last executing test programs: 59.664400677s ago: executing program 3 (id=1016): r0 = socket(0x1a, 0x80010, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async, rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$nl_xfrm(r4, 0x0, 0x4c811) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a3000"], 0xd0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 48.333315676s ago: executing program 3 (id=1016): r0 = socket(0x1a, 0x80010, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async, rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$nl_xfrm(r4, 0x0, 0x4c811) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a3000"], 0xd0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.175450005s ago: executing program 3 (id=1016): r0 = socket(0x1a, 0x80010, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async, rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$nl_xfrm(r4, 0x0, 0x4c811) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a3000"], 0xd0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.562960616s ago: executing program 3 (id=1016): r0 = socket(0x1a, 0x80010, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async, rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$nl_xfrm(r4, 0x0, 0x4c811) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a3000"], 0xd0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.063850089s ago: executing program 3 (id=1016): r0 = socket(0x1a, 0x80010, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async, rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$nl_xfrm(r4, 0x0, 0x4c811) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a3000"], 0xd0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.863869111s ago: executing program 0 (id=1969): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000001634d0f0b36abe7c89ae882e5fd6d33ead1949145aae3fd575b5b0c77780d0d17284cb8caae21a92992e89a15d8988fd96b15e4c5d058f0c8dbb41da611f7ab2b0694681088afece7bb4f309fe105c249eb04f9e7c2ecf0c38f09196a033bd000000000000"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r2, 0x7ec6, 0x8000009, 0x9}, &(0x7f0000000080)=0x10) 2.300231538s ago: executing program 4 (id=1972): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.299257329s ago: executing program 4 (id=1973): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703003ed53fe40008000000b70400000000000085000000160000009513b05adad7530077621c342236c7f7ba25e6ab45dc0608386d07b6123b2eed961e42130aade4de146ec057100876ce4923541ae7eac40ab7f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7004fcdbdf250100000014000700ff02000000000000001800000000000108000800e000000204000500"], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket(0x10, 0x3, 0xc) write(r6, 0x0, 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35}, 0x94) 2.01496925s ago: executing program 1 (id=1975): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00'}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18adabebddac7cda2b00000000000000e1da27e75de0467b03902129ac24c226653e9d0c6146f84bbade7b76c743a822a02a8807894ace806736984c600b9fc7135be968411955f4448bfb55ddc564ad24d9", @ANYRESDEC=0x0, @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x9, 0x8, 0x4, 0x10a4, r0, 0xba, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)="477229514cb9c3879126c6a8f3f083c4caad25c86fe931823b9a635961308a37446f258e0294ef654c6858848fc213184bf57e140486be9719c7860295266fd15e8e4d9dd6e592f6416d0da53b527a80cc10ba9936e99546ccdb16af12a436ab546a866f15900a9a424647fca7b629a6d709003231d7a6146568b1d4a2d58a8f5b2a9bbced049944629f3b92035bb5b5b92e432391c15a147ee474e728d59de92a058ff8", &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3dd9f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e900"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.953892369s ago: executing program 0 (id=1976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000150a0102000000000000000000000000080003400000000a"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @mcast1, @mcast2, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000001000000229f"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r3}, 0x38) 1.849805574s ago: executing program 2 (id=1977): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x48, 0xc800}, 0x0) 1.840022145s ago: executing program 1 (id=1978): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e0000001"], 0x40}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.768401908s ago: executing program 2 (id=1979): socket$kcm(0x2, 0xa, 0x73) socket$kcm(0x2, 0xa, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x560b, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.720550812s ago: executing program 0 (id=1980): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1.718860624s ago: executing program 1 (id=1981): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) (fail_nth: 6) 1.620384165s ago: executing program 2 (id=1982): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000000a800)={0x0, 0x0, &(0x7f000000a7c0)={&(0x7f000000a780)={0x2, 0x18, 0x0, 0x9, 0x7, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x2, 0x7, 0x2, 0xfffffffffffffffd, 0x5}, @sadb_x_nat_t_port={0x1, 0x3, 0x4e24}]}, 0x38}}, 0x40000) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = accept(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}, 0x1}}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003800600060065580000040502"], 0x528}}, 0xc000) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xcc, 0x13, 0x101, 0x0, 0x0, {{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0xcc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x264}, 0x94) 1.605033206s ago: executing program 4 (id=1983): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.171532469s ago: executing program 1 (id=1984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd50, 0x0, &(0x7f0000000200)="4501006ab6408a0e9e4dd33547f6", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x21}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x8, 0x10, 0x2c, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x700, 0x80, 0x5, 0xfffffffa}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x71, &(0x7f0000000000)=""/113, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a20000000000a05000000000000000000010020000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000008000b400000000028000480240001800b000100736f636b65740000140002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000002c0)={r6, 0x0, 0x7, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r4, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000005c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000940)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x22, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x3d, &(0x7f00000001c0)=""/61, 0x40f00, 0x40, '\x00', r9, 0x1b, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xe, 0x200, 0x3}, 0x10, r11, 0x0, 0x6, 0x0, &(0x7f0000000b80)=[{0x1, 0x1, 0x4, 0x8}, {0x2, 0x2, 0xb, 0xc}, {0x2, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x9, 0xa}, {0x1, 0x3, 0xa, 0x9}, {0x4, 0x5, 0x9, 0xc}], 0x10, 0xfffffffb}, 0x94) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r11, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x8, 0x1, 0x2, r2, 0xd, '\x00', r3, r12, 0x4, 0x2, 0x4, 0xb}, 0x50) 1.17137348s ago: executing program 4 (id=1985): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) (fail_nth: 9) 473.672993ms ago: executing program 0 (id=1986): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 438.629922ms ago: executing program 2 (id=1987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xac, &(0x7f0000000200)=""/172, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xac, &(0x7f0000000200)=""/172, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) 341.749341ms ago: executing program 4 (id=1988): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x134, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0xa4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x178}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 341.3522ms ago: executing program 2 (id=1989): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newtaction={0x310, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x2f8, 0x1, [@m_bpf={0x88, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x5d, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed37602646c6855209b52b2022e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x118, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0xe9, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3b99b8089d418ec3d6d27aa68b96ef236cc10ce12fb9c2fcd2426"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x108, 0x1b, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x9, 0x6, 0x8000, 0xf8d}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}]}, {0xb5, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6dd198d0c2f84f876aceee9a631a5585232049c053fd7bbe1393ecb0aa735b3b1d360493f2ae18bbe6abade7594754d54413afc4df70a136895bf22a05abef0e8"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 328.770285ms ago: executing program 1 (id=1990): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000f3030000000000000000000010000000fb030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffffffffffff00"/1056], 0x420}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@map, 0xffffffffffffffff, 0x1b, 0x2a}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@gettaction={0x74, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1ff}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4724}}, {0xc, 0x101e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf612}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x74}}, 0x0) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r3, 0x100, 0xac}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xa4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x40000}, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x3500, 0x3, 0x0, 0xb7, 0x1fb, 0x2, 0xfffffff9}}, 0xe8) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r7, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x1, 0x5f}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x14) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01f7ee3fac00bfdbdf25150000000c00018008000100", @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) getpeername$netlink(r4, &(0x7f0000000080), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) 244.423979ms ago: executing program 4 (id=1991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@fwd={0xc}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @union={0x7, 0x4, 0x0, 0x5, 0x0, 0x9, [{0x4, 0x1, 0x7}, {0xb, 0x2, 0x6}, {0x0, 0x2}, {0xf, 0x3, 0x42}]}, @func={0xb, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f, 0x61, 0x2e, 0x7f, 0x2e, 0x2e]}}, &(0x7f0000000400)=""/4096, 0x80, 0x1000, 0x0, 0x4}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000500000000000008000f"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001c0001001bf365eee1aae35b07000000", @ANYRES32=r7, @ANYBLOB="0200a2000a000200bb"], 0x2c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x58ae, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x1, 0x3, 0x8, 0x2, 0x20, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x584, 0x7f, &(0x7f0000000300)=""/127, 0x41000, 0x22, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000001440)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x2, 0xb, 0x8, 0x7ff}, 0x10, 0x14c83, r0, 0x6, &(0x7f00000014c0), &(0x7f0000001500)=[{0x2, 0x4, 0x3, 0xa}, {0x4, 0x1, 0x1, 0x2}, {0x3, 0x4, 0xe, 0x6}, {0x1, 0x3, 0xa, 0x8}, {0x5, 0x5, 0x7, 0x2}, {0x4, 0x2, 0x10, 0x6}]}, 0x94) 192.266195ms ago: executing program 0 (id=1992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@filter={'filter\x00', 0xe, 0x4, 0x558, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0xffffffff, 0x488, 0x488, 0x488, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "d8f8", 0x1}}, @common=@frag={{0x30}, {[0x4, 0x401], 0x2, 0x20, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x2b}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x51d92037477a78ed, 0xff, 0xff], 'veth1_to_hsr\x00', 'team_slave_1\x00', {}, {}, 0x2b, 0x5, 0x0, 0xc}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x4d6], 0x1, 0x40, 0x3}}, @common=@srh={{0x30}, {0x21, 0x2, 0xd, 0x9, 0x7, 0x103, 0x3c9}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff, 0x0, 0x0, 0xff000000], [0xff000000, 0x0, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x2b, 0x2, 0x0, 0xe}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@eui64={{0x28}}, @common=@rt={{0x138}, {0x0, [0x5, 0x5b], 0xe, 0x4, 0x4, [@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x19}, @empty, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010102}], 0xb}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x17b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4008840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r0, &(0x7f0000000240)="a8de5d829188f6076c205e8d4b60731851f1", 0x12, 0x4, &(0x7f0000000280)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32=r1, @ANYBLOB="00000800b987", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004008000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000200), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 131.007049ms ago: executing program 2 (id=1993): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10001, 0x40, 0x0, 0x5, 0xfffffff9, 0x8, 0x10000, 0x0, 0x5}}}}]}, 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d580000004000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e31"], 0x98}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c25843", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 103.63951ms ago: executing program 1 (id=1994): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (fail_nth: 9) 456.572µs ago: executing program 0 (id=1995): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x3e, 0x1, 0x80000, 0x25dfdbfe, {0x1}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 0s ago: executing program 3 (id=1016): r0 = socket(0x1a, 0x80010, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) (async) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x124, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x81) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async, rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x10000) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000640), 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$nl_xfrm(r4, 0x0, 0x4c811) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a3000"], 0xd0}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r8, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): b0/0x130 [ 227.858273][T10523] ? rcu_is_watching+0x15/0xb0 [ 227.858298][T10523] ? trace_sys_enter+0x25/0x120 [ 227.858325][T10523] do_syscall_64+0xfa/0x3b0 [ 227.858343][T10523] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.858359][T10523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.858374][T10523] ? clear_bhb_loop+0x60/0xb0 [ 227.858394][T10523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.858410][T10523] RIP: 0033:0x7f5eed18e929 [ 227.858428][T10523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.858442][T10523] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.858461][T10523] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 227.858474][T10523] RDX: 0000000024040800 RSI: 0000200000000000 RDI: 0000000000000003 [ 227.858486][T10523] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 227.858497][T10523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.858508][T10523] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 227.858537][T10523] [ 228.193497][T10532] FAULT_INJECTION: forcing a failure. [ 228.193497][T10532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.204557][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 228.206723][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.0.1598 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 228.206746][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.206757][T10532] Call Trace: [ 228.206765][T10532] [ 228.206773][T10532] dump_stack_lvl+0x189/0x250 [ 228.206802][T10532] ? __pfx____ratelimit+0x10/0x10 [ 228.206819][T10532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.206842][T10532] ? __pfx__printk+0x10/0x10 [ 228.206880][T10532] should_fail_ex+0x414/0x560 [ 228.206906][T10532] _copy_to_user+0x31/0xb0 [ 228.206925][T10532] bpf_test_finish+0x1ab/0x700 [ 228.206955][T10532] ? __pfx_bpf_test_finish+0x10/0x10 [ 228.206980][T10532] ? rep_movs_alternative+0x4a/0x90 [ 228.207005][T10532] bpf_prog_test_run_xdp+0x79a/0x1000 [ 228.207042][T10532] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 228.207067][T10532] ? __fget_files+0x2a/0x420 [ 228.207091][T10532] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 228.207112][T10532] bpf_prog_test_run+0x2c4/0x340 [ 228.207138][T10532] __sys_bpf+0x4a4/0x860 [ 228.207161][T10532] ? __pfx___sys_bpf+0x10/0x10 [ 228.207202][T10532] ? rcu_is_watching+0x15/0xb0 [ 228.207230][T10532] __x64_sys_bpf+0x7c/0x90 [ 228.207257][T10532] do_syscall_64+0xfa/0x3b0 [ 228.207273][T10532] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.207290][T10532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.207305][T10532] ? clear_bhb_loop+0x60/0xb0 [ 228.207326][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.207342][T10532] RIP: 0033:0x7f6dcf98e929 [ 228.207358][T10532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.207371][T10532] RSP: 002b:00007f6dd0783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.207389][T10532] RAX: ffffffffffffffda RBX: 00007f6dcfbb5fa0 RCX: 00007f6dcf98e929 [ 228.207402][T10532] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 228.207413][T10532] RBP: 00007f6dd0783090 R08: 0000000000000000 R09: 0000000000000000 [ 228.207423][T10532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.207434][T10532] R13: 0000000000000000 R14: 00007f6dcfbb5fa0 R15: 00007ffce8c1b6d8 [ 228.207462][T10532] [ 228.436433][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 228.499346][T10547] net_ratelimit: 4063 callbacks suppressed [ 228.499364][T10547] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 228.576958][T10551] FAULT_INJECTION: forcing a failure. [ 228.576958][T10551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.653772][T10551] CPU: 1 UID: 0 PID: 10551 Comm: syz.2.1605 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 228.653800][T10551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.653811][T10551] Call Trace: [ 228.653820][T10551] [ 228.653829][T10551] dump_stack_lvl+0x189/0x250 [ 228.653868][T10551] ? __pfx____ratelimit+0x10/0x10 [ 228.653886][T10551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.653910][T10551] ? __pfx__printk+0x10/0x10 [ 228.653942][T10551] should_fail_ex+0x414/0x560 [ 228.653968][T10551] _copy_to_user+0x31/0xb0 [ 228.653989][T10551] bpf_test_finish+0x56f/0x700 [ 228.654020][T10551] ? __pfx_bpf_test_finish+0x10/0x10 [ 228.654046][T10551] ? slab_build_skb+0x273/0x3e0 [ 228.654072][T10551] bpf_prog_test_run_skb+0xed5/0x1560 [ 228.654109][T10551] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 228.654130][T10551] bpf_prog_test_run+0x2c4/0x340 [ 228.654157][T10551] __sys_bpf+0x4a4/0x860 [ 228.654181][T10551] ? __pfx___sys_bpf+0x10/0x10 [ 228.654224][T10551] ? rcu_is_watching+0x15/0xb0 [ 228.654253][T10551] __x64_sys_bpf+0x7c/0x90 [ 228.654275][T10551] do_syscall_64+0xfa/0x3b0 [ 228.654291][T10551] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.654307][T10551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.654324][T10551] ? clear_bhb_loop+0x60/0xb0 [ 228.654345][T10551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.654362][T10551] RIP: 