last executing test programs: 1m15.050237159s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48) 1m2.062994395s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48) 49.282822894s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61157100000000006113770000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000180f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48) 38.117961279s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61157100000000006113770000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000180f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48) 26.857574165s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61157100000000006113770000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000180f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48) 12.824492567s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x3e}, 0x48) 4.526115097s ago: executing program 4 (id=1030): socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket(0x848000000015, 0x805, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}}}, 0x24}}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r1], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (fail_nth: 14) 3.826234005s ago: executing program 4 (id=1032): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000002f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000029c0), 0x400006d, 0x20000004) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x3, 0x2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r0, @ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)={0x14, r5, 0x1, 0x80000000}, 0x14}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000840) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) 3.474112889s ago: executing program 4 (id=1037): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r1}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000040000000000000000000000085000000d100000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) splice(r3, &(0x7f0000000180)=0x6, r3, &(0x7f00000003c0)=0x8, 0xfffffffffffffff9, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) 2.804662789s ago: executing program 2 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000003850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = epoll_create1(0x0) r6 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1a000, r6, &(0x7f0000000000)={0x10000000}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000780)={r8, &(0x7f0000000800), &(0x7f0000000880)=""/2, 0x2}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003e000701feffffff00000000017c0000100042800c000a8008008d00", @ANYRES32=0x0, @ANYBLOB="d2eb9bee40c06e4b358d13bcc5ad286a0a6c624c3f222cb6d00216b07708a7321fd97dbaed40df5eaf252bbe"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmmsg$inet6(r7, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000000c0)=@int=0x5, 0x4) 2.264237018s ago: executing program 2 (id=1045): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003540)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0xf2, 0x99}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x779f9ee0551dd5fe}, 0x20000000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={r10, 0x5}, &(0x7f0000000180)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000580)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0xc70, @loopback, 0xffffffff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f00000001c0)="9cc067b6efbc75b87616c391182bf75347cfdd4f281457cd379aaa4a3a690d97802fac868b51bc41a7cc93278742235a2ddde48dc66df439456948d2cebb425d3c93fa7971ec35e310da2de11a0c146f1bc4", 0x52}, {&(0x7f0000000340)="d5a7c18605c689a96c09e3d3da7299157d81064bc9a38a46777fdffaf970826380f41428", 0x24}, {&(0x7f0000000480)="524c52a4854591fa6d1858505bb4f3b74aa0e1259451c9911f4f7db940df977b4ad823ced8eeb4795c238137f92746f84870317490318aba7fa26ea3f5b9fec7fdad870f7d98245edc744e84c47c4aaa98d2f3b6fac877e2d1a6c8a0a2138f3e8268ace11a26147c8825f7c514988a", 0x6f}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="20000008000000008400000008000000fe880000000000000000000000000001200800000000000084000000080000000000000000000000000000000000000130000000000000008400e7a6010000000400030006800000050001000000000009000000feffffff0dd0ffff", @ANYRES32=r10], 0x70, 0x801}, 0x4000080) sendto$inet(r7, &(0x7f0000000840)="e9db05b3b9d4059aee74aacafe681f9abab83e46a400dd1947cd83a2656172dd418f1c4537e026807972b711bca85cbd82141ba3130c9dca12124ee86ef0539041f9d622e614064333ae6699c95033102c16aef04b85642402c53476bc4e48f479cb6dec252453f2d552a8aa9914c3ddce996471d4e6ff8da1f5cdbf7f5bae940b62d1d468d6", 0x86, 0x0, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0xfffffffffffffdea) listen(r7, 0x21) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa2}], &(0x7f0000000600)='GPL\x00', 0x8, 0x44, &(0x7f0000000640)=""/68, 0x40f00, 0x12, '\x00', r6, 0x0, r2, 0x8, &(0x7f00000006c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x2, 0x67, 0x80}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r11, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) 2.232451887s ago: executing program 4 (id=1046): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='y\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000008000000000000000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pi6 \x00'}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket(0x22, 0x2, 0x3) recvmsg$unix(r7, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x1) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) 1.974228522s ago: executing program 0 (id=1048): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e0ffb7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000900)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 1.822086544s ago: executing program 1 (id=1049): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="682400003e000701feffffff00000000037c000008004280040008000c000180060006008848"], 0x2468}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.79441143s ago: executing program 0 (id=1050): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x9, 0xc3, "fd30214fdbc562ac8d02474bf93b9c6d23d76bbbe3927da2320df6c19496d6935725b2290f7c83cf5b5ff87f3ad2280caa316e3c8110aa067482a09aefdf8bae5553553ac1a9cd030355f436ec26badecbd0c113449f94848fabb26a3922dc6f7da9bf0296cdba5043c7f6294ade73c48c88fda9f0e5474ed310d327080e7407b3ea9dfa87f34790ad8db8eb463657a3c91b30fc4c2238cfe1927fae3979d2a2c551f923f511f276a26632bc034aab6ee17e69d785aa53d606cc3ec957c0b72bfae78e"}, 0xcb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x88}}, 0x20000000) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f0000000180)={0x1a, 0x30c, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7af2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000340)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) close(0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900"], 0x364}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0) 1.627486436s ago: executing program 2 (id=1051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x108, 0x9, 0x6, 0x3, 0x0, 0x0, {0xd, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @local}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xee29}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x322}, 0x1c) 826.057128ms ago: executing program 1 (id=1052): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0xfb, 0x5c}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="00000046000000000000009500000000000004"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 671.040779ms ago: executing program 0 (id=1053): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000001200100000000000000001a0000000001000000004e210002020000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd7000003500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 626.650409ms ago: executing program 1 (id=1054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x30, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x1}}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x8}}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}]}, 0x60}, 0x1, 0xf0ffffffffffff}, 0x0) 626.212126ms ago: executing program 4 (id=1055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x368, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x32c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x2e0, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0xaf000000, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x90, 0x16, 0x0, 0x0, {{0x8}, {0x4}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x100, 0x1a, 0x0, 0x0, {{0x7}, {0x18, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a15a6ce4ed2dbc77499eb26844a4b31b"}]}, {0xc2, 0x6, "c527675bf7f4646ae31c844a33598eff03ceaabbf6272a809016b3f45d79c400b539c7a4d14eaae83644f301ed04c18bf42d5c76a75e8a581d9a3557c255c6295de63eb3da7d415bef4d1f78361360ce6fe6411cab60fa0a5057105013247436fea28171a79df64b155fc529fcfebcabf8e2f34843a55ef8798b5d34a7f442bde0879242568c20977076b5be5c90ddd6de40fd02d6c00f1f52b2454bd700ba583c7a3e90fc14df63eeb534c65c8bfdca7233e81f51f78cc2c2ccc2f16679"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x368}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) 570.187979ms ago: executing program 2 (id=1056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="02000000000080008000120008000100767469367400"], 0xa0}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002180)=@newtclass={0x2c, 0x28, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0x5}, {0xa, 0x6}, {0xf, 0x4}}, [@TCA_RATE={0x5, 0x5, {0xc2, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048150) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}}, 0x20000040) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x7, 'veth0_macvtap\x00', {0x9}, 0x6}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 513.55208ms ago: executing program 0 (id=1057): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff2501e4100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 397.225237ms ago: executing program 1 (id=1058): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0x128, 0x190, 0x0, {0x400000000000000, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x3ff, 0x1, 0xfffffffc, 0x10000, 0x80000001}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 222.288643ms ago: executing program 0 (id=1059): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc, 0x1c00}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0xfe, 0x5c}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) 222.07728ms ago: executing program 1 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400e0ffb7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000900)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 134.571088ms ago: executing program 2 (id=1061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5], 0x398}}, 0x0) 50.887385ms ago: executing program 4 (id=1062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) 858.211µs ago: executing program 1 (id=1063): socket$kcm(0x10, 0x400000002, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) unshare(0x64000600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) unshare(0x2c020400) socket$inet(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r1}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="0100fcffffff000000000100000080000880780000802c00098028000080600001000a00000014000200fe8000000000000000000000000000aa050003000200000024000100975c9d81c983c8209ee781254b893c57cdbf691c24000200eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db7170400008024000356fe29e43d1b36c934154a49cc877a00b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e42fd020077673000"/201], 0xcc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x82, 0x2, @local}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x226, 0x0, 0x3, 0x2, 0x7, @broadcast}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x46}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x63, &(0x7f0000001c40)={'ipvs\x00'}, &(0x7f0000004580)=0x1e) sendmsg$tipc(r8, 0x0, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000fd836b568cd8dbc69c9df37b9357c00045855c3a79a434a00000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030035982d5553a160916dcfcaf7dd01ca06e9e11f7a4daa1c4f0e2a37b4188972ea1799f417aed84c3b507ac774a7b6b8ee1875deeacd95fa59232d9397b10eabd759"], 0x7c}}, 0x4000000) 567.652µs ago: executing program 0 (id=1064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a00014000000000000000008180800000004b3d0000000014001f"], 0x38}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close(r6) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x4) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000080)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) 0s ago: executing program 2 (id=1065): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000900200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) kernel console output (not intermixed with test programs): ve [ 137.772168][ T7556] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.799384][ T7558] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 137.812073][ T7558] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 137.823321][ T7558] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 137.910575][ T7556] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.962276][ T7403] hsr_slave_0: entered promiscuous mode [ 137.984303][ T7403] hsr_slave_1: entered promiscuous mode [ 137.990874][ T7403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.998598][ T7403] Cannot create hsr debugfs directory [ 138.036760][ T7556] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.112069][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.121007][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.154839][ T7556] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.379926][ T6032] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.420938][ T6032] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.478063][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.549187][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.654376][ T7581] netlink: 'syz.4.486': attribute type 21 has an invalid length. [ 138.665875][ T7581] netlink: 128 bytes leftover after parsing attributes in process `syz.4.486'. [ 138.690939][ T7581] netlink: 'syz.4.486': attribute type 5 has an invalid length. [ 138.700751][ T7581] netlink: 'syz.4.486': attribute type 6 has an invalid length. [ 138.712148][ T7581] netlink: 3 bytes leftover after parsing attributes in process `syz.4.486'. [ 138.773813][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'. [ 138.798205][ T7586] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.488'. [ 138.842816][ T7588] FAULT_INJECTION: forcing a failure. [ 138.842816][ T7588] name failslab, interval 1, probability 0, space 0, times 0 [ 138.867220][ T7588] CPU: 0 UID: 0 PID: 7588 Comm: syz.4.489 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 138.867252][ T7588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.867264][ T7588] Call Trace: [ 138.867272][ T7588] [ 138.867281][ T7588] dump_stack_lvl+0x189/0x250 [ 138.867311][ T7588] ? __pfx____ratelimit+0x10/0x10 [ 138.867338][ T7588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.867363][ T7588] ? __pfx__printk+0x10/0x10 [ 138.867399][ T7588] ? ref_tracker_alloc+0x318/0x460 [ 138.867422][ T7588] should_fail_ex+0x414/0x560 [ 138.867458][ T7588] should_failslab+0xa8/0x100 [ 138.867489][ T7588] kmem_cache_alloc_noprof+0x73/0x3c0 [ 138.867513][ T7588] ? skb_clone+0x212/0x3a0 [ 138.867539][ T7588] skb_clone+0x212/0x3a0 [ 138.867571][ T7588] __netlink_deliver_tap+0x404/0x850 [ 138.867614][ T7588] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.867644][ T7588] netlink_deliver_tap+0x19c/0x1b0 [ 138.867673][ T7588] netlink_unicast+0x72f/0x8d0 [ 138.867711][ T7588] netlink_sendmsg+0x805/0xb30 [ 138.867750][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.867782][ T7588] ? aa_sock_msg_perm+0x94/0x160 [ 138.867816][ T7588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 138.867834][ T7588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.867865][ T7588] __sock_sendmsg+0x219/0x270 [ 138.867894][ T7588] ____sys_sendmsg+0x505/0x830 [ 138.867934][ T7588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.867977][ T7588] ? import_iovec+0x74/0xa0 [ 138.868007][ T7588] ___sys_sendmsg+0x21f/0x2a0 [ 138.868042][ T7588] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.868118][ T7588] ? __fget_files+0x2a/0x420 [ 