last executing test programs: 1m8.025305865s ago: executing program 1 (id=1063): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x178) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0xde20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="30000000180007006cbd7000000000001c140000fe80000100000020"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000902000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 57.573429384s ago: executing program 1 (id=1063): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="872d0000000000000502800003df1b1ad6e47c1de352858e62559245b610ac6a1bbb3cc754a89a3e99bf39d60f222eab4800354e47ca14eff3a0625531ba7a8137cbc44236b4b47ff712f075301798941ef6880a2bf010d761add6f0e573545aa488f5c52964c26332f592fe79f50d0e83ade54bcb6d680203c89f305f228dc6e949cfd08b10eb3dab03a046de7d3b4289df8cff2cd3c83886630a4f8c53ee1139696576201a542a793fcf019696f0d5cb9565af77d19edb2e82978bec85716a4b40d102c507e90bb2f33946145869f4c9a587ccf3f13e8a3ebcfcbad8d654ad833bf2ee6e9a84353044245527c91000000000000000000000000000000001040109071800000000040103000001000000000000feffffffffffffff040107c976fe8800000000000000000000000000010740000000000e1a06000400000000000000ff7f0000000000007b01000000000000ff07000000000000ff01000000000000ffffffffffffff7f04000000000000000000000000219a555e9cede4b97717c3afa7e09543e7be7d1393d9c53b7972a871e67f2fd5f7753a64dc74d1b8eef5560d096d446813c34b4a9abecd8245b77b7640d6449b8efcdf4aff9030b1112a9109bccd88ae83bd6bbc8eb7a534c2c17d3a2ac4954a3c1cd1533a69709d6d3f6cff9f6616a352ab8db22a25a5af0d056782c4eaaf2421ea7bec20654c68d7f99aafacf01ee6cc3e29a8f9e7db3ac65c68f967c7fc756c0f7efabfa6b264c9dfa6c4a46bb2380934319be8a446ab9104"], 0x178) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0xde20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="30000000180007006cbd7000000000001c140000fe80000100000020"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000902000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 46.703192194s ago: executing program 1 (id=1063): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x178) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0xde20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="30000000180007006cbd7000000000001c140000fe80000100000020"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000902000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 36.026886814s ago: executing program 1 (id=1063): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x178) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0xde20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="30000000180007006cbd7000000000001c140000fe80000100000020"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000902000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 21.476969453s ago: executing program 1 (id=1063): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x178) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0xde20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="30000000180007006cbd7000000000001c140000fe80000100000020"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000902000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 11.201812016s ago: executing program 1 (id=1063): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x178) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0xde20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="30000000180007006cbd7000000000001c140000fe80000100000020"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000003c0)="b9e403c6631eb9d84a29394d5aa05dd7cf5c0a", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000902000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') 4.33566482s ago: executing program 2 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a00e0000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 4.174635007s ago: executing program 2 (id=2078): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0xd75) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) (fail_nth: 3) 3.827797282s ago: executing program 2 (id=2081): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) socket$nl_route(0x10, 0x3, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x12, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 2.951730402s ago: executing program 2 (id=2090): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x7, @local, 0x10000}, 0x1c) 2.913679801s ago: executing program 4 (id=2091): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000079100000000000006300c0ff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = accept4$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x10, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'gretap0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x9, 0x8003, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'dummy0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 2.681226779s ago: executing program 4 (id=2093): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r0) 2.394458449s ago: executing program 3 (id=2094): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0051000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff11000000"]}, 0x108) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xb5e711c8a8eb3847}, @TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x0, 0x0, 0x6}}]}}}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010800000000030000000b04000008000300", @ANYRES32=r9, @ANYBLOB="2000508005000200000000000800030001ac0f00090001007ee5d52ffd000000"], 0x3c}}, 0x0) epoll_create1(0x80000) r10 = socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000900053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) 2.077090078s ago: executing program 0 (id=2095): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.946512319s ago: executing program 0 (id=2096): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 1.841538543s ago: executing program 2 (id=2097): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc79, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pi6 \x00'}, 0x20) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000100)=0xfffffffffffffde1) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x170bd26, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x2, {@in6_addr=@loopback, 0x800}}}]}, 0x38}}, 0x4040) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40201, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6]) 1.573996721s ago: executing program 0 (id=2098): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (fail_nth: 86) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 1.434821468s ago: executing program 4 (id=2099): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000008000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000440d09ff"], 0x40}, 0x20002880) 1.10160009s ago: executing program 4 (id=2100): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a"], 0x5c}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005800)=ANY=[@ANYBLOB="05000000000000000000000000040600", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00e2fe9b91"], 0x38}, 0x2}, 0x0) 1.015855282s ago: executing program 0 (id=2101): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x81, 0x4) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@fixed}) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$alg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="b5d40b9b3852b004326f8e36f7a4115d283d820d43e77eaedf66cb54ff075a28ac42b505a9567b15ea33ae7c806e90fa473af8672c3914d83fafee00349efcabb80c4b03e44112e0c72b927ad4e99f9eb8554c87edf724b5bcca55e249429399e870d819c2649f31d0b60d40adbf0afd9a02b901219f39fba17c5ee7685488ee734eb5d4e396876e168a1cb97681f1fb93b0bdcbba32e0b056e30df2802c570ecf84cd121e488185f6e1ffad3d266e57e34789a408927fbe88e98b5a0ffb8e7e7efd18214efc5e9fa919b7bf21b4fa7f8a80666ee197", 0xd6}], 0x1, &(0x7f0000000200)=[@iv={0x50, 0x117, 0x2, 0x3c, "84d14fed7a430de217f89d5c29e578cae2f39af6db7c5cd26ea36999c7aaef83641f0a2447f3a25458d5bda2f68296775f97ae821f80125d8ba9cd61"}], 0x50, 0x20000084}, 0x800) 1.014821395s ago: executing program 3 (id=2102): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95ff}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 890.39785ms ago: executing program 0 (id=2103): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000003e3fffffe0300000200008010000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400000005000000fcffffffffffffff0000000000000000"], 0x50) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9e, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) (async) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9e, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000fc0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078252000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000af8a0085000000cb000000950000000000000044fc2463c83f"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r1], 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000001000000b8fe0000baf700002e600100", @ANYRES32=0x1, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000050000000900"/24, @ANYRES32, @ANYBLOB], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000001000000b8fe0000baf700002e600100", @ANYRES32=0x1, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000050000000900"/24, @ANYRES32, @ANYBLOB], 0x50) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000006800000327bd7000fddbdf250a000400040000000c0008800500080020000000040001000000000008000100010000000600070003000000080001000200000014000600fc00000000000000000000000000000114000600ac1e000100000000000000000000000004000b000400040060ee7b346988f0287b1a27f04d5afda40e0410f7b950"], 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000006800000327bd7000fddbdf250a000400040000000c0008800500080020000000040001000000000008000100010000000600070003000000080001000200000014000600fc00000000000000000000000000000114000600ac1e000100000000000000000000000004000b000400040060ee7b346988f0287b1a27f04d5afda40e0410f7b950"], 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) unshare(0x22020600) syz_open_procfs$namespace(0x0, &(0x7f0000002e40)='ns/ipc\x00') (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000002e40)='ns/ipc\x00') ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, 0x0) (async) ioctl$BTRFS_IOC_ADD_DEV(r7, 0x5000940a, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44001) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x35, &(0x7f0000000040)=0x100001, 0x4) (async) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x35, &(0x7f0000000040)=0x100001, 0x4) 888.44575ms ago: executing program 4 (id=2104): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3c}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x6, {{0x6, 0x4, 0x2, 0x2b, 0x18, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop]}}}}}) socket$inet6(0xa, 0x80003, 0xff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x0, 0x4c, 0x232, 0x0, 0x0, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [0x0, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4=@rand_addr=0x64010100, [], @ipv4=@broadcast, [0x7000000], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2, [0x0, 0xff000000]}], 0x1, 0x2000}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x0, 0x2}, {0xffffffffffffffff, 0x3, 0x1}, 0xfffff800, 0x844}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast1, [], [], 'ip6gre0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0x0, 0x2, 0xd, 'snmp\x00', 'syz0\x00', {0x401}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) accept4$ax25(r3, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$vsock_stream(r5, &(0x7f00000016c0)={0x28, 0x0, 0x2711}, 0x10) getsockopt$inet_int(r3, 0x0, 0x9aedde662c00cdfe, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 761.933847ms ago: executing program 3 (id=2105): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000006780)=[{{&(0x7f0000000180)=@ethernet={0x306, @link_local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="851e7cf70ac069b4518d056cb820aea1cec0d1f93a4db33a8b0502880dabed403cfda9c85ed62ee9a2ab", 