0033:0x7f5eed18e929 [ 228.654378][T10551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.654392][T10551] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.654413][T10551] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 228.654426][T10551] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 228.654438][T10551] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 228.654450][T10551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.654461][T10551] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 228.654491][T10551] [ 229.107044][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.578140][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.948839][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.087321][T10587] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 230.171404][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.187038][T10594] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1624'. [ 230.263222][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 230.287908][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1626'. [ 230.527740][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.537123][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.547896][ T13] bridge_slave_1: left allmulticast mode [ 230.553808][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.562429][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.570472][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.581133][ T13] bridge_slave_1: left promiscuous mode [ 230.587058][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.617072][ T13] bridge_slave_0: left allmulticast mode [ 230.626216][ T13] bridge_slave_0: left promiscuous mode [ 230.632391][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.740882][T10614] xt_HMARK: proto mask must be zero with L3 mode [ 230.755110][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 230.916552][T10616] xt_hashlimit: size too large, truncated to 1048576 [ 230.927568][T10616] xt_hashlimit: max too large, truncated to 1048576 [ 230.987234][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1635'. [ 231.046163][T10627] openvswitch: netlink: IP tunnel dst address not specified [ 231.216834][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.231176][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.247459][ T13] bond0 (unregistering): Released all slaves [ 231.394635][T10607] lo speed is unknown, defaulting to 1000 [ 231.982796][ T13] hsr_slave_0: left promiscuous mode [ 231.994789][ T13] hsr_slave_1: left promiscuous mode [ 232.000764][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.035435][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.056515][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.084567][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.154280][ T13] veth1_macvtap: left promiscuous mode [ 232.159842][ T13] veth0_macvtap: left promiscuous mode [ 232.184808][ T13] veth1_vlan: left promiscuous mode [ 232.190194][ T13] veth0_vlan: left promiscuous mode [ 232.244222][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1654'. [ 232.329094][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1654'. [ 232.652787][ T5153] Bluetooth: hci2: command tx timeout [ 233.079019][ T13] team0 (unregistering): Port device team_slave_1 removed [ 233.123455][ T13] team0 (unregistering): Port device team_slave_0 removed [ 233.538025][T10681] lo speed is unknown, defaulting to 1000 [ 233.747941][T10700] FAULT_INJECTION: forcing a failure. [ 233.747941][T10700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.768898][T10607] chnl_net:caif_netlink_parms(): no params data found [ 233.777223][T10700] CPU: 0 UID: 0 PID: 10700 Comm: syz.2.1660 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 233.777248][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.777259][T10700] Call Trace: [ 233.777267][T10700] [ 233.777275][T10700] dump_stack_lvl+0x189/0x250 [ 233.777304][T10700] ? __pfx____ratelimit+0x10/0x10 [ 233.777321][T10700] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.777345][T10700] ? __pfx__printk+0x10/0x10 [ 233.777376][T10700] should_fail_ex+0x414/0x560 [ 233.777401][T10700] _copy_to_user+0x31/0xb0 [ 233.777418][T10700] bpf_test_finish+0x1ab/0x700 [ 233.777447][T10700] ? __pfx_bpf_test_finish+0x10/0x10 [ 233.777469][T10700] ? __asan_memcpy+0x40/0x70 [ 233.777509][T10700] bpf_prog_test_run_skb+0xed5/0x1560 [ 233.777542][T10700] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 233.777561][T10700] bpf_prog_test_run+0x2c4/0x340 [ 233.777586][T10700] __sys_bpf+0x4a4/0x860 [ 233.777608][T10700] ? __pfx___sys_bpf+0x10/0x10 [ 233.777648][T10700] ? rcu_is_watching+0x15/0xb0 [ 233.777674][T10700] __x64_sys_bpf+0x7c/0x90 [ 233.777692][T10700] do_syscall_64+0xfa/0x3b0 [ 233.777708][T10700] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.777723][T10700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.777740][T10700] ? clear_bhb_loop+0x60/0xb0 [ 233.777767][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.777783][T10700] RIP: 0033:0x7f5eed18e929 [ 233.777799][T10700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.777813][T10700] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.777831][T10700] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 233.777844][T10700] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 233.777856][T10700] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 233.777866][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.777876][T10700] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 233.777904][T10700] [ 234.124973][T10702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1662'. [ 234.136756][T10702] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 234.174936][T10702] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1662'. [ 234.189313][T10702] netlink: 'syz.2.1662': attribute type 1 has an invalid length. [ 234.198510][T10702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1662'. [ 234.247684][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.255333][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.262748][T10607] bridge_slave_0: entered allmulticast mode [ 234.276438][T10607] bridge_slave_0: entered promiscuous mode [ 234.296541][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.304096][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.311347][T10607] bridge_slave_1: entered allmulticast mode [ 234.319406][T10607] bridge_slave_1: entered promiscuous mode [ 234.412237][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.454058][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.594184][T10607] team0: Port device team_slave_0 added [ 234.624589][T10607] team0: Port device team_slave_1 added [ 234.706757][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.722663][ T5153] Bluetooth: hci2: command tx timeout [ 234.728183][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.759575][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.779365][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.786484][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.814179][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.919857][T10607] hsr_slave_0: entered promiscuous mode [ 234.941528][T10607] hsr_slave_1: entered promiscuous mode [ 234.948485][T10607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.961531][T10607] Cannot create hsr debugfs directory [ 235.049220][T10743] FAULT_INJECTION: forcing a failure. [ 235.049220][T10743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.063360][T10743] CPU: 1 UID: 0 PID: 10743 Comm: syz.0.1678 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 235.063386][T10743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.063395][T10743] Call Trace: [ 235.063403][T10743] [ 235.063411][T10743] dump_stack_lvl+0x189/0x250 [ 235.063440][T10743] ? __pfx____ratelimit+0x10/0x10 [ 235.063457][T10743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.063479][T10743] ? __pfx__printk+0x10/0x10 [ 235.063499][T10743] ? __asan_memcpy+0x40/0x70 [ 235.063528][T10743] should_fail_ex+0x414/0x560 [ 235.063554][T10743] _copy_to_user+0x31/0xb0 [ 235.063573][T10743] bpf_verifier_vlog+0x5ec/0x900 [ 235.063602][T10743] __btf_verifier_log+0xd4/0x120 [ 235.063628][T10743] ? __pfx___btf_verifier_log+0x10/0x10 [ 235.063647][T10743] ? __might_fault+0xb0/0x130 [ 235.063668][T10743] ? btf_parse_hdr+0x1e2/0x6d0 [ 235.063690][T10743] btf_parse_hdr+0x2d8/0x6d0 [ 235.063719][T10743] btf_new_fd+0x36d/0xc90 [ 235.063736][T10743] ? apparmor_capable+0x137/0x1b0 [ 235.063759][T10743] ? __pfx_btf_new_fd+0x10/0x10 [ 235.063778][T10743] ? bpf_token_put+0x143/0x160 [ 235.063797][T10743] ? bpf_btf_load+0x126/0x190 [ 235.063821][T10743] __sys_bpf+0x635/0x860 [ 235.063843][T10743] ? __pfx___sys_bpf+0x10/0x10 [ 235.063885][T10743] ? rcu_is_watching+0x15/0xb0 [ 235.063912][T10743] __x64_sys_bpf+0x7c/0x90 [ 235.063930][T10743] do_syscall_64+0xfa/0x3b0 [ 235.063946][T10743] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.063963][T10743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.063980][T10743] ? clear_bhb_loop+0x60/0xb0 [ 235.064000][T10743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.064017][T10743] RIP: 0033:0x7f6dcf98e929 [ 235.064033][T10743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.064049][T10743] RSP: 002b:00007f6dd0783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.064068][T10743] RAX: ffffffffffffffda RBX: 00007f6dcfbb5fa0 RCX: 00007f6dcf98e929 [ 235.064082][T10743] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 235.064094][T10743] RBP: 00007f6dd0783090 R08: 0000000000000000 R09: 0000000000000000 [ 235.064105][T10743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.064116][T10743] R13: 0000000000000001 R14: 00007f6dcfbb5fa0 R15: 00007ffce8c1b6d8 [ 235.064145][T10743] [ 235.370421][T10749] FAULT_INJECTION: forcing a failure. [ 235.370421][T10749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.411273][T10749] CPU: 1 UID: 0 PID: 10749 Comm: syz.2.1679 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 235.411300][T10749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 235.411311][T10749] Call Trace: [ 235.411319][T10749] [ 235.411328][T10749] dump_stack_lvl+0x189/0x250 [ 235.411356][T10749] ? __pfx____ratelimit+0x10/0x10 [ 235.411376][T10749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.411399][T10749] ? __pfx__printk+0x10/0x10 [ 235.411431][T10749] should_fail_ex+0x414/0x560 [ 235.411456][T10749] _copy_to_user+0x31/0xb0 [ 235.411476][T10749] bpf_test_finish+0x56f/0x700 [ 235.411507][T10749] ? __pfx_bpf_test_finish+0x10/0x10 [ 235.411534][T10749] ? slab_build_skb+0x273/0x3e0 [ 235.411559][T10749] bpf_prog_test_run_skb+0xed5/0x1560 [ 235.411596][T10749] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 235.411618][T10749] bpf_prog_test_run+0x2c4/0x340 [ 235.411644][T10749] __sys_bpf+0x4a4/0x860 [ 235.411667][T10749] ? __pfx___sys_bpf+0x10/0x10 [ 235.411716][T10749] ? rcu_is_watching+0x15/0xb0 [ 235.411745][T10749] __x64_sys_bpf+0x7c/0x90 [ 235.411766][T10749] do_syscall_64+0xfa/0x3b0 [ 235.411783][T10749] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.411800][T10749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.411816][T10749] ? clear_bhb_loop+0x60/0xb0 [ 235.411836][T10749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.411852][T10749] RIP: 0033:0x7f5eed18e929 [ 235.411868][T10749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.411883][T10749] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.411902][T10749] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 235.411914][T10749] RDX: 000000000000004c RSI: 00002000000004c0 RDI: 000000000000000a [ 235.411925][T10749] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 235.411936][T10749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.411947][T10749] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 235.411976][T10749] [ 235.681479][T10752] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1680'. [ 235.718982][T10750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1680'. [ 235.873002][T10759] batman_adv: batadv0: Interface deactivated: dummy0 [ 235.887902][T10759] batman_adv: batadv0: Removing interface: dummy0 [ 235.899006][T10759] bridge_slave_0: left allmulticast mode [ 235.904942][T10759] bridge_slave_0: left promiscuous mode [ 235.910759][T10759] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.921487][T10759] bridge_slave_1: left allmulticast mode [ 235.929936][T10759] bridge_slave_1: left promiscuous mode [ 235.935977][T10759] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.949891][T10759] bond0: (slave bond_slave_0): Releasing backup interface [ 235.961328][T10759] bond0: (slave bond_slave_1): Releasing backup interface [ 235.985843][T10759] team0: Port device team_slave_0 removed [ 236.009273][T10759] team0: Port device team_slave_1 removed [ 236.015945][T10759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.023719][T10759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.031827][T10759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.040107][T10759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.058819][T10759] team0: Port device geneve0 removed [ 236.067215][T10759] bond1: (slave gretap1): Releasing active interface [ 236.076228][T10759] gretap1: left promiscuous mode [ 236.081233][T10759] gretap1: left allmulticast mode [ 236.090736][ T10] lo speed is unknown, defaulting to 1000 [ 236.343452][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 236.366407][T10784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1692'. [ 236.411249][T10607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.440757][T10607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.478209][T10607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.496990][T10607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.612214][T10801] FAULT_INJECTION: forcing a failure. [ 236.612214][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 236.618965][T10802] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 236.649080][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.2.1698 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 236.649105][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.649116][T10801] Call Trace: [ 236.649124][T10801] [ 236.649133][T10801] dump_stack_lvl+0x189/0x250 [ 236.649162][T10801] ? __pfx____ratelimit+0x10/0x10 [ 236.649181][T10801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.649205][T10801] ? __pfx__printk+0x10/0x10 [ 236.649227][T10801] ? __pfx___might_resched+0x10/0x10 [ 236.649251][T10801] ? fs_reclaim_acquire+0x7d/0x100 [ 236.649280][T10801] should_fail_ex+0x414/0x560 [ 236.649306][T10801] should_failslab+0xa8/0x100 [ 236.649327][T10801] __kmalloc_noprof+0xcb/0x4f0 [ 236.649343][T10801] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 236.649368][T10801] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 236.649392][T10801] genl_family_rcv_msg_doit+0xb8/0x300 [ 236.649415][T10801] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 236.649435][T10801] ? rcu_is_watching+0x15/0xb0 [ 236.649462][T10801] ? apparmor_capable+0x137/0x1b0 [ 236.649482][T10801] ? bpf_lsm_capable+0x9/0x20 [ 236.649498][T10801] ? security_capable+0x7e/0x2e0 [ 236.649525][T10801] genl_rcv_msg+0x60e/0x790 [ 236.649562][T10801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.649577][T10801] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 236.649599][T10801] ? __pfx_nl80211_disassociate+0x10/0x10 [ 236.649616][T10801] ? __pfx_nl80211_post_doit+0x10/0x10 [ 236.649653][T10801] netlink_rcv_skb+0x208/0x470 [ 236.649675][T10801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 236.649693][T10801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.649732][T10801] ? down_read+0x1ad/0x2e0 [ 236.649754][T10801] genl_rcv+0x28/0x40 [ 236.649775][T10801] netlink_unicast+0x75b/0x8d0 [ 236.649806][T10801] netlink_sendmsg+0x805/0xb30 [ 236.649837][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.649861][T10801] ? aa_sock_msg_perm+0x94/0x160 [ 236.649884][T10801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.649904][T10801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.649926][T10801] __sock_sendmsg+0x21c/0x270 [ 236.649949][T10801] ____sys_sendmsg+0x505/0x830 [ 236.649981][T10801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.650015][T10801] ? import_iovec+0x74/0xa0 [ 236.650037][T10801] ___sys_sendmsg+0x21f/0x2a0 [ 236.650063][T10801] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.650122][T10801] ? __fget_files+0x2a/0x420 [ 236.650141][T10801] ? __fget_files+0x3a0/0x420 [ 236.650169][T10801] __x64_sys_sendmsg+0x19b/0x260 [ 236.650196][T10801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 236.650217][T10801] ? __might_fault+0xb0/0x130 [ 236.650247][T10801] ? rcu_is_watching+0x15/0xb0 [ 236.650271][T10801] ? trace_sys_enter+0x25/0x120 [ 236.650298][T10801] do_syscall_64+0xfa/0x3b0 [ 236.650315][T10801] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.650332][T10801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.650349][T10801] ? clear_bhb_loop+0x60/0xb0 [ 236.650371][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.650387][T10801] RIP: 0033:0x7f5eed18e929 [ 236.650403][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.650419][T10801] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.650438][T10801] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 236.650452][T10801] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 236.650464][T10801] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 236.650474][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.650485][T10801] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 236.650516][T10801] [ 236.694784][T10607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.823658][ T5153] Bluetooth: hci2: command tx timeout [ 237.067002][T10607] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.127005][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.134175][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.201622][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.208793][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.221982][T10815] netlink: 'syz.1.1704': attribute type 1 has an invalid length. [ 237.230178][T10815] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1704'. [ 237.594038][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 237.707132][T10607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.765761][T10844] FAULT_INJECTION: forcing a failure. [ 237.765761][T10844] name failslab, interval 1, probability 0, space 0, times 0 [ 237.792782][T10844] CPU: 1 UID: 0 PID: 10844 Comm: syz.1.1714 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 237.792808][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.792819][T10844] Call Trace: [ 237.792828][T10844] [ 237.792836][T10844] dump_stack_lvl+0x189/0x250 [ 237.792865][T10844] ? __pfx____ratelimit+0x10/0x10 [ 237.792883][T10844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.792905][T10844] ? __pfx__printk+0x10/0x10 [ 237.792931][T10844] ? ref_tracker_alloc+0x318/0x460 [ 237.792956][T10844] should_fail_ex+0x414/0x560 [ 237.792982][T10844] should_failslab+0xa8/0x100 [ 237.793001][T10844] kmem_cache_alloc_noprof+0x73/0x3c0 [ 237.793025][T10844] ? skb_clone+0x212/0x3a0 [ 237.793046][T10844] skb_clone+0x212/0x3a0 [ 237.793065][T10844] __netlink_deliver_tap+0x404/0x850 [ 237.793099][T10844] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.793122][T10844] netlink_deliver_tap+0x19c/0x1b0 [ 237.793144][T10844] netlink_unicast+0x72f/0x8d0 [ 237.793176][T10844] netlink_sendmsg+0x805/0xb30 [ 237.793206][T10844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.793228][T10844] ? aa_sock_msg_perm+0x94/0x160 [ 237.793249][T10844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.793269][T10844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.793289][T10844] __sock_sendmsg+0x21c/0x270 [ 237.793312][T10844] ____sys_sendmsg+0x505/0x830 [ 237.793342][T10844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.793373][T10844] ? import_iovec+0x74/0xa0 [ 237.793394][T10844] ___sys_sendmsg+0x21f/0x2a0 [ 237.793417][T10844] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.793483][T10844] ? __fget_files+0x2a/0x420 [ 237.793501][T10844] ? __fget_files+0x3a0/0x420 [ 237.793530][T10844] __x64_sys_sendmsg+0x19b/0x260 [ 237.793556][T10844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.793575][T10844] ? __might_fault+0xb0/0x130 [ 237.793605][T10844] ? rcu_is_watching+0x15/0xb0 [ 237.793630][T10844] ? trace_sys_enter+0x25/0x120 [ 237.793658][T10844] do_syscall_64+0xfa/0x3b0 [ 237.793676][T10844] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.793693][T10844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.793709][T10844] ? clear_bhb_loop+0x60/0xb0 [ 237.793729][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.793746][T10844] RIP: 0033:0x7f6a1cf8e929 [ 237.793763][T10844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.793777][T10844] RSP: 002b:00007f6a1de04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.793796][T10844] RAX: ffffffffffffffda RBX: 00007f6a1d1b5fa0 RCX: 00007f6a1cf8e929 [ 237.793809][T10844] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 237.793821][T10844] RBP: 00007f6a1de04090 R08: 0000000000000000 R09: 0000000000000000 [ 237.793831][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.793842][T10844] R13: 0000000000000000 R14: 00007f6a1d1b5fa0 R15: 00007ffe723e4d48 [ 237.793871][T10844] [ 237.823155][T10607] veth0_vlan: entered promiscuous mode [ 237.970103][T10845] netlink: 'syz.4.1713': attribute type 8 has an invalid length. [ 238.058017][T10607] veth1_vlan: entered promiscuous mode [ 238.120849][T10850] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 238.128884][T10850] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1716'. [ 238.266308][T10607] veth0_macvtap: entered promiscuous mode [ 238.286083][T10607] veth1_macvtap: entered promiscuous mode [ 238.347851][T10607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.401854][T10607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.451379][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.533197][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1722'. [ 238.557432][ T5931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.566315][ T5931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.597467][ T5931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.604622][T10871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1725'. [ 238.644662][T10867] lo speed is unknown, defaulting to 1000 [ 238.646278][T10871] netlink: 'syz.1.1725': attribute type 2 has an invalid length. [ 238.694271][T10873] dvmrp1: entered allmulticast mode [ 238.733914][T10873] dvmrp1: left allmulticast mode [ 238.825913][T10878] netlink: 'syz.0.1728': attribute type 1 has an invalid length. [ 238.849042][T10878] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1728'. [ 238.868215][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.879544][T10873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1726'. [ 238.890484][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.974980][T10882] netlink: 'syz.1.1729': attribute type 1 has an invalid length. [ 238.993861][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.002367][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.009460][T10882] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1729'. [ 239.042809][ T5153] Bluetooth: hci2: command tx timeout [ 239.151514][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 239.224007][T10890] FAULT_INJECTION: forcing a failure. [ 239.224007][T10890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.257623][T10890] CPU: 0 UID: 0 PID: 10890 Comm: syz.1.1732 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 239.257651][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.257663][T10890] Call Trace: [ 239.257671][T10890] [ 239.257680][T10890] dump_stack_lvl+0x189/0x250 [ 239.257709][T10890] ? __pfx____ratelimit+0x10/0x10 [ 239.257728][T10890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.257751][T10890] ? __pfx__printk+0x10/0x10 [ 239.257770][T10890] ? __might_fault+0xb0/0x130 [ 239.257801][T10890] should_fail_ex+0x414/0x560 [ 239.257829][T10890] _copy_from_user+0x2d/0xb0 [ 239.257847][T10890] kstrtouint_from_user+0xc4/0x170 [ 239.257873][T10890] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 239.257912][T10890] proc_fail_nth_write+0x88/0x240 [ 239.257933][T10890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.257959][T10890] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 239.257982][T10890] vfs_write+0x27b/0xa90 [ 239.258016][T10890] ? __pfx_vfs_write+0x10/0x10 [ 239.258043][T10890] ? __fget_files+0x2a/0x420 [ 239.258067][T10890] ? __fget_files+0x3a0/0x420 [ 239.258085][T10890] ? __fget_files+0x2a/0x420 [ 239.258114][T10890] ksys_write+0x145/0x250 [ 239.258131][T10890] ? __pfx_ksys_write+0x10/0x10 [ 239.258147][T10890] ? rcu_is_watching+0x15/0xb0 [ 239.258170][T10890] ? trace_sys_enter+0x25/0x120 [ 239.258198][T10890] do_syscall_64+0xfa/0x3b0 [ 239.258215][T10890] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.258232][T10890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.258249][T10890] ? clear_bhb_loop+0x60/0xb0 [ 239.258271][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.258288][T10890] RIP: 0033:0x7f6a1cf8d3df [ 239.258301][T10890] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 239.258312][T10890] RSP: 002b:00007f6a1de04030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 239.258327][T10890] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6a1cf8d3df [ 239.258337][T10890] RDX: 0000000000000001 RSI: 00007f6a1de040a0 RDI: 0000000000000005 [ 239.258346][T10890] RBP: 00007f6a1de04090 R08: 0000000000000000 R09: 0000000000000000 [ 239.258354][T10890] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 239.258362][T10890] R13: 0000000000000000 R14: 00007f6a1d1b5fa0 R15: 00007ffe723e4d48 [ 239.258384][T10890] [ 239.816545][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.243156][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 240.800945][T10915] FAULT_INJECTION: forcing a failure. [ 240.800945][T10915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.816063][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.827004][T10915] CPU: 0 UID: 0 PID: 10915 Comm: syz.1.1739 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 240.827029][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.827041][T10915] Call Trace: [ 240.827049][T10915] [ 240.827056][T10915] dump_stack_lvl+0x189/0x250 [ 240.827085][T10915] ? __pfx____ratelimit+0x10/0x10 [ 240.827104][T10915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.827126][T10915] ? __pfx__printk+0x10/0x10 [ 240.827156][T10915] should_fail_ex+0x414/0x560 [ 240.827181][T10915] _copy_to_user+0x31/0xb0 [ 240.827201][T10915] bpf_test_finish+0x24e/0x700 [ 240.827232][T10915] ? __pfx_bpf_test_finish+0x10/0x10 [ 240.827258][T10915] ? slab_build_skb+0x273/0x3e0 [ 240.827295][T10915] bpf_prog_test_run_skb+0xed5/0x1560 [ 240.827333][T10915] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 240.827355][T10915] bpf_prog_test_run+0x2c4/0x340 [ 240.827381][T10915] __sys_bpf+0x4a4/0x860 [ 240.827404][T10915] ? __pfx___sys_bpf+0x10/0x10 [ 240.827444][T10915] ? rcu_is_watching+0x15/0xb0 [ 240.827473][T10915] __x64_sys_bpf+0x7c/0x90 [ 240.827494][T10915] do_syscall_64+0xfa/0x3b0 [ 240.827511][T10915] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.827529][T10915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.827547][T10915] ? clear_bhb_loop+0x60/0xb0 [ 240.827568][T10915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.827584][T10915] RIP: 0033:0x7f6a1cf8e929 [ 240.827601][T10915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.827617][T10915] RSP: 002b:00007f6a1de04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.827637][T10915] RAX: ffffffffffffffda RBX: 00007f6a1d1b5fa0 RCX: 00007f6a1cf8e929 [ 240.827650][T10915] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 240.827662][T10915] RBP: 00007f6a1de04090 R08: 0000000000000000 R09: 0000000000000000 [ 240.827674][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.827685][T10915] R13: 0000000000000000 R14: 00007f6a1d1b5fa0 R15: 00007ffe723e4d48 [ 240.827715][T10915] [ 241.149875][ T43] IPVS: starting estimator thread 0... [ 241.192873][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.208549][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.219010][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.230375][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.239876][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.262719][T10923] IPVS: using max 29 ests per chain, 69600 per kthread [ 241.528256][ T5921] lo speed is unknown, defaulting to 1000 [ 241.530253][T10916] lo speed is unknown, defaulting to 1000 [ 241.534263][ T5921] syz2: Port: 1 Link DOWN [ 241.597606][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.627476][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.640905][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.650732][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.687123][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.745775][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.858704][T10924] lo speed is unknown, defaulting to 1000 [ 241.860171][T10941] FAULT_INJECTION: forcing a failure. [ 241.860171][T10941] name failslab, interval 1, probability 0, space 0, times 0 [ 241.880330][T10941] CPU: 0 UID: 0 PID: 10941 Comm: syz.4.1748 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 241.880355][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.880366][T10941] Call Trace: [ 241.880373][T10941] [ 241.880381][T10941] dump_stack_lvl+0x189/0x250 [ 241.880410][T10941] ? __pfx____ratelimit+0x10/0x10 [ 241.880429][T10941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.880452][T10941] ? __pfx__printk+0x10/0x10 [ 241.880476][T10941] ? __pfx___might_resched+0x10/0x10 [ 241.880498][T10941] ? fs_reclaim_acquire+0x7d/0x100 [ 241.880521][T10941] should_fail_ex+0x414/0x560 [ 241.880548][T10941] should_failslab+0xa8/0x100 [ 241.880569][T10941] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 241.880587][T10941] ? __alloc_skb+0x112/0x2d0 [ 241.880613][T10941] __alloc_skb+0x112/0x2d0 [ 241.880638][T10941] netlink_ack+0x146/0xa50 [ 241.880657][T10941] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.880676][T10941] ? ref_tracker_free+0x63a/0x7d0 [ 241.880696][T10941] ? __copy_skb_header+0xa7/0x550 [ 241.880721][T10941] ? __pfx_ref_tracker_free+0x10/0x10 [ 241.880752][T10941] netlink_rcv_skb+0x28c/0x470 [ 241.880774][T10941] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 241.880795][T10941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 241.880829][T10941] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.880849][T10941] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.880876][T10941] netlink_unicast+0x75b/0x8d0 [ 241.880907][T10941] netlink_sendmsg+0x805/0xb30 [ 241.880938][T10941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.880962][T10941] ? aa_sock_msg_perm+0x94/0x160 [ 241.880985][T10941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.881006][T10941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.881028][T10941] __sock_sendmsg+0x21c/0x270 [ 241.881051][T10941] ____sys_sendmsg+0x505/0x830 [ 241.881081][T10941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.881114][T10941] ? import_iovec+0x74/0xa0 [ 241.881136][T10941] ___sys_sendmsg+0x21f/0x2a0 [ 241.881162][T10941] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.881229][T10941] ? __fget_files+0x2a/0x420 [ 241.881247][T10941] ? __fget_files+0x3a0/0x420 [ 241.881277][T10941] __x64_sys_sendmsg+0x19b/0x260 [ 241.881303][T10941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.881324][T10941] ? __might_fault+0xb0/0x130 [ 241.881353][T10941] ? rcu_is_watching+0x15/0xb0 [ 241.881376][T10941] ? trace_sys_enter+0x25/0x120 [ 241.881404][T10941] do_syscall_64+0xfa/0x3b0 [ 241.881421][T10941] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.881438][T10941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.881455][T10941] ? clear_bhb_loop+0x60/0xb0 [ 241.881477][T10941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.881493][T10941] RIP: 0033:0x7f80da78e929 [ 241.881509][T10941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.881524][T10941] RSP: 002b:00007f80db573038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.881544][T10941] RAX: ffffffffffffffda RBX: 00007f80da9b5fa0 RCX: 00007f80da78e929 [ 241.881557][T10941] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 241.881569][T10941] RBP: 00007f80db573090 R08: 0000000000000000 R09: 0000000000000000 [ 241.881579][T10941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.881589][T10941] R13: 0000000000000000 R14: 00007f80da9b5fa0 R15: 00007fff4b0d61c8 [ 241.881616][T10941] [ 242.229206][T10943] FAULT_INJECTION: forcing a failure. [ 242.229206][T10943] name failslab, interval 1, probability 0, space 0, times 0 [ 242.241873][T10943] CPU: 1 UID: 0 PID: 10943 Comm: syz.0.1749 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 242.241898][T10943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.241910][T10943] Call Trace: [ 242.241918][T10943] [ 242.241926][T10943] dump_stack_lvl+0x189/0x250 [ 242.241960][T10943] ? __pfx____ratelimit+0x10/0x10 [ 242.241979][T10943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.242003][T10943] ? __pfx__printk+0x10/0x10 [ 242.242025][T10943] ? rcu_is_watching+0x15/0xb0 [ 242.242058][T10943] should_fail_ex+0x414/0x560 [ 242.242085][T10943] should_failslab+0xa8/0x100 [ 242.242106][T10943] kmem_cache_alloc_noprof+0x73/0x3c0 [ 242.242130][T10943] ? skb_clone+0x212/0x3a0 [ 242.242152][T10943] skb_clone+0x212/0x3a0 [ 242.242172][T10943] bpf_clone_redirect+0xad/0x3d0 [ 242.242201][T10943] bpf_prog_8fc376a456af886e+0x5e/0x67 [ 242.242225][T10943] ? ktime_get+0x3e/0x1f0 [ 242.242250][T10943] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 242.242270][T10943] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.242287][T10943] ? ktime_get+0x3e/0x1f0 [ 242.242303][T10943] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 242.242328][T10943] ? __local_bh_disable_ip+0xf1/0x190 [ 242.242351][T10943] ? __pfx___cant_migrate+0x10/0x10 [ 242.242373][T10943] ? __local_bh_enable_ip+0x12d/0x1c0 [ 242.242394][T10943] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 242.242421][T10943] ? bpf_test_timer_continue+0x136/0x350 [ 242.242447][T10943] bpf_test_run+0x38b/0x830 [ 242.242476][T10943] ? bpf_test_run+0x205/0x830 [ 242.242505][T10943] ? __pfx_bpf_test_run+0x10/0x10 [ 242.242546][T10943] ? bpf_prog_test_run_skb+0x6ac/0x1560 [ 242.242564][T10943] ? convert___skb_to_skb+0x3d/0x590 [ 242.242584][T10943] bpf_prog_test_run_skb+0xb30/0x1560 [ 242.242618][T10943] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 242.242639][T10943] bpf_prog_test_run+0x2c4/0x340 [ 242.242665][T10943] __sys_bpf+0x4a4/0x860 [ 242.242687][T10943] ? __pfx___sys_bpf+0x10/0x10 [ 242.242726][T10943] ? rcu_is_watching+0x15/0xb0 [ 242.242752][T10943] __x64_sys_bpf+0x7c/0x90 [ 242.242771][T10943] do_syscall_64+0xfa/0x3b0 [ 242.242787][T10943] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.242802][T10943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.242817][T10943] ? clear_bhb_loop+0x60/0xb0 [ 242.242837][T10943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.242853][T10943] RIP: 0033:0x7f6dcf98e929 [ 242.242868][T10943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.242882][T10943] RSP: 002b:00007f6dd0783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.242900][T10943] RAX: ffffffffffffffda RBX: 00007f6dcfbb5fa0 RCX: 00007f6dcf98e929 [ 242.242913][T10943] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 242.242925][T10943] RBP: 00007f6dd0783090 R08: 0000000000000000 R09: 0000000000000000 [ 242.242943][T10943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.242954][T10943] R13: 0000000000000000 R14: 00007f6dcfbb5fa0 R15: 00007ffce8c1b6d8 [ 242.242982][T10943] [ 242.717836][T10955] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1754'. [ 242.800190][T10955] batman_adv: batadv0: Adding interface: dummy0 [ 242.807103][T10955] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.836899][T10955] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 242.860926][ T154] bridge_slave_1: left allmulticast mode [ 242.869369][ T154] bridge_slave_1: left promiscuous mode [ 242.905006][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.926407][ T154] bridge_slave_0: left allmulticast mode [ 242.932090][ T154] bridge_slave_0: left promiscuous mode [ 242.940191][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.984341][T10966] FAULT_INJECTION: forcing a failure. [ 242.984341][T10966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.998212][T10966] CPU: 0 UID: 0 PID: 10966 Comm: syz.2.1757 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 242.998236][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.998247][T10966] Call Trace: [ 242.998256][T10966] [ 242.998264][T10966] dump_stack_lvl+0x189/0x250 [ 242.998292][T10966] ? __pfx____ratelimit+0x10/0x10 [ 242.998310][T10966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.998333][T10966] ? __pfx__printk+0x10/0x10 [ 242.998365][T10966] should_fail_ex+0x414/0x560 [ 242.998392][T10966] _copy_from_user+0x2d/0xb0 [ 242.998409][T10966] copy_from_bpfptr+0x5c/0x90 [ 242.998432][T10966] bpf_prog_load+0xa83/0x1930 [ 242.998467][T10966] ? __pfx_bpf_prog_load+0x10/0x10 [ 242.998511][T10966] ? bpf_lsm_bpf+0x9/0x20 [ 242.998526][T10966] ? security_bpf+0x7e/0x300 [ 242.998548][T10966] __sys_bpf+0x5f1/0x860 [ 242.998571][T10966] ? __pfx___sys_bpf+0x10/0x10 [ 242.998614][T10966] ? rcu_is_watching+0x15/0xb0 [ 242.998643][T10966] __x64_sys_bpf+0x7c/0x90 [ 242.998664][T10966] do_syscall_64+0xfa/0x3b0 [ 242.998680][T10966] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.998696][T10966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.998713][T10966] ? clear_bhb_loop+0x60/0xb0 [ 242.998734][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.998751][T10966] RIP: 0033:0x7f5eed18e929 [ 242.998767][T10966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.998781][T10966] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.998799][T10966] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 242.998812][T10966] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 242.998823][T10966] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 242.998835][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.998846][T10966] R13: 0000000000000001 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 242.998875][T10966] [ 243.292928][ T5153] Bluetooth: hci2: command tx timeout [ 243.419484][T10973] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1760'. [ 243.535381][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.545819][T10978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1761'. [ 243.557640][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.569475][ T154] bond0 (unregistering): Released all slaves [ 243.721661][T10924] chnl_net:caif_netlink_parms(): no params