138.868146][ T7588] ? __fget_files+0x3a0/0x420 [ 138.868206][ T7588] __x64_sys_sendmsg+0x19b/0x260 [ 138.868231][ T7588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.868277][ T7588] ? __pfx_ksys_write+0x10/0x10 [ 138.868300][ T7588] ? rcu_is_watching+0x15/0xb0 [ 138.868332][ T7588] ? do_syscall_64+0xbe/0x3b0 [ 138.868365][ T7588] do_syscall_64+0xfa/0x3b0 [ 138.868393][ T7588] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.868420][ T7588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.868441][ T7588] ? clear_bhb_loop+0x60/0xb0 [ 138.868468][ T7588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.868489][ T7588] RIP: 0033:0x7f930678e929 [ 138.868508][ T7588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.868525][ T7588] RSP: 002b:00007f93045f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.868557][ T7588] RAX: ffffffffffffffda RBX: 00007f93069b5fa0 RCX: 00007f930678e929 [ 138.868572][ T7588] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 138.868586][ T7588] RBP: 00007f93045f6090 R08: 0000000000000000 R09: 0000000000000000 [ 138.868599][ T7588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.868611][ T7588] R13: 0000000000000000 R14: 00007f93069b5fa0 R15: 00007ffc572f5328 [ 138.868646][ T7588] [ 138.914237][ T7403] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.998709][ T5851] Bluetooth: hci4: command tx timeout [ 139.037900][ T7590] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 139.226427][ T7592] bond0: Device is already in use. [ 139.305608][ T7403] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 139.361254][ T7403] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 139.397388][ T7403] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 139.729756][ T7403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.778209][ T7403] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.796333][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.803701][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.820335][ T7617] sctp: [Deprecated]: syz.1.496 (pid 7617) Use of int in max_burst socket option deprecated. [ 139.820335][ T7617] Use struct sctp_assoc_value instead [ 139.869347][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.876580][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.966874][ T7622] FAULT_INJECTION: forcing a failure. [ 139.966874][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 139.993133][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.1.497 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 139.993164][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.993177][ T7622] Call Trace: [ 139.993185][ T7622] [ 139.993194][ T7622] dump_stack_lvl+0x189/0x250 [ 139.993225][ T7622] ? __pfx____ratelimit+0x10/0x10 [ 139.993252][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.993278][ T7622] ? __pfx__printk+0x10/0x10 [ 139.993334][ T7622] ? ref_tracker_alloc+0x318/0x460 [ 139.993358][ T7622] should_fail_ex+0x414/0x560 [ 139.993408][ T7622] should_failslab+0xa8/0x100 [ 139.993440][ T7622] kmem_cache_alloc_noprof+0x73/0x3c0 [ 139.993465][ T7622] ? skb_clone+0x212/0x3a0 [ 139.993491][ T7622] skb_clone+0x212/0x3a0 [ 139.993516][ T7622] __netlink_deliver_tap+0x404/0x850 [ 139.993559][ T7622] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.993589][ T7622] netlink_deliver_tap+0x19c/0x1b0 [ 139.993619][ T7622] netlink_unicast+0x72f/0x8d0 [ 139.993664][ T7622] netlink_sendmsg+0x805/0xb30 [ 139.993709][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.993740][ T7622] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.993765][ T7622] ? aa_sock_msg_perm+0x94/0x160 [ 139.993799][ T7622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.993818][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.993848][ T7622] __sock_sendmsg+0x219/0x270 [ 139.993877][ T7622] ____sys_sendmsg+0x505/0x830 [ 139.993917][ T7622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.993962][ T7622] ? import_iovec+0x74/0xa0 [ 139.993991][ T7622] ___sys_sendmsg+0x21f/0x2a0 [ 139.994027][ T7622] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.994103][ T7622] ? __fget_files+0x2a/0x420 [ 139.994130][ T7622] ? __fget_files+0x3a0/0x420 [ 139.994171][ T7622] __x64_sys_sendmsg+0x19b/0x260 [ 139.994194][ T7622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.994239][ T7622] ? __pfx_ksys_write+0x10/0x10 [ 139.994261][ T7622] ? rcu_is_watching+0x15/0xb0 [ 139.994292][ T7622] ? do_syscall_64+0xbe/0x3b0 [ 139.994324][ T7622] do_syscall_64+0xfa/0x3b0 [ 139.994351][ T7622] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.994376][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.994398][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 139.994424][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.994444][ T7622] RIP: 0033:0x7f57a7d8e929 [ 139.994462][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.994479][ T7622] RSP: 002b:00007f57a8b40038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.994501][ T7622] RAX: ffffffffffffffda RBX: 00007f57a7fb5fa0 RCX: 00007f57a7d8e929 [ 139.994516][ T7622] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 139.994529][ T7622] RBP: 00007f57a8b40090 R08: 0000000000000000 R09: 0000000000000000 [ 139.994541][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.994553][ T7622] R13: 0000000000000000 R14: 00007f57a7fb5fa0 R15: 00007fffd530d098 [ 139.994586][ T7622] [ 140.346217][ T7403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.485830][ T7604] geneve0: entered promiscuous mode [ 140.499211][ T7604] geneve0: entered allmulticast mode [ 140.575568][ T7403] veth0_vlan: entered promiscuous mode [ 140.595272][ T7403] veth1_vlan: entered promiscuous mode [ 141.063887][ T7642] netlink: 'syz.4.502': attribute type 11 has an invalid length. [ 141.071900][ T5851] Bluetooth: hci4: command tx timeout [ 141.284886][ T7403] veth0_macvtap: entered promiscuous mode [ 141.332591][ T7403] veth1_macvtap: entered promiscuous mode [ 141.422924][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.458624][ T7403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.519797][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.544565][ T7663] FAULT_INJECTION: forcing a failure. [ 141.544565][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 141.559520][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.572912][ T7663] CPU: 1 UID: 0 PID: 7663 Comm: syz.4.509 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 141.572941][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.572954][ T7663] Call Trace: [ 141.572975][ T7663] [ 141.572984][ T7663] dump_stack_lvl+0x189/0x250 [ 141.573016][ T7663] ? __pfx____ratelimit+0x10/0x10 [ 141.573043][ T7663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.573069][ T7663] ? __pfx__printk+0x10/0x10 [ 141.573101][ T7663] ? __pfx___might_resched+0x10/0x10 [ 141.573126][ T7663] ? fs_reclaim_acquire+0x7d/0x100 [ 141.573163][ T7663] should_fail_ex+0x414/0x560 [ 141.573200][ T7663] should_failslab+0xa8/0x100 [ 141.573231][ T7663] __kmalloc_noprof+0xcb/0x4f0 [ 141.573256][ T7663] ? ethnl_default_start+0x16f/0x3f0 [ 141.573300][ T7663] ethnl_default_start+0x16f/0x3f0 [ 141.573339][ T7663] genl_start+0x4c3/0x6c0 [ 141.573370][ T7663] __netlink_dump_start+0x469/0x7e0 [ 141.573408][ T7663] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 141.573434][ T7663] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 141.573455][ T7663] ? genl_get_cmd+0x67f/0x910 [ 141.573481][ T7663] ? __pfx_genl_start+0x10/0x10 [ 141.573498][ T7663] ? __pfx_genl_dumpit+0x10/0x10 [ 141.573517][ T7663] ? __pfx_genl_done+0x10/0x10 [ 141.573553][ T7663] genl_rcv_msg+0x5da/0x790 [ 141.573583][ T7663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.573601][ T7663] ? ref_tracker_free+0x63a/0x7d0 [ 141.573618][ T7663] ? __pfx_ethnl_default_start+0x10/0x10 [ 141.573646][ T7663] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 141.573675][ T7663] ? __pfx_ethnl_default_done+0x10/0x10 [ 141.573706][ T7663] ? __pfx_ref_tracker_free+0x10/0x10 [ 141.573738][ T7663] netlink_rcv_skb+0x205/0x470 [ 141.573767][ T7663] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.573790][ T7663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.573838][ T7663] ? down_read+0x1ad/0x2e0 [ 141.573871][ T7663] genl_rcv+0x28/0x40 [ 141.573890][ T7663] netlink_unicast+0x758/0x8d0 [ 141.573928][ T7663] netlink_sendmsg+0x805/0xb30 [ 141.573974][ T7663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.574007][ T7663] ? aa_sock_msg_perm+0x94/0x160 [ 141.574041][ T7663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.574060][ T7663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.574090][ T7663] __sock_sendmsg+0x219/0x270 [ 141.574120][ T7663] ____sys_sendmsg+0x505/0x830 [ 141.574159][ T7663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.574203][ T7663] ? import_iovec+0x74/0xa0 [ 141.574233][ T7663] ___sys_sendmsg+0x21f/0x2a0 [ 141.574269][ T7663] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.574369][ T7663] ? __fget_files+0x2a/0x420 [ 141.574398][ T7663] ? __fget_files+0x3a0/0x420 [ 141.574440][ T7663] __x64_sys_sendmsg+0x19b/0x260 [ 141.574464][ T7663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.574510][ T7663] ? __pfx_ksys_write+0x10/0x10 [ 141.574534][ T7663] ? rcu_is_watching+0x15/0xb0 [ 141.574565][ T7663] ? do_syscall_64+0xbe/0x3b0 [ 141.574599][ T7663] do_syscall_64+0xfa/0x3b0 [ 141.574626][ T7663] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.574653][ T7663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.574674][ T7663] ? clear_bhb_loop+0x60/0xb0 [ 141.574701][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.574722][ T7663] RIP: 0033:0x7f930678e929 [ 141.574741][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.574759][ T7663] RSP: 002b:00007f93045f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.574782][ T7663] RAX: ffffffffffffffda RBX: 00007f93069b5fa0 RCX: 00007f930678e929 [ 141.574797][ T7663] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.574811][ T7663] RBP: 00007f93045f6090 R08: 0000000000000000 R09: 0000000000000000 [ 141.574824][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.574837][ T7663] R13: 0000000000000000 R14: 00007f93069b5fa0 R15: 00007ffc572f5328 [ 141.574871][ T7663] [ 142.043860][ T7665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.060693][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.135905][ T7676] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 142.161440][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.226043][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.233951][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.283626][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.292214][ T7674] __nla_validate_parse: 7 callbacks suppressed [ 142.292232][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 142.335918][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.487353][ T7687] FAULT_INJECTION: forcing a failure. [ 142.487353][ T7687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.537657][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz.4.516 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 142.537689][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.537702][ T7687] Call Trace: [ 142.537710][ T7687] [ 142.537720][ T7687] dump_stack_lvl+0x189/0x250 [ 142.537752][ T7687] ? __pfx____ratelimit+0x10/0x10 [ 142.537780][ T7687] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.537807][ T7687] ? __pfx__printk+0x10/0x10 [ 142.537837][ T7687] ? __might_fault+0xb0/0x130 [ 142.537877][ T7687] should_fail_ex+0x414/0x560 [ 142.537914][ T7687] _copy_from_user+0x2d/0xb0 [ 142.537941][ T7687] ___sys_sendmsg+0x158/0x2a0 [ 142.537978][ T7687] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.538053][ T7687] ? __fget_files+0x2a/0x420 [ 142.538082][ T7687] ? __fget_files+0x3a0/0x420 [ 142.538124][ T7687] __x64_sys_sendmsg+0x19b/0x260 [ 142.538149][ T7687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.538193][ T7687] ? __pfx_ksys_write+0x10/0x10 [ 142.538216][ T7687] ? rcu_is_watching+0x15/0xb0 [ 142.538248][ T7687] ? do_syscall_64+0xbe/0x3b0 [ 142.538281][ T7687] do_syscall_64+0xfa/0x3b0 [ 142.538307][ T7687] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.538334][ T7687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.538356][ T7687] ? clear_bhb_loop+0x60/0xb0 [ 142.538382][ T7687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.538409][ T7687] RIP: 0033:0x7f930678e929 [ 142.538429][ T7687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.538446][ T7687] RSP: 002b:00007f93045f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.538469][ T7687] RAX: ffffffffffffffda RBX: 00007f93069b5fa0 RCX: 00007f930678e929 [ 142.538485][ T7687] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 142.538498][ T7687] RBP: 00007f93045f6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.538511][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.538523][ T7687] R13: 0000000000000000 R14: 00007f93069b5fa0 R15: 00007ffc572f5328 [ 142.538557][ T7687] [ 142.808437][ T7691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.518'. [ 143.031045][ T7697] netlink: 36 bytes leftover after parsing attributes in process `syz.4.520'. [ 143.321809][ T7710] IPv6: NLM_F_REPLACE set, but no existing node found! [ 143.810954][ T7726] netlink: 60 bytes leftover after parsing attributes in process `syz.1.530'. [ 143.916320][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.531'. [ 143.974422][ T7729] netlink: 184 bytes leftover after parsing attributes in process `syz.4.531'. [ 144.123476][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 144.259063][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 144.273646][ T7746] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.283138][ T7748] netlink: 68 bytes leftover after parsing attributes in process `syz.0.540'. [ 144.289822][ T7746] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 144.313621][ T7746] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 144.317872][ T7749] netlink: 52 bytes leftover after parsing attributes in process `syz.1.538'. [ 144.354145][ T7745] macvtap2: entered promiscuous mode [ 144.359822][ T7745] macvtap2: entered allmulticast mode [ 144.502235][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.597921][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.693466][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.841074][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.163782][ T6026] bridge_slave_1: left allmulticast mode [ 145.173286][ T6026] bridge_slave_1: left promiscuous mode [ 145.192121][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.222442][ T6026] bridge_slave_0: left allmulticast mode [ 145.243177][ T6026] bridge_slave_0: left promiscuous mode [ 145.262355][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.281185][ T7783] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 145.362599][ T7780] xt_CT: No such helper "pptp" [ 145.546267][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.557862][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.565552][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.573993][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.593137][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.755916][ T7801] netlink: 'syz.0.554': attribute type 4 has an invalid length. [ 145.972466][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.984259][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.997761][ T6026] bond0 (unregistering): Released all slaves [ 146.119029][ T7801] : renamed from bond0 (while UP) [ 146.369400][ T7812] macvtap2: entered promiscuous mode [ 146.377390][ T7812] macvtap2: entered allmulticast mode [ 146.671125][ T6026] hsr_slave_0: left promiscuous mode [ 146.690875][ T6026] hsr_slave_1: left promiscuous mode [ 146.705437][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.715476][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.728212][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.735720][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.759731][ T6026] veth1_macvtap: left promiscuous mode [ 146.766536][ T6026] veth0_macvtap: left promiscuous mode [ 146.772547][ T6026] veth1_vlan: left promiscuous mode [ 146.778246][ T6026] veth0_vlan: left promiscuous mode [ 147.255532][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 