0x2a}, {&(0x7f0000000200)="df8966d1bc6fd2386c827912a3e2b3cded8e40ba107ad9cb9364930d6a51ab3091", 0x21}, {&(0x7f0000000300)="645029e4805f54dcf4ebee53d1948d3d25915edd50c1e0bd2c30da1472392f4cda10426b814075b83f77bb0d65a772a44240f8a5bbcb77acf10cad9663220a4f0c742945e236200f7e060861fb08c5c4454f304dfbb67ff61c639e2a9dfdf0d2754febc6e62acb6ca47359592947ec7e94b03e7f06ceff0e9baa06cbd1bce1850593adeea5802490aa38d1e55e96fc146b1a51ff4cfc6740", 0x98}, {&(0x7f00000003c0)="763b99cdfb4468abc8782b9ebde6cd652ef52dc803ef3d43fe4a84802959dfc70e4f27e7082328a262ebf5d2a5264c609087d2a4dc652eba976e116a0bfe900ee7b74914443fd49e35516a2539085c6cd345bac277e60545b3d1e02011721df1602102538d5bf7ad78eeea426d08f5af3c968b400ae324ba612e550b98aae2b89f82f256c0eb495cb07bd5a607eaaa390aa9d98a2194838a8af552495fe26def2126a146513e1c1a6e1843a7237281cf00fafc95ac452ec377a15c36cfa4c9b06451", 0xc2}], 0x4, &(0x7f00000005c0)=[{0x70, 0x3a, 0x7, "52cfd5b4871e6f9b598dce75e510c674af22050b98658a3d64bc57fce783f51ebeb98672ebae50a1262eba6d034a8546597a553321d9dacd489f46180882c15e78a23851217f700534a847490318794b6c3cfc1877b6d206d1ff62"}, {0x100, 0x1, 0x0, "12629c5b85447bbaaec33fb64a1d745a37083c5a8bca3b3124780230437e2d8d0b23474195132e4ddeb130db2a422222d09d7ad7948233a0825d0fd79e084b88710952026de1a33bcf7275aed0ea375901dcdc5f071468e1119b33ef638dc32f5469b3a833de6578515f23cc18940fab469166bbf70c6e65ec41963adcb0675b56cb18e8add3ac5112741eb160c75d95fafd6f1244d7f5392bba931c81f8df805c7dfe812cbdf72fbc7afa6fc5090500622eb107dbce432d2487818115c978afdaa583e22088cfa9d890a2b521db91c1f72279e70965db7c81518ea854831bf767280a1b4356c50f25e5"}, {0x28, 0x6, 0xe9e, "b5a88bd3a49583e8960b671186d8ce623f34"}, {0x20, 0x3a, 0x9, "8b0006690c64e7942514e11988c5515a"}, {0x40, 0x108, 0x24b, "d173ce10bac0b2eb34ac175fd1570b25120de1782119025cf961241d26c5f053ac9aabb4ed62b44962"}, {0xa8, 0x115, 0x5, "74cd197e74dfa2a91aa7ada1076e2808e8fa9d049f80aecbf711d35786924cd61a8dd82d80d80933f65cdf03f4b64e7891d797151a5907245a47ec0767781eb7d1419ae38ee40d73329f744f9f6ba5daaefc0164fe1967b305199e932795e5b93cfc2e17a3109177a3a7b60fc9eef7bff2fb642ff21c5a5fa2af1e713d0726e6f189669bab204a02f2fa96ba06980b040731b4e60e2f80"}, {0x100, 0x119, 0x1, "9a90b8237b1c3bf5a9a11b4d2148cbcdddd5b6e63553551d6dc6cf3a5391cc3e456d09b492ab400f7b4803f3629399fa81bf8fb43cae80ddb1bdfecb99d7a8765703c4ca657f18535be9cec1f818dfe1db52b2efba15e44cc8a4af02b648f531f9691d630ca1d21e23aafdc61cfb8b223f084ba3ede2d2ed98d43aad2ab66a9dfc28ebe351b18af63a34f627230c236b9dc078afdde7e1d1fea76775fd0950e6737bd3e58dceb5f4457f450844557dbfe6a97bf42917fdd6c062a3a3091e4e0d8d6279b55e3c33cc9a284adab8fca1b1496b9303e5a6cc53530f11669406df6dc5a7b541673a0cc06a"}, {0x1010, 0x115, 0x6, "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"}, {0x28, 0x10d, 0x4, "27460801bc96a36e43d38b21d6eddc19dc984f88"}], 0x13d8}}, {{&(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x4, {0xa, 0x4e24, 0xcf4, @local, 0x5}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000019c0)="28809c950699d9f9bd37cb51f4359efe54e278794aaf58b876df4926f209d6992e8ffd252d54117e90b0031561e51d13678ab7ad9b49da68ef042773455ac6ff6822fa9169744a6d6feff300f5db34e751a2ef6f7af530f0584f173a18cf5bc06e9c0bbbaa98d4bd2961d644d3cdf5d8e257e49f613fee9e547c8feda0c91b7e4f50c7d97ebe20ab76d820ccbff3250db796a103199c268666987040e879edbefa517208239ef6138ca108508968d6d715bdc30bc17187c0ef04d0c6", 0xbc}, {&(0x7f0000000540)="0da73b87ecd58a662bed6d94194c43fd43a5e5ad3d440a4b42bef19cce69112dd1", 0x21}, {&(0x7f0000001a80)="6a998fbfaecd6efbda403d899c2f0ff6a85c4b73ee1881ed5e723a04063541541d846e04a31f265185b5c06beb390b5efb4757d4c95c66808074935c537dce8ac5498b8459467d3be4322e1ab724967c0fb6d1a0efd1aab61a848ba2776ba6b4bd74c4abf8cdca2e275a0efd952289add8752d2a3ae8e37384440102d003d7639f41b3616a0bee9ec5febc2cca825d28986487488b9696a9446e20b672554b229894dfb4190eb93b65b5140e65d92d15", 0xb0}], 0x3, &(0x7f0000001b80)=[{0x48, 0x114, 0x2a75, "edede80d88f949d73f07df516db83d0ff44ca7ef5713ece9f24e74325eb799cdf35a2cfa46376649c4295cf4ec9720aabc47b4f552bd23"}, {0x20, 0x1, 0x10001, "9dd494232524edf48de237ddbb6c6e"}, {0xc0, 0x101, 0x4, "a63a802c3e333e015ca9220286b84306c2cbe4c36158f9267a0d036b624e10f4b3c40a828f5c7aed6713423df50aef3c61ef59b3af66e42592f4389787297dcde8ae0c10b55a446f36ec5840d0205226b4ee7c60cc2e32b3d0cbc046516fca2516be1fb4724e27e872b43568b9e3ff56b37b50ad4e996cd74a541490cfd4565a597f8255ec7605d83c99ab0b2a8b341dfc0cf8bee26f48a31e352d80c07b147687d4be7e3e7c3683afe3655f08af7d"}, {0x70, 0x115, 0x8, "a03461a69ac84ded7873e7a7c90ad0512e57c0b6e72657894257fa0ce2f88176d6240713dfa7ab45b4719e68dcf22bce7389e3bf68267f727656f729cba5753645d40b9e12abeede553f0059628283bf2aaf81ef4ecacd6d6a46419ec6"}, {0x100, 0x0, 0x1, "424ab7b94ec783e7930e2750ae5f92b5d961024e8dda9e38de04e1ac4f22dc73f5125af2426e14b2938dce79d511c5addcdf57685c28485df1244aca7bd5268767090b01ced1d252da22517507bc5a033074ba670c4617844ef334a9fb16367c253e409a39d3f3b254853847bfea8c7af1d68f39278d66d783f2b43097cc039fc4b1ca6c828d67166e4d5d878fbd11360035ac34ac69b71e672267aa600a808173399e0dda8d88e92ffc65321ed3654aab1511d86ef054a067fa73c6e06d597ca2acdaebdac1fb063bb23bd91c224581d85b7ea3667c9ce39038a00479099c36dd1fad44e512d82e6f7f"}, {0x18, 0x113, 0x80, 'R'}, {0x1010, 0x108, 0x80000001, "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"}, {0x100, 0x101, 0x48, "153b4c2726ef0a90a9baf3e53cb46aa74142180fe17c896b99c063fc33809e61704ef2a4fe6427acad82cdf2bec7c5d55b9eb3d7ec2b883767d31caa28bce90a075a421e9d3ae5f1cc14072f52e45848471531b563c7743b7bf7ca57de1c4ebbf7775aae6f69e37b41fbb5fddaf301b3c19a7fa480c955b5012b301fc5c1a8bfd37515f6801226479faa49e81b811eb5caaa0907465e81085a7477a7ad7ee71a864ff6f6275817ca4cf8e6e693af956e5411fe7d531e26ccc3e17dced90239abfd0f883f99170de41948563121262041235e2996883712a9b3f651423909739c1b6e272f9a9037500ac817c758"}], 0x13c0}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000002f40)="94475600d09687a1e365c99dcc13c6d06154a0b2995f09e688054499a561fb34b8a44d6b1b1968a1bfc092454e421ff98d83ebd1e17fc4f652fdca3a230a564eeb301e06fcf997d1578e87753a79fe75c5e36f5c8e5c3a08bd456de84dfb56782939cadc4d74aab7982a5a63b3cfc2addaece834fdfd275f7293a14e5f86ebd676097520", 0x84}, {&(0x7f0000003000)="27e1f1ae95d3fa24e0a4e1ef7adf60f7961114391f84753794cf333fee47d4f825e02bb5ba7655907d844aabbe363569cb00400607aac4b8242286df6901e04a7395db1e3e2c37026d90e3bfb2aa499bf3778c373d6240b283cb718eeefa239d6ab5608c1b53a5a18905cadc782eaf1eb4e63add6f036d5df9785539be0abf1faffbbdfb6f63114e648dc0fe0340e5bd9e2ff2e94e4f732dae0f7561306076f6dc34c6e8d58190830ce5db85f8891184add57826db7aec1b3ee431adda4fe35252ea3b1c51a213b425d11ca24e7f757391ddb2819b89c7ea5288cd2fd14dff", 0xdf}, {&(0x7f0000003100)="6c105bfe88477e9e19445b8608678ff44c9501a5f6e8d18f567653cebd602392f33103beae7890d5da3022ce18d0d1e5a8", 0x31}, {&(0x7f0000003140)="71aefccdcf6a26e2b37da2bfcefe4427dfb85632091830bb5cdc2778c484fe028b8645e04bbfe73a2effc1a91c8fc1fe211e66938b695baafd95484d88dcd100c6b6a6ed5a3874b4d579bab93934f711d756a803de97d68da46d8686367f42e6fdafa9cf644be5d3a227c5616421f8f552645320d06d040a02a60542ab526ac4750fccb7ace7cbc721628b77312c954c5efb6d4827834549a9cd27fe5ae72af8dfba1a941ced2eab8062c6e7deecc3f7e9134ad97468fee518fb1aab9d42a141c698496c271d73e4071656f6a6504daf4f974ca72880c93056e553c07605b5bcfabd0022ec856075eea927508792e343", 0xf0}], 0x4, &(0x7f0000003280)=[{0x68, 0x0, 0x32e2, "0e15fd63c0f3e02c1b65e927606c1df1fdeee673df3c2bf9831cbb3ae82cb64c3f7d57e290fde665a566137452d22837cec4396132c980bce4628d72544b6aef47e9f7946f09acff5d8a247739fc1dafcb25a75a87"}], 0x68}}, {{0x0, 0x0, &(0x7f0000004900)=[{0x0}, {&(0x7f0000003400)="4026331a1aa94b87453f06a2dba7e50e71f99c7e9f77620dcf5e03d3a70255783b26e59eee3daed068c23bce80634160a18ef6c6dae208a6b9e8416e410f0d79f84dd7eda7f888b5d587fcf6fbd4586c6d0df608c1e7d4ce2eb695c8b7a91d4e7944851f66854e299dc07acd6fa02b7a172d5c0920f0800e207921742af203b7ca524e2c59ce368098249f9e2ef474893b87ad4212353af2821ebc5c7fb3625daf1afe174396296aeddb140b12435be56d7a9dc3c4bd32ea45586dd0fae7eb13678e1dcd134ca780662ca7e5a676aca322d56d9ab908cd5c387f433823305668bf", 0xe1}, {&(0x7f0000003500)="ae22bd434295a8035d0e173d75630a09a22a11d11ac25be2d2f136f27fbb2c1d76757540febd4a46cf444ea28a0d4d317401d34467ff5a9abec9d6918ed4bf835d8c3a59f6e3a9dd480f003a903640913c30dfef97010ca7f69dd72567b8e5ed6d2a30b7f65134e897c2d83dcfdea09763adad44af92871ee28135ce5a1734478f53cb18921d2ceb43e001f0e12ef7a67c94da5c3f9a", 0x96}, {&(0x7f00000035c0)="50cd47e00155bd763de27efc07ed00b056eb86d4868d3659101a76feef062f9b145919ef4ffcff153a6d08b6bb80ee25006f46bf3d8d5362ae857154e5708314be43b97091f1d6bfe16dfe10ecb3f5adcfffc0bfd41aecc06c0513c9d25182287355572aec231ed6a9fe65d2b3b337b346b271a62c2d97fd1aee7af0ba1b8203987dfb92eb9eeb6a8da9b398fd630a5831834b55949643cde5044b3fe085281de5c2b7899f8fd6bceb3ba3ded0bf3f0b53e5b45bc31ec048aa7b6baed9704af0", 0xc0}, {&(0x7f0000003680)="40572e183849d5927ec227161321fb30c70dfd2ecd62caf194f5f9f5f0f0a3186302f8ba40ae34f284b53462c6c88fa7c7f796d4bef1619b7796f1d4ed98583d17c6cce6e42a65431f7a68a49e02b06fd5d7c8309f7ee49b663d752f10bdcfe3d3ab73342ee1c5effdfae50203f481c726e657bee7ea099bbf4c843798424fe98b445cf3d8b1d82231ceb2df2440395ae7cc9b11c640ef8e783160dee7b186ca120d0073baf6ed9d38687080769cfd90dfd82f3554109c80848f0f32ea", 0xbd}, {&(0x7f0000003740)="8ca444712d2785dc5604c52dc65f7deb752faf62a99c77ee0c05ce5df24344eada7262a98f74656a77e6c62b9ec989e48df73948de8a4774222108e26f62bca4baec59cce206edbe0056dcce5808b9f8214b61d0424a1bf055d9a4f9084a147bebf3", 0x62}, {&(0x7f00000037c0)="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", 0x22e}], 0x7, &(0x7f00000049c0)=[{0xc8, 0x114, 0x0, "cda4541392cc3f2006da6f43fc8688ec237eba4fb5940d30d72c4823eda9f9d6110500975c38bc9f13b6507ca2d268dd1432ce18e9cdd2f27ca339eed3584d82ea259d49b7b0b3a0f6e4ec00991d91d0704fd0599e5e0e5855140b2ca16b1efa8cece77b1de3392f843c584fc260f18f08de8998091b2974919d639675b4dc87ba9eff8bfe3f39b3ce7ceb1f559c0b79432c642d421dd125a28f0b8ad94d5ac3f660e561ec32053260b115df2c5cd55c342870c8d2"}, {0xd0, 0x118, 0x9, "46f4752260d3ac4667118d17c69dd34bea0c1652aa3d640320658d96e76e81d568b869cfc682e57f5f5d0da6ccc3b5368a5ab79a647ad9bc8c296468bf04cac750861f8bf74c91b04fa3dc557434eb63e43a268b41ccf2f0aea203626f1fb48313e0121223414c8308ba0943a3600aeb956290a3ec5c6784cf30cccbda11f5d0772226036d2cc13bf015610dee7a7a2d81bff602907884e6749a19fe6dd076677b86040132346376a2cd3a5786b8c3df5ac8a71dab38b5b1a2475c1aa3"}], 0x198}}], 0x4, 0x800) 570.952173ms ago: executing program 3 (id=2106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='reno\x00', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25012000244e4a0700014100000018001700000000000000006574683a7465616d30000000"], 0x34}}, 0x0) 422.593411ms ago: executing program 0 (id=2107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e1c, 0x0, @loopback, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x7, @local, 0x10000}, 0x1c) 384.589328ms ago: executing program 3 (id=2108): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0041}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', r0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 91.127542ms ago: executing program 4 (id=2109): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) unshare(0x26020480) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe73}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x10, 0x6, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0xf00]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 3.002826ms ago: executing program 3 (id=2110): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 0s ago: executing program 2 (id=2111): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@fallback=r2, r2, 0x2f, 0x2000, 0x0, @value}, 0x20) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0x3}}}, 0x24}}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000980)={0x204, 0x0, 0x1, 0x1002, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80}]}, @CTA_NAT_SRC={0x6c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x1}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}, @CTA_TUPLE_ORIG={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4e8b278}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x801}, 