data found [ 243.740966][T10964] lo speed is unknown, defaulting to 1000 [ 243.826515][T10982] SET target dimension over the limit! [ 243.835295][T10984] FAULT_INJECTION: forcing a failure. [ 243.835295][T10984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.848754][T10984] CPU: 0 UID: 0 PID: 10984 Comm: syz.4.1763 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 243.848778][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.848788][T10984] Call Trace: [ 243.848797][T10984] [ 243.848805][T10984] dump_stack_lvl+0x189/0x250 [ 243.848833][T10984] ? __pfx____ratelimit+0x10/0x10 [ 243.848852][T10984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.848875][T10984] ? __pfx__printk+0x10/0x10 [ 243.848908][T10984] should_fail_ex+0x414/0x560 [ 243.848934][T10984] _copy_to_user+0x31/0xb0 [ 243.848953][T10984] bpf_test_finish+0x56f/0x700 [ 243.848983][T10984] ? __pfx_bpf_test_finish+0x10/0x10 [ 243.849010][T10984] ? slab_build_skb+0x273/0x3e0 [ 243.849035][T10984] bpf_prog_test_run_skb+0xed5/0x1560 [ 243.849077][T10984] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 243.849098][T10984] bpf_prog_test_run+0x2c4/0x340 [ 243.849124][T10984] __sys_bpf+0x4a4/0x860 [ 243.849147][T10984] ? __pfx___sys_bpf+0x10/0x10 [ 243.849189][T10984] ? rcu_is_watching+0x15/0xb0 [ 243.849217][T10984] __x64_sys_bpf+0x7c/0x90 [ 243.849238][T10984] do_syscall_64+0xfa/0x3b0 [ 243.849255][T10984] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.849272][T10984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.849290][T10984] ? clear_bhb_loop+0x60/0xb0 [ 243.849310][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.849326][T10984] RIP: 0033:0x7f80da78e929 [ 243.849341][T10984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.849357][T10984] RSP: 002b:00007f80db573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.849375][T10984] RAX: ffffffffffffffda RBX: 00007f80da9b5fa0 RCX: 00007f80da78e929 [ 243.849388][T10984] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 243.849399][T10984] RBP: 00007f80db573090 R08: 0000000000000000 R09: 0000000000000000 [ 243.849410][T10984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.849421][T10984] R13: 0000000000000000 R14: 00007f80da9b5fa0 R15: 00007fff4b0d61c8 [ 243.849450][T10984] [ 244.088130][T10986] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1764'. [ 244.167774][ T154] hsr_slave_0: left promiscuous mode [ 244.176397][ T154] hsr_slave_1: left promiscuous mode [ 244.182415][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.205381][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.222431][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.269993][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.337810][ T154] veth1_macvtap: left promiscuous mode [ 244.345112][ T154] veth0_macvtap: left promiscuous mode [ 244.354956][ T154] veth1_vlan: left promiscuous mode [ 244.360324][ T154] veth0_vlan: left promiscuous mode [ 245.294940][ T154] team0 (unregistering): Port device team_slave_1 removed [ 245.335317][ T154] team0 (unregistering): Port device team_slave_0 removed [ 245.366074][ T5153] Bluetooth: hci2: command tx timeout [ 245.681044][T11012] FAULT_INJECTION: forcing a failure. [ 245.681044][T11012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.752679][T11012] CPU: 0 UID: 0 PID: 11012 Comm: syz.4.1771 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 245.752706][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.752723][T11012] Call Trace: [ 245.752731][T11012] [ 245.752739][T11012] dump_stack_lvl+0x189/0x250 [ 245.752767][T11012] ? __pfx____ratelimit+0x10/0x10 [ 245.752785][T11012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.752808][T11012] ? __pfx__printk+0x10/0x10 [ 245.752840][T11012] should_fail_ex+0x414/0x560 [ 245.752867][T11012] _copy_to_user+0x31/0xb0 [ 245.752887][T11012] simple_read_from_buffer+0xe1/0x170 [ 245.752910][T11012] proc_fail_nth_read+0x1df/0x250 [ 245.752931][T11012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.752952][T11012] ? rw_verify_area+0x258/0x650 [ 245.752974][T11012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.752995][T11012] vfs_read+0x1fd/0x980 [ 245.753023][T11012] ? __pfx___mutex_lock+0x10/0x10 [ 245.753042][T11012] ? __pfx_vfs_read+0x10/0x10 [ 245.753067][T11012] ? __fget_files+0x2a/0x420 [ 245.753089][T11012] ? __fget_files+0x3a0/0x420 [ 245.753107][T11012] ? __fget_files+0x2a/0x420 [ 245.753133][T11012] ksys_read+0x145/0x250 [ 245.753152][T11012] ? __pfx_ksys_read+0x10/0x10 [ 245.753174][T11012] ? rcu_is_watching+0x15/0xb0 [ 245.753198][T11012] ? trace_sys_enter+0x25/0x120 [ 245.753223][T11012] do_syscall_64+0xfa/0x3b0 [ 245.753240][T11012] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.753257][T11012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.753274][T11012] ? clear_bhb_loop+0x60/0xb0 [ 245.753295][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.753311][T11012] RIP: 0033:0x7f80da78d33c [ 245.753328][T11012] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.753343][T11012] RSP: 002b:00007f80db573030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 245.753362][T11012] RAX: ffffffffffffffda RBX: 00007f80da9b5fa0 RCX: 00007f80da78d33c [ 245.753375][T11012] RDX: 000000000000000f RSI: 00007f80db5730a0 RDI: 0000000000000004 [ 245.753387][T11012] RBP: 00007f80db573090 R08: 0000000000000000 R09: 0000000000000000 [ 245.753399][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.753409][T11012] R13: 0000000000000000 R14: 00007f80da9b5fa0 R15: 00007fff4b0d61c8 [ 245.753439][T11012] [ 246.148088][T10924] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.159127][T10924] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.170724][T10924] bridge_slave_0: entered allmulticast mode [ 246.206011][T10924] bridge_slave_0: entered promiscuous mode [ 246.257425][T10924] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.265852][T10924] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.287185][T10924] bridge_slave_1: entered allmulticast mode [ 246.297336][T10924] bridge_slave_1: entered promiscuous mode [ 246.417146][T10924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.439819][T10924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.529518][T10924] team0: Port device team_slave_0 added [ 246.549426][T10924] team0: Port device team_slave_1 added [ 246.571338][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 246.599218][T11039] netlink: 'syz.2.1781': attribute type 3 has an invalid length. [ 246.678948][T10924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.702284][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.749744][T10924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.919269][T10924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.958193][T10924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.007302][T10924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.281861][T10924] hsr_slave_0: entered promiscuous mode [ 247.328517][T10924] hsr_slave_1: entered promiscuous mode [ 247.353435][T10924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.361006][T10924] Cannot create hsr debugfs directory [ 247.442776][ T5153] Bluetooth: hci2: command tx timeout [ 247.620515][T11057] FAULT_INJECTION: forcing a failure. [ 247.620515][T11057] name failslab, interval 1, probability 0, space 0, times 0 [ 247.652466][T11057] CPU: 0 UID: 0 PID: 11057 Comm: syz.1.1786 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 247.652495][T11057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.652506][T11057] Call Trace: [ 247.652514][T11057] [ 247.652522][T11057] dump_stack_lvl+0x189/0x250 [ 247.652550][T11057] ? __pfx____ratelimit+0x10/0x10 [ 247.652576][T11057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.652599][T11057] ? __pfx__printk+0x10/0x10 [ 247.652621][T11057] ? __pfx___might_resched+0x10/0x10 [ 247.652644][T11057] ? fs_reclaim_acquire+0x7d/0x100 [ 247.652669][T11057] should_fail_ex+0x414/0x560 [ 247.652695][T11057] should_failslab+0xa8/0x100 [ 247.652715][T11057] __kmalloc_noprof+0xcb/0x4f0 [ 247.652730][T11057] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 247.652752][T11057] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 247.652776][T11057] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 247.652802][T11057] genl_family_rcv_msg_doit+0xb8/0x300 [ 247.652826][T11057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 247.652846][T11057] ? rcu_is_watching+0x15/0xb0 [ 247.652874][T11057] ? apparmor_capable+0x137/0x1b0 [ 247.652893][T11057] ? bpf_lsm_capable+0x9/0x20 [ 247.652908][T11057] ? security_capable+0x7e/0x2e0 [ 247.652936][T11057] genl_rcv_msg+0x60e/0x790 [ 247.652959][T11057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.652973][T11057] ? ref_tracker_free+0x63a/0x7d0 [ 247.652992][T11057] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 247.653014][T11057] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 247.653030][T11057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 247.653054][T11057] ? __pfx_ref_tracker_free+0x10/0x10 [ 247.653088][T11057] netlink_rcv_skb+0x208/0x470 [ 247.653110][T11057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.653129][T11057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.653169][T11057] ? down_read+0x1ad/0x2e0 [ 247.653191][T11057] genl_rcv+0x28/0x40 [ 247.653213][T11057] netlink_unicast+0x75b/0x8d0 [ 247.653245][T11057] netlink_sendmsg+0x805/0xb30 [ 247.653276][T11057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.653301][T11057] ? aa_sock_msg_perm+0x94/0x160 [ 247.653324][T11057] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.653344][T11057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.653366][T11057] __sock_sendmsg+0x21c/0x270 [ 247.653389][T11057] ____sys_sendmsg+0x505/0x830 [ 247.653419][T11057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.653453][T11057] ? import_iovec+0x74/0xa0 [ 247.653476][T11057] ___sys_sendmsg+0x21f/0x2a0 [ 247.653502][T11057] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.653571][T11057] ? __fget_files+0x2a/0x420 [ 247.653589][T11057] ? __fget_files+0x3a0/0x420 [ 247.653619][T11057] __x64_sys_sendmsg+0x19b/0x260 [ 247.653645][T11057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.653666][T11057] ? __might_fault+0xb0/0x130 [ 247.653697][T11057] ? rcu_is_watching+0x15/0xb0 [ 247.653720][T11057] ? trace_sys_enter+0x25/0x120 [ 247.653748][T11057] do_syscall_64+0xfa/0x3b0 [ 247.653765][T11057] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.653782][T11057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.653798][T11057] ? clear_bhb_loop+0x60/0xb0 [ 247.653819][T11057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.653835][T11057] RIP: 0033:0x7f6a1cf8e929 [ 247.653852][T11057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.653867][T11057] RSP: 002b:00007f6a1de04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.653886][T11057] RAX: ffffffffffffffda RBX: 00007f6a1d1b5fa0 RCX: 00007f6a1cf8e929 [ 247.653899][T11057] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 247.653910][T11057] RBP: 00007f6a1de04090 R08: 0000000000000000 R09: 0000000000000000 [ 247.653921][T11057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.653932][T11057] R13: 0000000000000000 R14: 00007f6a1d1b5fa0 R15: 00007ffe723e4d48 [ 247.653961][T11057] [ 248.043690][T11060] !: renamed from dummy0 [ 248.138469][T11065] FAULT_INJECTION: forcing a failure. [ 248.138469][T11065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.155627][T11065] CPU: 0 UID: 0 PID: 11065 Comm: syz.0.1792 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 248.155653][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.155664][T11065] Call Trace: [ 248.155672][T11065] [ 248.155680][T11065] dump_stack_lvl+0x189/0x250 [ 248.155709][T11065] ? __pfx____ratelimit+0x10/0x10 [ 248.155727][T11065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.155751][T11065] ? __pfx__printk+0x10/0x10 [ 248.155784][T11065] should_fail_ex+0x414/0x560 [ 248.155811][T11065] _copy_to_user+0x31/0xb0 [ 248.155831][T11065] bpf_test_finish+0x56f/0x700 [ 248.155862][T11065] ? __pfx_bpf_test_finish+0x10/0x10 [ 248.155888][T11065] ? slab_build_skb+0x273/0x3e0 [ 248.155914][T11065] bpf_prog_test_run_skb+0xed5/0x1560 [ 248.155951][T11065] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 248.155972][T11065] bpf_prog_test_run+0x2c4/0x340 [ 248.156000][T11065] __sys_bpf+0x4a4/0x860 [ 248.156024][T11065] ? __pfx___sys_bpf+0x10/0x10 [ 248.156067][T11065] ? rcu_is_watching+0x15/0xb0 [ 248.156095][T11065] __x64_sys_bpf+0x7c/0x90 [ 248.156115][T11065] do_syscall_64+0xfa/0x3b0 [ 248.156132][T11065] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.156149][T11065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.156166][T11065] ? clear_bhb_loop+0x60/0xb0 [ 248.156188][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.156204][T11065] RIP: 0033:0x7f6dcf98e929 [ 248.156220][T11065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.156235][T11065] RSP: 002b:00007f6dd0783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.156254][T11065] RAX: ffffffffffffffda RBX: 00007f6dcfbb5fa0 RCX: 00007f6dcf98e929 [ 248.156267][T11065] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 248.156279][T11065] RBP: 00007f6dd0783090 R08: 0000000000000000 R09: 0000000000000000 [ 248.156290][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.156302][T11065] R13: 0000000000000000 R14: 00007f6dcfbb5fa0 R15: 00007ffce8c1b6d8 [ 248.156331][T11065] [ 248.481700][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1790'. [ 248.705091][T11089] netlink: 'syz.0.1798': attribute type 1 has an invalid length. [ 248.750015][T11089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.758614][T11088] FAULT_INJECTION: forcing a failure. [ 248.758614][T11088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.761444][T11089] batman_adv: batadv0: Removing interface: dummy0 [ 248.827109][T11088] CPU: 1 UID: 0 PID: 11088 Comm: syz.2.1800 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 248.827136][T11088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.827147][T11088] Call Trace: [ 248.827155][T11088] [ 248.827164][T11088] dump_stack_lvl+0x189/0x250 [ 248.827193][T11088] ? __pfx____ratelimit+0x10/0x10 [ 248.827212][T11088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.827236][T11088] ? __pfx__printk+0x10/0x10 [ 248.827269][T11088] should_fail_ex+0x414/0x560 [ 248.827296][T11088] _copy_to_user+0x31/0xb0 [ 248.827316][T11088] bpf_test_finish+0x56f/0x700 [ 248.827347][T11088] ? __pfx_bpf_test_finish+0x10/0x10 [ 248.827374][T11088] ? slab_build_skb+0x273/0x3e0 [ 248.827401][T11088] bpf_prog_test_run_skb+0xed5/0x1560 [ 248.827437][T11088] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 248.827459][T11088] bpf_prog_test_run+0x2c4/0x340 [ 248.827486][T11088] __sys_bpf+0x4a4/0x860 [ 248.827510][T11088] ? __pfx___sys_bpf+0x10/0x10 [ 248.827554][T11088] ? rcu_is_watching+0x15/0xb0 [ 248.827583][T11088] __x64_sys_bpf+0x7c/0x90 [ 248.827604][T11088] do_syscall_64+0xfa/0x3b0 [ 248.827621][T11088] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.827638][T11088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.827655][T11088] ? clear_bhb_loop+0x60/0xb0 [ 248.827677][T11088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.827694][T11088] RIP: 0033:0x7f5eed18e929 [ 248.827710][T11088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.827724][T11088] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 248.827749][T11088] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 248.827762][T11088] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 248.827774][T11088] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 248.827785][T11088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.827796][T11088] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 248.827826][T11088] [ 249.066848][T10924] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.094829][T10924] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.108847][T10924] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.132679][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1801'. [ 249.146645][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1804'. [ 249.163159][T10924] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.195983][T11100] pimreg: entered allmulticast mode [ 249.522676][ T5153] Bluetooth: hci2: command tx timeout [ 249.700645][T11137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1811'. [ 249.788763][T11114] veth0_to_bond: left allmulticast mode [ 249.802007][T11114] veth0_vlan: left allmulticast mode [ 249.856891][T11138] batman_adv: batadv0: Interface deactivated: dummy0 [ 249.864457][T11138] batman_adv: batadv0: Removing interface: dummy0 [ 249.971771][T11141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1814'. [ 250.005720][T10924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.025793][T11141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 250.036486][T10924] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.061196][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.068369][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.125999][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.133190][ T5931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.689709][T10924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.791394][T10924] veth0_vlan: entered promiscuous mode [ 250.805363][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1828'. [ 250.826109][T10924] veth1_vlan: entered promiscuous mode [ 250.845972][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1825'. [ 250.900324][T10924] veth0_macvtap: entered promiscuous mode [ 250.918039][T10924] veth1_macvtap: entered promiscuous mode [ 250.957329][T10924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.987197][T10924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.018535][ T6374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.061185][ T6374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.092626][ T6374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.101359][ T6374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.200534][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.227905][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.259483][T11201] netlink: 'syz.1.1835': attribute type 97 has an invalid length. [ 251.298230][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.324851][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.402409][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 251.412335][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 251.636974][T11223] FAULT_INJECTION: forcing a failure. [ 251.636974][T11223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.667860][T11223] CPU: 1 UID: 0 PID: 11223 Comm: syz.4.1844 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 251.667888][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 251.667899][T11223] Call Trace: [ 251.667907][T11223] [ 251.667915][T11223] dump_stack_lvl+0x189/0x250 [ 251.667942][T11223] ? __pfx____ratelimit+0x10/0x10 [ 251.667960][T11223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.667983][T11223] ? __pfx__printk+0x10/0x10 [ 251.668014][T11223] should_fail_ex+0x414/0x560 [ 251.668039][T11223] _copy_to_user+0x31/0xb0 [ 251.668059][T11223] simple_read_from_buffer+0xe1/0x170 [ 251.668083][T11223] proc_fail_nth_read+0x1df/0x250 [ 251.668107][T11223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.668130][T11223] ? rw_verify_area+0x258/0x650 [ 251.668152][T11223] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 251.668173][T11223] vfs_read+0x1fd/0x980 [ 