147.298505][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 147.629859][ T5851] Bluetooth: hci4: command tx timeout [ 147.836486][ T7835] tap0: tun_chr_ioctl cmd 1074025676 [ 147.844631][ T7835] tap0: owner set to 0 [ 147.988106][ T7844] openvswitch: netlink: Missing valid actions attribute. [ 147.996043][ T7844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.046428][ T30] audit: type=1107 audit(1751664202.466:2): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 148.107328][ T7852] __nla_validate_parse: 12 callbacks suppressed [ 148.107348][ T7852] netlink: 92 bytes leftover after parsing attributes in process `syz.4.568'. [ 149.056801][ T7792] chnl_net:caif_netlink_parms(): no params data found [ 149.291387][ T7883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.574'. [ 149.473290][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.485614][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.493969][ T7792] bridge_slave_0: entered allmulticast mode [ 149.510089][ T7792] bridge_slave_0: entered promiscuous mode [ 149.526049][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.547265][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.554540][ T7792] bridge_slave_1: entered allmulticast mode [ 149.566297][ T7792] bridge_slave_1: entered promiscuous mode [ 149.623828][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.579'. [ 149.636556][ T7899] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 149.660193][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 149.684097][ T7899] C: renamed from team_slave_0 (while UP) [ 149.703174][ T7899] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 149.707178][ T5851] Bluetooth: hci4: command tx timeout [ 149.715218][ T7899] netlink: 152 bytes leftover after parsing attributes in process `syz.1.579'. [ 149.728716][ T7899] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 149.772895][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.777580][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 149.801523][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.906483][ T7792] team0: Port device team_slave_0 added [ 149.922982][ T7792] team0: Port device team_slave_1 added [ 150.024526][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.034646][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.073863][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.101768][ T7909] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.119361][ T7909] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 150.131981][ T7909] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 150.156474][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.163788][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.190246][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.202684][ T7913] !: renamed from dummy0 (while UP) [ 150.293671][ T7913] netlink: 'syz.4.584': attribute type 16 has an invalid length. [ 150.321226][ T7792] hsr_slave_0: entered promiscuous mode [ 150.331507][ T7913] netlink: 'syz.4.584': attribute type 17 has an invalid length. [ 150.343285][ T7792] hsr_slave_1: entered promiscuous mode [ 150.363474][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.375734][ T7792] Cannot create hsr debugfs directory [ 150.924879][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.933877][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.059649][ T7943] FAULT_INJECTION: forcing a failure. [ 151.059649][ T7943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.076065][ T7943] CPU: 0 UID: 0 PID: 7943 Comm: syz.0.592 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 151.076097][ T7943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.076110][ T7943] Call Trace: [ 151.076118][ T7943] [ 151.076128][ T7943] dump_stack_lvl+0x189/0x250 [ 151.076160][ T7943] ? __pfx____ratelimit+0x10/0x10 [ 151.076188][ T7943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.076215][ T7943] ? __pfx__printk+0x10/0x10 [ 151.076246][ T7943] ? __might_fault+0xb0/0x130 [ 151.076286][ T7943] should_fail_ex+0x414/0x560 [ 151.076324][ T7943] _copy_from_iter+0x1db/0x16f0 [ 151.076352][ T7943] ? rcu_is_watching+0x15/0xb0 [ 151.076387][ T7943] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 151.076416][ T7943] ? __pfx__copy_from_iter+0x10/0x10 [ 151.076441][ T7943] ? __build_skb_around+0x257/0x3e0 [ 151.076477][ T7943] ? netlink_sendmsg+0x642/0xb30 [ 151.076505][ T7943] ? skb_put+0x11b/0x210 [ 151.076541][ T7943] netlink_sendmsg+0x6b2/0xb30 [ 151.076581][ T7943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.076615][ T7943] ? aa_sock_msg_perm+0x94/0x160 [ 151.076650][ T7943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.076669][ T7943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.076699][ T7943] __sock_sendmsg+0x219/0x270 [ 151.076729][ T7943] ____sys_sendmsg+0x505/0x830 [ 151.076769][ T7943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.076814][ T7943] ? import_iovec+0x74/0xa0 [ 151.076844][ T7943] ___sys_sendmsg+0x21f/0x2a0 [ 151.076881][ T7943] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.076966][ T7943] ? __fget_files+0x2a/0x420 [ 151.076997][ T7943] ? __fget_files+0x3a0/0x420 [ 151.077036][ T7943] __x64_sys_sendmsg+0x19b/0x260 [ 151.077058][ T7943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.077099][ T7943] ? __pfx_ksys_write+0x10/0x10 [ 151.077121][ T7943] ? rcu_is_watching+0x15/0xb0 [ 151.077151][ T7943] ? do_syscall_64+0xbe/0x3b0 [ 151.077183][ T7943] do_syscall_64+0xfa/0x3b0 [ 151.077209][ T7943] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.077235][ T7943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.077256][ T7943] ? clear_bhb_loop+0x60/0xb0 [ 151.077281][ T7943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.077301][ T7943] RIP: 0033:0x7f160098e929 [ 151.077319][ T7943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.077336][ T7943] RSP: 002b:00007f160178f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.077358][ T7943] RAX: ffffffffffffffda RBX: 00007f1600bb5fa0 RCX: 00007f160098e929 [ 151.077378][ T7943] RDX: 00000000000008c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 151.077391][ T7943] RBP: 00007f160178f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.077403][ T7943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.077415][ T7943] R13: 0000000000000000 R14: 00007f1600bb5fa0 R15: 00007fff27aa3418 [ 151.077448][ T7943] [ 151.787091][ T5851] Bluetooth: hci4: command tx timeout [ 151.825518][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.424826][ T30] audit: type=1800 audit(1751664206.866:3): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.591" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 152.425295][ T7940] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 152.466043][ T7940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 152.505798][ T7940] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.514981][ T6023] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.556104][ T6023] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.609115][ T6032] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.627157][ T6026] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.636145][ T7961] netlink: 144 bytes leftover after parsing attributes in process `syz.2.595'. [ 152.876398][ T7976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 153.288155][ T7998] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.311554][ T7998] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 153.325481][ T7998] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 153.387670][ T8004] Cannot find add_set index 2 as target [ 153.563806][ T8009] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 153.578789][ T8009] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 153.597453][ T8009] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 153.685639][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.617'. [ 153.698210][ T7792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.740384][ T7792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.768645][ T7792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.797764][ T7792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.830446][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 153.869300][ T5851] Bluetooth: hci4: command tx timeout [ 153.884664][ T8033] netlink: 52 bytes leftover after parsing attributes in process `syz.4.618'. [ 153.898487][ T8024] macvtap1: entered promiscuous mode [ 153.903839][ T8024] syz_tun: entered promiscuous mode [ 153.909917][ T8024] macvtap1: entered allmulticast mode [ 153.915343][ T8024] syz_tun: entered allmulticast mode [ 154.120205][ T8044] netlink: 48 bytes leftover after parsing attributes in process `syz.0.623'. [ 154.453403][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.512779][ T7792] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.583677][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.591001][ T6031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.630192][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.637430][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.858944][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 154.879896][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 155.126955][ T8086] pim6reg: entered allmulticast mode [ 155.201928][ T8091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.640'. [ 155.243665][ T8091] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 155.276888][ T8091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.640'. [ 155.442228][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 155.500982][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.642021][ T7792] veth0_vlan: entered promiscuous mode [ 155.676178][ T7792] veth1_vlan: entered promiscuous mode [ 155.715325][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'. [ 155.764491][ T7792] veth0_macvtap: entered promiscuous mode [ 155.814788][ T7792] veth1_macvtap: entered promiscuous mode [ 155.879174][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.906637][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.942649][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.962768][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.991742][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.006217][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.145161][ T6031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.164620][ T6031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.212146][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.222166][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.476877][ T8132] vlan2: entered promiscuous mode [ 156.486333][ T8132] bridge0: entered promiscuous mode [ 156.494891][ T8132] vlan2: entered allmulticast mode [ 156.500336][ T8132] bridge0: entered allmulticast mode [ 157.197731][ T8161] netlink: 'syz.1.663': attribute type 4 has an invalid length. [ 157.232818][ T8161] : renamed from bond0 (while UP) [ 157.379994][ T6023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.703194][ T6023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.987662][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.999317][ T6023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.009935][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 158.018663][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 158.036021][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 158.044026][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 158.171716][ T6023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.449874][ T8183] IPv6: addrconf: prefix option has invalid lifetime [ 158.462864][ T6023] bridge_slave_1: left allmulticast mode [ 158.469696][ T6023] bridge_slave_1: left promiscuous mode [ 158.476146][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.503934][ T6023] bridge_slave_0: left allmulticast mode [ 158.512485][ T6023] bridge_slave_0: left promiscuous mode [ 158.518923][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.700508][ T8201] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 159.000537][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.011576][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.022434][ T6023] bond0 (unregistering): Released all slaves [ 159.345017][ T8173] chnl_net:caif_netlink_parms(): no params data found [ 159.627908][ T8219] __nla_validate_parse: 5 callbacks suppressed [ 159.627927][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 159.756601][ T8222] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 159.825785][ T6023] hsr_slave_0: left promiscuous mode [ 159.855057][ T6023] hsr_slave_1: left promiscuous mode [ 159.879320][ T8226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.894037][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.907881][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.928203][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.939981][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.987729][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.076006][ T6023] veth1_macvtap: left promiscuous mode [ 160.093172][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.094769][ T6023] veth0_macvtap: left promiscuous mode [ 160.117583][ T5851] Bluetooth: hci4: command tx timeout [ 160.124158][ T6023] veth1_vlan: left promiscuous mode [ 160.141875][ T6023] veth0_vlan: left promiscuous mode [ 161.475844][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 161.510482][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 161.922042][ T8173] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.934888][ T8173] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.943381][ T8173] bridge_slave_0: entered allmulticast mode [ 161.960706][ T8173] bridge_slave_0: entered promiscuous mode [ 161.993730][ T8173] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.001840][ T8173] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.009509][ T8173] bridge_slave_1: entered allmulticast mode [ 162.017755][ T8173] bridge_slave_1: entered promiscuous mode [ 162.171312][ T8173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.187747][ T5851] Bluetooth: hci4: command tx timeout [ 162.209813][ T8173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.226077][ T8256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.233424][ T8256] IPv6: NLM_F_CREATE should be set when creating new route [ 162.556642][ T8173] team0: Port device team_slave_0 added [ 162.584607][ T8173] team0: Port device team_slave_1 added [ 162.724839][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.740983][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.780478][ T8173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.808518][ T8173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.836663][ T8173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.866455][ T8264] FAULT_INJECTION: forcing a failure. [ 162.866455][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.888642][ T8264] CPU: 0 UID: 0 PID: 8264 Comm: syz.4.681 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 162.888671][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.888683][ T8264] Call Trace: [ 162.888691][ T8264] [ 162.888699][ T8264] dump_stack_lvl+0x189/0x250 [ 162.888728][ T8264] ? __pfx____ratelimit+0x10/0x10 [ 162.888755][ T8264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.888781][ T8264] ? __pfx__printk+0x10/0x10 [ 162.888822][ T8264] should_fail_ex+0x414/0x560 [ 162.888859][ T8264] _copy_to_user+0x31/0xb0 [ 162.888888][ T8264] simple_read_from_buffer+0xe1/0x170 [ 162.888921][ T8264] proc_fail_nth_read+0x1df/0x250 [ 162.888955][ T8264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.888988][ T8264] ? rw_verify_area+0x258/0x650 [ 162.889011][ T8264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.889041][ T8264] vfs_read+0x200/0x980 [ 162.889078][ T8264] ? __pfx___mutex_lock+0x10/0x10 [ 162.889106][ T8264] ? __pfx_vfs_read+0x10/0x10 [ 162.889131][ T8264] ? __fget_files+0x2a/0x420 [ 162.889164][ T8264] ? __fget_files+0x3a0/0x420 [ 162.889192][ T8264] ? __fget_files+0x2a/0x420 [ 162.889231][ T8264] ksys_read+0x145/0x250 [ 162.889259][ T8264] ? __pfx_ksys_read+0x10/0x10 [ 162.889280][ T8264] ? rcu_is_watching+0x15/0xb0 [ 162.889311][ T8264] ? do_syscall_64+0xbe/0x3b0 [ 162.889343][ T8264] do_syscall_64+0xfa/0x3b0 [ 162.889368][ T8264] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.889392][ T8264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.889412][ T8264] ? clear_bhb_loop+0x60/0xb0 [ 162.889437][ T8264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.889458][ T8264] RIP: 0033:0x7f930678d33c [ 162.889476][ T8264] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.889494][ T8264] RSP: 002b:00007f93045d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.889515][ T8264] RAX: ffffffffffffffda RBX: 00007f93069b6080 RCX: 00007f930678d33c [ 162.889530][ T8264] RDX: 000000000000000f RSI: 00007f93045d50a0 RDI: 0000000000000008 [ 162.889542][ T8264] RBP: 00007f93045d5090 R08: 0000000000000000 R09: 0000000000000000 [ 162.889553][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.889564][ T8264] R13: 0000000000000000 R14: 00007f93069b6080 R15: 00007ffc572f5328 [ 162.889597][ T8264] [ 162.910746][ T8173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.335068][ T8173] hsr_slave_0: entered promiscuous mode [ 163.358395][ T8173] hsr_slave_1: entered promiscuous mode [ 163.364906][ T8173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.385827][ T8173] Cannot create hsr debugfs directory [ 163.411769][ T8270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.682'. [ 163.415399][ T8274] netlink: 'syz.1.683': attribute type 21 has an invalid length. [ 163.441994][ T8274] netlink: 128 bytes leftover after parsing attributes in process `syz.1.683'. [ 163.484676][ T8274] netlink: 'syz.1.683': attribute type 5 has an invalid length. [ 163.496109][ T8274] netlink: 'syz.1.683': attribute type 6 has an invalid length. [ 163.504677][ T8274] netlink: 3 bytes leftover after parsing attributes in process `syz.1.683'. [ 164.110288][ T8297] netlink: 36 bytes leftover after parsing attributes in process `syz.0.690'. [ 164.152963][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 164.270806][ T5851] Bluetooth: hci4: command tx timeout [ 164.756079][ T8320] netlink: 'syz.2.696': attribute type 21 has an invalid length. [ 164.780890][ T8320] netlink: 128 bytes leftover after parsing attributes in process `syz.2.696'. [ 164.807185][ T8320] netlink: 'syz.2.696': attribute type 5 has an invalid length. [ 164.814879][ T8320] netlink: 'syz.2.696': attribute type 6 has an invalid length. [ 164.823118][ T8320] netlink: 3 bytes leftover after parsing attributes in process `syz.2.696'. [ 164.835732][ T8173] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.961249][ T8173] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.981534][ T8173] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.010160][ T8173] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.461279][ T8352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 165.570607][ T8173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.642971][ T8173] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.668023][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 165.688755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.695930][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.751897][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.759253][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.204977][ T8385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.707'. [ 166.217160][ T8384] netlink: 'syz.1.708': attribute type 21 has an invalid length. [ 166.226050][ T8384] netlink: 128 bytes leftover after parsing attributes in process `syz.1.708'. [ 166.238930][ T8385] netlink: 'syz.4.707': attribute type 58 has an invalid length. [ 166.246904][ T8384] netlink: 'syz.1.708': attribute type 5 has an invalid length. [ 166.258800][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'. [ 166.275931][ T8384] netlink: 'syz.1.708': attribute type 6 has an invalid length. [ 166.286756][ T8384] netlink: 3 bytes leftover after parsing attributes in process `syz.1.708'. [ 166.348012][ T5851] Bluetooth: hci4: command tx timeout [ 166.403196][ T8393] FAULT_INJECTION: forcing a failure. [ 166.403196][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 166.436690][ T8393] CPU: 1 UID: 0 PID: 8393 Comm: syz.2.710 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 166.436721][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.436734][ T8393] Call Trace: [ 166.436742][ T8393] [ 166.436751][ T8393] dump_stack_lvl+0x189/0x250 [ 166.436784][ T8393] ? __pfx____ratelimit+0x10/0x10 [ 166.436812][ T8393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.436837][ T8393] ? __pfx__printk+0x10/0x10 [ 166.436873][ T8393] ? __pfx___might_resched+0x10/0x10 [ 166.436896][ T8393] ? fs_reclaim_acquire+0x7d/0x100 [ 166.436933][ T8393] should_fail_ex+0x414/0x560 [ 166.436974][ T8393] should_failslab+0xa8/0x100 [ 166.437002][ T8393] __kmalloc_cache_noprof+0x70/0x3d0 [ 166.437028][ T8393] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 166.437063][ T8393] __xdp_reg_mem_model+0x1d8/0x5a0 [ 166.437100][ T8393] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 166.437134][ T8393] ? page_pool_create_percpu+0x800/0xbe0 [ 166.437163][ T8393] xdp_reg_mem_model+0x22/0x40 [ 166.437194][ T8393] bpf_test_run_xdp_live+0x215/0x1b10 [ 166.437229][ T8393] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 166.437265][ T8393] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.437305][ T8393] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 166.437333][ T8393] ? 0xffffffffa0205540 [ 166.437353][ T8393] ? 0xffffffffa0205540 [ 166.437422][ T8393] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 166.437460][ T8393] ? _copy_from_user+0x94/0xb0 [ 166.437487][ T8393] ? bpf_test_init+0x133/0x170 [ 166.437511][ T8393] ? xdp_convert_md_to_buff+0x5b/0x330 [ 166.437542][ T8393] bpf_prog_test_run_xdp+0x713/0x1000 [ 166.437588][ T8393] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 166.437622][ T8393] ? __fget_files+0x2a/0x420 [ 166.437666][ T8393] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 166.437696][ T8393] bpf_prog_test_run+0x2c4/0x340 [ 166.437722][ T8393] __sys_bpf+0x4a4/0x860 [ 166.437745][ T8393] ? __pfx___sys_bpf+0x10/0x10 [ 166.437780][ T8393] ? ksys_write+0x22a/0x250 [ 166.437807][ T8393] ? __pfx_ksys_write+0x10/0x10 [ 166.437838][ T8393] ? rcu_is_watching+0x15/0xb0 [ 166.437881][ T8393] __x64_sys_bpf+0x7c/0x90 [ 166.437912][ T8393] do_syscall_64+0xfa/0x3b0 [ 166.437939][ T8393] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.437965][ T8393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.437986][ T8393] ? clear_bhb_loop+0x60/0xb0 [ 166.438011][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.438032][ T8393] RIP: 0033:0x7f6172b8e929 [ 166.438050][ T8393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.438084][ T8393] RSP: 002b:00007f61739f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 166.438108][ T8393] RAX: ffffffffffffffda RBX: 00007f6172db5fa0 RCX: 00007f6172b8e929 [ 166.438124][ T8393] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 166.438137][ T8393] RBP: 00007f61739f9090 R08: 0000000000000000 R09: 0000000000000000 [ 166.438150][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.438162][ T8393] R13: 0000000000000000 R14: 00007f6172db5fa0 R15: 00007ffee7fdba18 [ 166.438207][ T8393] [ 166.556871][ T8173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.951617][ T8173] veth0_vlan: entered promiscuous mode [ 166.975410][ T8173] veth1_vlan: entered promiscuous mode [ 167.108525][ T8173] veth0_macvtap: entered promiscuous mode [ 167.146014][ T8173] veth1_macvtap: entered promiscuous mode [ 167.184031][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.255001][ T8173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.307839][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.339287][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.358168][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.406823][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.440431][ T8422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 167.472131][ T8422] 8021q: VLANs not supported on nlmon0 [ 167.511906][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.534599][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.604786][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.621096][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.784261][ T8433] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 167.799075][ T8433] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 167.810013][ T8433] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 168.172813][ T8449] netlink: 152 bytes leftover after parsing attributes in process `syz.2.729'. [ 168.224501][ T8449] : renamed from bond0 (while UP) [ 168.505782][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.695529][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.793639][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.850929][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.996886][ T59] bridge_slave_1: left allmulticast mode [ 169.003103][ T59] bridge_slave_1: left promiscuous mode [ 169.009280][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.020616][ T59] bridge_slave_0: left allmulticast mode [ 169.026297][ T59] bridge_slave_0: left promiscuous mode [ 169.032147][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.299454][ T8471] IPv6: addrconf: prefix option has invalid lifetime [ 169.919978][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.932760][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.942217][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.950727][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.960667][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.969705][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.977791][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.993139][ T59] bond0 (unregistering): Released all slaves [ 170.035832][ T8483] tipc: Started in network mode [ 170.044862][ T8483] tipc: Node identity ff, cluster identity 4711 [ 170.079141][ T8483] tipc: Enabling of bearer rejected, failed to enable media [ 170.339812][ T8507] geneve2: entered promiscuous mode [ 170.564526][ T59] hsr_slave_0: left promiscuous mode [ 170.583505][ T59] hsr_slave_1: left promiscuous mode [ 170.591433][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.602844][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.614262][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.631154][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.640282][ T8521] __nla_validate_parse: 1 callbacks suppressed [ 170.640302][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 170.671684][ T59] veth1_macvtap: left promiscuous mode [ 170.680072][ T59] veth0_macvtap: left promiscuous mode [ 170.685792][ T59] veth1_vlan: left promiscuous mode [ 170.692922][ T8524] netlink: 52 bytes leftover after parsing attributes in process `syz.4.750'. [ 170.694807][ T59] veth0_vlan: left promiscuous mode [ 171.420774][ T8541] nbd0: detected capacity change from 0 to 63 [ 171.449849][ T59] team0 (unregistering): Port device team_slave_1 removed [ 171.457194][ T5848] block nbd0: Wrong magic (0x96e1825a) [ 171.489594][ T59] team0 (unregistering): Port device team_slave_0 removed [ 172.027580][ T5848] Bluetooth: hci4: command tx timeout [ 172.102682][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 172.220842][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 172.523400][ T8573] FAULT_INJECTION: forcing a failure. [ 172.523400][ T8573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.572815][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.767'. [ 172.583105][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.1.766 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 172.583137][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.583151][ T8573] Call Trace: [ 172.583159][ T8573] [ 172.583169][ T8573] dump_stack_lvl+0x189/0x250 [ 172.583201][ T8573] ? __pfx____ratelimit+0x10/0x10 [ 172.583230][ T8573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.583258][ T8573] ? __pfx__printk+0x10/0x10 [ 172.583288][ T8573] ? __might_fault+0xb0/0x130 [ 172.583330][ T8573] should_fail_ex+0x414/0x560 [ 172.583367][ T8573] _copy_from_user+0x2d/0xb0 [ 172.583393][ T8573] kstrtouint_from_user+0xc4/0x170 [ 172.583417][ T8573] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 172.583456][ T8573] proc_fail_nth_write+0x88/0x240 [ 172.583487][ T8573] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.583525][ T8573] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.583558][ T8573] vfs_write+0x27e/0xa90 [ 172.583594][ T8573] ? __pfx_vfs_write+0x10/0x10 [ 172.583620][ T8573] ? __fget_files+0x2a/0x420 [ 172.583663][ T8573] ? __fget_files+0x3a0/0x420 [ 172.583690][ T8573] ? __fget_files+0x2a/0x420 [ 172.583728][ T8573] ksys_write+0x145/0x250 [ 172.583756][ T8573] ? __pfx_ksys_write+0x10/0x10 [ 172.583788][ T8573] ? do_syscall_64+0xbe/0x3b0 [ 172.583819][ T8573] do_syscall_64+0xfa/0x3b0 [ 172.583846][ T8573] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.583873][ T8573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.583895][ T8573] ? clear_bhb_loop+0x60/0xb0 [ 172.583923][ T8573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.583944][ T8573] RIP: 0033:0x7f57a7d8d3df [ 172.583964][ T8573] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 172.583983][ T8573] RSP: 002b:00007f57a8b1f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 172.584006][ T8573] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57a7d8d3df [ 172.584021][ T8573] RDX: 0000000000000001 RSI: 00007f57a8b1f0a0 RDI: 0000000000000005 [ 172.584035][ T8573] RBP: 00007f57a8b1f090 R08: 0000000000000000 R09: 0000000000000014 [ 172.584048][ T8573] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 172.584066][ T8573] R13: 0000000000000001 R14: 00007f57a7fb6080 R15: 00007fffd530d098 [ 172.584102][ T8573] [ 172.829101][ T8577] netlink: 52 bytes leftover after parsing attributes in process `syz.4.767'. [ 172.942012][ T8498] chnl_net:caif_netlink_parms(): no params data found [ 173.088139][ T8580] tipc: Can't bind to reserved service type 0 [ 173.112058][ T8590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'. [ 173.292504][ T8498] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.321474][ T8498] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.342872][ T8498] bridge_slave_0: entered allmulticast mode [ 173.365049][ T8498] bridge_slave_0: entered promiscuous mode [ 173.404825][ T8498] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.427974][ T8498] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.445763][ T8498] bridge_slave_1: entered allmulticast mode [ 173.475882][ T8498] bridge_slave_1: entered promiscuous mode [ 173.590059][ T8611] netlink: 144 bytes leftover after parsing attributes in process `syz.4.775'. [ 173.659437][ T8498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.690761][ T8498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.873390][ T8498] team0: Port device team_slave_0 added [ 173.891299][ T8498] team0: Port device team_slave_1 added [ 173.931016][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 173.982846][ T8632] netlink: 52 bytes leftover after parsing attributes in process `syz.2.781'. [ 174.051387][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.067845][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.108054][ T5848] Bluetooth: hci4: command tx timeout [ 174.130233][ T8498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.193440][ T8498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.213703][ T8498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.245283][ T8498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.414042][ T8498] hsr_slave_0: entered promiscuous mode [ 174.449375][ T8498] hsr_slave_1: entered promiscuous mode [ 174.455918][ T8498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.472217][ T8498] Cannot create hsr debugfs directory [ 174.985011][ T8678] validate_nla: 1 callbacks suppressed [ 174.985031][ T8678] netlink: 'syz.4.796': attribute type 10 has an invalid length. [ 175.043427][ T8678] team0: Port device geneve0 added [ 175.061864][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.088883][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.177584][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.199815][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.273303][ T8673] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 175.284288][ T8673] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 175.529964][ T8693] syz_tun (unregistering): left allmulticast mode [ 175.540042][ T8693] syz_tun (unregistering): left promiscuous mode [ 175.649094][ T8696] bridge1: entered promiscuous mode [ 175.656960][ T8696] bridge1: entered allmulticast mode [ 175.678308][ T8696] team0: Port device bridge1 added [ 175.883294][ T8697] team0 (unregistering): Port device team_slave_0 removed [ 175.892648][ T8697] team0 (unregistering): Port device team_slave_1 removed [ 175.919184][ T8697] team0 (unregistering): Port device geneve0 removed [ 175.938364][ T8697] team0 (unregistering): Port device bridge1 removed [ 175.983374][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.992234][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.005438][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.023107][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.075904][ T8498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.111742][ T8712] __nla_validate_parse: 11 callbacks suppressed [ 176.111763][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 176.163219][ T8714] netlink: 52 bytes leftover after parsing attributes in process `syz.2.806'. [ 176.168241][ T8498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.188069][ T5848] Bluetooth: hci4: command tx timeout [ 176.215324][ T8498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.260059][ T8498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.499984][ T8498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.541248][ T8498] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.574652][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.574653][ T8738] FAULT_INJECTION: forcing a failure. [ 176.574653][ T8738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.574685][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.0.813 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 176.574713][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.574726][ T8738] Call Trace: [ 176.574734][ T8738] [ 176.574744][ T8738] dump_stack_lvl+0x189/0x250 [ 176.574782][ T8738] ? __pfx____ratelimit+0x10/0x10 [ 176.574815][ T8738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.574844][ T8738] ? __pfx__printk+0x10/0x10 [ 176.574879][ T8738] ? __might_fault+0xb0/0x130 [ 176.574923][ T8738] should_fail_ex+0x414/0x560 [ 176.574966][ T8738] _copy_from_iter+0x1db/0x16f0 [ 176.574997][ T8738] ? rcu_is_watching+0x15/0xb0 [ 176.575030][ T8738] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 176.575062][ T8738] ? __pfx__copy_from_iter+0x10/0x10 [ 176.575090][ T8738] ? __build_skb_around+0x257/0x3e0 [ 176.575131][ T8738] ? netlink_sendmsg+0x642/0xb30 [ 176.575162][ T8738] ? skb_put+0x11b/0x210 [ 176.575210][ T8738] netlink_sendmsg+0x6b2/0xb30 [ 176.575254][ T8738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.575292][ T8738] ? aa_sock_msg_perm+0x94/0x160 [ 176.575330][ T8738] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.575353][ T8738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.575388][ T8738] __sock_sendmsg+0x219/0x270 [ 176.575420][ T8738] ____sys_sendmsg+0x505/0x830 [ 176.575465][ T8738] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.575525][ T8738] ? import_iovec+0x74/0xa0 [ 176.575559][ T8738] ___sys_sendmsg+0x21f/0x2a0 [ 176.575615][ T8738] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.575698][ T8738] ? __fget_files+0x2a/0x420 [ 176.575731][ T8738] ? __fget_files+0x3a0/0x420 [ 176.575777][ T8738] __x64_sys_sendmsg+0x19b/0x260 [ 176.575804][ T8738] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.575854][ T8738] ? __pfx_ksys_write+0x10/0x10 [ 176.575881][ T8738] ? rcu_is_watching+0x15/0xb0 [ 176.575916][ T8738] ? do_syscall_64+0xbe/0x3b0 [ 176.575953][ T8738] do_syscall_64+0xfa/0x3b0 [ 176.575983][ T8738] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.576013][ T8738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.576038][ T8738] ? clear_bhb_loop+0x60/0xb0 [ 176.576067][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.576091][ T8738] RIP: 0033:0x7f160098e929 [ 176.576111][ T8738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.576132][ T8738] RSP: 002b:00007f160178f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.576158][ T8738] RAX: ffffffffffffffda RBX: 00007f1600bb5fa0 RCX: 00007f160098e929 [ 176.576183][ T8738] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 176.576199][ T8738] RBP: 00007f160178f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.576214][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.576230][ T8738] R13: 0000000000000000 R14: 00007f1600bb5fa0 R15: 00007fff27aa3418 [ 176.576269][ T8738] [ 176.785654][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'. [ 176.786871][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.823358][ T8746] netlink: 104 bytes leftover after parsing attributes in process `syz.2.817'. [ 176.909772][ T8744] netlink: 184 bytes leftover after parsing attributes in process `syz.1.816'. [ 176.986070][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.993299][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.063770][ T8750] bridge: RTM_NEWNEIGH with invalid ether address [ 177.287483][ T8759] netlink: 108 bytes leftover after parsing attributes in process `syz.2.822'. [ 177.345825][ T8766] netlink: 'syz.2.822': attribute type 29 has an invalid length. [ 177.606945][ T8776] netlink: 'syz.2.826': attribute type 4 has an invalid length. [ 177.646819][ T8776] netlink: 152 bytes leftover after parsing attributes in process `syz.2.826'. [ 177.699423][ T8498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.762842][ T8783] netlink: 68 bytes leftover after parsing attributes in process `syz.0.829'. [ 177.772703][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 177.802409][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 177.813262][ T8498] veth0_vlan: entered promiscuous mode [ 177.836042][ T8498] veth1_vlan: entered promiscuous mode [ 177.930502][ T8498] veth0_macvtap: entered promiscuous mode [ 177.943911][ T8784] netlink: 'syz.1.827': attribute type 18 has an invalid length. [ 177.970003][ T8498] veth1_macvtap: entered promiscuous mode [ 178.052800][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.053465][ T8784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 178.089747][ T8498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.134801][ T6026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.149366][ T6026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.211194][ T6026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.235337][ T6026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.269284][ T5848] Bluetooth: hci4: command tx timeout [ 178.514345][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.550021][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.635904][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.660985][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.778665][ T8845] openvswitch: netlink: IP tunnel dst address not specified [ 179.808057][ T6023] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.941466][ T6023] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.139137][ T6023] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.444991][ T6023] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.802406][ T8867] openvswitch: netlink: IPv4 tun info is not correct [ 181.292350][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.301613][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.314385][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.325214][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.334775][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.444260][ T8889] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 182.449741][ T6023] bridge_slave_1: left allmulticast mode [ 182.486294][ T6023] bridge_slave_1: left promiscuous mode [ 182.505098][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.539300][ T6023] bridge_slave_0: left allmulticast mode [ 182.555616][ T6023] bridge_slave_0: left promiscuous mode [ 182.561683][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.662297][ T8903] __nla_validate_parse: 5 callbacks suppressed [ 182.662319][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.861'. [ 182.994837][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.010941][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.022241][ T6023] bond0 (unregistering): Released all slaves [ 183.340708][ T8914] tap0: tun_chr_ioctl cmd 1074025676 [ 183.353075][ T8914] tap0: owner set to 0 [ 183.390549][ T5848] Bluetooth: hci4: command tx timeout [ 183.542381][ T6023] hsr_slave_0: left promiscuous mode [ 183.562794][ T6023] hsr_slave_1: left promiscuous mode [ 183.582576][ T8928] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 183.595666][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.607349][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'. [ 183.608783][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.663755][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.681785][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.753275][ T6023] veth1_macvtap: left promiscuous mode [ 183.767512][ T6023] veth0_macvtap: left promiscuous mode [ 183.778006][ T6023] veth1_vlan: left promiscuous mode [ 183.783995][ T6023] veth0_vlan: left promiscuous mode [ 184.226806][ T8935] netlink: 56 bytes leftover after parsing attributes in process `syz.2.871'. [ 184.571385][ T6023] team0 (unregistering): Port device team_slave_1 removed [ 184.605767][ T6023] team0 (unregistering): Port device team_slave_0 removed [ 185.164159][ T8950] netlink: 'syz.1.875': attribute type 1 has an invalid length. [ 185.245756][ T8885] chnl_net:caif_netlink_parms(): no params data found [ 185.396202][ T8959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.878'. [ 185.467085][ T5848] Bluetooth: hci4: command tx timeout [ 185.578682][ T8971] FAULT_INJECTION: forcing a failure. [ 185.578682][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 185.592384][ T8968] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 185.605393][ T8968] CPU: 0 UID: 0 PID: 8968 Comm: syz.1.881 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 185.605426][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.605440][ T8968] Call Trace: [ 185.605449][ T8968] [ 185.605465][ T8968] dump_stack_lvl+0x189/0x250 [ 185.605503][ T8968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.605532][ T8968] ? __pfx__printk+0x10/0x10 [ 185.605563][ T8968] ? kernfs_path_from_node+0x2c/0x260 [ 185.605597][ T8968] ? kernfs_path_from_node+0x2c/0x260 [ 185.605627][ T8968] ? kernfs_path_from_node+0x2c/0x260 [ 185.605661][ T8968] ? kernfs_path_from_node+0x22c/0x260 [ 185.605691][ T8968] ? kernfs_path_from_node+0x2c/0x260 [ 185.605727][ T8968] sysfs_warn_dup+0x8e/0xa0 [ 185.605758][ T8968] sysfs_do_create_link_sd+0xc0/0x110 [ 185.605793][ T8968] device_add_class_symlinks+0x1cf/0x240 [ 185.605828][ T8968] device_add+0x475/0xb50 [ 185.605862][ T8968] wiphy_register+0x1ba6/0x28d0 [ 185.605912][ T8968] ? __pfx_wiphy_register+0x10/0x10 [ 185.605941][ T8968] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 185.605985][ T8968] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 185.606026][ T8968] ieee80211_register_hw+0x33e1/0x4120 [ 185.606068][ T8968] ? ieee80211_register_hw+0x1431/0x4120 [ 185.606099][ T8968] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 185.606126][ T8968] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 185.606161][ T8968] ? __hrtimer_setup+0x187/0x210 [ 185.606185][ T8968] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 185.606225][ T8968] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 185.606289][ T8968] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 185.606319][ T8968] ? trace_kmalloc+0x1f/0xd0 [ 185.606342][ T8968] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 185.606368][ T8968] ? kstrndup+0xbf/0x160 [ 185.606412][ T8968] hwsim_new_radio_nl+0xea4/0x1b10 [ 185.606447][ T8968] ? __pfx___nla_validate_parse+0x10/0x10 [ 185.606497][ T8968] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.606546][ T8968] ? __nla_parse+0x40/0x60 [ 185.606573][ T8968] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 185.606607][ T8968] genl_family_rcv_msg_doit+0x212/0x300 [ 185.606639][ T8968] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.606678][ T8968] ? bpf_lsm_capable+0x9/0x20 [ 185.606704][ T8968] ? security_capable+0x7e/0x2e0 [ 185.606745][ T8968] genl_rcv_msg+0x60e/0x790 [ 185.606775][ T8968] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.606796][ T8968] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.606846][ T8968] netlink_rcv_skb+0x205/0x470 [ 185.606876][ T8968] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.606900][ T8968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.606952][ T8968] ? down_read+0x1ad/0x2e0 [ 185.606989][ T8968] genl_rcv+0x28/0x40 [ 185.607008][ T8968] netlink_unicast+0x758/0x8d0 [ 185.607047][ T8968] netlink_sendmsg+0x805/0xb30 [ 185.607089][ T8968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.607124][ T8968] ? aa_sock_msg_perm+0x94/0x160 [ 185.607161][ T8968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.607181][ T8968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.607212][ T8968] __sock_sendmsg+0x219/0x270 [ 185.607243][ T8968] ____sys_sendmsg+0x505/0x830 [ 185.607284][ T8968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.607330][ T8968] ? import_iovec+0x74/0xa0 [ 185.607362][ T8968] ___sys_sendmsg+0x21f/0x2a0 [ 185.607399][ T8968] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.607483][ T8968] ? __fget_files+0x2a/0x420 [ 185.607513][ T8968] ? __fget_files+0x3a0/0x420 [ 185.607556][ T8968] __x64_sys_sendmsg+0x19b/0x260 [ 185.607581][ T8968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.607628][ T8968] ? rcu_is_watching+0x15/0xb0 [ 185.607660][ T8968] ? do_syscall_64+0xbe/0x3b0 [ 185.607713][ T8968] do_syscall_64+0xfa/0x3b0 [ 185.607741][ T8968] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.607770][ T8968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.607805][ T8968] ? clear_bhb_loop+0x60/0xb0 [ 185.607831][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.607853][ T8968] RIP: 0033:0x7f57a7d8e929 [ 185.607872][ T8968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.607891][ T8968] RSP: 002b:00007f57a8b1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.607915][ T8968] RAX: ffffffffffffffda RBX: 00007f57a7fb6080 RCX: 00007f57a7d8e929 [ 185.607931][ T8968] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 185.607945][ T8968] RBP: 00007f57a7e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 185.607959][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.607972][ T8968] R13: 0000000000000000 R14: 00007f57a7fb6080 R15: 00007fffd530d098 [ 185.608008][ T8968] [ 186.058621][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.0.884 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 186.058655][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.058669][ T8971] Call Trace: [ 186.058678][ T8971] [ 186.058687][ T8971] dump_stack_lvl+0x189/0x250 [ 186.058718][ T8971] ? __pfx____ratelimit+0x10/0x10 [ 186.058747][ T8971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.058773][ T8971] ? __pfx__printk+0x10/0x10 [ 186.058820][ T8971] should_fail_ex+0x414/0x560 [ 186.058860][ T8971] should_failslab+0xa8/0x100 [ 186.058892][ T8971] kmem_cache_alloc_noprof+0x73/0x3c0 [ 186.058918][ T8971] ? skb_clone+0x212/0x3a0 [ 186.058947][ T8971] skb_clone+0x212/0x3a0 [ 186.058973][ T8971] __netlink_deliver_tap+0x404/0x850 [ 186.059017][ T8971] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.059049][ T8971] netlink_deliver_tap+0x19c/0x1b0 [ 186.059080][ T8971] netlink_sendskb+0x68/0x140 [ 186.059110][ T8971] netlink_rcv_skb+0x28c/0x470 [ 186.059140][ T8971] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 186.059173][ T8971] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.059218][ T8971] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.059247][ T8971] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.059283][ T8971] netlink_unicast+0x758/0x8d0 [ 186.059322][ T8971] netlink_sendmsg+0x805/0xb30 [ 186.059364][ T8971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.059399][ T8971] ? aa_sock_msg_perm+0x94/0x160 [ 186.059441][ T8971] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.059461][ T8971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.059492][ T8971] __sock_sendmsg+0x219/0x270 [ 186.059523][ T8971] ____sys_sendmsg+0x505/0x830 [ 186.059564][ T8971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.059610][ T8971] ? import_iovec+0x74/0xa0 [ 186.059644][ T8971] ___sys_sendmsg+0x21f/0x2a0 [ 186.059679][ T8971] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.059754][ T8971] ? __fget_files+0x2a/0x420 [ 186.059782][ T8971] ? __fget_files+0x3a0/0x420 [ 186.059823][ T8971] __x64_sys_sendmsg+0x19b/0x260 [ 186.059846][ T8971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.059892][ T8971] ? __pfx_ksys_write+0x10/0x10 [ 186.059916][ T8971] ? rcu_is_watching+0x15/0xb0 [ 186.059948][ T8971] ? do_syscall_64+0xbe/0x3b0 [ 186.059982][ T8971] do_syscall_64+0xfa/0x3b0 [ 186.060009][ T8971] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.060036][ T8971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.060058][ T8971] ? clear_bhb_loop+0x60/0xb0 [ 186.060084][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.060106][ T8971] RIP: 0033:0x7f160098e929 [ 186.060126][ T8971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.060146][ T8971] RSP: 002b:00007f160178f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.060169][ T8971] RAX: ffffffffffffffda RBX: 00007f1600bb5fa0 RCX: 00007f160098e929 [ 186.060185][ T8971] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 186.060199][ T8971] RBP: 00007f160178f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.060213][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.060225][ T8971] R13: 0000000000000000 R14: 00007f1600bb5fa0 R15: 00007fff27aa3418 [ 186.060260][ T8971] [ 186.541273][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.553879][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.576355][ T8885] bridge_slave_0: entered allmulticast mode [ 186.590744][ T8987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'. [ 186.599527][ T8885] bridge_slave_0: entered promiscuous mode [ 186.608914][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 186.632665][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.640156][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.646706][ T8989] netlink: 52 bytes leftover after parsing attributes in process `syz.2.889'. [ 186.647436][ T8885] bridge_slave_1: entered allmulticast mode [ 186.649483][ T8885] bridge_slave_1: entered promiscuous mode [ 186.700459][ T8987] vlan0: entered promiscuous mode [ 186.706610][ T8990] tap0: tun_chr_ioctl cmd 1074025676 [ 186.718994][ T8990] tap0: owner set to 0 [ 186.822497][ T8885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.835633][ T8885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.888891][ T8997] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 186.921390][ T8997] wlan1: mtu less than device minimum [ 186.926913][ T8997] : (slave wlan1): Error -22 calling dev_set_mtu [ 186.939992][ T8885] team0: Port device team_slave_0 added [ 186.949580][ T8885] team0: Port device team_slave_1 added [ 186.956056][ T8996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.038296][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.045291][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.074937][ T8885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.088846][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.095826][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.133611][ T8885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.163749][ T9005] pim6reg: entered allmulticast mode [ 187.380960][ T9011] netlink: 184 bytes leftover after parsing attributes in process `syz.4.896'. [ 187.547122][ T5848] Bluetooth: hci4: command tx timeout [ 187.887797][ T9025] FAULT_INJECTION: forcing a failure. [ 187.887797][ T9025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.932267][ T9025] CPU: 0 UID: 0 PID: 9025 Comm: syz.2.899 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 187.932302][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.932316][ T9025] Call Trace: [ 187.932324][ T9025] [ 187.932334][ T9025] dump_stack_lvl+0x189/0x250 [ 187.932367][ T9025] ? __pfx____ratelimit+0x10/0x10 [ 187.932395][ T9025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.932422][ T9025] ? __pfx__printk+0x10/0x10 [ 187.932467][ T9025] should_fail_ex+0x414/0x560 [ 187.932505][ T9025] _copy_from_user+0x2d/0xb0 [ 187.932533][ T9025] get_user_ifreq+0x6c/0x180 [ 187.932561][ T9025] inet_ioctl+0x38c/0x4c0 [ 187.932591][ T9025] ? __pfx_inet_ioctl+0x10/0x10 [ 187.932639][ T9025] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.932684][ T9025] sock_do_ioctl+0xd9/0x300 [ 187.932712][ T9025] ? __pfx_sock_do_ioctl+0x10/0x10 [ 187.932735][ T9025] ? __lock_acquire+0xab9/0xd20 [ 187.932778][ T9025] sock_ioctl+0x576/0x790 [ 187.932804][ T9025] ? __pfx_sock_ioctl+0x10/0x10 [ 187.932830][ T9025] ? __fget_files+0x2a/0x420 [ 187.932859][ T9025] ? __fget_files+0x3a0/0x420 [ 187.932886][ T9025] ? __fget_files+0x2a/0x420 [ 187.932920][ T9025] ? bpf_lsm_file_ioctl+0x9/0x20 [ 187.932942][ T9025] ? __pfx_sock_ioctl+0x10/0x10 [ 187.932966][ T9025] __se_sys_ioctl+0xf9/0x170 [ 187.932993][ T9025] do_syscall_64+0xfa/0x3b0 [ 187.933021][ T9025] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.933048][ T9025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.933070][ T9025] ? clear_bhb_loop+0x60/0xb0 [ 187.933097][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.933119][ T9025] RIP: 0033:0x7f6172b8e929 [ 187.933137][ T9025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.933163][ T9025] RSP: 002b:00007f61739b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.933187][ T9025] RAX: ffffffffffffffda RBX: 00007f6172db6160 RCX: 00007f6172b8e929 [ 187.933203][ T9025] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 0000000000000006 [ 187.933217][ T9025] RBP: 00007f61739b7090 R08: 0000000000000000 R09: 0000000000000000 [ 187.933231][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.933244][ T9025] R13: 0000000000000001 R14: 00007f6172db6160 R15: 00007ffee7fdba18 [ 187.933279][ T9025] [ 188.012805][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'. [ 188.128046][ T9028] netlink: 52 bytes leftover after parsing attributes in process `syz.4.902'. [ 188.214413][ T8885] hsr_slave_0: entered promiscuous mode [ 188.221778][ T8885] hsr_slave_1: entered promiscuous mode [ 188.228400][ T8885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.237209][ T8885] Cannot create hsr debugfs directory [ 188.498833][ T9037] veth0_to_bridge: entered promiscuous mode [ 188.544342][ T9042] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 188.568357][ T9042] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 188.608557][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.617348][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.633255][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.677645][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.698725][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.706540][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.715965][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.727121][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.736036][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.745335][ T9049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.908'. [ 188.758416][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.767823][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.776083][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.785590][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.793797][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 188.803295][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.811756][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.819972][ T9032] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 188.849899][ T9031] veth0_to_bridge: left promiscuous mode [ 189.094014][ T9060] tap0: tun_chr_ioctl cmd 1074025676 [ 189.103093][ T9060] tap0: owner set to 0 [ 189.319910][ T8885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.343715][ T8885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.357454][ T8885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.371332][ T8885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.555228][ T8885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.603267][ T8885] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.627168][ T5848] Bluetooth: hci4: command tx timeout [ 189.635583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.642801][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.701259][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.708534][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.795207][ T9092] FAULT_INJECTION: forcing a failure. [ 189.795207][ T9092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.822896][ T9092] CPU: 0 UID: 0 PID: 9092 Comm: syz.0.923 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 189.822928][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.822941][ T9092] Call Trace: [ 189.822949][ T9092] [ 189.822970][ T9092] dump_stack_lvl+0x189/0x250 [ 189.823002][ T9092] ? __pfx____ratelimit+0x10/0x10 [ 189.823031][ T9092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.823057][ T9092] ? __pfx__printk+0x10/0x10 [ 189.823103][ T9092] should_fail_ex+0x414/0x560 [ 189.823142][ T9092] _copy_to_user+0x31/0xb0 [ 189.823172][ T9092] simple_read_from_buffer+0xe1/0x170 [ 189.823207][ T9092] proc_fail_nth_read+0x1df/0x250 [ 189.823244][ T9092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.823279][ T9092] ? rw_verify_area+0x258/0x650 [ 189.823303][ T9092] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.823337][ T9092] vfs_read+0x200/0x980 [ 189.823369][ T9092] ? __pfx___mutex_lock+0x10/0x10 [ 189.823399][ T9092] ? __pfx_vfs_read+0x10/0x10 [ 189.823425][ T9092] ? __fget_files+0x2a/0x420 [ 189.823461][ T9092] ? __fget_files+0x3a0/0x420 [ 189.823489][ T9092] ? __fget_files+0x2a/0x420 [ 189.823530][ T9092] ksys_read+0x145/0x250 [ 189.823558][ T9092] ? __pfx_ksys_read+0x10/0x10 [ 189.823581][ T9092] ? rcu_is_watching+0x15/0xb0 [ 189.823613][ T9092] ? do_syscall_64+0xbe/0x3b0 [ 189.823647][ T9092] do_syscall_64+0xfa/0x3b0 [ 189.823674][ T9092] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.823701][ T9092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.823723][ T9092] ? clear_bhb_loop+0x60/0xb0 [ 189.823749][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.823769][ T9092] RIP: 0033:0x7f160098d33c [ 189.823788][ T9092] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.823807][ T9092] RSP: 002b:00007f160176e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.823830][ T9092] RAX: ffffffffffffffda RBX: 00007f1600bb6080 RCX: 00007f160098d33c [ 189.823846][ T9092] RDX: 000000000000000f RSI: 00007f160176e0a0 RDI: 0000000000000009 [ 189.823859][ T9092] RBP: 00007f160176e090 R08: 0000000000000000 R09: 0000000000000000 [ 189.823873][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.823886][ T9092] R13: 0000000000000000 R14: 00007f1600bb6080 R15: 00007fff27aa3418 [ 189.823921][ T9092] [ 190.589976][ T8885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.772200][ T8885] veth0_vlan: entered promiscuous mode [ 190.816011][ T8885] veth1_vlan: entered promiscuous mode [ 190.903608][ T8885] veth0_macvtap: entered promiscuous mode [ 190.955257][ T8885] veth1_macvtap: entered promiscuous mode [ 191.013148][ T8885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.048628][ T8885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.099140][ T6026] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.126075][ T6026] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.164972][ T9136] tap0: tun_chr_ioctl cmd 1074025676 [ 191.174016][ T9136] tap0: owner set to 0 [ 191.185974][ T6026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.204692][ T6026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.445379][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.484277][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.571725][ T6023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.588530][ T6023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.140436][ T9177] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 192.152392][ T9177] CPU: 0 UID: 0 PID: 9177 Comm: syz.2.954 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 192.152435][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.152449][ T9177] Call Trace: [ 192.152458][ T9177] [ 192.152468][ T9177] dump_stack_lvl+0x189/0x250 [ 192.152505][ T9177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.152534][ T9177] ? __pfx__printk+0x10/0x10 [ 192.152568][ T9177] ? kernfs_path_from_node+0x2c/0x260 [ 192.152602][ T9177] ? kernfs_path_from_node+0x2c/0x260 [ 192.152633][ T9177] ? kernfs_path_from_node+0x2c/0x260 [ 192.152668][ T9177] ? kernfs_path_from_node+0x22c/0x260 [ 192.152700][ T9177] ? kernfs_path_from_node+0x2c/0x260 [ 192.152737][ T9177] sysfs_warn_dup+0x8e/0xa0 [ 192.152769][ T9177] sysfs_do_create_link_sd+0xc0/0x110 [ 192.152805][ T9177] device_add_class_symlinks+0x1cf/0x240 [ 192.152841][ T9177] device_add+0x475/0xb50 [ 192.152876][ T9177] wiphy_register+0x1ba6/0x28d0 [ 192.152927][ T9177] ? __pfx_wiphy_register+0x10/0x10 [ 192.152956][ T9177] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 192.153003][ T9177] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 192.153045][ T9177] ieee80211_register_hw+0x33e1/0x4120 [ 192.153088][ T9177] ? ieee80211_register_hw+0x1431/0x4120 [ 192.153122][ T9177] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 192.153150][ T9177] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.153187][ T9177] ? __hrtimer_setup+0x187/0x210 [ 192.153211][ T9177] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 192.153253][ T9177] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 192.153322][ T9177] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 192.153353][ T9177] ? trace_kmalloc+0x1f/0xd0 [ 192.153378][ T9177] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 192.153418][ T9177] ? kstrndup+0xbf/0x160 [ 192.153464][ T9177] hwsim_new_radio_nl+0xea4/0x1b10 [ 192.153501][ T9177] ? __pfx___nla_validate_parse+0x10/0x10 [ 192.153543][ T9177] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 192.153592][ T9177] ? __nla_parse+0x40/0x60 [ 192.153619][ T9177] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 192.153654][ T9177] genl_family_rcv_msg_doit+0x212/0x300 [ 192.153688][ T9177] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 192.153728][ T9177] ? bpf_lsm_capable+0x9/0x20 [ 192.153754][ T9177] ? security_capable+0x7e/0x2e0 [ 192.153796][ T9177] genl_rcv_msg+0x60e/0x790 [ 192.153828][ T9177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.153850][ T9177] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 192.153900][ T9177] netlink_rcv_skb+0x205/0x470 [ 192.153932][ T9177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.153957][ T9177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.154009][ T9177] ? down_read+0x1ad/0x2e0 [ 192.154044][ T9177] genl_rcv+0x28/0x40 [ 192.154064][ T9177] netlink_unicast+0x758/0x8d0 [ 192.154105][ T9177] netlink_sendmsg+0x805/0xb30 [ 192.154148][ T9177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.154184][ T9177] ? aa_sock_msg_perm+0x94/0x160 [ 192.154220][ T9177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.154241][ T9177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.154274][ T9177] __sock_sendmsg+0x219/0x270 [ 192.154306][ T9177] ____sys_sendmsg+0x505/0x830 [ 192.154348][ T9177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.154402][ T9177] ? import_iovec+0x74/0xa0 [ 192.154434][ T9177] ___sys_sendmsg+0x21f/0x2a0 [ 192.154474][ T9177] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.154552][ T9177] ? __fget_files+0x2a/0x420 [ 192.154582][ T9177] ? __fget_files+0x3a0/0x420 [ 192.154628][ T9177] __x64_sys_sendmsg+0x19b/0x260 [ 192.154653][ T9177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.154703][ T9177] ? rcu_is_watching+0x15/0xb0 [ 192.154748][ T9177] ? do_syscall_64+0xbe/0x3b0 [ 192.154782][ T9177] do_syscall_64+0xfa/0x3b0 [ 192.154808][ T9177] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.154835][ T9177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.154856][ T9177] ? clear_bhb_loop+0x60/0xb0 [ 192.154882][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.154904][ T9177] RIP: 0033:0x7f6172b8e929 [ 192.154924][ T9177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.154943][ T9177] RSP: 002b:00007f61739f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.154965][ T9177] RAX: ffffffffffffffda RBX: 00007f6172db5fa0 RCX: 00007f6172b8e929 [ 192.154981][ T9177] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000004 [ 192.154995][ T9177] RBP: 00007f6172c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 192.155009][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.155022][ T9177] R13: 0000000000000000 R14: 00007f6172db5fa0 R15: 00007ffee7fdba18 [ 192.155057][ T9177] [ 192.736999][ T9187] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 193.250884][ T9211] __nla_validate_parse: 169 callbacks suppressed [ 193.250908][ T9211] netlink: 124 bytes leftover after parsing attributes in process `syz.4.962'. [ 193.370064][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 193.428388][ T9221] netlink: 52 bytes leftover after parsing attributes in process `syz.0.965'. [ 193.488687][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 193.603246][ T9228] netlink: 144 bytes leftover after parsing attributes in process `syz.0.969'. [ 193.708809][ T6026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.606939][ T9239] vlan3: entered promiscuous mode [ 194.781928][ T6026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.804973][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'. [ 194.875508][ T9250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.979'. [ 194.900757][ T9255] FAULT_INJECTION: forcing a failure. [ 194.900757][ T9255] name failslab, interval 1, probability 0, space 0, times 0 [ 194.915928][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.4.980 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 194.915955][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.915965][ T9255] Call Trace: [ 194.915973][ T9255] [ 194.915981][ T9255] dump_stack_lvl+0x189/0x250 [ 194.916008][ T9255] ? __pfx____ratelimit+0x10/0x10 [ 194.916032][ T9255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.916052][ T9255] ? __pfx__printk+0x10/0x10 [ 194.916104][ T9255] ? __pfx___might_resched+0x10/0x10 [ 194.916126][ T9255] ? fs_reclaim_acquire+0x7d/0x100 [ 194.916156][ T9255] should_fail_ex+0x414/0x560 [ 194.916187][ T9255] should_failslab+0xa8/0x100 [ 194.916214][ T9255] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.916238][ T9255] ? __alloc_skb+0x112/0x2d0 [ 194.916267][ T9255] __alloc_skb+0x112/0x2d0 [ 194.916295][ T9255] netlink_ack+0x146/0xa50 [ 194.916319][ T9255] ? __lock_acquire+0xab9/0xd20 [ 194.916352][ T9255] netlink_rcv_skb+0x28c/0x470 [ 194.916382][ T9255] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.916405][ T9255] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 194.916444][ T9255] ? bpf_lsm_capable+0x9/0x20 [ 194.916468][ T9255] ? security_capable+0x7e/0x2e0 [ 194.916507][ T9255] nfnetlink_rcv+0x26a/0x2520 [ 194.916531][ T9255] ? unwind_get_return_address+0x4d/0x90 [ 194.916557][ T9255] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 194.916586][ T9255] ? arch_stack_walk+0xfc/0x150 [ 194.916626][ T9255] ? stack_trace_save+0x9c/0xe0 [ 194.916654][ T9255] ? stack_depot_save_flags+0x40/0x900 [ 194.916686][ T9255] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 194.916710][ T9255] ? kasan_save_track+0x4f/0x80 [ 194.916733][ T9255] ? kasan_save_track+0x3e/0x80 [ 194.916762][ T9255] ? __lock_acquire+0xab9/0xd20 [ 194.916810][ T9255] ? __lock_acquire+0xab9/0xd20 [ 194.916843][ T9255] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.916878][ T9255] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.916906][ T9255] ? netlink_deliver_tap+0x2e/0x1b0 [ 194.916955][ T9255] netlink_unicast+0x758/0x8d0 [ 194.916995][ T9255] netlink_sendmsg+0x805/0xb30 [ 194.917040][ T9255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.917073][ T9255] ? aa_sock_msg_perm+0x94/0x160 [ 194.917107][ T9255] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.917131][ T9255] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.917160][ T9255] __sock_sendmsg+0x219/0x270 [ 194.917194][ T9255] ____sys_sendmsg+0x505/0x830 [ 194.917233][ T9255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.917278][ T9255] ? import_iovec+0x74/0xa0 [ 194.917307][ T9255] ___sys_sendmsg+0x21f/0x2a0 [ 194.917343][ T9255] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.917428][ T9255] ? __fget_files+0x2a/0x420 [ 194.917456][ T9255] ? __fget_files+0x3a0/0x420 [ 194.917498][ T9255] __x64_sys_sendmsg+0x19b/0x260 [ 194.917521][ T9255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.917565][ T9255] ? __pfx_ksys_write+0x10/0x10 [ 194.917589][ T9255] ? rcu_is_watching+0x15/0xb0 [ 194.917619][ T9255] ? do_syscall_64+0xbe/0x3b0 [ 194.917652][ T9255] do_syscall_64+0xfa/0x3b0 [ 194.917678][ T9255] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.917705][ T9255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.917726][ T9255] ? clear_bhb_loop+0x60/0xb0 [ 194.917752][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.917772][ T9255] RIP: 0033:0x7f930678e929 [ 194.917791][ T9255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.917809][ T9255] RSP: 002b:00007f93045f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.917832][ T9255] RAX: ffffffffffffffda RBX: 00007f93069b5fa0 RCX: 00007f930678e929 [ 194.917848][ T9255] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000003 [ 194.917862][ T9255] RBP: 00007f93045f6090 R08: 0000000000000000 R09: 0000000000000000 [ 194.917875][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.917887][ T9255] R13: 0000000000000000 R14: 00007f93069b5fa0 R15: 00007ffc572f5328 [ 194.917920][ T9255] [ 195.343569][ T9259] xt_hashlimit: size too large, truncated to 1048576 [ 195.452986][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.493559][ T6026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.506574][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.530142][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.543654][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.553216][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.632308][ T9268] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.982'. [ 195.856007][ T6026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.430244][ T6026] bridge_slave_1: left allmulticast mode [ 196.435970][ T6026] bridge_slave_1: left promiscuous mode [ 196.480848][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 196.482698][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.503180][ T6026] bridge_slave_0: left allmulticast mode [ 196.514319][ T6026] bridge_slave_0: left promiscuous mode [ 196.524757][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.536327][ T9312] netlink: 52 bytes leftover after parsing attributes in process `syz.0.994'. [ 196.911191][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.922845][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.933935][ T6026] bond0 (unregistering): Released all slaves [ 197.192085][ T9263] chnl_net:caif_netlink_parms(): no params data found [ 197.399777][ T9331] FAULT_INJECTION: forcing a failure. [ 197.399777][ T9331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.420126][ T9331] CPU: 1 UID: 0 PID: 9331 Comm: syz.4.1001 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 197.420159][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.420173][ T9331] Call Trace: [ 197.420182][ T9331] [ 197.420191][ T9331] dump_stack_lvl+0x189/0x250 [ 197.420225][ T9331] ? __pfx____ratelimit+0x10/0x10 [ 197.420253][ T9331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.420280][ T9331] ? __pfx__printk+0x10/0x10 [ 197.420311][ T9331] ? __might_fault+0xb0/0x130 [ 197.420352][ T9331] should_fail_ex+0x414/0x560 [ 197.420390][ T9331] _copy_from_iter+0x1db/0x16f0 [ 197.420419][ T9331] ? rcu_is_watching+0x15/0xb0 [ 197.420447][ T9331] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 197.420477][ T9331] ? __pfx__copy_from_iter+0x10/0x10 [ 197.420503][ T9331] ? __build_skb_around+0x257/0x3e0 [ 197.420538][ T9331] ? netlink_sendmsg+0x642/0xb30 [ 197.420566][ T9331] ? skb_put+0x11b/0x210 [ 197.420602][ T9331] netlink_sendmsg+0x6b2/0xb30 [ 197.420643][ T9331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.420677][ T9331] ? aa_sock_msg_perm+0x94/0x160 [ 197.420712][ T9331] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.420732][ T9331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.420763][ T9331] __sock_sendmsg+0x219/0x270 [ 197.420800][ T9331] ____sys_sendmsg+0x505/0x830 [ 197.420842][ T9331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.420887][ T9331] ? import_iovec+0x74/0xa0 [ 197.420918][ T9331] ___sys_sendmsg+0x21f/0x2a0 [ 197.420955][ T9331] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.421030][ T9331] ? __fget_files+0x2a/0x420 [ 197.421059][ T9331] ? __fget_files+0x3a0/0x420 [ 197.421101][ T9331] __x64_sys_sendmsg+0x19b/0x260 [ 197.421125][ T9331] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.421171][ T9331] ? __pfx_ksys_write+0x10/0x10 [ 197.421195][ T9331] ? rcu_is_watching+0x15/0xb0 [ 197.421226][ T9331] ? do_syscall_64+0xbe/0x3b0 [ 197.421260][ T9331] do_syscall_64+0xfa/0x3b0 [ 197.421286][ T9331] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.421314][ T9331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.421335][ T9331] ? clear_bhb_loop+0x60/0xb0 [ 197.421361][ T9331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.421382][ T9331] RIP: 0033:0x7f930678e929 [ 197.421401][ T9331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.421420][ T9331] RSP: 002b:00007f93045f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.421443][ T9331] RAX: ffffffffffffffda RBX: 00007f93069b5fa0 RCX: 00007f930678e929 [ 197.421458][ T9331] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 197.421472][ T9331] RBP: 00007f93045f6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.421485][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.421498][ T9331] R13: 0000000000000000 R14: 00007f93069b5fa0 R15: 00007ffc572f5328 [ 197.421532][ T9331] [ 197.743978][ T5851] Bluetooth: hci4: command tx timeout [ 197.864304][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.893215][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.901595][ T9263] bridge_slave_0: entered allmulticast mode [ 197.910677][ T9263] bridge_slave_0: entered promiscuous mode [ 197.919569][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.926833][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.934579][ T9263] bridge_slave_1: entered allmulticast mode [ 197.942645][ T9263] bridge_slave_1: entered promiscuous mode [ 198.000118][ T6026] hsr_slave_0: left promiscuous mode [ 198.040210][ T6026] hsr_slave_1: left promiscuous mode [ 198.046419][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.061388][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.070032][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.095847][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.127899][ T9353] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 198.202367][ T6026] veth1_macvtap: left promiscuous mode [ 198.237991][ T6026] veth0_macvtap: left promiscuous mode [ 198.264042][ T6026] veth1_vlan: left promiscuous mode [ 198.297358][ T6026] veth0_vlan: left promiscuous mode [ 199.058802][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 199.162783][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 199.201646][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 199.557544][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.563917][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.603003][ T9263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.637737][ T9376] FAULT_INJECTION: forcing a failure. [ 199.637737][ T9376] name failslab, interval 1, probability 0, space 0, times 0 [ 199.667030][ T9376] CPU: 0 UID: 0 PID: 9376 Comm: syz.2.1009 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 199.667061][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.667074][ T9376] Call Trace: [ 199.667083][ T9376] [ 199.667092][ T9376] dump_stack_lvl+0x189/0x250 [ 199.667124][ T9376] ? __pfx____ratelimit+0x10/0x10 [ 199.667152][ T9376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.667178][ T9376] ? __pfx__printk+0x10/0x10 [ 199.667212][ T9376] ? __pfx___might_resched+0x10/0x10 [ 199.667237][ T9376] ? fs_reclaim_acquire+0x7d/0x100 [ 199.667276][ T9376] should_fail_ex+0x414/0x560 [ 199.667315][ T9376] should_failslab+0xa8/0x100 [ 199.667346][ T9376] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 199.667375][ T9376] ? __alloc_skb+0x112/0x2d0 [ 199.667412][ T9376] __alloc_skb+0x112/0x2d0 [ 199.667448][ T9376] rtmsg_ifa+0xf8/0x1f0 [ 199.667477][ T9376] __inet_del_ifa+0x869/0x1040 [ 199.667518][ T9376] devinet_ioctl+0xb27/0x1b50 [ 199.667566][ T9376] ? __pfx_devinet_ioctl+0x10/0x10 [ 199.667604][ T9376] ? get_user_ifreq+0x12c/0x180 [ 199.667638][ T9376] inet_ioctl+0x3c0/0x4c0 [ 199.667666][ T9376] ? __pfx_inet_ioctl+0x10/0x10 [ 199.667715][ T9376] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 199.667760][ T9376] sock_do_ioctl+0xd9/0x300 [ 199.667788][ T9376] ? __pfx_sock_do_ioctl+0x10/0x10 [ 199.667811][ T9376] ? __lock_acquire+0xab9/0xd20 [ 199.667853][ T9376] sock_ioctl+0x576/0x790 [ 199.667880][ T9376] ? __pfx_sock_ioctl+0x10/0x10 [ 199.667905][ T9376] ? __fget_files+0x2a/0x420 [ 199.667934][ T9376] ? __fget_files+0x3a0/0x420 [ 199.667962][ T9376] ? __fget_files+0x2a/0x420 [ 199.667997][ T9376] ? bpf_lsm_file_ioctl+0x9/0x20 [ 199.668020][ T9376] ? __pfx_sock_ioctl+0x10/0x10 [ 199.668045][ T9376] __se_sys_ioctl+0xf9/0x170 [ 199.668073][ T9376] do_syscall_64+0xfa/0x3b0 [ 199.668101][ T9376] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.668129][ T9376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.668151][ T9376] ? clear_bhb_loop+0x60/0xb0 [ 199.668177][ T9376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.668199][ T9376] RIP: 0033:0x7f6172b8e929 [ 199.668219][ T9376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.668238][ T9376] RSP: 002b:00007f61739b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.668262][ T9376] RAX: ffffffffffffffda RBX: 00007f6172db6160 RCX: 00007f6172b8e929 [ 199.668279][ T9376] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 0000000000000006 [ 199.668293][ T9376] RBP: 00007f61739b7090 R08: 0000000000000000 R09: 0000000000000000 [ 199.668307][ T9376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.668320][ T9376] R13: 0000000000000001 R14: 00007f6172db6160 R15: 00007ffee7fdba18 [ 199.668355][ T9376] [ 200.001842][ T5851] Bluetooth: hci4: command tx timeout [ 200.069870][ T9263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.180152][ T9395] batadv1: entered allmulticast mode [ 200.223958][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 200.305840][ T9263] team0: Port device team_slave_0 added [ 200.349503][ T9407] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1018'. [ 200.362775][ T9263] team0: Port device team_slave_1 added [ 200.488535][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.497693][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.524988][ T9263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.538704][ T9263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.545745][ T9263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.573330][ T9263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.714780][ T9414] validate_nla: 152 callbacks suppressed [ 200.714802][ T9414] netlink: 'syz.1.1021': attribute type 10 has an invalid length. [ 200.775931][ T9414] wlan1: mtu less than device minimum [ 200.788160][ T9414] : (slave wlan1): Error -22 calling dev_set_mtu [ 200.796571][ T9420] netlink: 'syz.1.1021': attribute type 3 has an invalid length. [ 200.861505][ T9263] hsr_slave_0: entered promiscuous mode [ 200.868414][ T9263] hsr_slave_1: entered promiscuous mode [ 200.874762][ T9263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.883008][ T9263] Cannot create hsr debugfs directory [ 200.903975][ T9414] IPv6: addrconf: prefix option has invalid lifetime [ 200.945827][ T9414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 201.044891][ T9427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1024'. [ 201.236837][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 