0x4044041) r6 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/83, 0x53}, {&(0x7f0000002040)=""/4078, 0xfee}, {&(0x7f00000018c0)=""/181, 0xb5}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000480)=""/120, 0x78}], 0x6}}], 0x1, 0x40000000, 0x0) write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$can_raw(r3, &(0x7f0000001080), 0x10) read(r3, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r7}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x3, 0x0, 0x0, "626c1cb900000054"}, 0x10}}, 0x20000001) sendmsg$can_raw(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@can={{0x3, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "c57be74c8630b9da"}, 0x10}}, 0x4000000) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x4008800) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="3900000014008157efb0349a2e2125ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582b", 0x39}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 8] bridge_slave_0: left allmulticast mode [ 203.577041][ T748] bridge_slave_0: left promiscuous mode [ 203.582803][ T748] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.188402][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.201223][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.213536][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.227614][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.235592][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.281495][T10469] __nla_validate_parse: 6 callbacks suppressed [ 204.281513][T10469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1398'. [ 204.358049][T10474] netlink: 'syz.2.1398': attribute type 4 has an invalid length. [ 204.412988][ T748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.424016][ T748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.433650][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 204.460689][ T748] bond0 (unregistering): Released all slaves [ 204.659547][T10476] syzkaller1: entered promiscuous mode [ 204.665055][T10476] syzkaller1: entered allmulticast mode [ 204.711014][T10479] netlink: 'syz.3.1400': attribute type 4 has an invalid length. [ 204.746585][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1400'. [ 205.124597][T10490] veth1_macvtap: left promiscuous mode [ 205.135299][T10493] veth1_macvtap: entered promiscuous mode [ 205.252818][ T748] hsr_slave_0: left promiscuous mode [ 205.304111][ T748] hsr_slave_1: left promiscuous mode [ 205.322220][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.354269][ T748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.383381][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.401646][ T748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.403081][T10512] sctp: [Deprecated]: syz.2.1411 (pid 10512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.403081][T10512] Use struct sctp_sack_info instead [ 205.478845][ T748] veth1_macvtap: left promiscuous mode [ 205.495033][ T748] veth0_macvtap: left promiscuous mode [ 205.508328][ T748] veth1_vlan: left promiscuous mode [ 205.520606][ T748] veth0_vlan: left promiscuous mode [ 206.013890][ T748] team0 (unregistering): Port device team_slave_1 removed [ 206.050423][ T748] team0 (unregistering): Port device team_slave_0 removed [ 206.266331][ T5851] Bluetooth: hci0: command tx timeout [ 206.506313][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.580231][T10533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1419'. [ 206.589370][T10533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1419'. [ 206.612006][T10535] FAULT_INJECTION: forcing a failure. [ 206.612006][T10535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.618340][T10466] chnl_net:caif_netlink_parms(): no params data found [ 206.628438][T10535] CPU: 0 UID: 0 PID: 10535 Comm: syz.2.1420 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 206.628463][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.628474][T10535] Call Trace: [ 206.628481][T10535] [ 206.628488][T10535] dump_stack_lvl+0x189/0x250 [ 206.628517][T10535] ? __pfx____ratelimit+0x10/0x10 [ 206.628534][T10535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.628557][T10535] ? __pfx__printk+0x10/0x10 [ 206.628576][T10535] ? __might_fault+0xb0/0x130 [ 206.628603][T10535] should_fail_ex+0x414/0x560 [ 206.628628][T10535] _copy_from_iter+0x1db/0x16f0 [ 206.628654][T10535] ? rcu_is_watching+0x15/0xb0 [ 206.628679][T10535] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 206.628697][T10535] ? __pfx__copy_from_iter+0x10/0x10 [ 206.628720][T10535] ? __build_skb_around+0x257/0x3e0 [ 206.628745][T10535] ? netlink_sendmsg+0x642/0xb30 [ 206.628764][T10535] ? skb_put+0x11b/0x210 [ 206.628788][T10535] netlink_sendmsg+0x6b2/0xb30 [ 206.628816][T10535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.628840][T10535] ? aa_sock_msg_perm+0x94/0x160 [ 206.628862][T10535] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.628880][T10535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.628901][T10535] __sock_sendmsg+0x21c/0x270 [ 206.628922][T10535] ____sys_sendmsg+0x505/0x830 [ 206.628950][T10535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.628981][T10535] ? import_iovec+0x74/0xa0 [ 206.629001][T10535] ___sys_sendmsg+0x21f/0x2a0 [ 206.629023][T10535] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.629080][T10535] ? __fget_files+0x2a/0x420 [ 206.629096][T10535] ? __fget_files+0x3a0/0x420 [ 206.629123][T10535] __x64_sys_sendmsg+0x19b/0x260 [ 206.629148][T10535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.629177][T10535] ? __pfx_ksys_write+0x10/0x10 [ 206.629190][T10535] ? rcu_is_watching+0x15/0xb0 [ 206.629304][T10535] ? do_syscall_64+0xbe/0x3b0 [ 206.629325][T10535] do_syscall_64+0xfa/0x3b0 [ 206.629341][T10535] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.629357][T10535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.629373][T10535] ? clear_bhb_loop+0x60/0xb0 [ 206.629392][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.629407][T10535] RIP: 0033:0x7f8153b8e929 [ 206.629423][T10535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.629436][T10535] RSP: 002b:00007f8154a67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.629454][T10535] RAX: ffffffffffffffda RBX: 00007f8153db5fa0 RCX: 00007f8153b8e929 [ 206.629465][T10535] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000004 [ 206.629476][T10535] RBP: 00007f8154a67090 R08: 0000000000000000 R09: 0000000000000000 [ 206.629486][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.629495][T10535] R13: 0000000000000000 R14: 00007f8153db5fa0 R15: 00007fffc4330d48 [ 206.629522][T10535] [ 206.752130][T10540] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 207.149183][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.156840][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.173387][T10466] bridge_slave_0: entered allmulticast mode [ 207.201825][T10466] bridge_slave_0: entered promiscuous mode [ 207.240466][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.288146][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.295383][T10466] bridge_slave_1: entered allmulticast mode [ 207.333093][T10466] bridge_slave_1: entered promiscuous mode [ 207.344242][T10563] netlink: 'syz.0.1430': attribute type 39 has an invalid length. [ 207.403286][T10567] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 207.527283][T10567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.549697][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.583173][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.599490][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 207.617492][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 207.619388][T10572] bond3: (slave ip6gretap1): making interface the new active one [ 207.632863][T10580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'. [ 207.635576][T10572] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 207.750318][T10580] netlink: 'syz.0.1434': attribute type 4 has an invalid length. [ 207.754736][T10466] team0: Port device team_slave_0 added [ 207.770056][T10466] team0: Port device team_slave_1 added [ 207.780395][T10585] FAULT_INJECTION: forcing a failure. [ 207.780395][T10585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.797985][T10585] CPU: 0 UID: 0 PID: 10585 Comm: syz.4.1436 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 207.798012][T10585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.798023][T10585] Call Trace: [ 207.798030][T10585] [ 207.798039][T10585] dump_stack_lvl+0x189/0x250 [ 207.798066][T10585] ? __pfx____ratelimit+0x10/0x10 [ 207.798083][T10585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.798106][T10585] ? __pfx__printk+0x10/0x10 [ 207.798125][T10585] ? __might_fault+0xb0/0x130 [ 207.798153][T10585] should_fail_ex+0x414/0x560 [ 207.798179][T10585] _copy_from_iter+0x1db/0x16f0 [ 207.798205][T10585] ? rep_movs_alternative+0x4a/0x90 [ 207.798234][T10585] ? __pfx__copy_from_iter+0x10/0x10 [ 207.798253][T10585] ? sock_alloc_send_pskb+0x875/0x990 [ 207.798278][T10585] ? __pfx__copy_from_iter+0x10/0x10 [ 207.798303][T10585] ? page_copy_sane+0x16a/0x280 [ 207.798336][T10585] copy_page_from_iter+0xdd/0x170 [ 207.798364][T10585] skb_copy_datagram_from_iter+0x306/0x720 [ 207.798394][T10585] unix_stream_sendmsg+0x5a1/0xc90 [ 207.798430][T10585] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 207.798459][T10585] ? aa_sock_msg_perm+0x94/0x160 [ 207.798481][T10585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.798501][T10585] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 207.798523][T10585] __sock_sendmsg+0x21c/0x270 [ 207.798545][T10585] ____sys_sendmsg+0x505/0x830 [ 207.798573][T10585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.798603][T10585] ? import_iovec+0x74/0xa0 [ 207.798623][T10585] ___sys_sendmsg+0x21f/0x2a0 [ 207.798648][T10585] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.798706][T10585] ? __fget_files+0x2a/0x420 [ 207.798723][T10585] ? __fget_files+0x3a0/0x420 [ 207.798751][T10585] __x64_sys_sendmsg+0x19b/0x260 [ 207.798777][T10585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.798809][T10585] ? __pfx_ksys_write+0x10/0x10 [ 207.798823][T10585] ? rcu_is_watching+0x15/0xb0 [ 207.798852][T10585] ? do_syscall_64+0xbe/0x3b0 [ 207.798874][T10585] do_syscall_64+0xfa/0x3b0 [ 207.798890][T10585] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.798907][T10585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.798923][T10585] ? clear_bhb_loop+0x60/0xb0 [ 207.798944][T10585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.798960][T10585] RIP: 0033:0x7fce73f8e929 [ 207.798976][T10585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.798990][T10585] RSP: 002b:00007fce74ea8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.799009][T10585] RAX: ffffffffffffffda RBX: 00007fce741b5fa0 RCX: 00007fce73f8e929 [ 207.799022][T10585] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 207.799033][T10585] RBP: 00007fce74ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 207.799044][T10585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.799054][T10585] R13: 0000000000000000 R14: 00007fce741b5fa0 R15: 00007ffd666ccb68 [ 207.799082][T10585] [ 208.097829][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.104787][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.131827][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.144987][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.151981][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.198975][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.309967][T10595] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1440'. [ 208.352770][ T5835] Bluetooth: hci0: command tx timeout [ 208.371151][T10594] vlan1: entered promiscuous mode [ 208.377077][T10594] vlan1: entered allmulticast mode [ 208.382756][T10594] hsr_slave_1: entered