251.668203][T11223] ? __pfx___mutex_lock+0x10/0x10 [ 251.668221][T11223] ? __pfx_vfs_read+0x10/0x10 [ 251.668246][T11223] ? __fget_files+0x2a/0x420 [ 251.668267][T11223] ? __fget_files+0x3a0/0x420 [ 251.668283][T11223] ? __fget_files+0x2a/0x420 [ 251.668356][T11223] ksys_read+0x145/0x250 [ 251.668376][T11223] ? __pfx_ksys_read+0x10/0x10 [ 251.668399][T11223] ? rcu_is_watching+0x15/0xb0 [ 251.668423][T11223] ? trace_sys_enter+0x25/0x120 [ 251.668449][T11223] do_syscall_64+0xfa/0x3b0 [ 251.668465][T11223] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.668482][T11223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.668500][T11223] ? clear_bhb_loop+0x60/0xb0 [ 251.668519][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.668535][T11223] RIP: 0033:0x7f80da78d33c [ 251.668550][T11223] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 251.668563][T11223] RSP: 002b:00007f80db573030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.668583][T11223] RAX: ffffffffffffffda RBX: 00007f80da9b5fa0 RCX: 00007f80da78d33c [ 251.668596][T11223] RDX: 000000000000000f RSI: 00007f80db5730a0 RDI: 0000000000000006 [ 251.668607][T11223] RBP: 00007f80db573090 R08: 0000000000000000 R09: 0000000000000000 [ 251.668617][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.668628][T11223] R13: 0000000000000000 R14: 00007f80da9b5fa0 R15: 00007fff4b0d61c8 [ 251.668658][T11223] [ 252.205979][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.228229][T11240] netlink: 'syz.2.1849': attribute type 12 has an invalid length. [ 252.319735][T11241] netlink: 'syz.2.1849': attribute type 12 has an invalid length. [ 252.577359][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.298925][T11246] delete_channel: no stack [ 253.307714][T11250] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 253.438111][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.589841][T11261] __nla_validate_parse: 3 callbacks suppressed [ 253.589859][T11261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1859'. [ 253.610677][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.666343][T11266] batman_adv: batadv0: Adding interface: dummy0 [ 253.678857][T11266] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.727226][T11266] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 253.740471][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.758639][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.768145][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.795302][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.835608][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.937818][ T12] bridge_slave_1: left allmulticast mode [ 253.945160][ T12] bridge_slave_1: left promiscuous mode [ 253.950971][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.975908][ T12] bridge_slave_0: left allmulticast mode [ 253.987167][ T12] bridge_slave_0: left promiscuous mode [ 254.017891][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.163559][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1866'. [ 254.563981][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.575245][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.586115][ T12] bond0 (unregistering): Released all slaves [ 254.602299][T11287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.708059][T11270] lo speed is unknown, defaulting to 1000 [ 254.825132][T11305] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1871'. [ 254.837506][T11307] FAULT_INJECTION: forcing a failure. [ 254.837506][T11307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.868757][T11307] CPU: 0 UID: 0 PID: 11307 Comm: syz.4.1872 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 254.868783][T11307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.868794][T11307] Call Trace: [ 254.868802][T11307] [ 254.868810][T11307] dump_stack_lvl+0x189/0x250 [ 254.868837][T11307] ? __pfx____ratelimit+0x10/0x10 [ 254.868852][T11307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.868870][T11307] ? __pfx__printk+0x10/0x10 [ 254.868894][T11307] should_fail_ex+0x414/0x560 [ 254.868914][T11307] _copy_to_user+0x31/0xb0 [ 254.868930][T11307] simple_read_from_buffer+0xe1/0x170 [ 254.868949][T11307] proc_fail_nth_read+0x1df/0x250 [ 254.868967][T11307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.868984][T11307] ? rw_verify_area+0x258/0x650 [ 254.869002][T11307] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.869019][T11307] vfs_read+0x1fd/0x980 [ 254.869041][T11307] ? __pfx___mutex_lock+0x10/0x10 [ 254.869057][T11307] ? __pfx_vfs_read+0x10/0x10 [ 254.869077][T11307] ? __fget_files+0x2a/0x420 [ 254.869096][T11307] ? __fget_files+0x3a0/0x420 [ 254.869108][T11307] ? __fget_files+0x2a/0x420 [ 254.869129][T11307] ksys_read+0x145/0x250 [ 254.869143][T11307] ? __pfx_ksys_read+0x10/0x10 [ 254.869161][T11307] ? rcu_is_watching+0x15/0xb0 [ 254.869180][T11307] ? trace_sys_enter+0x25/0x120 [ 254.869201][T11307] do_syscall_64+0xfa/0x3b0 [ 254.869214][T11307] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.869226][T11307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.869239][T11307] ? clear_bhb_loop+0x60/0xb0 [ 254.869255][T11307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.869267][T11307] RIP: 0033:0x7f80da78d33c [ 254.869280][T11307] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.869291][T11307] RSP: 002b:00007f80db573030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.869306][T11307] RAX: ffffffffffffffda RBX: 00007f80da9b5fa0 RCX: 00007f80da78d33c [ 254.869316][T11307] RDX: 000000000000000f RSI: 00007f80db5730a0 RDI: 0000000000000006 [ 254.869331][T11307] RBP: 00007f80db573090 R08: 0000000000000000 R09: 0000000000000000 [ 254.869339][T11307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.869347][T11307] R13: 0000000000000000 R14: 00007f80da9b5fa0 R15: 00007fff4b0d61c8 [ 254.869368][T11307] [ 254.971097][T11313] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 255.113900][T11270] chnl_net:caif_netlink_parms(): no params data found [ 255.306342][T11328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 255.440775][T11327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'. [ 255.481662][ T12] hsr_slave_0: left promiscuous mode [ 255.509272][ T12] hsr_slave_1: left promiscuous mode [ 255.522430][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.536177][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.547735][T11339] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 255.548289][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.573031][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.607295][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.623614][ T12] veth1_macvtap: left promiscuous mode [ 255.629155][ T12] veth0_macvtap: left promiscuous mode [ 255.648517][ T12] veth1_vlan: left promiscuous mode [ 255.654563][ T12] veth0_vlan: left promiscuous mode [ 255.924964][ T5838] Bluetooth: hci2: command tx timeout [ 256.141614][ T12] team0 (unregistering): Port device team_slave_1 removed [ 256.178974][ T12] team0 (unregistering): Port device team_slave_0 removed [ 256.679206][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.682619][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 256.692894][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.702245][T11270] bridge_slave_0: entered allmulticast mode [ 256.734443][T11270] bridge_slave_0: entered promiscuous mode [ 256.753830][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.762739][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.781506][T11270] bridge_slave_1: entered allmulticast mode [ 256.789286][T11270] bridge_slave_1: entered promiscuous mode [ 256.809820][T11358] bridge_slave_1: left allmulticast mode [ 256.821368][T11358] bridge_slave_1: left promiscuous mode [ 256.854420][T11365] netlink: 'syz.1.1889': attribute type 83 has an invalid length. [ 256.854918][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.887338][T11358] bridge_slave_0: left allmulticast mode [ 256.896608][T11358] bridge_slave_0: left promiscuous mode [ 256.902423][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.995563][T11373] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1893'. [ 257.008812][T11373] FAULT_INJECTION: forcing a failure. [ 257.008812][T11373] name failslab, interval 1, probability 0, space 0, times 0 [ 257.022403][T11373] CPU: 1 UID: 0 PID: 11373 Comm: syz.0.1893 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 257.022425][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.022435][T11373] Call Trace: [ 257.022442][T11373] [ 257.022449][T11373] dump_stack_lvl+0x189/0x250 [ 257.022483][T11373] ? __pfx____ratelimit+0x10/0x10 [ 257.022501][T11373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.022523][T11373] ? __pfx__printk+0x10/0x10 [ 257.022548][T11373] ? __pfx___might_resched+0x10/0x10 [ 257.022570][T11373] ? fs_reclaim_acquire+0x7d/0x100 [ 257.022595][T11373] should_fail_ex+0x414/0x560 [ 257.022621][T11373] should_failslab+0xa8/0x100 [ 257.022641][T11373] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 257.022659][T11373] ? __alloc_skb+0x112/0x2d0 [ 257.022685][T11373] __alloc_skb+0x112/0x2d0 [ 257.022710][T11373] netlink_ack+0x146/0xa50 [ 257.022728][T11373] ? __pfx___mutex_trylock_common+0x10/0x10 [ 257.022751][T11373] ? rcu_is_watching+0x15/0xb0 [ 257.022786][T11373] netlink_rcv_skb+0x28c/0x470 [ 257.022808][T11373] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 257.022832][T11373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.022870][T11373] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.022891][T11373] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.022914][T11373] xfrm_netlink_rcv+0x79/0x90 [ 257.022936][T11373] netlink_unicast+0x75b/0x8d0 [ 257.022963][T11373] netlink_sendmsg+0x805/0xb30 [ 257.022990][T11373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.023015][T11373] ? aa_sock_msg_perm+0x94/0x160 [ 257.023039][T11373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 257.023059][T11373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.023081][T11373] __sock_sendmsg+0x21c/0x270 [ 257.023105][T11373] ____sys_sendmsg+0x505/0x830 [ 257.023134][T11373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.023167][T11373] ? import_iovec+0x74/0xa0 [ 257.023189][T11373] ___sys_sendmsg+0x21f/0x2a0 [ 257.023224][T11373] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.023285][T11373] ? __fget_files+0x2a/0x420 [ 257.023303][T11373] ? __fget_files+0x3a0/0x420 [ 257.023332][T11373] __x64_sys_sendmsg+0x19b/0x260 [ 257.023358][T11373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.023379][T11373] ? __might_fault+0xb0/0x130 [ 257.023408][T11373] ? rcu_is_watching+0x15/0xb0 [ 257.023432][T11373] ? trace_sys_enter+0x25/0x120 [ 257.023460][T11373] do_syscall_64+0xfa/0x3b0 [ 257.023478][T11373] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.023495][T11373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.023512][T11373] ? clear_bhb_loop+0x60/0xb0 [ 257.023533][T11373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.023549][T11373] RIP: 0033:0x7f6dcf98e929 [ 257.023565][T11373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.023580][T11373] RSP: 002b:00007f6dd0783038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.023599][T11373] RAX: ffffffffffffffda RBX: 00007f6dcfbb5fa0 RCX: 00007f6dcf98e929 [ 257.023613][T11373] RDX: 0000000020004814 RSI: 0000200000000940 RDI: 0000000000000003 [ 257.023624][T11373] RBP: 00007f6dd0783090 R08: 0000000000000000 R09: 0000000000000000 [ 257.023635][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.023646][T11373] R13: 0000000000000000 R14: 00007f6dcfbb5fa0 R15: 00007ffce8c1b6d8 [ 257.023676][T11373] [ 257.076087][T11376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1891'. [ 257.368041][T11378] FAULT_INJECTION: forcing a failure. [ 257.368041][T11378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.392048][T11378] CPU: 1 UID: 0 PID: 11378 Comm: syz.0.1894 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 257.392074][T11378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.392085][T11378] Call Trace: [ 257.392093][T11378] [ 257.392101][T11378] dump_stack_lvl+0x189/0x250 [ 257.392129][T11378] ? __pfx____ratelimit+0x10/0x10 [ 257.392155][T11378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.392178][T11378] ? __pfx__printk+0x10/0x10 [ 257.392210][T11378] should_fail_ex+0x414/0x560 [ 257.392237][T11378] _copy_to_user+0x31/0xb0 [ 257.392258][T11378] bpf_test_finish+0x24e/0x700 [ 257.392288][T11378] ? __pfx_bpf_test_finish+0x10/0x10 [ 257.392315][T11378] ? rep_movs_alternative+0x4a/0x90 [ 257.392342][T11378] bpf_prog_test_run_xdp+0x79a/0x1000 [ 257.392381][T11378] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 257.392406][T11378] ? __fget_files+0x2a/0x420 [ 257.392432][T11378] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 257.392454][T11378] bpf_prog_test_run+0x2c4/0x340 [ 257.392484][T11378] __sys_bpf+0x4a4/0x860 [ 257.392506][T11378] ? __pfx___sys_bpf+0x10/0x10 [ 257.392546][T11378] ? rcu_is_watching+0x15/0xb0 [ 257.392574][T11378] __x64_sys_bpf+0x7c/0x90 [ 257.392594][T11378] do_syscall_64+0xfa/0x3b0 [ 257.392611][T11378] ? lockdep_hardirqs_on+0x9c/0x150 [ 257.392628][T11378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.392645][T11378] ? clear_bhb_loop+0x60/0xb0 [ 257.392665][T11378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.392682][T11378] RIP: 0033:0x7f6dcf98e929 [ 257.392698][T11378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.392714][T11378] RSP: 002b:00007f6dd0783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.392733][T11378] RAX: ffffffffffffffda RBX: 00007f6dcfbb5fa0 RCX: 00007f6dcf98e929 [ 257.392745][T11378] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 257.392757][T11378] RBP: 00007f6dd0783090 R08: 0000000000000000 R09: 0000000000000000 [ 257.392769][T11378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.392780][T11378] R13: 0000000000000000 R14: 00007f6dcfbb5fa0 R15: 00007ffce8c1b6d8 [ 257.392808][T11378] [ 257.776100][T11270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.788933][T11270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.919986][T11270] team0: Port device team_slave_0 added [ 257.943554][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 257.971989][T11270] team0: Port device team_slave_1 added [ 258.002651][ T5838] Bluetooth: hci2: command tx timeout [ 258.136451][T11270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.147542][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.182006][T11411] FAULT_INJECTION: forcing a failure. [ 258.182006][T11411] name failslab, interval 1, probability 0, space 0, times 0 [ 258.197794][T11411] CPU: 1 UID: 0 PID: 11411 Comm: syz.1.1900 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 258.197813][T11411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.197822][T11411] Call Trace: [ 258.197828][T11411] [ 258.197834][T11411] dump_stack_lvl+0x189/0x250 [ 258.197858][T11411] ? __pfx____ratelimit+0x10/0x10 [ 258.197871][T11411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.197891][T11411] ? __pfx__printk+0x10/0x10 [ 258.197909][T11411] ? __pfx___might_resched+0x10/0x10 [ 258.197930][T11411] should_fail_ex+0x414/0x560 [ 258.197950][T11411] should_failslab+0xa8/0x100 [ 258.197969][T11411] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 258.197984][T11411] ? __alloc_skb+0x112/0x2d0 [ 258.198005][T11411] __alloc_skb+0x112/0x2d0 [ 258.198026][T11411] netlink_sendmsg+0x5c6/0xb30 [ 258.198055][T11411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.198077][T11411] ? aa_sock_msg_perm+0x94/0x160 [ 258.198099][T11411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.198118][T11411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.198150][T11411] __sock_sendmsg+0x21c/0x270 [ 258.198172][T11411] __sys_sendto+0x3bd/0x520 [ 258.198195][T11411] ? __pfx___sys_sendto+0x10/0x10 [ 258.198250][T11411] ? rcu_is_watching+0x15/0xb0 [ 258.198276][T11411] __x64_sys_sendto+0xde/0x100 [ 258.198301][T11411] do_syscall_64+0xfa/0x3b0 [ 258.198318][T11411] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.198334][T11411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.198351][T11411] ? clear_bhb_loop+0x60/0xb0 [ 258.198372][T11411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.198388][T11411] RIP: 0033:0x7f6a1cf907bc [ 258.198404][T11411] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 258.198419][T11411] RSP: 002b:00007f6a1dde1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 258.198438][T11411] RAX: ffffffffffffffda RBX: 00007f6a1dde1fc0 RCX: 00007f6a1cf907bc [ 258.198451][T11411] RDX: 0000000000000024 RSI: 00007f6a1dde2010 RDI: 0000000000000004 [ 258.198463][T11411] RBP: 0000000000000000 R08: 00007f6a1dde1f14 R09: 000000000000000c [ 258.198474][T11411] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 258.198485][T11411] R13: 00007f6a1dde1f68 R14: 00007f6a1dde2010 R15: 0000000000000000 [ 258.198514][T11411] [ 258.198757][T11270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.443705][T11270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.520464][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.575248][T11270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.587852][T11424] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 258.597377][T11424] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1904'. [ 258.758380][T11270] hsr_slave_0: entered promiscuous mode [ 258.778277][T11270] hsr_slave_1: entered promiscuous mode [ 258.787031][T11270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.805636][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 258.808481][T11432] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1911'. [ 258.817641][T11435] netlink: 'syz.2.1909': attribute type 3 has an invalid length. [ 258.823776][T11270] Cannot create hsr debugfs directory [ 258.964318][T11442] FAULT_INJECTION: forcing a failure. [ 258.964318][T11442] name failslab, interval 1, probability 0, space 0, times 0 [ 258.977318][T11442] CPU: 0 UID: 0 PID: 11442 Comm: syz.4.1912 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 258.977343][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.977355][T11442] Call Trace: [ 258.977364][T11442] [ 258.977372][T11442] dump_stack_lvl+0x189/0x250 [ 258.977400][T11442] ? __pfx____ratelimit+0x10/0x10 [ 258.977418][T11442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.977442][T11442] ? __pfx__printk+0x10/0x10 [ 258.977465][T11442] ? trace_fib_table_lookup+0x85/0x200 [ 258.977491][T11442] ? fib_table_lookup+0x11ba/0x16e0 [ 258.977517][T11442] should_fail_ex+0x414/0x560 [ 258.977544][T11442] should_failslab+0xa8/0x100 [ 258.977566][T11442] kmem_cache_alloc_noprof+0x73/0x3c0 [ 258.977590][T11442] ? dst_alloc+0x105/0x170 [ 258.977612][T11442] dst_alloc+0x105/0x170 [ 258.977628][T11442] ? ip_check_mc_rcu+0x4c7/0x680 [ 258.977654][T11442] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 258.977683][T11442] ? ip_route_output_key_hash+0xde/0x2e0 [ 258.977703][T11442] ip_route_output_key_hash+0x1b9/0x2e0 [ 258.977724][T11442] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 258.977769][T11442] vti6_tnl_xmit+0xb79/0x1a60 [ 258.977805][T11442] ? __pfx_skb_network_protocol+0x10/0x10 [ 258.977833][T11442] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 258.977863][T11442] ? __lock_acquire+0xab9/0xd20 [ 258.977897][T11442] dev_hard_start_xmit+0x2d4/0x830 [ 258.977939][T11442] __dev_queue_xmit+0x1adf/0x3a70 [ 258.977955][T11442] ? do_syscall_64+0xfa/0x3b0 [ 258.977971][T11442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.977997][T11442] ? __dev_queue_xmit+0x27e/0x3a70 [ 258.978033][T11442] ? __pfx___dev_queue_xmit+0x10/0x10 [ 258.978070][T11442] ? rcu_is_watching+0x15/0xb0 [ 258.978115][T11442] ? pskb_expand_head+0xad0/0x1150 [ 258.978134][T11442] ? __bpf_redirect+0x56d/0xe40 [ 258.978160][T11442] __bpf_tx_skb+0x18e/0x260 [ 258.978186][T11442] bpf_clone_redirect+0x272/0x3d0 [ 258.978216][T11442] bpf_prog_6893982b85ceadf7+0x5f/0x68 [ 258.978241][T11442] ? ktime_get+0x3e/0x1f0 [ 258.978267][T11442] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 258.978287][T11442] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.978304][T11442] ? ktime_get+0x3e/0x1f0 [ 258.978320][T11442] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 258.978339][T11442] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 258.978365][T11442] ? __local_bh_disable_ip+0xf1/0x190 [ 258.978388][T11442] ? __pfx___cant_migrate+0x10/0x10 [ 258.978416][T11442] ? read_tsc+0x9/0x20 [ 258.978434][T11442] ? ktime_get+0x1cb/0x1f0 [ 258.978458][T11442] bpf_test_run+0x38b/0x830 [ 258.978492][T11442] ? bpf_test_run+0x205/0x830 [ 258.978521][T11442] ? __pfx_bpf_test_run+0x10/0x10 [ 258.978569][T11442] ? slab_build_skb+0x273/0x3e0 [ 258.978590][T11442] ? convert___skb_to_skb+0x3d/0x590 [ 258.978613][T11442] bpf_prog_test_run_skb+0xb30/0x1560 [ 258.978652][T11442] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 258.978673][T11442] bpf_prog_test_run+0x2c4/0x340 [ 258.978701][T11442] __sys_bpf+0x4a4/0x860 [ 258.978725][T11442] ? __pfx___sys_bpf+0x10/0x10 [ 258.978769][T11442] ? rcu_is_watching+0x15/0xb0 [ 258.978796][T11442] __x64_sys_bpf+0x7c/0x90 [ 258.978814][T11442] do_syscall_64+0xfa/0x3b0 [ 258.978829][T11442] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.978845][T11442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.978861][T11442] ? clear_bhb_loop+0x60/0xb0 [ 258.978882][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.978899][T11442] RIP: 0033:0x7f80da78e929 [ 258.978914][T11442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.978929][T11442] RSP: 002b:00007f80db573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.978947][T11442] RAX: ffffffffffffffda RBX: 00007f80da9b5fa0 RCX: 00007f80da78e929 [ 258.978958][T11442] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 258.978970][T11442] RBP: 00007f80db573090 R08: 0000000000000000 R09: 0000000000000000 [ 258.978980][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.978990][T11442] R13: 0000000000000000 R14: 00007f80da9b5fa0 R15: 00007fff4b0d61c8 [ 258.979021][T11442] [ 259.587292][T11465] FAULT_INJECTION: forcing a failure. [ 259.587292][T11465] name failslab, interval 1, probability 0, space 0, times 0 [ 259.602213][T11465] CPU: 0 UID: 0 PID: 11465 Comm: syz.2.1920 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 259.602240][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.602251][T11465] Call Trace: [ 259.602258][T11465] [ 259.602266][T11465] dump_stack_lvl+0x189/0x250 [ 259.602293][T11465] ? __pfx____ratelimit+0x10/0x10 [ 259.602311][T11465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.602333][T11465] ? __pfx__printk+0x10/0x10 [ 259.602356][T11465] ? __pfx___might_resched+0x10/0x10 [ 259.602384][T11465] should_fail_ex+0x414/0x560 [ 259.602410][T11465] should_failslab+0xa8/0x100 [ 259.602430][T11465] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 259.602448][T11465] ? __alloc_skb+0x112/0x2d0 [ 259.602476][T11465] __alloc_skb+0x112/0x2d0 [ 259.602501][T11465] netlink_sendmsg+0x5c6/0xb30 [ 259.602530][T11465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.602556][T11465] ? aa_sock_msg_perm+0x94/0x160 [ 259.602578][T11465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.602599][T11465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.602621][T11465] __sock_sendmsg+0x21c/0x270 [ 259.602643][T11465] ____sys_sendmsg+0x505/0x830 [ 259.602673][T11465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.602706][T11465] ? import_iovec+0x74/0xa0 [ 259.602728][T11465] ___sys_sendmsg+0x21f/0x2a0 [ 259.602752][T11465] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.602809][T11465] ? __fget_files+0x2a/0x420 [ 259.602825][T11465] ? __fget_files+0x3a0/0x420 [ 259.602852][T11465] __x64_sys_sendmsg+0x19b/0x260 [ 259.602878][T11465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.602899][T11465] ? __might_fault+0xb0/0x130 [ 259.602927][T11465] ? rcu_is_watching+0x15/0xb0 [ 259.602949][T11465] ? trace_sys_enter+0x25/0x120 [ 259.602976][T11465] do_syscall_64+0xfa/0x3b0 [ 259.602993][T11465] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.603016][T11465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.603032][T11465] ? clear_bhb_loop+0x60/0xb0 [ 259.603050][T11465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.603066][T11465] RIP: 0033:0x7f5eed18e929 [ 259.603082][T11465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.603096][T11465] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.603114][T11465] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 259.603126][T11465] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 259.603138][T11465] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 259.603149][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.603158][T11465] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 259.603185][T11465] [ 259.963306][T11466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.971583][T11466] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.971670][T11468] netlink: 'syz.4.1921': attribute type 1 has an invalid length. [ 259.981009][T11466] batman_adv: batadv0: Interface activated: dummy0 [ 259.990584][T11468] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1921'. [ 260.002838][T11466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.019058][T11473] netlink: 'syz.0.1923': attribute type 11 has an invalid length. [ 260.083693][ T43] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.083761][ T5838] Bluetooth: hci2: command tx timeout [ 260.112691][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.132762][ T5921] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 260.318270][T11487] sctp: [Deprecated]: syz.4.1928 (pid 11487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.318270][T11487] Use struct sctp_sack_info instead [ 260.579592][T11270] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.599253][T11501] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 260.616612][T11501] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1934'. [ 260.618858][T11270] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.662413][T11270] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.684241][T11270] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.838206][T11517] FAULT_INJECTION: forcing a failure. [ 260.838206][T11517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.861238][T11517] CPU: 1 UID: 0 PID: 11517 Comm: syz.1.1939 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 260.861264][T11517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.861275][T11517] Call Trace: [ 260.861283][T11517] [ 260.861291][T11517] dump_stack_lvl+0x189/0x250 [ 260.861320][T11517] ? __pfx____ratelimit+0x10/0x10 [ 260.861338][T11517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.861361][T11517] ? __pfx__printk+0x10/0x10 [ 260.861391][T11517] should_fail_ex+0x414/0x560 [ 260.861417][T11517] _copy_to_user+0x31/0xb0 [ 260.861441][T11517] bpf_test_finish+0x56f/0x700 [ 260.861470][T11517] ? __pfx_bpf_test_finish+0x10/0x10 [ 260.861495][T11517] ? slab_build_skb+0x273/0x3e0 [ 260.861518][T11517] bpf_prog_test_run_skb+0xed5/0x1560 [ 260.861555][T11517] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 260.861574][T11517] bpf_prog_test_run+0x2c4/0x340 [ 260.861601][T11517] __sys_bpf+0x4a4/0x860 [ 260.861624][T11517] ? __pfx___sys_bpf+0x10/0x10 [ 260.861665][T11517] ? rcu_is_watching+0x15/0xb0 [ 260.861694][T11517] __x64_sys_bpf+0x7c/0x90 [ 260.861713][T11517] do_syscall_64+0xfa/0x3b0 [ 260.861729][T11517] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.861746][T11517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.861763][T11517] ? clear_bhb_loop+0x60/0xb0 [ 260.861784][T11517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.861800][T11517] RIP: 0033:0x7f6a1cf8e929 [ 260.861817][T11517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.861831][T11517] RSP: 002b:00007f6a1de04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.861851][T11517] RAX: ffffffffffffffda RBX: 00007f6a1d1b5fa0 RCX: 00007f6a1cf8e929 [ 260.861863][T11517] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 260.861875][T11517] RBP: 00007f6a1de04090 R08: 0000000000000000 R09: 0000000000000000 [ 260.861886][T11517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.861897][T11517] R13: 0000000000000000 R14: 00007f6a1d1b5fa0 R15: 00007ffe723e4d48 [ 260.861932][T11517] [ 261.075706][T11270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.123777][ T6374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 261.131765][ T6374] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 261.150935][T11270] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.169956][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.177143][ T5931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.218697][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.227231][ T6374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.411060][T11538] FAULT_INJECTION: forcing a failure. [ 261.411060][T11538] name failslab, interval 1, probability 0, space 0, times 0 [ 261.435415][T11538] CPU: 0 UID: 0 PID: 11538 Comm: syz.2.1945 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 261.435441][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.435453][T11538] Call Trace: [ 261.435461][T11538] [ 261.435469][T11538] dump_stack_lvl+0x189/0x250 [ 261.435497][T11538] ? __pfx____ratelimit+0x10/0x10 [ 261.435516][T11538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.435540][T11538] ? __pfx__printk+0x10/0x10 [ 261.435562][T11538] ? __pfx___might_resched+0x10/0x10 [ 261.435586][T11538] ? fs_reclaim_acquire+0x7d/0x100 [ 261.435612][T11538] should_fail_ex+0x414/0x560 [ 261.435656][T11538] should_failslab+0xa8/0x100 [ 261.435676][T11538] __kmalloc_noprof+0xcb/0x4f0 [ 261.435693][T11538] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 261.435718][T11538] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 261.435743][T11538] genl_family_rcv_msg_doit+0xb8/0x300 [ 261.435767][T11538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 261.435788][T11538] ? rcu_is_watching+0x15/0xb0 [ 261.435815][T11538] ? apparmor_capable+0x137/0x1b0 [ 261.435834][T11538] ? bpf_lsm_capable+0x9/0x20 [ 261.435850][T11538] ? security_capable+0x7e/0x2e0 [ 261.435878][T11538] genl_rcv_msg+0x60e/0x790 [ 261.435901][T11538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.435917][T11538] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 261.435955][T11538] netlink_rcv_skb+0x208/0x470 [ 261.435976][T11538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 261.435995][T11538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 261.436034][T11538] ? down_read+0x1ad/0x2e0 [ 261.436056][T11538] genl_rcv+0x28/0x40 [ 261.436076][T11538] netlink_unicast+0x75b/0x8d0 [ 261.436108][T11538] netlink_sendmsg+0x805/0xb30 [ 261.436138][T11538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.436162][T11538] ? aa_sock_msg_perm+0x94/0x160 [ 261.436185][T11538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.436205][T11538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 261.436227][T11538] __sock_sendmsg+0x21c/0x270 [ 261.436250][T11538] ____sys_sendmsg+0x505/0x830 [ 261.436280][T11538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.436313][T11538] ? import_iovec+0x74/0xa0 [ 261.436335][T11538] ___sys_sendmsg+0x21f/0x2a0 [ 261.436361][T11538] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.436423][T11538] ? __fget_files+0x2a/0x420 [ 261.436440][T11538] ? __fget_files+0x3a0/0x420 [ 261.436470][T11538] __x64_sys_sendmsg+0x19b/0x260 [ 261.436497][T11538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.436518][T11538] ? __might_fault+0xb0/0x130 [ 261.436548][T11538] ? rcu_is_watching+0x15/0xb0 [ 261.436572][T11538] ? trace_sys_enter+0x25/0x120 [ 261.436600][T11538] do_syscall_64+0xfa/0x3b0 [ 261.436617][T11538] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.436640][T11538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.436657][T11538] ? clear_bhb_loop+0x60/0xb0 [ 261.436679][T11538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.436696][T11538] RIP: 0033:0x7f5eed18e929 [ 261.436712][T11538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.436726][T11538] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.436745][T11538] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 261.436759][T11538] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 261.436770][T11538] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 261.436782][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.436792][T11538] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 261.436823][T11538] [ 261.790557][ T5886] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 262.017921][T11548] netlink: 'syz.2.1948': attribute type 1 has an invalid length. [ 262.025732][T11548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1948'. [ 262.027469][T11543] bond2: entered allmulticast mode [ 262.095078][T11550] FAULT_INJECTION: forcing a failure. [ 262.095078][T11550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.112902][T11550] CPU: 0 UID: 0 PID: 11550 Comm: syz.2.1950 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 262.112927][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.112938][T11550] Call Trace: [ 262.112946][T11550] [ 262.112954][T11550] dump_stack_lvl+0x189/0x250 [ 262.112984][T11550] ? __pfx____ratelimit+0x10/0x10 [ 262.113002][T11550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.113026][T11550] ? __pfx__printk+0x10/0x10 [ 262.113057][T11550] should_fail_ex+0x414/0x560 [ 262.113085][T11550] _copy_to_user+0x31/0xb0 [ 262.113105][T11550] bpf_test_finish+0x24e/0x700 [ 262.113136][T11550] ? __pfx_bpf_test_finish+0x10/0x10 [ 262.113162][T11550] ? rep_movs_alternative+0x4a/0x90 [ 262.113189][T11550] bpf_prog_test_run_xdp+0x79a/0x1000 [ 262.113226][T11550] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.113251][T11550] ? __fget_files+0x2a/0x420 [ 262.113276][T11550] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 262.113298][T11550] bpf_prog_test_run+0x2c4/0x340 [ 262.113324][T11550] __sys_bpf+0x4a4/0x860 [ 262.113347][T11550] ? __pfx___sys_bpf+0x10/0x10 [ 262.113391][T11550] ? rcu_is_watching+0x15/0xb0 [ 262.113421][T11550] __x64_sys_bpf+0x7c/0x90 [ 262.113441][T11550] do_syscall_64+0xfa/0x3b0 [ 262.113463][T11550] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.113480][T11550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.113495][T11550] ? clear_bhb_loop+0x60/0xb0 [ 262.113514][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.113528][T11550] RIP: 0033:0x7f5eed18e929 [ 262.113543][T11550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.113558][T11550] RSP: 002b:00007f5eedfa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.113577][T11550] RAX: ffffffffffffffda RBX: 00007f5eed3b5fa0 RCX: 00007f5eed18e929 [ 262.113590][T11550] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 262.113601][T11550] RBP: 00007f5eedfa1090 R08: 0000000000000000 R09: 0000000000000000 [ 262.113611][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.113622][T11550] R13: 0000000000000000 R14: 00007f5eed3b5fa0 R15: 00007fff1fc53378 [ 262.113648][T11550] [ 262.344979][ T5838] Bluetooth: hci2: command tx timeout [ 262.350747][T11270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.423378][T11270] veth0_vlan: entered promiscuous mode [ 262.436610][T11270] veth1_vlan: entered promiscuous mode [ 262.537381][T11270] veth0_macvtap: entered promiscuous mode [ 262.563546][T11270] veth1_macvtap: entered promiscuous mode [ 262.600366][T11270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.614030][T11270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.627592][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.671499][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.705125][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.730325][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.753572][T11566] veth0: entered promiscuous mode [ 262.761108][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 262.849154][T11566] veth0 (unregistering): left promiscuous mode [ 262.969994][T11578] macsec0: entered allmulticast mode [ 262.981346][T11583] veth1_macvtap: entered allmulticast mode [ 262.988176][T11583] macsec0: left allmulticast mode [ 262.997939][T11583] veth1_macvtap: left allmulticast mode [ 263.065703][T11587] pim6reg1: entered promiscuous mode [ 263.071090][T11581] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 263.084892][T11587] pim6reg1: entered allmulticast mode [ 263.091016][T11581] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1960'. [ 263.109505][ T6374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.132180][ T6374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.226290][T11595] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 263.247430][T11595] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1965'. [ 263.256645][T11598] FAULT_INJECTION: forcing a failure. [ 263.256645][T11598] name failslab, interval 1, probability 0, space 0, times 0 [ 263.273154][T11598] CPU: 1 UID: 0 PID: 11598 Comm: syz.0.1967 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 263.273190][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.273208][T11598] Call Trace: [ 263.273224][T11598] [ 263.273239][T11598] dump_stack_lvl+0x189/0x250 [ 263.273275][T11598] ? __pfx____ratelimit+0x10/0x10 [ 263.273289][ T6375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.273300][T11598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.273329][T11598] ? __pfx__printk+0x10/0x10 [ 263.273356][T11598] ? __pfx___might_resched+0x10/0x10 [ 263.273390][T11598] should_fail_ex+0x414/0x560 [ 263.273425][T11598] should_failslab+0xa8/0x100 [ 263.273453][T11598] kmem_cache_alloc_noprof+0x73/0x3c0 [ 263.273483][T11598] ? mas_alloc_nodes+0x2e9/0x8e0 [ 263.273510][T11598] mas_alloc_nodes+0x2e9/0x8e0 [ 263.273543][T11598] mas_preallocate+0x39e/0x6b0 [ 263.273579][T11598] ? __pfx_mas_preallocate+0x10/0x10 [ 263.273622][T11598] ? __mas_set_range+0x12f/0x3c0 [ 263.273658][T11598] __split_vma+0x2fa/0xa00 [ 263.273696][T11598] ? __pfx___split_vma+0x10/0x10 [ 263.273740][T11598] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 263.273782][T11598] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 263.273831][T11598] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 263.273880][T11598] mmap_region+0x678/0x1f30 [ 263.273921][T11598] ? is_bpf_text_address+0x26/0x2b0 [ 263.273957][T11598] ? __pfx_mmap_region+0x10/0x10 [ 263.273984][T11598] ? is_bpf_text_address+0x26/0x2b0 [ 263.274017][T11598] ? kernel_text_address+0xa5/0xe0 [ 263.274044][T11598] ? __kernel_text_address+0xd/0x40 [ 263.274074][T11598] ? unwind_get_return_address+0x4d/0x90 [ 263.274160][T11598] ? __pfx_aa_get_newest_label+0x10/0x10 [ 263.274194][T11598] ? rcu_is_watching+0x15/0xb0 [ 263.274227][T11598] ? apparmor_capable+0x137/0x1b0 [ 263.274251][T11598] ? bpf_lsm_capable+0x9/0x20 [ 263.274273][T11598] ? security_capable+0x7e/0x2e0 [ 263.274300][T11598] ? shmem_mapping+0xd/0x50 [ 263.274326][T11598] ? memfd_check_seals_mmap+0x165/0x200 [ 263.274357][T11598] do_mmap+0xc45/0x10d0 [ 263.274400][T11598] ? __pfx_do_mmap+0x10/0x10 [ 263.274427][T11598] ? down_write_killable+0x178/0x230 [ 263.274453][T11598] ? end_current_label_crit_section+0x152/0x180 [ 263.274482][T11598] ? __pfx_down_write_killable+0x10/0x10 [ 263.274516][T11598] vm_mmap_pgoff+0x31b/0x4c0 [ 263.274553][T11598] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 263.274578][T11598] ? rcu_is_watching+0x15/0xb0 [ 263.274608][T11598] ? hugetlbfs_get_inode+0x448/0x660 [ 263.274645][T11598] ? hugetlb_file_setup+0x429/0x630 [ 263.274676][T11598] ksys_mmap_pgoff+0x587/0x760 [ 263.274706][T11598] do_syscall_64+0xfa/0x3b0 [ 263.274730][T11598] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.274770][T11598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.274794][T11598] ? clear_bhb_loop+0x60/0xb0 [ 263.274822][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.274846][T11598] RIP: 0033:0x7f6dcf98e929 [ 263.274868][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.274890][T11598] RSP: 002b:00007f6dd0783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 263.274921][T11598] RAX: ffffffffffffffda RBX: 00007f6dcfbb5fa0 RCX: 00007f6dcf98e929 [ 263.274941][T11598] RDX: 0000000002000002 RSI: 0000000000c00000 RDI: 0000200000000000 [ 263.274960][T11598] RBP: 00007f6dd0783090 R08: ffffffffffffffff R09: 00000000aba00000 [ 263.274979][T11598] R10: 0000000000042073 R11: 0000000000000246 R12: 0000000000000001 [ 263.274996][T11598] R13: 0000000000000000 R14: 00007f6dcfbb5fa0 R15: 00007ffce8c1b6d8 [ 263.275032][T11598] [ 263.635112][ T6375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.638876][T11595] dummy0: entered promiscuous mode [ 263.649919][T11595] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 263.951802][T11618] lo speed is unknown, defaulting to 1000 [ 264.153708][T11624] 8021q: VLANs not supported on caif0 [ 264.282255][T11627] netlink: 'syz.1.1975': attribute type 1 has an invalid length. [ 264.290235][T11627] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1975'. [ 264.347834][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1976'. [ 264.368804][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1976'. [ 264.592031][T11640] FAULT_INJECTION: forcing a failure. [ 264.592031][T11640] name failslab, interval 1, probability 0, space 0, times 0 [ 264.612795][T11640] CPU: 1 UID: 0 PID: 11640 Comm: syz.1.1981 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 264.612822][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.612833][T11640] Call Trace: [ 264.612840][T11640] [ 264.612848][T11640] dump_stack_lvl+0x189/0x250 [ 264.612876][T11640] ? __pfx____ratelimit+0x10/0x10 [ 264.612893][T11640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.612917][T11640] ? __pfx__printk+0x10/0x10 [ 264.612945][T11640] ? __pfx___might_resched+0x10/0x10 [ 264.612968][T11640] ? fs_reclaim_acquire+0x7d/0x100 [ 264.612993][T11640] should_fail_ex+0x414/0x560 [ 264.613019][T11640] should_failslab+0xa8/0x100 [ 264.613039][T11640] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 264.613057][T11640] ? __alloc_skb+0x112/0x2d0 [ 264.613082][T11640] __alloc_skb+0x112/0x2d0 [ 264.613107][T11640] netlink_ack+0x146/0xa50 [ 264.613125][T11640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.613143][T11640] ? ref_tracker_free+0x63a/0x7d0 [ 264.613163][T11640] ? __copy_skb_header+0xa7/0x550 [ 264.613187][T11640] ? __pfx_ref_tracker_free+0x10/0x10 [ 264.613219][T11640] netlink_rcv_skb+0x28c/0x470 [ 264.613241][T11640] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.613263][T11640] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.613295][T11640] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.613315][T11640] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.613342][T11640] netlink_unicast+0x75b/0x8d0 [ 264.613371][T11640] netlink_sendmsg+0x805/0xb30 [ 264.613401][T11640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.613425][T11640] ? aa_sock_msg_perm+0x94/0x160 [ 264.613454][T11640] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.613475][T11640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.613496][T11640] __sock_sendmsg+0x21c/0x270 [ 264.613519][T11640] ____sys_sendmsg+0x505/0x830 [ 264.613548][T11640] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.613580][T11640] ? import_iovec+0x74/0xa0 [ 264.613601][T11640] ___sys_sendmsg+0x21f/0x2a0 [ 264.613626][T11640] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.613685][T11640] ? __fget_files+0x2a/0x420 [ 264.613703][T11640] ? __fget_files+0x3a0/0x420 [ 264.613732][T11640] __x64_sys_sendmsg+0x19b/0x260 [ 264.613757][T11640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.613778][T11640] ? __might_fault+0xb0/0x130 [ 264.613807][T11640] ? rcu_is_watching+0x15/0xb0 [ 264.613831][T11640] ? trace_sys_enter+0x25/0x120 [ 264.613857][T11640] do_syscall_64+0xfa/0x3b0 [ 264.613875][T11640] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.613892][T11640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.613910][T11640] ? clear_bhb_loop+0x60/0xb0 [ 264.613930][T11640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.613947][T11640] RIP: 0033:0x7f6a1cf8e929 [ 264.613962][T11640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.613977][T11640] RSP: 002b:00007f6a1de04038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.613997][T11640] RAX: ffffffffffffffda RBX: 00007f6a1d1b5fa0 RCX: 00007f6a1cf8e929 [ 264.614010][T11640] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 264.614021][T11640] RBP: 00007f6a1de04090 R08: 0000000000000000 R09: 0000000000000000 [ 264.614033][T11640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.614043][T11640] R13: 0000000000000000 R14: 00007f6a1d1b5fa0 R15: 00007ffe723e4d48 [ 264.614072][T11640] [ 265.022087][T11649] FAULT_INJECTION: forcing a failure. [ 265.022087][T11649] name failslab, interval 1, probability 0, space 0, times 0 [ 265.042047][T11649] CPU: 0 UID: 0 PID: 11649 Comm: syz.4.1985 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 265.042072][T11649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.042082][T11649] Call Trace: [ 265.042089][T11649] [ 265.042096][T11649] dump_stack_lvl+0x189/0x250 [ 265.042123][T11649] ? __pfx____ratelimit+0x10/0x10 [ 265.042141][T11649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.042163][T11649] ? __pfx__printk+0x10/0x10 [ 265.042187][T11649] ? __pfx___might_resched+0x10/0x10 [ 265.042208][T11649] ? fs_reclaim_acquire+0x7d/0x100 [ 265.042233][T11649] should_fail_ex+0x414/0x560 [ 265.042259][T11649] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 265.042282][T11649] should_failslab+0xa8/0x100 [ 265.042302][T11649] __kvmalloc_node_noprof+0x161/0x5f0 [ 265.042321][T11649] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 265.042348][T11649] rhashtable_init_noprof+0x4ee/0xbb0 [ 265.042378][T11649] rhltable_init_noprof+0x1e/0x60 [ 265.042401][T11649] sta_info_init+0x28/0x130 [ 265.042422][T11649] ieee80211_alloc_hw_nm+0x7f0/0x1f20 [ 265.042450][T11649] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 265.042480][T11649] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 265.042509][T11649] ? stack_depot_save_flags+0x40/0x900 [ 265.042546][T11649] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 265.042563][T11649] ? __nla_validate_parse+0x2400/0x2d40 [ 265.042584][T11649] ? __sock_sendmsg+0x21c/0x270 [ 265.042601][T11649] ? ____sys_sendmsg+0x505/0x830 [ 265.042634][T11649] hwsim_new_radio_nl+0xea4/0x1b10 [ 265.042656][T11649] ? __pfx___nla_validate_parse+0x10/0x10 [ 265.042697][T11649] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 265.042720][T11649] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 265.042746][T11649] ? __nla_parse+0x40/0x60 [ 265.042772][T11649] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 265.042799][T11649] genl_family_rcv_msg_doit+0x212/0x300 [ 265.042824][T11649] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 265.042856][T11649] ? bpf_lsm_capable+0x9/0x20 [ 265.042872][T11649] ? security_capable+0x7e/0x2e0 [ 265.042900][T11649] genl_rcv_msg+0x60e/0x790 [ 265.042924][T11649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.042940][T11649] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 265.042977][T11649] netlink_rcv_skb+0x208/0x470 [ 265.043000][T11649] ? __pfx_genl_rcv_msg+0x10/0x10 [ 265.043018][T11649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.043058][T11649] ? down_read+0x1ad/0x2e0 [ 265.043081][T11649] genl_rcv+0x28/0x40 [ 265.043103][T11649] netlink_unicast+0x75b/0x8d0 [ 265.043135][T11649] netlink_sendmsg+0x805/0xb30 [ 265.043166][T11649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.043191][T11649] ? aa_sock_msg_perm+0x94/0x160 [ 265.043222][T11649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.043242][T11649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.043264][T11649] __sock_sendmsg+0x21c/0x270 [ 265.043287][T11649] ____sys_sendmsg+0x505/0x830 [ 265.043317][T11649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.043351][T11649] ? import_iovec+0x74/0xa0 [ 265.043374][T11649] ___sys_sendmsg+0x21f/0x2a0 [ 265.043399][T11649] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.043463][T11649] ? __fget_files+0x2a/0x420 [ 265.043481][T11649] ? __fget_files+0x3a0/0x420 [ 265.043512][T11649] __x64_sys_sendmsg+0x19b/0x260 [ 265.043538][T11649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.043559][T11649] ? __might_fault+0xb0/0x130 [ 265.043590][T11649] ? rcu_is_watching+0x15/0xb0 [ 265.043615][T11649] ? trace_sys_enter+0x25/0x120 [ 265.043643][T11649] do_syscall_64+0xfa/0x3b0 [ 265.043660][T11649] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.043682][T11649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.043700][T11649] ? clear_bhb_loop+0x60/0xb0 [ 265.043722][T11649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.043738][T11649] RIP: 0033:0x7f80da78e929 [ 265.043755][T11649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.043770][T11649] RSP: 002b:00007f80db573038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.043789][T11649] RAX: ffffffffffffffda RBX: 00007f80da9b5fa0 RCX: 00007f80da78e929 [ 265.043802][T11649] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 265.043813][T11649] RBP: 00007f80db573090 R08: 0000000000000000 R09: 0000000000000000 [ 265.043824][T11649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.043835][T11649] R13: 0000000000000000 R14: 00007f80da9b5fa0 R15: 00007fff4b0d61c8 [ 265.043865][T11649] [ 265.202777][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.213946][T11653] netlink: 'syz.2.1982': attribute type 2 has an invalid length. [ 265.297548][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 266.017813][T11685] x_tables: duplicate underflow at hook 2 [ 266.025242][T11685] netlink: 'syz.0.1992': attribute type 2 has an invalid length. [ 266.051941][T11685] vxlan: entered promiscuous mode [ 266.157573][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1991'. [ 266.261235][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1993'. [ 266.272125][T11697] FAULT_INJECTION: forcing a failure. [ 266.272125][T11697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.273148][T11697] [ 266.273156][T11697] ====================================================== [ 266.273162][T11697] WARNING: possible circular locking dependency detected [ 266.273172][T11697] 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 Not tainted [ 266.273180][T11697] ------------------------------------------------------ [ 266.273187][T11697] syz.1.1994/11697 is trying to acquire lock: [ 266.273195][T11697] ffffffff8e132fc0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 266.273229][T11697] [ 266.273229][T11697] but task is already holding lock: [ 266.273234][T11697] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 266.273267][T11697] [ 266.273267][T11697] which lock already depends on the new lock. [ 266.273267][T11697] [ 266.273272][T11697] [ 266.273272][T11697] the existing dependency chain (in reverse order) is: [ 266.273278][T11697] [ 266.273278][T11697] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 266.273295][T11697] lock_acquire+0x120/0x360 [ 266.273311][T11697] _raw_spin_lock_nested+0x32/0x50 [ 266.273333][T11697] raw_spin_rq_lock_nested+0x2a/0x140 [ 266.273348][T11697] task_rq_lock+0xbc/0x470 [ 266.273364][T11697] cgroup_move_task+0x9a/0x590 [ 266.273375][T11697] css_set_move_task+0x658/0x9e0 [ 266.273387][T11697] cgroup_post_fork+0x1ef/0x790 [ 266.273399][T11697] copy_process+0x3862/0x3c00 [ 266.273410][T11697] kernel_clone+0x21e/0x870 [ 266.273421][T11697] user_mode_thread+0xdd/0x140 [ 266.273432][T11697] rest_init+0x23/0x300 [ 266.273446][T11697] start_kernel+0x47d/0x500 [ 266.273460][T11697] x86_64_start_reservations+0x24/0x30 [ 266.273481][T11697] x86_64_start_kernel+0x143/0x1c0 [ 266.273498][T11697] common_startup_64+0x13e/0x147 [ 266.273510][T11697] [ 266.273510][T11697] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 266.273528][T11697] lock_acquire+0x120/0x360 [ 266.273540][T11697] _raw_spin_lock_irqsave+0xa7/0xf0 [ 266.273553][T11697] try_to_wake_up+0x6e/0x1290 [ 266.273563][T11697] __wake_up_common_lock+0x134/0x1f0 [ 266.273576][T11697] tty_port_default_wakeup+0xa2/0xf0 [ 266.273586][T11697] serial8250_tx_chars+0x72e/0x970 [ 266.273595][T11697] serial8250_handle_irq+0x633/0xbb0 [ 266.273603][T11697] serial8250_default_handle_irq+0xbf/0x1b0 [ 266.273614][T11697] serial8250_interrupt+0xa2/0x1d0 [ 266.273626][T11697] __handle_irq_event_percpu+0x28c/0x980 [ 266.273637][T11697] handle_irq_event+0x8b/0x1e0 [ 266.273646][T11697] handle_edge_irq+0x267/0x9c0 [ 266.273654][T11697] __common_interrupt+0x143/0x250 [ 266.273665][T11697] common_interrupt+0xb6/0xe0 [ 266.273677][T11697] asm_common_interrupt+0x26/0x40 [ 266.273685][T11697] unwind_next_frame+0x521/0x2390 [ 266.273698][T11697] arch_stack_walk+0x11c/0x150 [ 266.273706][T11697] stack_trace_save+0x9c/0xe0 [ 266.273715][T11697] save_stack+0xf5/0x1f0 [ 266.273723][T11697] __reset_page_owner+0x71/0x1f0 [ 266.273731][T11697] __free_frozen_pages+0xc71/0xe70 [ 266.273741][T11697] __tlb_remove_table+0x2d2/0x3b0 [ 266.273751][T11697] tlb_remove_table_rcu+0x85/0x100 [ 266.273761][T11697] rcu_core+0xca5/0x1710 [ 266.273773][T11697] handle_softirqs+0x286/0x870 [ 266.273786][T11697] run_ksoftirqd+0x9b/0x100 [ 266.273794][T11697] smpboot_thread_fn+0x53f/0xa60 [ 266.273807][T11697] kthread+0x70e/0x8a0 [ 266.273817][T11697] ret_from_fork+0x3f9/0x770 [ 266.273829][T11697] ret_from_fork_asm+0x1a/0x30 [ 266.273843][T11697] [ 266.273843][T11697] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 266.273859][T11697] lock_acquire+0x120/0x360 [ 266.273870][T11697] _raw_spin_lock_irqsave+0xa7/0xf0 [ 266.273883][T11697] __wake_up_common_lock+0x2f/0x1f0 [ 266.273893][T11697] tty_port_default_wakeup+0xa2/0xf0 [ 266.273903][T11697] serial8250_tx_chars+0x72e/0x970 [ 266.273911][T11697] serial8250_handle_irq+0x633/0xbb0 [ 266.273920][T11697] serial8250_default_handle_irq+0xbf/0x1b0 [ 266.273930][T11697] serial8250_interrupt+0xa2/0x1d0 [ 266.273942][T11697] __handle_irq_event_percpu+0x28c/0x980 [ 266.273952][T11697] handle_irq_event+0x8b/0x1e0 [ 266.273961][T11697] handle_edge_irq+0x267/0x9c0 [ 266.273968][T11697] __common_interrupt+0x143/0x250 [ 266.273979][T11697] common_interrupt+0xb6/0xe0 [ 266.273989][T11697] asm_common_interrupt+0x26/0x40 [ 266.273997][T11697] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 266.274010][T11697] uart_port_unlock_deref+0x111/0x2f0 [ 266.274018][T11697] uart_write+0xe8/0x130 [ 266.274026][T11697] n_tty_write+0xd32/0x11d0 [ 266.274037][T11697] file_tty_write+0x503/0x990 [ 266.274044][T11697] vfs_write+0x548/0xa90 [ 266.274058][T11697] ksys_write+0x145/0x250 [ 266.274065][T11697] do_syscall_64+0xfa/0x3b0 [ 266.274074][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.274082][T11697] [ 266.274082][T11697] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 266.274095][T11697] lock_acquire+0x120/0x360 [ 266.274106][T11697] _raw_spin_lock_irqsave+0xa7/0xf0 [ 266.274119][T11697] serial8250_console_write+0x17e/0x1ba0 [ 266.274128][T11697] console_flush_all+0x728/0xc40 [ 266.274137][T11697] console_unlock+0xc4/0x270 [ 266.274144][T11697] vprintk_emit+0x5b7/0x7a0 [ 266.274151][T11697] _printk+0xcf/0x120 [ 266.274160][T11697] register_console+0xa8b/0xf90 [ 266.274169][T11697] univ8250_console_init+0x52/0x90 [ 266.274181][T11697] console_init+0x1a1/0x670 [ 266.274194][T11697] start_kernel+0x2cc/0x500 [ 266.274204][T11697] x86_64_start_reservations+0x24/0x30 [ 266.274211][T11697] x86_64_start_kernel+0x143/0x1c0 [ 266.274224][T11697] common_startup_64+0x13e/0x147 [ 266.274233][T11697] [ 266.274233][T11697] -> #0 (console_owner){-.-.}-{0:0}: [ 266.274245][T11697] validate_chain+0xb9b/0x2140 [ 266.274253][T11697] __lock_acquire+0xab9/0xd20 [ 266.274264][T11697] lock_acquire+0x120/0x360 [ 266.274275][T11697] console_flush_all+0x6d2/0xc40 [ 266.274284][T11697] console_unlock+0xc4/0x270 [ 266.274292][T11697] vprintk_emit+0x5b7/0x7a0 [ 266.274299][T11697] _printk+0xcf/0x120 [ 266.274307][T11697] should_fail_ex+0x3f5/0x560 [ 266.274324][T11697] strncpy_from_user+0x36/0x290 [ 266.274334][T11697] strncpy_from_user_nofault+0x72/0x150 [ 266.274346][T11697] bpf_probe_read_user_str+0x2a/0x70 [ 266.274359][T11697] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 266.274367][T11697] bpf_trace_run4+0x28b/0x4a0 [ 266.274378][T11697] __bpf_trace_sched_switch+0x17a/0x1e0 [ 266.274387][T11697] __traceiter_sched_switch+0x9d/0xd0 [ 266.274397][T11697] __schedule+0x2328/0x4d00 [ 266.274410][T11697] preempt_schedule_irq+0xb5/0x150 [ 266.274417][T11697] irqentry_exit+0x6f/0x90 [ 266.274425][T11697] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.274434][T11697] inet_diag_dump_icsk+0x847/0x1f40 [ 266.274443][T11697] inet_diag_dump_compat+0x254/0x460 [ 266.274452][T11697] netlink_dump+0x62d/0xe20 [ 266.274463][T11697] __netlink_dump_start+0x5cb/0x7e0 [ 266.274473][T11697] inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 266.274482][T11697] sock_diag_rcv_msg+0x4c9/0x600 [ 266.274492][T11697] netlink_rcv_skb+0x208/0x470 [ 266.274502][T11697] netlink_unicast+0x75b/0x8d0 [ 266.274511][T11697] netlink_sendmsg+0x805/0xb30 [ 266.274522][T11697] __sock_sendmsg+0x21c/0x270 [ 266.274531][T11697] ____sys_sendmsg+0x505/0x830 [ 266.274543][T11697] ___sys_sendmsg+0x21f/0x2a0 [ 266.274555][T11697] __x64_sys_sendmsg+0x19b/0x260 [ 266.274569][T11697] do_syscall_64+0xfa/0x3b0 [ 266.274579][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.274587][T11697] [ 266.274587][T11697] other info that might help us debug this: [ 266.274587][T11697] [ 266.274590][T11697] Chain exists of: [ 266.274590][T11697] console_owner --> &p->pi_lock --> &rq->__lock [ 266.274590][T11697] [ 266.274605][T11697] Possible unsafe locking scenario: [ 266.274605][T11697] [ 266.274609][T11697] CPU0 CPU1 [ 266.274612][T11697] ---- ---- [ 266.274615][T11697] lock(&rq->__lock); [ 266.274621][T11697] lock(&p->pi_lock); [ 266.274628][T11697] lock(&rq->__lock); [ 266.274635][T11697] lock(console_owner); [ 266.274641][T11697] [ 266.274641][T11697] *** DEADLOCK *** [ 266.274641][T11697] [ 266.274644][T11697] 5 locks held by syz.1.1994/11697: [ 266.274650][T11697] #0: ffff8881473986d0 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 266.274673][T11697] #1: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 266.274698][T11697] #2: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 266.274720][T11697] #3: ffffffff8e133020 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 266.274740][T11697] #4: ffffffff8e01a8f0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 266.274762][T11697] [ 266.274762][T11697] stack backtrace: [ 266.274768][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.1.1994 