609][ T6718] ? __virt_addr_valid+0x4a5/0x5c0 [ 169.608628][ T6718] print_report+0xd2/0x2b0 [ 169.608651][ T6718] ? skb_queue_purge_reason+0x99/0x360 [ 169.608668][ T6718] kasan_report+0x118/0x150 [ 169.608686][ T6718] ? skb_queue_purge_reason+0x99/0x360 [ 169.608707][ T6718] skb_queue_purge_reason+0x99/0x360 [ 169.608728][ T6718] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 169.608746][ T6718] ? __pfx___mutex_lock+0x10/0x10 [ 169.608763][ T6718] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.608785][ T6718] ? drain_workqueue+0x2cb/0x390 [ 169.608806][ T6718] ? __pfx_vhci_flush+0x10/0x10 [ 169.608834][ T6718] vhci_flush+0x44/0x50 [ 169.608859][ T6718] hci_dev_reset+0x420/0x5c0 [ 169.608886][ T6718] sock_do_ioctl+0xd9/0x300 [ 169.608915][ T6718] ? __pfx_sock_do_ioctl+0x10/0x10 [ 169.608941][ T6718] ? __lock_acquire+0xab9/0xd20 [ 169.608973][ T6718] sock_ioctl+0x576/0x790 [ 169.609000][ T6718] ? __pfx_sock_ioctl+0x10/0x10 [ 169.609031][ T6718] ? __fget_files+0x2a/0x420 [ 169.609050][ T6718] ? __fget_files+0x3a0/0x420 [ 169.609068][ T6718] ? __fget_files+0x2a/0x420 [ 169.609088][ T6718] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.609114][ T6718] ? __pfx_sock_ioctl+0x10/0x10 [ 169.609140][ T6718] __se_sys_ioctl+0xf9/0x170 [ 169.609168][ T6718] do_syscall_64+0xfa/0x3b0 [ 169.609184][ T6718] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.609211][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.609228][ T6718] ? clear_bhb_loop+0x60/0xb0 [ 169.609248][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.609265][ T6718] RIP: 0033:0x7fcf5b98e929 [ 169.609282][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.609298][ T6718] RSP: 002b:00007fcf5c7b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.609318][ T6718] RAX: ffffffffffffffda RBX: 00007fcf5bbb6160 RCX: 00007fcf5b98e929 [ 169.609332][ T6718] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009 [ 169.609343][ T6718] RBP: 00007fcf5ba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 169.609354][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.609365][ T6718] R13: 0000000000000000 R14: 00007fcf5bbb6160 R15: 00007ffd6353d528 [ 169.609388][ T6718] [ 169.609393][ T6718] [ 169.897970][ T6718] Allocated by task 6535: [ 169.902309][ T6718] kasan_save_track+0x3e/0x80 [ 169.907012][ T6718] __kasan_kmalloc+0x93/0xb0 [ 169.911620][ T6718] __kmalloc_cache_noprof+0x230/0x3d0 [ 169.917001][ T6718] vhci_open+0x57/0x360 [ 169.921180][ T6718] misc_open+0x2bc/0x330 [ 169.925439][ T6718] chrdev_open+0x4c9/0x5e0 [ 169.929867][ T6718] do_dentry_open+0xdf0/0x1970 [ 169.934640][ T6718] vfs_open+0x3b/0x340 [ 169.938720][ T6718] path_openat+0x2ee5/0x3830 [ 169.943348][ T6718] do_filp_open+0x1fa/0x410 [ 169.947864][ T6718] do_sys_openat2+0x121/0x1c0 [ 169.952556][ T6718] __x64_sys_openat+0x138/0x170 [ 169.957421][ T6718] do_syscall_64+0xfa/0x3b0 [ 169.961932][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.967835][ T6718] [ 169.970166][ T6718] Freed by task 6535: [ 169.974147][ T6718] kasan_save_track+0x3e/0x80 [ 169.978840][ T6718] kasan_save_free_info+0x46/0x50 [ 169.983877][ T6718] __kasan_slab_free+0x62/0x70 [ 169.988643][ T6718] kfree+0x18e/0x440 [ 169.992555][ T6718] vhci_release+0xbc/0xd0 [ 169.996897][ T6718] __fput+0x44c/0xa70 [ 170.000894][ T6718] task_work_run+0x1d1/0x260 [ 170.005516][ T6718] do_exit+0x6ad/0x22e0 [ 170.009687][ T6718] do_group_exit+0x21c/0x2d0 [ 170.014286][ T6718] __x64_sys_exit_group+0x3f/0x40 [ 