allmulticast mode [ 208.403890][T10466] hsr_slave_0: entered promiscuous mode [ 208.429830][T10466] hsr_slave_1: entered promiscuous mode [ 208.588658][T10609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1445'. [ 208.598112][T10609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1445'. [ 208.718454][T10614] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 208.833156][T10621] tipc: Enabling of bearer rejected, already enabled [ 209.222876][T10466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.255797][T10466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.296525][T10466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.320930][T10466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.511032][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1463'. [ 209.549523][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 209.563769][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 209.565648][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.678039][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.701208][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.708474][ T2949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.739535][T10671] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1467'. [ 209.740023][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1466'. [ 209.763694][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.765970][T10668] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1466'. [ 209.770952][ T2949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.822725][T10673] xt_bpf: check failed: parse error [ 210.321099][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.431285][ T5835] Bluetooth: hci0: command 0x040f tx timeout [ 210.469342][T10466] veth0_vlan: entered promiscuous mode [ 210.532446][T10466] veth1_vlan: entered promiscuous mode [ 210.685288][T10466] veth0_macvtap: entered promiscuous mode [ 210.721353][T10466] veth1_macvtap: entered promiscuous mode [ 210.726962][T10700] netlink: 460 bytes leftover after parsing attributes in process `syz.0.1475'. [ 210.775701][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.812835][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.849516][ T1111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.881491][ T748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.933025][ T748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.954150][ T748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.045751][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'. [ 211.152575][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.162175][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.254694][T10722] Bluetooth: MGMT ver 1.23 [ 211.268976][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'. [ 211.379873][ T748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.391122][ T748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.420339][T10720] netlink: 'syz.4.1482': attribute type 4 has an invalid length. [ 211.989311][T10752] netlink: 'syz.2.1490': attribute type 11 has an invalid length. [ 211.997437][T10752] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1490'. [ 212.064887][T10759] netlink: zone id is out of range [ 212.070419][T10759] netlink: zone id is out of range [ 212.117791][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 212.143365][T10759] netlink: set zone limit has 4 unknown bytes [ 212.506468][ T5851] Bluetooth: hci0: command 0x040f tx timeout [ 212.513108][ T5835] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 213.023655][T10802] FAULT_INJECTION: forcing a failure. [ 213.023655][T10802] name failslab, interval 1, probability 0, space 0, times 0 [ 213.056373][T10802] CPU: 1 UID: 0 PID: 10802 Comm: syz.4.1506 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 213.056401][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.056412][T10802] Call Trace: [ 213.056420][T10802] [ 213.056428][T10802] dump_stack_lvl+0x189/0x250 [ 213.056456][T10802] ? __pfx____ratelimit+0x10/0x10 [ 213.056474][T10802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.056497][T10802] ? __pfx__printk+0x10/0x10 [ 213.056520][T10802] ? __pfx___might_resched+0x10/0x10 [ 213.056542][T10802] ? fs_reclaim_acquire+0x7d/0x100 [ 213.056566][T10802] should_fail_ex+0x414/0x560 [ 213.056592][T10802] should_failslab+0xa8/0x100 [ 213.056612][T10802] __kmalloc_cache_noprof+0x70/0x3d0 [ 213.056629][T10802] ? __request_module+0x2b5/0x5e0 [ 213.056655][T10802] __request_module+0x2b5/0x5e0 [ 213.056676][T10802] ? __pfx_aa_get_newest_label+0x10/0x10 [ 213.056701][T10802] ? __pfx___request_module+0x10/0x10 [ 213.056727][T10802] ? apparmor_capable+0x137/0x1b0 [ 213.056752][T10802] ? capable+0x89/0xe0 [ 213.056778][T10802] ? dev_load+0x21/0x1f0 [ 213.056800][T10802] devinet_ioctl+0x130/0x1b50 [ 213.056835][T10802] ? __pfx_devinet_ioctl+0x10/0x10 [ 213.056861][T10802] ? get_user_ifreq+0x12c/0x180 [ 213.056881][T10802] inet_ioctl+0x3c0/0x4c0 [ 213.056902][T10802] ? __pfx_inet_ioctl+0x10/0x10 [ 213.056939][T10802] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 213.056964][T10802] ? packet_ioctl+0x270/0x350 [ 213.056989][T10802] sock_do_ioctl+0xdc/0x300 [ 213.057010][T10802] ? __pfx_sock_do_ioctl+0x10/0x10 [ 213.057026][T10802] ? __lock_acquire+0xab9/0xd20 [ 213.057064][T10802] sock_ioctl+0x576/0x790 [ 213.057084][T10802] ? __pfx_sock_ioctl+0x10/0x10 [ 213.057102][T10802] ? __fget_files+0x2a/0x420 [ 213.057119][T10802] ? __fget_files+0x3a0/0x420 [ 213.057135][T10802] ? __fget_files+0x2a/0x420 [ 213.057157][T10802] ? bpf_lsm_file_ioctl+0x9/0x20 [ 213.057178][T10802] ? __pfx_sock_ioctl+0x10/0x10 [ 213.057195][T10802] __se_sys_ioctl+0xfc/0x170 [ 213.057221][T10802] do_syscall_64+0xfa/0x3b0 [ 213.057237][T10802] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.057254][T10802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.057270][T10802] ? clear_bhb_loop+0x60/0xb0 [ 213.057291][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.057307][T10802] RIP: 0033:0x7fce73f8e929 [ 213.057323][T10802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.057337][T10802] RSP: 002b:00007fce74ea8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.057355][T10802] RAX: ffffffffffffffda RBX: 00007fce741b5fa0 RCX: 00007fce73f8e929 [ 213.057368][T10802] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 213.057379][T10802] RBP: 00007fce74ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 213.057389][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.057403][T10802] R13: 0000000000000000 R14: 00007fce741b5fa0 R15: 00007ffd666ccb68 [ 213.057432][T10802] [ 213.762855][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.881835][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.026305][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 214.036776][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.114138][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.198790][ T36] bridge_slave_1: left allmulticast mode [ 214.204461][ T36] bridge_slave_1: left promiscuous mode [ 214.211241][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.221059][ T36] bridge_slave_0: left allmulticast mode [ 214.227164][ T36] bridge_slave_0: left promiscuous mode [ 214.232888][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.502273][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.556649][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.578035][ T36] bond0 (unregistering): Released all slaves [ 214.924756][T10851] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 214.937901][T10850] __nla_validate_parse: 8 callbacks suppressed [ 214.937922][T10850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1519'. [ 214.948156][T10851] netlink: 'syz.3.1518': attribute type 2 has an invalid length. [ 214.964595][T10850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1519'. [ 214.984174][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.994645][T10850] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 215.013502][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.026540][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.040736][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.055592][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.141176][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1520'. [ 215.215232][T10865] FAULT_INJECTION: forcing a failure. [ 215.215232][T10865] name failslab, interval 1, probability 0, space 0, times 0 [ 215.238410][T10865] CPU: 1 UID: 0 PID: 10865 Comm: syz.0.1521 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 215.238437][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.238447][T10865] Call Trace: [ 215.238455][T10865] [ 215.238462][T10865] dump_stack_lvl+0x189/0x250 [ 215.238490][T10865] ? __pfx____ratelimit+0x10/0x10 [ 215.238508][T10865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.238532][T10865] ? __pfx__printk+0x10/0x10 [ 215.238552][T10865] ? __pfx___might_resched+0x10/0x10 [ 215.238575][T10865] ? fs_reclaim_acquire+0x7d/0x100 [ 215.238600][T10865] should_fail_ex+0x414/0x560 [ 215.238624][T10865] should_failslab+0xa8/0x100 [ 215.238644][T10865] __kmalloc_noprof+0xcb/0x4f0 [ 215.238660][T10865] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 215.238684][T10865] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 215.238706][T10865] genl_family_rcv_msg_doit+0xb8/0x300 [ 215.238729][T10865] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 215.238748][T10865] ? rcu_is_watching+0x15/0xb0 [ 215.238775][T10865] ? apparmor_capable+0x137/0x1b0 [ 215.238794][T10865] ? bpf_lsm_capable+0x9/0x20 [ 215.238809][T10865] ? security_capable+0x7e/0x2e0 [ 215.238836][T10865] genl_rcv_msg+0x60e/0x790 [ 215.238860][T10865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.238874][T10865] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 215.238896][T10865] ? __pfx_nl80211_set_station+0x10/0x10 [ 215.238911][T10865] ? __pfx_nl80211_post_doit+0x10/0x10 [ 215.238947][T10865] netlink_rcv_skb+0x205/0x470 [ 215.238969][T10865] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.238986][T10865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.239022][T10865] ? down_read+0x1ad/0x2e0 [ 215.239044][T10865] genl_rcv+0x28/0x40 [ 215.239064][T10865] netlink_unicast+0x758/0x8d0 [ 215.239094][T10865] netlink_sendmsg+0x805/0xb30 [ 215.239124][T10865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.239147][T10865] ? aa_sock_msg_perm+0x94/0x160 [ 215.239186][T10865] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.239204][T10865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.239225][T10865] __sock_sendmsg+0x21c/0x270 [ 215.239247][T10865] ____sys_sendmsg+0x505/0x830 [ 215.239276][T10865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.239309][T10865] ? import_iovec+0x74/0xa0 [ 215.239331][T10865] ___sys_sendmsg+0x21f/0x2a0 [ 215.239356][T10865] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.239422][T10865] ? __fget_files+0x2a/0x420 [ 215.239440][T10865] ? __fget_files+0x3a0/0x420 [ 215.239470][T10865] __x64_sys_sendmsg+0x19b/0x260 [ 215.239497][T10865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.239529][T10865] ? __pfx_ksys_write+0x10/0x10 [ 215.239543][T10865] ? rcu_is_watching+0x15/0xb0 [ 215.239571][T10865] ? do_syscall_64+0xbe/0x3b0 [ 215.239593][T10865] do_syscall_64+0xfa/0x3b0 [ 215.239610][T10865] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.239625][T10865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.239641][T10865] ? clear_bhb_loop+0x60/0xb0 [ 215.239660][T10865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.239677][T10865] RIP: 0033:0x7f0eb578e929 [ 215.239692][T10865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.239706][T10865] RSP: 002b:00007f0eb66b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.239725][T10865] RAX: ffffffffffffffda RBX: 00007f0eb59b5fa0 RCX: 00007f0eb578e929 [ 215.239738][T10865] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000004 [ 215.239749][T10865] RBP: 00007f0eb66b4090 R08: 0000000000000000 R09: 0000000000000000 [ 215.239759][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.239770][T10865] R13: 0000000000000000 R14: 00007f0eb59b5fa0 R15: 00007ffca822b498 [ 215.239796][T10865] [ 215.762313][T10877] FAULT_INJECTION: forcing a failure. [ 215.762313][T10877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.775783][T10877] CPU: 1 UID: 0 PID: 10877 Comm: syz.0.1525 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 215.775811][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.775821][T10877] Call Trace: [ 215.775829][T10877] [ 215.775836][T10877] dump_stack_lvl+0x189/0x250 [ 215.775864][T10877] ? __pfx____ratelimit+0x10/0x10 [ 215.775887][T10877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.775908][T10877] ? __pfx__printk+0x10/0x10 [ 215.775925][T10877] ? __might_fault+0xb0/0x130 [ 215.775952][T10877] should_fail_ex+0x414/0x560 [ 215.775976][T10877] _copy_from_iter+0x1db/0x16f0 [ 215.776002][T10877] ? rcu_is_watching+0x15/0xb0 [ 215.776026][T10877] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 215.776045][T10877] ? __pfx__copy_from_iter+0x10/0x10 [ 215.776070][T10877] ? __build_skb_around+0x257/0x3e0 [ 215.776096][T10877] ? netlink_sendmsg+0x642/0xb30 [ 215.776120][T10877] ? skb_put+0x11b/0x210 [ 215.776145][T10877] netlink_sendmsg+0x6b2/0xb30 [ 215.776174][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.776199][T10877] ? aa_sock_msg_perm+0x94/0x160 [ 215.776221][T10877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.776241][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.776262][T10877] __sock_sendmsg+0x21c/0x270 [ 215.776284][T10877] ____sys_sendmsg+0x505/0x830 [ 215.776312][T10877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.776350][T10877] ? import_iovec+0x74/0xa0 [ 215.776369][T10877] ___sys_sendmsg+0x21f/0x2a0 [ 215.776393][T10877] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.776450][T10877] ? __fget_files+0x2a/0x420 [ 215.776467][T10877] ? __fget_files+0x3a0/0x420 [ 215.776496][T10877] __x64_sys_sendmsg+0x19b/0x260 [ 215.776521][T10877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.776554][T10877] ? __pfx_ksys_write+0x10/0x10 [ 215.776566][T10877] ? rcu_is_watching+0x15/0xb0 [ 215.776594][T10877] ? do_syscall_64+0xbe/0x3b0 [ 215.776615][T10877] do_syscall_64+0xfa/0x3b0 [ 215.776631][T10877] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.776648][T10877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.776663][T10877] ? clear_bhb_loop+0x60/0xb0 [ 215.776684][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.776700][T10877] RIP: 0033:0x7f0eb578e929 [ 215.776715][T10877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.776729][T10877] RSP: 002b:00007f0eb66b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.776747][T10877] RAX: ffffffffffffffda RBX: 00007f0eb59b5fa0 RCX: 00007f0eb578e929 [ 215.776760][T10877] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 215.776771][T10877] RBP: 00007f0eb66b4090 R08: 0000000000000000 R09: 0000000000000000 [ 215.776781][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.776791][T10877] R13: 0000000000000000 R14: 00007f0eb59b5fa0 R15: 00007ffca822b498 [ 215.776820][T10877] [ 216.067625][T10877] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 216.093892][T10877] netlink: 'syz.0.1525': attribute type 2 has an invalid length. [ 216.122294][T10881] netlink: 'syz.0.1525': attribute type 1 has an invalid length. [ 216.149696][ T36] hsr_slave_0: left promiscuous mode [ 216.170082][T10881] netlink: 'syz.0.1525': attribute type 2 has an invalid length. [ 216.183729][ T36] hsr_slave_1: left promiscuous mode [ 216.195883][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.206121][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.214767][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.222282][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.268468][ T36] veth1_macvtap: left promiscuous mode [ 216.274015][ T36] veth0_macvtap: left promiscuous mode [ 216.286685][ T36] veth1_vlan: left promiscuous mode [ 216.292044][ T36] veth0_vlan: left promiscuous mode [ 216.482313][T10897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 216.858385][ T36] team0 (unregistering): Port device team_slave_1 removed [ 216.895333][ T36] team0 (unregistering): Port device team_slave_0 removed [ 217.149793][ T5851] Bluetooth: hci0: command tx timeout [ 217.298991][T10886] vlan1: entered promiscuous mode [ 217.304367][T10886] vlan1: entered allmulticast mode [ 217.455373][T10907] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 217.478310][T10907] netlink: 'syz.0.1533': attribute type 2 has an invalid length. [ 217.675357][T10915] netlink: 'syz.2.1535': attribute type 39 has an invalid length. [ 218.094176][T10853] chnl_net:caif_netlink_parms(): no params data found [ 218.270495][T10932] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1539'. [ 218.320103][T10930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.388184][T10938] netlink: 'syz.4.1541': attribute type 4 has an invalid length. [ 218.533924][T10853] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.542245][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.566616][T10853] bridge_slave_0: entered allmulticast mode [ 218.574416][T10853] bridge_slave_0: entered promiscuous mode [ 218.698019][T10853] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.723337][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.737341][T10853] bridge_slave_1: entered allmulticast mode [ 218.759427][T10853] bridge_slave_1: entered promiscuous mode [ 218.940249][T10853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.023218][T10853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.162174][T10950] infiniband syz0: set down [ 219.167734][T10950] infiniband syz0: added batadv_slave_1 [ 219.193432][T10853] team0: Port device team_slave_0 added [ 219.222444][T10950] RDS/IB: syz0: added [ 219.227119][T10950] smc: adding ib device syz0 with port count 1 [ 219.229823][ T5851] Bluetooth: hci0: command tx timeout [ 219.234687][T10950] smc: ib device syz0 port 1 has pnetid [ 219.253869][T10853] team0: Port device team_slave_1 added [ 219.386912][T10853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.414208][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.466991][T10853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.498102][T10853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.506487][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.566051][T10853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.568069][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1548'. [ 219.683584][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 219.705632][T10853] hsr_slave_0: entered promiscuous mode [ 219.719945][T10853] hsr_slave_1: entered promiscuous mode [ 219.777703][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 220.354651][T10984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1556'. [ 220.392345][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1556'. [ 220.424207][T10984] tipc: Enabling of bearer rejected, already enabled [ 220.593627][T10991] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input23 [ 220.652001][T10995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1560'. [ 220.685036][T10995] validate_nla: 1 callbacks suppressed [ 220.685053][T10995] netlink: 'syz.3.1560': attribute type 4 has an invalid length. [ 220.726544][T10996] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1559'. [ 220.863660][T10999] macvlan0: entered promiscuous mode [ 220.891103][T10999] macvlan0: entered allmulticast mode [ 220.897042][T10853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.953751][T10853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.974831][T10999] xt_cgroup: invalid path, errno=-2 [ 220.983736][T10853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.040149][T10853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.306278][ T5851] Bluetooth: hci0: command tx timeout [ 221.334919][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1569'. [ 221.344662][T10853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.384688][T10853] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.412753][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.419954][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.453049][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.460245][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.560755][T11031] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1571'. [ 221.589208][T11033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1572'. [ 221.600677][T11031] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1571'. [ 221.624850][T11033] netlink: 'syz.3.1572': attribute type 4 has an invalid length. [ 221.706071][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 221.937833][T10853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.069355][T11022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.089189][T10853] veth0_vlan: entered promiscuous mode [ 222.138439][T10853] veth1_vlan: entered promiscuous mode [ 222.228089][T10853] veth0_macvtap: entered promiscuous mode [ 222.240567][T11063] netlink: 460 bytes leftover after parsing attributes in process `syz.3.1583'. [ 222.271054][T10853] veth1_macvtap: entered promiscuous mode [ 222.293042][T10853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.335154][T10853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.380383][ T748] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.400198][ T748] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.428740][ T748] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.474806][ T748] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.564812][T11073] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1586'. [ 222.712932][T11077] Set syz1 is full, maxelem 0 reached [ 222.739807][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.767087][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.852357][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.863881][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.158374][T11102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.415419][T11107] netlink: 'syz.4.1594': attribute type 10 has an invalid length. [ 224.160862][ T2949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.183122][T11134] netlink: 'syz.4.1606': attribute type 4 has an invalid length. [ 224.194389][T11133] netlink: 'syz.0.1607': attribute type 4 has an invalid length. [ 225.204588][ T2949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.391235][T11153] pim6reg: entered allmulticast mode [ 225.571122][ T2949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.642869][T11175] __nla_validate_parse: 4 callbacks suppressed [ 225.642888][T11175] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1617'. [ 225.657265][T11169] tap0: tun_chr_ioctl cmd 1074025678 [ 225.672348][T11169] tap0: group set to 0 [ 225.677081][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.694298][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.707423][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.716728][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.726252][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.758461][ T2949] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.079106][T11188] netlink: 'syz.2.1622': attribute type 4 has an invalid length. [ 226.149629][T11190] netlink: 'syz.4.1623': attribute type 4 has an invalid length. [ 226.182368][ T2949] bridge_slave_1: left allmulticast mode [ 226.185985][T11190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1623'. [ 226.198140][ T2949] bridge_slave_1: left promiscuous mode [ 226.215079][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.238067][ T2949] bridge_slave_0: left allmulticast mode [ 226.244145][ T2949] bridge_slave_0: left promiscuous mode [ 226.264239][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.520233][T11206] Bluetooth: MGMT ver 1.23 [ 226.734052][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.747020][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.757718][ T2949] bond0 (unregistering): Released all slaves [ 226.978543][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'. [ 227.105386][T11212] vlan1: entered promiscuous mode [ 227.112929][T11212] gretap0: entered promiscuous mode [ 227.214821][T11221] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1632'. [ 227.555589][T11233] macvlan3: left promiscuous mode [ 227.564527][T11233] macvlan3: left allmulticast mode [ 227.570561][T11233] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 227.579101][T11233] macvlan4: left allmulticast mode [ 227.587273][T11233] tipc: Resetting bearer [ 227.619538][T11174] chnl_net:caif_netlink_parms(): no params data found [ 227.650431][T11240] netlink: 'syz.2.1637': attribute type 4 has an invalid length. [ 227.731716][T11241] syzkaller1: entered promiscuous mode [ 227.737574][T11241] syzkaller1: entered allmulticast mode [ 227.786629][ T5835] Bluetooth: hci0: command tx timeout [ 227.830249][T11243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.029452][ T2949] hsr_slave_0: left promiscuous mode [ 228.041647][ T2949] hsr_slave_1: left promiscuous mode [ 228.061537][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.086175][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.102459][T11253] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1641'. [ 228.113388][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.134497][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.183077][ T2949] veth1_macvtap: left promiscuous mode [ 228.189124][ T2949] veth0_macvtap: left promiscuous mode [ 228.194823][ T2949] veth1_vlan: left promiscuous mode [ 228.200335][ T2949] veth0_vlan: left promiscuous mode [ 228.597732][ T5851] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 228.609127][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 228.652967][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 228.747766][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 229.257692][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 229.268622][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.277867][T11174] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.286314][T11270] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 229.294295][T11174] bridge_slave_0: entered allmulticast mode [ 229.298399][T11271] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1646'. [ 229.300950][T11270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.320341][T11174] bridge_slave_0: entered promiscuous mode [ 229.346042][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.362914][T11174] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.377730][T11174] bridge_slave_1: entered allmulticast mode [ 229.427957][T11174] bridge_slave_1: entered promiscuous mode [ 229.543055][T11174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.575457][T11174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.743386][T11283] vlan1: entered promiscuous mode [ 229.804122][T11174] team0: Port device team_slave_0 added [ 229.830616][T11174] team0: Port device team_slave_1 added [ 229.866011][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 229.921231][T11174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.930280][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.956697][T11174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.971488][T11174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.978624][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.019882][T11174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.083031][T11174] hsr_slave_0: entered promiscuous mode [ 230.090278][T11174] hsr_slave_1: entered promiscuous mode [ 230.243549][T11305] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1656'. [ 230.407085][T11310] netlink: zone id is out of range [ 230.413014][T11310] netlink: zone id is out of range [ 230.421424][T11310] netlink: zone id is out of range [ 230.430325][T11310] netlink: zone id is out of range [ 230.438322][T11310] netlink: zone id is out of range [ 230.456832][T11310] netlink: zone id is out of range [ 230.464543][T11310] netlink: zone id is out of range [ 230.657340][T11174] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.675206][T11320] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1659'. [ 230.689936][T11174] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.715844][T11174] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.740097][T11174] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.901481][T11174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.935483][T11174] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.967658][T11335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1664'. [ 230.988773][T11335] netlink: 'syz.2.1664': attribute type 4 has an invalid length. [ 231.025021][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.032212][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.074757][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.081993][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.946042][ T5835] Bluetooth: hci0: command 0x041b tx timeout [ 231.953100][ T5851] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 232.120461][T11174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.224626][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1677'. [ 232.244732][T11397] FAULT_INJECTION: forcing a failure. [ 232.244732][T11397] name failslab, interval 1, probability 0, space 0, times 0 [ 232.263989][T11397] CPU: 1 UID: 0 PID: 11397 Comm: syz.3.1676 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 232.264015][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.264026][T11397] Call Trace: [ 232.264033][T11397] [ 232.264040][T11397] dump_stack_lvl+0x189/0x250 [ 232.264069][T11397] ? __pfx____ratelimit+0x10/0x10 [ 232.264086][T11397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.264110][T11397] ? __pfx__printk+0x10/0x10 [ 232.264136][T11397] ? ref_tracker_alloc+0x318/0x460 [ 232.264160][T11397] should_fail_ex+0x414/0x560 [ 232.264186][T11397] should_failslab+0xa8/0x100 [ 232.264204][T11397] kmem_cache_alloc_noprof+0x73/0x3c0 [ 232.264227][T11397] ? skb_clone+0x212/0x3a0 [ 232.264248][T11397] skb_clone+0x212/0x3a0 [ 232.264267][T11397] __netlink_deliver_tap+0x404/0x850 [ 232.264300][T11397] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.264321][T11397] netlink_deliver_tap+0x19c/0x1b0 [ 232.264339][T11397] netlink_unicast+0x72f/0x8d0 [ 232.264368][T11397] netlink_sendmsg+0x805/0xb30 [ 232.264394][T11397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.264416][T11397] ? aa_sock_msg_perm+0x94/0x160 [ 232.264439][T11397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.264457][T11397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.264478][T11397] __sock_sendmsg+0x21c/0x270 [ 232.264500][T11397] ____sys_sendmsg+0x505/0x830 [ 232.264535][T11397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.264567][T11397] ? import_iovec+0x74/0xa0 [ 232.264588][T11397] ___sys_sendmsg+0x21f/0x2a0 [ 232.264611][T11397] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.264668][T11397] ? __fget_files+0x2a/0x420 [ 232.264684][T11397] ? __fget_files+0x3a0/0x420 [ 232.264712][T11397] __x64_sys_sendmsg+0x19b/0x260 [ 232.264737][T11397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.264768][T11397] ? __pfx_ksys_write+0x10/0x10 [ 232.264782][T11397] ? rcu_is_watching+0x15/0xb0 [ 232.264808][T11397] ? do_syscall_64+0xbe/0x3b0 [ 232.264830][T11397] do_syscall_64+0xfa/0x3b0 [ 232.264848][T11397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.264863][T11397] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 232.264879][T11397] ? clear_bhb_loop+0x60/0xb0 [ 232.264908][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.264923][T11397] RIP: 0033:0x7fdd6778e929 [ 232.264939][T11397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.264952][T11397] RSP: 002b:00007fdd68519038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.264971][T11397] RAX: ffffffffffffffda RBX: 00007fdd679b5fa0 RCX: 00007fdd6778e929 [ 232.264984][T11397] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 232.264993][T11397] RBP: 00007fdd68519090 R08: 0000000000000000 R09: 0000000000000000 [ 232.265005][T11397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.265015][T11397] R13: 0000000000000000 R14: 00007fdd679b5fa0 R15: 00007ffe8a9fc9b8 [ 232.265043][T11397] [ 232.580326][T11399] netlink: 'syz.3.1676': attribute type 1 has an invalid length. [ 232.601668][T11399] netlink: 'syz.3.1676': attribute type 2 has an invalid length. [ 232.612330][T11395] netlink: 'syz.4.1677': attribute type 4 has an invalid length. [ 232.664760][T11397] netlink: 'syz.3.1676': attribute type 1 has an invalid length. [ 232.698243][T11397] netlink: 'syz.3.1676': attribute type 2 has an invalid length. [ 232.720331][T11174] veth0_vlan: entered promiscuous mode [ 232.790427][T11174] veth1_vlan: entered promiscuous mode [ 232.947054][T11174] veth0_macvtap: entered promiscuous mode [ 232.977123][T11174] veth1_macvtap: entered promiscuous mode [ 233.031433][T11412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1683'. [ 233.043679][T11174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.065362][T11174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.095503][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.097083][T11412] netlink: 'syz.2.1683': attribute type 4 has an invalid length. [ 233.122277][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.139883][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.152488][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.285002][T11426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1688'. [ 233.379293][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.396019][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.475403][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.501233][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.602730][T11438] FAULT_INJECTION: forcing a failure. [ 233.602730][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 233.619209][T11438] CPU: 1 UID: 0 PID: 11438 Comm: syz.0.1692 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 233.619235][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.619246][T11438] Call Trace: [ 233.619253][T11438] [ 233.619261][T11438] dump_stack_lvl+0x189/0x250 [ 233.619289][T11438] ? __pfx____ratelimit+0x10/0x10 [ 233.619307][T11438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.619329][T11438] ? __pfx__printk+0x10/0x10 [ 233.619353][T11438] ? ref_tracker_alloc+0x318/0x460 [ 233.619378][T11438] should_fail_ex+0x414/0x560 [ 233.619403][T11438] should_failslab+0xa8/0x100 [ 233.619423][T11438] kmem_cache_alloc_noprof+0x73/0x3c0 [ 233.619447][T11438] ? skb_clone+0x212/0x3a0 [ 233.619468][T11438] skb_clone+0x212/0x3a0 [ 233.619488][T11438] __netlink_deliver_tap+0x404/0x850 [ 233.619522][T11438] ? netlink_deliver_tap+0x2e/0x1b0 [ 233.619603][T11438] netlink_deliver_tap+0x19c/0x1b0 [ 233.619624][T11438] netlink_unicast+0x72f/0x8d0 [ 233.619655][T11438] netlink_sendmsg+0x805/0xb30 [ 233.619685][T11438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.619710][T11438] ? aa_sock_msg_perm+0x94/0x160 [ 233.619732][T11438] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 233.619751][T11438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.619772][T11438] __sock_sendmsg+0x21c/0x270 [ 233.619792][T11438] ____sys_sendmsg+0x505/0x830 [ 233.619822][T11438] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.619855][T11438] ? import_iovec+0x74/0xa0 [ 233.619876][T11438] ___sys_sendmsg+0x21f/0x2a0 [ 233.619902][T11438] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.619963][T11438] ? __fget_files+0x2a/0x420 [ 233.619980][T11438] ? __fget_files+0x3a0/0x420 [ 233.620009][T11438] __x64_sys_sendmsg+0x19b/0x260 [ 233.620035][T11438] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.620068][T11438] ? __pfx_ksys_write+0x10/0x10 [ 233.620082][T11438] ? rcu_is_watching+0x15/0xb0 [ 233.620111][T11438] ? do_syscall_64+0xbe/0x3b0 [ 233.620133][T11438] do_syscall_64+0xfa/0x3b0 [ 233.620149][T11438] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.620166][T11438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.620185][T11438] ? clear_bhb_loop+0x60/0xb0 [ 233.620206][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.620222][T11438] RIP: 0033:0x7f0eb578e929 [ 233.620238][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.620252][T11438] RSP: 002b:00007f0eb66b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.620271][T11438] RAX: ffffffffffffffda RBX: 00007f0eb59b5fa0 RCX: 00007f0eb578e929 [ 233.620284][T11438] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 233.620295][T11438] RBP: 00007f0eb66b4090 R08: 0000000000000000 R09: 0000000000000000 [ 233.620305][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.620315][T11438] R13: 0000000000000000 R14: 00007f0eb59b5fa0 R15: 00007ffca822b498 [ 233.620345][T11438] [ 233.977588][T11442] tipc: Enabling of bearer rejected, already enabled [ 234.029002][ T5851] Bluetooth: hci0: command 0x041b tx timeout [ 234.036207][ T5835] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 234.697461][T11477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1706'. [ 234.874799][T11488] SET target dimension over the limit! [ 235.010383][ T2949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.032004][T11491] tipc: Enabling of bearer rejected, already enabled [ 235.322433][ T2949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.543314][ T2949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.630378][ T2949] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.715256][ T2949] bridge_slave_1: left allmulticast mode [ 235.721111][ T2949] bridge_slave_1: left promiscuous mode [ 235.728491][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.739823][ T2949] bridge_slave_0: left allmulticast mode [ 235.745486][ T2949] bridge_slave_0: left promiscuous mode [ 235.753169][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.939697][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1716'. [ 235.960129][T11505] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1715'. [ 235.967014][T11503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.015090][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1717'. [ 236.062565][T11507] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1717'. [ 236.067438][T11509] xt_bpf: check failed: parse error [ 236.343110][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.363159][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.382026][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.414249][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.423754][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.424017][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.452999][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.464048][ T2949] bond0 (unregistering): Released all slaves [ 236.720139][T11527] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 236.728082][T11527] netlink: 'syz.2.1720': attribute type 2 has an invalid length. [ 236.748305][T11526] netlink: 'syz.0.1723': attribute type 15 has an invalid length. [ 236.766233][T11526] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1723'. [ 236.771430][T11523] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 236.958364][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 236.990438][T11542] Bluetooth: MGMT ver 1.23 [ 237.257993][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1728'. [ 237.418554][ T2949] hsr_slave_0: left promiscuous mode [ 237.425070][ T2949] hsr_slave_1: left promiscuous mode [ 237.442069][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.452209][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.460682][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.468585][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.495836][ T2949] veth1_macvtap: left promiscuous mode [ 237.501704][ T2949] veth0_macvtap: left promiscuous mode [ 237.507567][ T2949] veth1_vlan: left promiscuous mode [ 237.513212][ T2949] veth0_vlan: left promiscuous mode [ 237.599438][T11562] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1731'. [ 238.203724][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 238.269440][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 238.387401][T11581] validate_nla: 1 callbacks suppressed [ 238.387422][T11581] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 238.406056][T11581] netlink: 'syz.0.1737': attribute type 2 has an invalid length. [ 238.442088][T11582] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 238.450295][T11582] netlink: 'syz.0.1737': attribute type 2 has an invalid length. [ 238.517429][ T5835] Bluetooth: hci0: command tx timeout [ 239.000035][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 239.069570][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 239.218771][T11613] macvlan1: entered promiscuous mode [ 239.241944][T11613] macvlan1: entered allmulticast mode [ 239.250777][T11515] chnl_net:caif_netlink_parms(): no params data found [ 239.283144][T11613] xt_cgroup: invalid path, errno=-2 [ 239.901130][T11515] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.910417][T11515] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.939033][T11515] bridge_slave_0: entered allmulticast mode [ 239.949662][T11639] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 239.956903][T11515] bridge_slave_0: entered promiscuous mode [ 239.958519][T11639] netlink: 'syz.3.1751': attribute type 2 has an invalid length. [ 239.983758][T11515] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.988580][T11634] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 239.994727][T11515] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.005853][T11515] bridge_slave_1: entered allmulticast mode [ 240.016791][T11634] netlink: 'syz.3.1751': attribute type 2 has an invalid length. [ 240.024700][T11515] bridge_slave_1: entered promiscuous mode [ 240.121782][T11515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.150288][T11644] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 240.165362][T11515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.312859][T11515] team0: Port device team_slave_0 added [ 240.334941][T11515] team0: Port device team_slave_1 added [ 240.409722][T11659] Cannot find add_set index 2 as target [ 240.521280][T11515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.544389][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.573859][T11666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.581434][T11666] IPv6: NLM_F_CREATE should be set when creating new route [ 240.586086][T11515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.588709][T11666] IPv6: NLM_F_CREATE should be set when creating new route [ 240.606227][T11515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.612582][ T5835] Bluetooth: hci0: command tx timeout [ 240.652420][T11515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.692056][T11515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.778163][T11676] netlink: 'syz.3.1764': attribute type 4 has an invalid length. [ 240.818416][T11515] hsr_slave_0: entered promiscuous mode [ 240.828999][T11515] hsr_slave_1: entered promiscuous mode [ 241.637609][T11711] __nla_validate_parse: 1 callbacks suppressed [ 241.637628][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 241.662568][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1775'. [ 241.809536][T11515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.828047][T11515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.849003][T11515] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.879976][T11515] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.904255][T11722] netlink: 'syz.2.1777': attribute type 21 has an invalid length. [ 242.134813][T11515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.193692][T11515] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.230344][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.237566][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.294715][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.301932][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.661592][T11762] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 242.674356][ T5835] Bluetooth: hci0: command tx timeout [ 242.701753][T11762] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 242.862277][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1787'. [ 243.000296][T11515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.013212][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1787'. [ 243.464307][T11515] veth0_vlan: entered promiscuous mode [ 243.499045][T11515] veth1_vlan: entered promiscuous mode [ 243.539218][T11787] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 243.540256][T11789] netlink: 'syz.0.1791': attribute type 39 has an invalid length. [ 243.547142][T11787] netlink: 'syz.2.1790': attribute type 2 has an invalid length. [ 243.547790][T11787] netlink: 'syz.2.1790': attribute type 1 has an invalid length. [ 243.566930][T11515] veth0_macvtap: entered promiscuous mode [ 243.598275][T11787] netlink: 'syz.2.1790': attribute type 2 has an invalid length. [ 243.622039][T11515] veth1_macvtap: entered promiscuous mode [ 243.635781][T11792] netlink: 'syz.4.1792': attribute type 10 has an invalid length. [ 243.677924][T11515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.724345][T11515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.782846][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.811601][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.833535][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.863904][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.063861][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.086062][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.201639][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.230124][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.246789][T11823] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1797'. [ 244.286627][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031d1ec00: rx timeout, send abort [ 244.675364][T11841] tipc: Enabling of bearer rejected, failed to enable media [ 244.786552][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031d1d400: rx timeout, send abort [ 244.797755][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031d1ec00: abort rx timeout. Force session deactivation [ 244.840375][T11845] x_tables: duplicate underflow at hook 1 [ 244.858767][T11847] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input24 [ 244.881791][T11849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.889067][T11849] IPv6: NLM_F_CREATE should be set when creating new route [ 244.896455][T11849] IPv6: NLM_F_CREATE should be set when creating new route [ 244.903710][T11849] IPv6: NLM_F_CREATE should be set when creating new route [ 245.245809][ T748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.294884][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888031d1d400: abort rx timeout. Force session deactivation [ 245.595793][ T748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.013018][ T748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.089402][ T748] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.172392][ T748] bridge_slave_1: left allmulticast mode [ 246.178496][ T748] bridge_slave_1: left promiscuous mode [ 246.184188][ T748] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.193364][ T748] bridge_slave_0: left