201.297027][ T9430] tap0: tun_chr_ioctl cmd 1074025676 [ 201.317577][ T9430] tap0: owner set to 0 [ 201.516881][ T9441] netlink: 'syz.0.1026': attribute type 10 has an invalid length. [ 201.527493][ T9441] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.535226][ T9441] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.619523][ T9441] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.626823][ T9441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.635508][ T9441] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.642752][ T9441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.661299][ T9441] : (slave bridge0): Enslaving as an active interface with an up link [ 201.775605][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'. [ 202.028512][ T5851] Bluetooth: hci4: command tx timeout [ 202.043662][ T9453] FAULT_INJECTION: forcing a failure. [ 202.043662][ T9453] name failslab, interval 1, probability 0, space 0, times 0 [ 202.067388][ T9453] CPU: 1 UID: 0 PID: 9453 Comm: syz.4.1030 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 202.067419][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.067433][ T9453] Call Trace: [ 202.067441][ T9453] [ 202.067451][ T9453] dump_stack_lvl+0x189/0x250 [ 202.067482][ T9453] ? __pfx____ratelimit+0x10/0x10 [ 202.067510][ T9453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.067536][ T9453] ? __pfx__printk+0x10/0x10 [ 202.067562][ T9453] ? __bpf_trace_contention_end+0xdc/0x130 [ 202.067602][ T9453] ? __mutex_trylock_common+0x153/0x260 [ 202.067639][ T9453] should_fail_ex+0x414/0x560 [ 202.067677][ T9453] should_failslab+0xa8/0x100 [ 202.067707][ T9453] __kmalloc_cache_noprof+0x70/0x3d0 [ 202.067734][ T9453] ? __hw_addr_add_ex+0x1f4/0x770 [ 202.067759][ T9453] __hw_addr_add_ex+0x1f4/0x770 [ 202.067788][ T9453] dev_addr_init+0x14f/0x230 [ 202.067826][ T9453] ? __pfx_dev_addr_init+0x10/0x10 [ 202.067876][ T9453] alloc_netdev_mqs+0x2ae/0x1170 [ 202.067897][ T9453] ? __pfx_vxlan_setup+0x10/0x10 [ 202.067933][ T9453] rtnl_create_link+0x31f/0xd10 [ 202.067964][ T9453] rtnl_newlink_create+0x25c/0xb00 [ 202.068003][ T9453] ? __pfx_aa_get_newest_label+0x10/0x10 [ 202.068040][ T9453] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 202.068070][ T9453] ? rtnl_newlink+0x8db/0x1c70 [ 202.068101][ T9453] ? __pfx___mutex_lock+0x10/0x10 [ 202.068142][ T9453] ? ns_capable+0x8a/0xf0 [ 202.068170][ T9453] rtnl_newlink+0x16d6/0x1c70 [ 202.068218][ T9453] ? __pfx_rtnl_newlink+0x10/0x10 [ 202.068244][ T9453] ? is_bpf_text_address+0x26/0x2b0 [ 202.068278][ T9453] ? __lock_acquire+0xab9/0xd20 [ 202.068314][ T9453] ? __lock_acquire+0xab9/0xd20 [ 202.068360][ T9453] ? is_bpf_text_address+0x26/0x2b0 [ 202.068391][ T9453] ? is_bpf_text_address+0x292/0x2b0 [ 202.068414][ T9453] ? is_bpf_text_address+0x26/0x2b0 [ 202.068442][ T9453] ? kernel_text_address+0xa5/0xe0 [ 202.068477][ T9453] ? __lock_acquire+0xab9/0xd20 [ 202.068534][ T9453] ? __pfx_rtnl_newlink+0x10/0x10 [ 202.068562][ T9453] rtnetlink_rcv_msg+0x7cf/0xb70 [ 202.068602][ T9453] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 202.068630][ T9453] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.068679][ T9453] netlink_rcv_skb+0x205/0x470 [ 202.068709][ T9453] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.068739][ T9453] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.068783][ T9453] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.068811][ T9453] ? netlink_deliver_tap+0x2e/0x1b0 [ 202.068846][ T9453] netlink_unicast+0x758/0x8d0 [ 202.068885][ T9453] netlink_sendmsg+0x805/0xb30 [ 202.068925][ T9453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.068959][ T9453] ? aa_sock_msg_perm+0x94/0x160 [ 202.068992][ T9453] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.069012][ T9453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.069042][ T9453] __sock_sendmsg+0x219/0x270 [ 202.069072][ T9453] ____sys_sendmsg+0x505/0x830 [ 202.069112][ T9453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.069156][ T9453] ? import_iovec+0x74/0xa0 [ 202.069186][ T9453] ___sys_sendmsg+0x21f/0x2a0 [ 202.069223][ T9453] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.069299][ T9453] ? __fget_files+0x2a/0x420 [ 202.069327][ T9453] ? __fget_files+0x3a0/0x420 [ 202.069368][ T9453] __x64_sys_sendmsg+0x19b/0x260 [ 202.069392][ T9453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.069437][ T9453] ? __pfx_ksys_write+0x10/0x10 [ 202.069459][ T9453] ? rcu_is_watching+0x15/0xb0 [ 202.069491][ T9453] ? do_syscall_64+0xbe/0x3b0 [ 202.069524][ T9453] do_syscall_64+0xfa/0x3b0 [ 202.069550][ T9453] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.069582][ T9453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.069603][ T9453] ? clear_bhb_loop+0x60/0xb0 [ 202.069629][ T9453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.069650][ T9453] RIP: 0033:0x7f930678e929 [ 202.069669][ T9453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.069687][ T9453] RSP: 002b:00007f93045f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.069710][ T9453] RAX: ffffffffffffffda RBX: 00007f93069b5fa0 RCX: 00007f930678e929 [ 202.069726][ T9453] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000014 [ 202.069740][ T9453] RBP: 00007f93045f6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.069753][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.069765][ T9453] R13: 0000000000000000 R14: 00007f93069b5fa0 R15: 00007ffc572f5328 [ 202.069800][ T9453] [ 202.804355][ T9263] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.844793][ T9263] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.857354][ T9465] nbd: must specify at least one socket [ 202.872912][ T9464] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82 [ 202.938058][ T9263] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.950995][ T9263] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.140935][ T9473] tap0: tun_chr_ioctl cmd 1074025676 [ 203.146302][ T9473] tap0: owner set to 0 [ 203.571917][ T9485] veth5: entered promiscuous mode [ 203.586358][ T9488] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 203.684708][ T9491] SET target dimension over the limit! [ 203.757778][ T9493] netlink: 'syz.2.1042': attribute type 10 has an invalid length. [ 203.775373][ T9493] openvswitch: netlink: Flow key attr not present in new flow. [ 203.776228][ T9495] FAULT_INJECTION: forcing a failure. [ 203.776228][ T9495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.803107][ T9495] CPU: 0 UID: 0 PID: 9495 Comm: syz.1.1043 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 203.803139][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.803151][ T9495] Call Trace: [ 203.803160][ T9495] [ 203.803177][ T9495] dump_stack_lvl+0x189/0x250 [ 203.803208][ T9495] ? __pfx____ratelimit+0x10/0x10 [ 203.803235][ T9495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.803261][ T9495] ? __pfx__printk+0x10/0x10 [ 203.803290][ T9495] ? __might_fault+0xb0/0x130 [ 203.803328][ T9495] should_fail_ex+0x414/0x560 [ 203.803367][ T9495] _copy_from_user+0x2d/0xb0 [ 203.803393][ T9495] sctp_getsockopt_pr_supported+0xb5/0x520 [ 203.803429][ T9495] ? __pfx_sctp_getsockopt_pr_supported+0x10/0x10 [ 203.803472][ T9495] sctp_getsockopt+0x9fe/0xb60 [ 203.803508][ T9495] do_sock_getsockopt+0x35d/0x650 [ 203.803544][ T9495] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 203.803575][ T9495] ? do_syscall_64+0x40/0x3b0 [ 203.803601][ T9495] ? __fget_files+0x3a0/0x420 [ 203.803630][ T9495] ? __fget_files+0x2a/0x420 [ 203.803666][ T9495] __x64_sys_getsockopt+0x1a5/0x250 [ 203.803698][ T9495] ? do_syscall_64+0x40/0x3b0 [ 203.803727][ T9495] ? do_syscall_64+0x40/0x3b0 [ 203.803759][ T9495] do_syscall_64+0xfa/0x3b0 [ 203.803786][ T9495] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.803812][ T9495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.803833][ T9495] ? clear_bhb_loop+0x60/0xb0 [ 203.803860][ T9495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.803881][ T9495] RIP: 0033:0x7f57a7d8e929 [ 203.803900][ T9495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.803918][ T9495] RSP: 002b:00007f57a8b40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 203.803941][ T9495] RAX: ffffffffffffffda RBX: 00007f57a7fb5fa0 RCX: 00007f57a7d8e929 [ 203.803956][ T9495] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003 [ 203.803969][ T9495] RBP: 00007f57a8b40090 R08: 0000200000000180 R09: 0000000000000000 [ 203.803983][ T9495] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 203.803997][ T9495] R13: 0000000000000000 R14: 00007f57a7fb5fa0 R15: 00007fffd530d098 [ 203.804028][ T9495] [ 203.823193][ T9263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.037513][ T9493] sctp: [Deprecated]: syz.2.1042 (pid 9493) Use of int in max_burst socket option deprecated. [ 204.037513][ T9493] Use struct sctp_assoc_value instead [ 204.104925][ T9263] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.115247][ T5851] Bluetooth: hci4: command tx timeout [ 204.131768][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.138976][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.165357][ T6023] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.172614][ T6023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.196660][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 204.775216][ T9523] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1049'. [ 204.880994][ T9263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.953540][ T9528] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1051'. [ 205.108612][ T9263] veth0_vlan: entered promiscuous mode [ 205.122077][ T9503] netlink: 'syz.4.1046': attribute type 4 has an invalid length. [ 205.140302][ T9263] veth1_vlan: entered promiscuous mode [ 205.268272][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 205.306187][ T9263] veth0_macvtap: entered promiscuous mode [ 205.348819][ T9263] veth1_macvtap: entered promiscuous mode [ 205.401939][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.471152][ T9263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.668841][ T6032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.686172][ T6032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.714145][ T6032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.743090][ T6032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.864007][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'. [ 205.942451][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'. [ 205.974880][ T9540] macvtap3: entered promiscuous mode [ 205.981240][ T9540] macvtap3: entered allmulticast mode [ 205.994171][ T9544] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1054'. [ 206.095168][ T9551] xt_hashlimit: max too large, truncated to 1048576 [ 206.119758][ T9551] No such timeout policy "syz1" [ 206.187993][ T5851] Bluetooth: hci4: command tx timeout [ 206.242883][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.275392][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.275475][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.295778][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.374628][ T9559] netlink: 892 bytes leftover after parsing attributes in process `syz.2.1061'. [ 206.508664][ T9561] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1062'. [ 206.537482][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 206.556234][ T9263] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 206.562453][ T9263] CPU: 1 UID: 0 PID: 9263 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 206.574612][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.584676][ T9263] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 206.590236][ T9263] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 31 5e 62 ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 86 de c5 ff 49 83 3f 00 0f 84 [ 206.609847][ T9263] RSP: 0018:ffffc9000416f7e0 EFLAGS: 00010206 [ 206.615944][ T9263] RAX: ffffffff825e01cf RBX: 0000000000000000 RCX: ffff88806e19bc00 [ 206.624008][ T9263] RDX: 0000000000000000 RSI: ffff888021aa0960 RDI: 0000000000000000 [ 206.631995][ T9263] RBP: 0000000000000006 R08: ffff88806e19bc00 R09: 0000000000000008 [ 206.639970][ T9263] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 206.647950][ T9263] R13: ffff888021aa0960 R14: 0000000000000000 R15: 0000000000000030 [ 206.655923][ T9263] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 206.664854][ T9263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.671444][ T9263] CR2: 0000001b3111fffc CR3: 0000000076e48000 CR4: 00000000003526f0 [ 206.679425][ T9263] Call Trace: [ 206.682707][ T9263] [ 206.685649][ T9263] ? trace_kmalloc+0x1f/0xd0 [ 206.690252][ T9263] ? kobject_move+0x20a/0x4f0 [ 206.694944][ T9263] kobject_move+0x3a5/0x4f0 [ 206.699461][ T9263] ? __pfx_kobject_move+0x10/0x10 [ 206.704502][ T9263] ? get_device_parent+0x366/0x3a0 [ 206.709624][ T9263] device_move+0xe0/0x700 [ 206.713964][ T9263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.719973][ T9263] hci_conn_del_sysfs+0xb8/0x170 [ 206.724935][ T9263] hci_conn_del+0x8ff/0xcb0 [ 206.729490][ T9263] hci_conn_hash_flush+0x191/0x230 [ 206.734627][ T9263] hci_dev_close_sync+0xaef/0x1330 [ 206.739761][ T9263] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 206.745327][ T9263] ? up_write+0x1c4/0x420 [ 206.749678][ T9263] hci_unregister_dev+0x21a/0x510 [ 206.754712][ T9263] vhci_release+0x80/0xd0 [ 206.759068][ T9263] ? __pfx_vhci_release+0x10/0x10 [ 206.764100][ T9263] __fput+0x449/0xa70 [ 206.768088][ T9263] task_work_run+0x1d1/0x260 [ 206.772689][ T9263] ? __pfx_task_work_run+0x10/0x10 [ 206.777816][ T9263] ? kmem_cache_free+0x18f/0x400 [ 206.782768][ T9263] do_exit+0x6b5/0x22e0 [ 206.786937][ T9263] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.792326][ T9263] ? __pfx_do_exit+0x10/0x10 [ 206.796933][ T9263] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.802149][ T9263] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.807360][ T9263] do_group_exit+0x21c/0x2d0 [ 206.812052][ T9263] __x64_sys_exit_group+0x3f/0x40 [ 206.817089][ T9263] x64_sys_call+0x21ba/0x21c0 [ 206.821778][ T9263] do_syscall_64+0xfa/0x3b0 [ 206.826324][ T9263] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.831538][ T9263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.837608][ T9263] ? clear_bhb_loop+0x60/0xb0 [ 206.842291][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.848187][ T9263] RIP: 0033:0x7fa628b8e929 [ 206.852641][ T9263] Code: Unable to access opcode bytes at 0x7fa628b8e8ff. [ 206.859743][ T9263] RSP: 002b:00007ffc83d5b088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 206.868171][ T9263] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa628b8e929 [ 206.876144][ T9263] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 206.884120][ T9263] RBP: 00007fa628bee8f0 R08: 00007ffc83d58e27 R09: 0000000000000003 [ 206.892098][ T9263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.900075][ T9263] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc83d5b240 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 206.908058][ T9263] [ 206.911186][ T9263] Modules linked in: [ 206.917099][ T9263] ---[ end trace 0000000000000000 ]--- [ 206.984500][ T9263] RIP: 0010:kernfs_rename_ns+0x3a/0x7a0 [ 207.180562][ T9263] Code: ec 48 48 89 cb 48 89 54 24 10 49 89 f5 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 31 5e 62 ff 4d 8d 7e 30 4c 89 fd 48 c1 ed 03 <42> 80 7c 25 00 00 74 08 4c 89 ff e8 86 de c5 ff 49 83 3f 00 0f 84 [ 207.228622][ T9263] RSP: 0018:ffffc9000416f7e0 EFLAGS: 00010206 [ 207.235759][ T9263] RAX: ffffffff825e01cf RBX: 0000000000000000 RCX: ffff88806e19bc00 [ 207.267035][ T9263] RDX: 0000000000000000 RSI: ffff888021aa0960 RDI: 0000000000000000 [ 207.275093][ T9263] RBP: 0000000000000006 R08: ffff88806e19bc00 R09: 0000000000000008 [ 207.320433][ T9263] R10: 0000000000000007 R11: 0000000000000000 R12: dffffc0000000000 [ 207.337036][ T9263] R13: ffff888021aa0960 R14: 0000000000000000 R15: 0000000000000030 [ 207.345055][ T9263] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 207.369849][ T9263] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.376493][ T9263] CR2: 0000001b31112ff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 207.408914][ T9263] Kernel panic - not syncing: Fatal exception [ 207.415349][ T9263] Kernel Offset: disabled [ 207.419681][ T9263] Rebooting in 86400 seconds..