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 266.274779][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.274785][T11697] Call Trace: [ 266.274789][T11697] [ 266.274794][T11697] dump_stack_lvl+0x189/0x250 [ 266.274810][T11697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.274825][T11697] ? __pfx__printk+0x10/0x10 [ 266.274834][T11697] ? print_lock_name+0xde/0x100 [ 266.274845][T11697] print_circular_bug+0x2ee/0x310 [ 266.274855][T11697] check_noncircular+0x134/0x160 [ 266.274865][T11697] validate_chain+0xb9b/0x2140 [ 266.274879][T11697] __lock_acquire+0xab9/0xd20 [ 266.274892][T11697] ? console_flush_all+0x13a/0xc40 [ 266.274902][T11697] lock_acquire+0x120/0x360 [ 266.274913][T11697] ? console_flush_all+0x13a/0xc40 [ 266.274924][T11697] ? do_raw_spin_unlock+0x122/0x240 [ 266.274934][T11697] ? console_flush_all+0x13a/0xc40 [ 266.274944][T11697] console_flush_all+0x6d2/0xc40 [ 266.274953][T11697] ? console_flush_all+0x13a/0xc40 [ 266.274964][T11697] ? console_flush_all+0x13a/0xc40 [ 266.274974][T11697] ? __pfx_console_flush_all+0x10/0x10 [ 266.274986][T11697] ? is_printk_cpu_sync_owner+0x32/0x40 [ 266.274998][T11697] console_unlock+0xc4/0x270 [ 266.275007][T11697] ? __pfx_console_unlock+0x10/0x10 [ 266.275016][T11697] ? is_printk_cpu_sync_owner+0x32/0x40 [ 266.275028][T11697] vprintk_emit+0x5b7/0x7a0 [ 266.275037][T11697] ? __pfx_vprintk_emit+0x10/0x10 [ 266.275049][T11697] _printk+0xcf/0x120 [ 266.275058][T11697] ? __pfx____ratelimit+0x10/0x10 [ 266.275068][T11697] ? __pfx__printk+0x10/0x10 [ 266.275080][T11697] should_fail_ex+0x3f5/0x560 [ 266.275092][T11697] strncpy_from_user+0x36/0x290 [ 266.275103][T11697] strncpy_from_user_nofault+0x72/0x150 [ 266.275116][T11697] bpf_probe_read_user_str+0x2a/0x70 [ 266.275130][T11697] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 266.275138][T11697] bpf_trace_run4+0x28b/0x4a0 [ 266.275149][T11697] ? bpf_trace_run4+0x19c/0x4a0 [ 266.275159][T11697] ? __pfx_bpf_trace_run4+0x10/0x10 [ 266.275169][T11697] ? kvm_sched_clock_read+0x11/0x20 [ 266.275177][T11697] ? sched_clock_cpu+0x74/0x430 [ 266.275192][T11697] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 266.275203][T11697] __bpf_trace_sched_switch+0x17a/0x1e0 [ 266.275214][T11697] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 266.275225][T11697] ? psi_group_change+0xbc7/0x1210 [ 266.275233][T11697] ? rcu_read_lock_sched_held+0x89/0x100 [ 266.275248][T11697] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 266.275263][T11697] ? psi_task_switch+0x314/0x6d0 [ 266.275273][T11697] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 266.275285][T11697] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 266.275296][T11697] __traceiter_sched_switch+0x9d/0xd0 [ 266.275324][T11697] __schedule+0x2328/0x4d00 [ 266.275338][T11697] ? __lock_acquire+0xab9/0xd20 [ 266.275353][T11697] ? preempt_schedule_irq+0xb5/0x150 [ 266.275362][T11697] ? __pfx___schedule+0x10/0x10 [ 266.275376][T11697] ? tcp_diag_get_aux+0x6d3/0x8f0 [ 266.275386][T11697] ? __asan_memset+0x22/0x50 [ 266.275399][T11697] ? tcp_diag_get_aux+0x42/0x8f0 [ 266.275410][T11697] ? preempt_schedule_irq+0xaa/0x150 [ 266.275419][T11697] preempt_schedule_irq+0xb5/0x150 [ 266.275427][T11697] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 266.275438][T11697] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 266.275453][T11697] irqentry_exit+0x6f/0x90 [ 266.275461][T11697] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.275471][T11697] RIP: 0010:inet_diag_dump_icsk+0x847/0x1f40 [ 266.275482][T11697] Code: 8d 04 c0 48 89 44 24 68 49 8d 1c c6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ad c5 20 f8 48 83 3b 00 <0f> 84 9a 08 00 00 48 8b 44 24 68 49 8d 04 c6 45 89 e6 49 89 c4 4c [ 266.275490][T11697] RSP: 0018:ffffc90003156e20 EFLAGS: 00000246 [ 266.275499][T11697] RAX: 1ffff9200039ef8c RBX: ffffc90001cf7c60 RCX: 0000000000000000 [ 266.275506][T11697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003157030 [ 266.275512][T11697] RBP: ffffc900031571b0 R08: ffffc9000315702f R09: 0000000000000000 [ 266.275519][T11697] R10: ffffc90003156ff0 R11: fffff5200062ae06 R12: 0000000000000000 [ 266.275526][T11697] R13: dffffc0000000000 R14: ffffc90001a80000 R15: ffff88802f340000 [ 266.275542][T11697] ? __pfx_inet_diag_dump_icsk+0x10/0x10 [ 266.275554][T11697] ? __alloc_skb+0x142/0x2d0 [ 266.275567][T11697] ? netlink_dump+0x22b/0xe20 [ 266.275576][T11697] ? __netlink_dump_start+0x5cb/0x7e0 [ 266.275587][T11697] ? inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 266.275599][T11697] ? __lock_acquire+0xab9/0xd20 [ 266.275613][T11697] ? inet_diag_lock_handler+0x8b/0x2c0 [ 266.275624][T11697] ? inet_diag_lock_handler+0x8b/0x2c0 [ 266.275634][T11697] ? inet_diag_lock_handler+0x8b/0x2c0 [ 266.275644][T11697] ? tcp_diag_dump+0x64/0xc0 [ 266.275655][T11697] inet_diag_dump_compat+0x254/0x460 [ 266.275666][T11697] ? trace_kmalloc+0x1f/0xd0 [ 266.275674][T11697] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 266.275686][T11697] ? __alloc_skb+0x1bc/0x2d0 [ 266.275699][T11697] netlink_dump+0x62d/0xe20 [ 266.275712][T11697] ? __pfx_netlink_dump+0x10/0x10 [ 266.275725][T11697] ? __inet_diag_dump_start+0x89a/0xa10 [ 266.275737][T11697] __netlink_dump_start+0x5cb/0x7e0 [ 266.275749][T11697] inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 266.275760][T11697] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 266.275772][T11697] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 266.275782][T11697] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 266.275792][T11697] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 266.275803][T11697] ? sock_diag_rcv_msg+0x188/0x600 [ 266.275814][T11697] sock_diag_rcv_msg+0x4c9/0x600 [ 266.275825][T11697] netlink_rcv_skb+0x208/0x470 [ 266.275837][T11697] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 266.275848][T11697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.275861][T11697] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.275872][T11697] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.275884][T11697] netlink_unicast+0x75b/0x8d0 [ 266.275896][T11697] netlink_sendmsg+0x805/0xb30 [ 266.275909][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.275921][T11697] ? aa_sock_msg_perm+0x94/0x160 [ 266.275934][T11697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.275946][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.275957][T11697] __sock_sendmsg+0x21c/0x270 [ 266.275968][T11697] ____sys_sendmsg+0x505/0x830 [ 266.275982][T11697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.275997][T11697] ? import_iovec+0x74/0xa0 [ 266.276007][T11697] ___sys_sendmsg+0x21f/0x2a0 [ 266.276020][T11697] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.276040][T11697] ? __fget_files+0x2a/0x420 [ 266.276050][T11697] ? __fget_files+0x3a0/0x420 [ 266.276062][T11697] __x64_sys_sendmsg+0x19b/0x260 [ 266.276075][T11697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.276088][T11697] ? __might_fault+0xb0/0x130 [ 266.276099][T11697] ? rcu_is_watching+0x15/0xb0 [ 266.276113][T11697] ? trace_sys_enter+0x25/0x120 [ 266.276127][T11697] do_syscall_64+0xfa/0x3b0 [ 266.276136][T11697] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.276144][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.276153][T11697] ? clear_bhb_loop+0x60/0xb0 [ 266.276163][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.276172][T11697] RIP: 0033:0x7f6a1cf8e929 [ 266.276180][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.276188][T11697] RSP: 002b:00007f6a1dde3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.276197][T11697] RAX: ffffffffffffffda RBX: 00007f6a1d1b6080 RCX: 00007f6a1cf8e929 [ 266.276204][T11697] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 266.276210][T11697] RBP: 00007f6a1dde3090 R08: 0000000000000000 R09: 0000000000000000 [ 266.276216][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.276222][T11697] R13: 0000000000000000 R14: 00007f6a1d1b6080 R15: 00007ffe723e4d48 [ 266.276231][T11697] [ 267.912419][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.1.1994 Not tainted 6.16.0-rc2-syzkaller-00663-gee1a0c653f9c #0 PREEMPT(full) [ 267.912434][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.912441][T11697] Call Trace: [ 267.912448][T11697] [ 267.912455][T11697] dump_stack_lvl+0x189/0x250 [ 267.912474][T11697] ? __pfx____ratelimit+0x10/0x10 [ 267.912484][T11697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.912498][T11697] ? __pfx__printk+0x10/0x10 [ 267.912511][T11697] should_fail_ex+0x414/0x560 [ 267.912524][T11697] strncpy_from_user+0x36/0x290 [ 267.912537][T11697] strncpy_from_user_nofault+0x72/0x150 [ 267.912550][T11697] bpf_probe_read_user_str+0x2a/0x70 [ 267.912566][T11697] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 267.912575][T11697] bpf_trace_run4+0x28b/0x4a0 [ 267.912587][T11697] ? bpf_trace_run4+0x19c/0x4a0 [ 267.912598][T11697] ? __pfx_bpf_trace_run4+0x10/0x10 [ 267.912609][T11697] ? kvm_sched_clock_read+0x11/0x20 [ 267.912617][T11697] ? sched_clock_cpu+0x74/0x430 [ 267.912632][T11697] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 267.912645][T11697] __bpf_trace_sched_switch+0x17a/0x1e0 [ 267.912656][T11697] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 267.912666][T11697] ? psi_group_change+0xbc7/0x1210 [ 267.912676][T11697] ? rcu_read_lock_sched_held+0x89/0x100 [ 267.912691][T11697] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 267.912706][T11697] ? psi_task_switch+0x314/0x6d0 [ 267.912716][T11697] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 267.912728][T11697] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 267.912738][T11697] __traceiter_sched_switch+0x9d/0xd0 [ 267.912750][T11697] __schedule+0x2328/0x4d00 [ 267.912766][T11697] ? __lock_acquire+0xab9/0xd20 [ 267.912782][T11697] ? preempt_schedule_irq+0xb5/0x150 [ 267.912791][T11697] ? __pfx___schedule+0x10/0x10 [ 267.912806][T11697] ? tcp_diag_get_aux+0x6d3/0x8f0 [ 267.912816][T11697] ? __asan_memset+0x22/0x50 [ 267.912829][T11697] ? tcp_diag_get_aux+0x42/0x8f0 [ 267.912841][T11697] ? preempt_schedule_irq+0xaa/0x150 [ 267.912850][T11697] preempt_schedule_irq+0xb5/0x150 [ 267.912858][T11697] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 267.912869][T11697] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 267.912884][T11697] irqentry_exit+0x6f/0x90 [ 267.912893][T11697] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.912904][T11697] RIP: 0010:inet_diag_dump_icsk+0x847/0x1f40 [ 267.912915][T11697] Code: 8d 04 c0 48 89 44 24 68 49 8d 1c c6 48 83 c3 40 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 ad c5 20 f8 48 83 3b 00 <0f> 84 9a 08 00 00 48 8b 44 24 68 49 8d 04 c6 45 89 e6 49 89 c4 4c [ 267.912924][T11697] RSP: 0018:ffffc90003156e20 EFLAGS: 00000246 [ 267.912934][T11697] RAX: 1ffff9200039ef8c RBX: ffffc90001cf7c60 RCX: 0000000000000000 [ 267.912942][T11697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003157030 [ 267.912948][T11697] RBP: ffffc900031571b0 R08: ffffc9000315702f R09: 0000000000000000 [ 267.912955][T11697] R10: ffffc90003156ff0 R11: fffff5200062ae06 R12: 0000000000000000 [ 267.912962][T11697] R13: dffffc0000000000 R14: ffffc90001a80000 R15: ffff88802f340000 [ 267.912979][T11697] ? __pfx_inet_diag_dump_icsk+0x10/0x10 [ 267.912992][T11697] ? __alloc_skb+0x142/0x2d0 [ 267.913004][T11697] ? netlink_dump+0x22b/0xe20 [ 267.913015][T11697] ? __netlink_dump_start+0x5cb/0x7e0 [ 267.913025][T11697] ? inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 267.913038][T11697] ? __lock_acquire+0xab9/0xd20 [ 267.913052][T11697] ? inet_diag_lock_handler+0x8b/0x2c0 [ 267.913064][T11697] ? inet_diag_lock_handler+0x8b/0x2c0 [ 267.913073][T11697] ? inet_diag_lock_handler+0x8b/0x2c0 [ 267.913084][T11697] ? tcp_diag_dump+0x64/0xc0 [ 267.913094][T11697] inet_diag_dump_compat+0x254/0x460 [ 267.913106][T11697] ? trace_kmalloc+0x1f/0xd0 [ 267.913115][T11697] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 267.913127][T11697] ? __alloc_skb+0x1bc/0x2d0 [ 267.913140][T11697] netlink_dump+0x62d/0xe20 [ 267.913153][T11697] ? __pfx_netlink_dump+0x10/0x10 [ 267.913167][T11697] ? __inet_diag_dump_start+0x89a/0xa10 [ 267.913178][T11697] __netlink_dump_start+0x5cb/0x7e0 [ 267.913191][T11697] inet_diag_rcv_msg_compat+0x1ea/0x3b0 [ 267.913202][T11697] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 267.913214][T11697] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 267.913224][T11697] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 267.913239][T11697] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 267.913250][T11697] ? sock_diag_rcv_msg+0x188/0x600 [ 267.913262][T11697] sock_diag_rcv_msg+0x4c9/0x600 [ 267.913274][T11697] netlink_rcv_skb+0x208/0x470 [ 267.913285][T11697] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 267.913296][T11697] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.913310][T11697] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.913321][T11697] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.913333][T11697] netlink_unicast+0x75b/0x8d0 [ 267.913346][T11697] netlink_sendmsg+0x805/0xb30 [ 267.913359][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.913372][T11697] ? aa_sock_msg_perm+0x94/0x160 [ 267.913385][T11697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.913397][T11697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.913409][T11697] __sock_sendmsg+0x21c/0x270 [ 267.913420][T11697] ____sys_sendmsg+0x505/0x830 [ 267.913434][T11697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.913449][T11697] ? import_iovec+0x74/0xa0 [ 267.913459][T11697] ___sys_sendmsg+0x21f/0x2a0 [ 267.913473][T11697] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.913494][T11697] ? __fget_files+0x2a/0x420 [ 267.913504][T11697] ? __fget_files+0x3a0/0x420 [ 267.913516][T11697] __x64_sys_sendmsg+0x19b/0x260 [ 267.913530][T11697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.913543][T11697] ? __might_fault+0xb0/0x130 [ 267.913555][T11697] ? rcu_is_watching+0x15/0xb0 [ 267.913569][T11697] ? trace_sys_enter+0x25/0x120 [ 267.913583][T11697] do_syscall_64+0xfa/0x3b0 [ 267.913592][T11697] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.913601][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.913610][T11697] ? clear_bhb_loop+0x60/0xb0 [ 267.913620][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.913629][T11697] RIP: 0033:0x7f6a1cf8e929 [ 267.913638][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.913646][T11697] RSP: 002b:00007f6a1dde3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.913656][T11697] RAX: ffffffffffffffda RBX: 00007f6a1d1b6080 RCX: 00007f6a1cf8e929 [ 267.913663][T11697] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 267.913670][T11697] RBP: 00007f6a1dde3090 R08: 0000000000000000 R09: 0000000000000000 [ 267.913675][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.913681][T11697] R13: 0000000000000000 R14: 00007f6a1d1b6080 R15: 00007ffe723e4d48 [ 267.913691][T11697] [ 268.562663][T11699] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1993'. [ 268.647554][ T8467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.665134][T11695] openvswitch: netlink: IP tunnel dst address not specified [ 269.216090][ T8467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.266824][ T8467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.316476][ T8467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.376994][ T8467] bridge_slave_1: left allmulticast mode [ 269.382704][ T8467] bridge_slave_1: left promiscuous mode [ 269.388336][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.396470][ T8467] bridge_slave_0: left allmulticast mode [ 269.402092][ T8467] bridge_slave_0: left promiscuous mode [ 269.407853][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.517529][ T8467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.528250][ T8467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.538043][ T8467] bond0 (unregistering): Released all slaves [ 270.085902][ T8467] hsr_slave_0: left promiscuous mode [ 270.091508][ T8467] hsr_slave_1: left promiscuous mode [ 270.098955][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.106547][ T8467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.114115][ T8467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.121496][ T8467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.131163][ T8467] veth1_macvtap: left promiscuous mode [ 270.142760][ T8467] veth0_macvtap: left promiscuous mode [ 270.148300][ T8467] veth1_vlan: left promiscuous mode [ 270.153734][ T8467] veth0_vlan: left promiscuous mode [ 270.267134][ T8467] team0 (unregistering): Port device team_slave_1 removed [ 270.286974][ T8467] team0 (unregistering): Port device team_slave_0 removed [ 270.658491][ T8467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.715982][ T8467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.776203][ T8467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.820559][ T8467] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.247927][ T8467] bridge_slave_1: left allmulticast mode [ 271.253734][ T8467] bridge_slave_1: left promiscuous mode [ 271.259377][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.267869][ T8467] bridge_slave_0: left allmulticast mode [ 271.273740][ T8467] bridge_slave_0: left promiscuous mode [ 271.279449][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.364929][ T8467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.375261][ T8467] bond0 (unregistering): (slave team0): Releasing backup interface [ 271.384617][ T8467] bond0 (unregistering): Released all slaves [ 271.459366][ T8467] bond1 (unregistering): Released all slaves [ 271.740308][ T8467] bond0 (unregistering): Released all slaves [ 271.817335][ T8467] bond1 (unregistering): Released all slaves [ 271.825774][ T8467] bond2 (unregistering): Released all slaves [ 272.103010][ T8467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.112257][ T8467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.121213][ T8467] bond0 (unregistering): Released all slaves [ 272.189854][ T8467] þ`Ì: left promiscuous mode [ 272.223633][ T8467] vxlan: left promiscuous mode [ 272.263606][ T8467] : left promiscuous mode [ 272.902219][ T8467] hsr_slave_0: left promiscuous mode [ 272.907917][ T8467] hsr_slave_1: left promiscuous mode [ 272.913589][ T8467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.921065][ T8467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.928507][ T8467] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 272.936220][ T8467] batman_adv: batadv0: Removing interface: ipvlan2 [ 272.945908][ T8467] hsr_slave_0: left promiscuous mode [ 272.951455][ T8467] hsr_slave_1: left promiscuous mode [ 272.958524][ T8467] hsr_slave_0: left promiscuous mode [ 272.964097][ T8467] hsr_slave_1: left promiscuous mode [ 272.971422][ T8467] veth1_macvtap: left promiscuous mode [ 272.977042][ T8467] veth1_vlan: left promiscuous mode [ 272.982308][ T8467] veth0_vlan: left promiscuous mode [ 273.015250][ T8467] pimreg3 (unregistering): left allmulticast mode [ 273.135347][ T8467] team_slave_0 (unregistering): left promiscuous mode [ 273.142563][ T8467] team0 (unregistering): Port device team_slave_0 removed [ 273.259332][ T8467] pimreg (unregistering): left allmulticast mode [ 273.522749][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.866489][ T8467] team0 (unregistering): Port device team_slave_1 removed [ 273.893469][ T8467] team0 (unregistering): Port device team_slave_0 removed [ 274.743758][ T8467] IPVS: stop unused estimator thread 0... [ 274.750056][ T8467] IPVS: stop unused estimator thread 0... [ 274.756390][ T8467] IPVS: stop unused estimator thread 0...