170.019326][ T6718] x64_sys_call+0x21ba/0x21c0 [ 170.024017][ T6718] do_syscall_64+0xfa/0x3b0 [ 170.028524][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.034426][ T6718] [ 170.036755][ T6718] The buggy address belongs to the object at ffff88807cb8d800 [ 170.036755][ T6718] which belongs to the cache kmalloc-1k of size 1024 [ 170.050823][ T6718] The buggy address is located 88 bytes inside of [ 170.050823][ T6718] freed 1024-byte region [ffff88807cb8d800, ffff88807cb8dc00) [ 170.064650][ T6718] [ 170.066986][ T6718] The buggy address belongs to the physical page: [ 170.073406][ T6718] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cb88 [ 170.082195][ T6718] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 170.090703][ T6718] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 170.098694][ T6718] page_type: f5(slab) [ 170.102798][ T6718] raw: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 170.111392][ T6718] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 170.119988][ T6718] head: 00fff00000000040 ffff88801a441dc0 0000000000000000 dead000000000001 [ 170.128674][ T6718] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 170.137387][ T6718] head: 00fff00000000003 ffffea0001f2e201 00000000ffffffff 00000000ffffffff [ 170.146087][ T6718] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 170.154766][ T6718] page dumped because: kasan: bad access detected [ 170.161206][ T6718] page_owner tracks the page as allocated [ 170.166968][ T6718] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5851, tgid 5851 (syz-executor), ts 94364184033, free_ts 94332513750 [ 170.188609][ T6718] post_alloc_hook+0x240/0x2a0 [ 170.193392][ T6718] get_page_from_freelist+0x21e4/0x22c0 [ 170.198972][ T6718] __alloc_frozen_pages_noprof+0x181/0x370 [ 170.204802][ T6718] alloc_pages_mpol+0x232/0x4a0 [ 170.209692][ T6718] allocate_slab+0x8a/0x3b0 [ 170.214216][ T6718] ___slab_alloc+0xbfc/0x1480 [ 170.218900][ T6718] __kmalloc_node_noprof+0x2fd/0x4e0 [ 170.224453][ T6718] qdisc_alloc+0x97/0xaa0 [ 170.228809][ T6718] qdisc_create_dflt+0x8e/0x4e0 [ 170.233707][ T6718] dev_activate+0x378/0x1150 [ 170.238313][ T6718] __dev_open+0x69c/0x880 [ 170.242655][ T6718] __dev_change_flags+0x1ea/0x6d0 [ 170.247700][ T6718] netif_change_flags+0x88/0x1a0 [ 170.252651][ T6718] do_setlink+0xc55/0x41c0 [ 170.257100][ T6718] rtnl_newlink+0x160b/0x1c70 [ 170.261787][ T6718] rtnetlink_rcv_msg+0x7cf/0xb70 [ 170.266741][ T6718] page last free pid 5934 tgid 5934 stack trace: [ 170.273075][ T6718] __free_frozen_pages+0xc71/0xe70 [ 170.278198][ T6718] __put_partials+0x161/0x1c0 [ 170.282893][ T6718] put_cpu_partial+0x17c/0x250 [ 170.287718][ T6718] __slab_free+0x2f7/0x400 [ 170.292153][ T6718] qlist_free_all+0x97/0x140 [ 170.296762][ T6718] kasan_quarantine_reduce+0x148/0x160 [ 170.302240][ T6718] __kasan_slab_alloc+0x22/0x80 [ 170.307110][ T6718] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 170.312592][ T6718] getname_flags+0xb8/0x540 [ 170.317117][ T6718] do_sys_openat2+0xbc/0x1c0 [ 170.321727][ T6718] __x64_sys_openat+0x138/0x170 [ 170.326589][ T6718] do_syscall_64+0xfa/0x3b0 [ 170.331104][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.337008][ T6718] [ 170.339342][ T6718] Memory state around the buggy address: [ 170.344982][ T6718] ffff88807cb8d700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.353054][ T6718] ffff88807cb8d780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.361127][ T6718] >ffff88807cb8d800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.369198][ T6718] ^ [ 170.376138][ T6718] ffff88807cb8d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.384207][ T6718] ffff88807cb8d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 170.392272][ T6718] ================================================================== [ 170.407487][ T6718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 170.414742][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.1.219 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full) [ 170.426668][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.436742][ T6718] Call Trace: [ 170.440029][ T6718] [ 170.443004][ T6718] dump_stack_lvl+0x99/0x250 [ 170.447618][ T6718] ? __asan_memcpy+0x40/0x70 [ 170.452224][ T6718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.457443][ T6718] ? __pfx__printk+0x10/0x10 [ 170.462057][ T6718] panic+0x2db/0x790 [ 170.465977][ T6718] ? __pfx_panic+0x10/0x10 [ 170.470415][ T6718] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 170.476354][ T6718] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 170.482701][ T6718] ? print_memory_metadata+0x314/0x400 [ 170.488273][ T6718] ? skb_queue_purge_reason+0x99/0x360 [ 170.493745][ T6718] check_panic_on_warn+0x89/0xb0 [ 170.498727][ T6718] ? skb_queue_purge_reason+0x99/0x360 [ 170.504195][ T6718] end_report+0x78/0x160 [ 170.508467][ T6718] kasan_report+0x129/0x150 [ 170.512987][ T6718] ? skb_queue_purge_reason+0x99/0x360 [ 170.518470][ T6718] skb_queue_purge_reason+0x99/0x360 [ 170.523802][ T6718] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 170.529721][ T6718] ? __pfx___mutex_lock+0x10/0x10 [ 170.534769][ T6718] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.540812][ T6718] ? drain_workqueue+0x2cb/0x390 [ 170.545803][ T6718] ? __pfx_vhci_flush+0x10/0x10 [ 170.550676][ T6718] vhci_flush+0x44/0x50 [ 170.554852][ T6718] hci_dev_reset+0x420/0x5c0 [ 170.559473][ T6718] sock_do_ioctl+0xd9/0x300 [ 170.564002][ T6718] ? __pfx_sock_do_ioctl+0x10/0x10 [ 170.569138][ T6718] ? __lock_acquire+0xab9/0xd20 [ 170.574014][ T6718] sock_ioctl+0x576/0x790 [ 170.578458][ T6718] ? __pfx_sock_ioctl+0x10/0x10 [ 170.583335][ T6718] ? __fget_files+0x2a/0x420 [ 170.587944][ T6718] ? __fget_files+0x3a0/0x420 [ 170.592635][ T6718] ? __fget_files+0x2a/0x420 [ 170.597334][ T6718] ? bpf_lsm_file_ioctl+0x9/0x20 [ 170.602729][ T6718] ? __pfx_sock_ioctl+0x10/0x10 [ 170.607691][ T6718] __se_sys_ioctl+0xf9/0x170 [ 170.612302][ T6718] do_syscall_64+0xfa/0x3b0 [ 170.616819][ T6718] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.622050][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.628127][ T6718] ? clear_bhb_loop+0x60/0xb0 [ 170.632824][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.638723][ T6718] RIP: 0033:0x7fcf5b98e929 [ 170.643150][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.662775][ T6718] RSP: 002b:00007fcf5c7b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.671214][ T6718] RAX: ffffffffffffffda RBX: 00007fcf5bbb6160 RCX: 00007fcf5b98e929 [ 170.679206][ T6718] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009 [ 170.687190][ T6718] RBP: 00007fcf5ba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 170.695255][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.703234][ T6718] R13: 0000000000000000 R14: 00007fcf5bbb6160 R15: 00007ffd6353d528 [ 170.711226][ T6718] [ 170.714536][ T6718] Kernel Offset: disabled [ 170.718900][ T6718] Rebooting in 86400 seconds..