allmulticast mode [ 246.199345][ T748] bridge_slave_0: left promiscuous mode [ 246.205051][ T748] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.486876][T11874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.741314][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.776147][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.784796][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.793086][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.807516][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.878573][ T748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.895012][ T748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.906821][ T748] bond0 (unregistering): Released all slaves [ 246.947867][T11869] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1812'. [ 247.231047][T11894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1823'. [ 247.249545][T11894] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1823'. [ 247.279653][T11894] xt_bpf: check failed: parse error [ 247.354320][T11898] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input25 [ 247.868406][T11922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1831'. [ 247.886551][T11925] netlink: 'syz.3.1829': attribute type 303 has an invalid length. [ 247.901118][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 248.396217][T11925] syz.3.1829 (11925) used greatest stack depth: 17064 bytes left [ 248.550069][T11950] netlink: 'syz.2.1841': attribute type 4 has an invalid length. [ 248.564381][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1841'. [ 248.671858][T11955] Bluetooth: MGMT ver 1.23 [ 248.776489][ T748] hsr_slave_0: left promiscuous mode [ 248.789140][ T748] hsr_slave_1: left promiscuous mode [ 248.812778][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.823774][ T748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.864597][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.875388][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 248.880603][ T748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.906336][ T5835] Bluetooth: hci0: command tx timeout [ 248.985861][ T748] veth1_macvtap: left promiscuous mode [ 249.001609][ T748] veth0_macvtap: left promiscuous mode [ 249.009314][ T748] veth1_vlan: left promiscuous mode [ 249.014672][ T748] veth0_vlan: left promiscuous mode [ 249.154484][T11985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.278695][T11985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.371602][T11980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.733081][ T748] team0 (unregistering): Port device team_slave_1 removed [ 249.772830][ T748] team0 (unregistering): Port device team_slave_0 removed [ 250.492523][T11881] chnl_net:caif_netlink_parms(): no params data found [ 250.990791][ T5835] Bluetooth: hci0: command tx timeout [ 251.261694][T12021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1854'. [ 251.358486][T12023] net_ratelimit: 7 callbacks suppressed [ 251.358503][T12023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.384337][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.406644][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.413884][T11881] bridge_slave_0: entered allmulticast mode [ 251.423252][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1854'. [ 251.433579][T11881] bridge_slave_0: entered promiscuous mode [ 251.449726][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1854'. [ 251.478919][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.499755][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.522347][T11881] bridge_slave_1: entered allmulticast mode [ 251.536110][T11881] bridge_slave_1: entered promiscuous mode [ 251.734114][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.748584][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.792961][T12032] netlink: 'syz.2.1857': attribute type 5 has an invalid length. [ 251.908710][T11881] team0: Port device team_slave_0 added [ 251.932512][T11881] team0: Port device team_slave_1 added [ 252.185484][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.197490][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.232143][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.250818][T12051] __nla_validate_parse: 1 callbacks suppressed [ 252.250838][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'. [ 252.277419][T12053] netlink: zone id is out of range [ 252.282867][T12053] netlink: zone id is out of range [ 252.291876][T12053] netlink: zone id is out of range [ 252.294253][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.301600][T12053] netlink: zone id is out of range [ 252.308444][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.313386][T12053] netlink: zone id is out of range [ 252.338251][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.354518][T12053] netlink: zone id is out of range [ 252.367290][T12055] smc: removing ib device syz0 [ 252.382572][T12053] netlink: zone id is out of range [ 252.397842][T12053] netlink: zone id is out of range [ 252.404855][T12053] netlink: zone id is out of range [ 252.614106][T12066] xt_TCPMSS: Only works on TCP SYN packets [ 252.625303][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 252.900289][T11881] hsr_slave_0: entered promiscuous mode [ 252.902372][T12073] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 252.930631][T12073] netlink: 'syz.4.1869': attribute type 2 has an invalid length. [ 252.937686][T11881] hsr_slave_1: entered promiscuous mode [ 252.969133][T12075] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 252.996671][T12075] netlink: 'syz.4.1869': attribute type 2 has an invalid length. [ 253.066742][ T5835] Bluetooth: hci0: command tx timeout [ 253.322692][T12085] FAULT_INJECTION: forcing a failure. [ 253.322692][T12085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.344166][T12085] CPU: 0 UID: 0 PID: 12085 Comm: syz.0.1873 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 253.344194][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.344203][T12085] Call Trace: [ 253.344208][T12085] [ 253.344215][T12085] dump_stack_lvl+0x189/0x250 [ 253.344240][T12085] ? __pfx____ratelimit+0x10/0x10 [ 253.344254][T12085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.344272][T12085] ? __pfx__printk+0x10/0x10 [ 253.344295][T12085] should_fail_ex+0x414/0x560 [ 253.344315][T12085] _copy_to_user+0x31/0xb0 [ 253.344330][T12085] simple_read_from_buffer+0xe1/0x170 [ 253.344348][T12085] proc_fail_nth_read+0x1df/0x250 [ 253.344366][T12085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.344383][T12085] ? rw_verify_area+0x258/0x650 [ 253.344401][T12085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.344417][T12085] vfs_read+0x1fd/0x980 [ 253.344439][T12085] ? __pfx___mutex_lock+0x10/0x10 [ 253.344453][T12085] ? __pfx_vfs_read+0x10/0x10 [ 253.344472][T12085] ? __fget_files+0x2a/0x420 [ 253.344489][T12085] ? __fget_files+0x3a0/0x420 [ 253.344501][T12085] ? __fget_files+0x2a/0x420 [ 253.344521][T12085] ksys_read+0x145/0x250 [ 253.344535][T12085] ? __pfx_ksys_read+0x10/0x10 [ 253.344551][T12085] ? rcu_is_watching+0x15/0xb0 [ 253.344574][T12085] ? do_syscall_64+0xbe/0x3b0 [ 253.344590][T12085] do_syscall_64+0xfa/0x3b0 [ 253.344603][T12085] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.344616][T12085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.344628][T12085] ? clear_bhb_loop+0x60/0xb0 [ 253.344643][T12085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.344655][T12085] RIP: 0033:0x7f0eb578d33c [ 253.344667][T12085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.344678][T12085] RSP: 002b:00007f0eb66b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.344692][T12085] RAX: ffffffffffffffda RBX: 00007f0eb59b5fa0 RCX: 00007f0eb578d33c [ 253.344702][T12085] RDX: 000000000000000f RSI: 00007f0eb66b40a0 RDI: 0000000000000003 [ 253.344710][T12085] RBP: 00007f0eb66b4090 R08: 0000000000000000 R09: 0000000000000000 [ 253.344717][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.344725][T12085] R13: 0000000000000000 R14: 00007f0eb59b5fa0 R15: 00007ffca822b498 [ 253.344747][T12085] [ 254.211626][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 254.255453][T12111] FAULT_INJECTION: forcing a failure. [ 254.255453][T12111] name failslab, interval 1, probability 0, space 0, times 0 [ 254.308382][T12116] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 254.317317][T12111] CPU: 0 UID: 0 PID: 12111 Comm: syz.4.1881 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 254.317344][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.317355][T12111] Call Trace: [ 254.317362][T12111] [ 254.317370][T12111] dump_stack_lvl+0x189/0x250 [ 254.317399][T12111] ? __pfx____ratelimit+0x10/0x10 [ 254.317418][T12111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.317441][T12111] ? __pfx__printk+0x10/0x10 [ 254.317463][T12111] ? __pfx___might_resched+0x10/0x10 [ 254.317486][T12111] ? fs_reclaim_acquire+0x7d/0x100 [ 254.317511][T12111] should_fail_ex+0x414/0x560 [ 254.317537][T12111] should_failslab+0xa8/0x100 [ 254.317557][T12111] kmem_cache_alloc_noprof+0x73/0x3c0 [ 254.317586][T12111] ? radix_tree_node_alloc+0x7e/0x3a0 [ 254.317608][T12111] radix_tree_node_alloc+0x7e/0x3a0 [ 254.317631][T12111] idr_get_free+0x2b3/0xa70 [ 254.317662][T12111] idr_alloc_u32+0x159/0x2d0 [ 254.317686][T12111] ? __pfx_idr_alloc_u32+0x10/0x10 [ 254.317706][T12111] ? load_metalist+0x81/0x4f0 [ 254.317736][T12111] tcf_idr_check_alloc+0x5de/0x7b0 [ 254.317758][T12111] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 254.317774][T12111] ? do_raw_read_unlock+0x3d/0x80 [ 254.317795][T12111] ? load_metalist+0x49a/0x4f0 [ 254.317821][T12111] tcf_ife_init+0x37c/0xd60 [ 254.317853][T12111] ? __pfx_tcf_ife_init+0x10/0x10 [ 254.317893][T12111] ? nla_memcpy+0x5b/0xc0 [ 254.317925][T12111] tcf_action_init_1+0x463/0x6d0 [ 254.317950][T12111] ? __pfx_tcf_action_init_1+0x10/0x10 [ 254.317967][T12111] ? _raw_read_unlock+0x28/0x50 [ 254.317989][T12111] ? tc_action_load_ops+0x214/0x4e0 [ 254.318031][T12111] ? __nla_parse+0x40/0x60 [ 254.318056][T12111] tcf_action_init+0x2cf/0xab0 [ 254.318086][T12111] ? __pfx_tcf_action_init+0x10/0x10 [ 254.318136][T12111] ? __pfx___nla_validate_parse+0x10/0x10 [ 254.318202][T12111] tc_ctl_action+0x430/0xbd0 [ 254.318231][T12111] ? __pfx_tc_ctl_action+0x10/0x10 [ 254.318257][T12111] ? rcu_is_watching+0x15/0xb0 [ 254.318328][T12111] ? __pfx_tc_ctl_action+0x10/0x10 [ 254.318346][T12111] rtnetlink_rcv_msg+0x77c/0xb70 [ 254.318370][T12111] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 254.318389][T12111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.318429][T12111] netlink_rcv_skb+0x205/0x470 [ 254.318451][T12111] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.318473][T12111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.318509][T12111] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.318528][T12111] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.318555][T12111] netlink_unicast+0x758/0x8d0 [ 254.318593][T12111] netlink_sendmsg+0x805/0xb30 [ 254.318628][T12111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.318652][T12111] ? aa_sock_msg_perm+0x94/0x160 [ 254.318675][T12111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.318696][T12111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.318717][T12111] __sock_sendmsg+0x21c/0x270 [ 254.318740][T12111] ____sys_sendmsg+0x505/0x830 [ 254.318769][T12111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.318802][T12111] ? import_iovec+0x74/0xa0 [ 254.318824][T12111] ___sys_sendmsg+0x21f/0x2a0 [ 254.318849][T12111] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.318912][T12111] ? __fget_files+0x2a/0x420 [ 254.318929][T12111] ? __fget_files+0x3a0/0x420 [ 254.318958][T12111] __x64_sys_sendmsg+0x19b/0x260 [ 254.318984][T12111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.319018][T12111] ? __pfx_ksys_write+0x10/0x10 [ 254.319032][T12111] ? rcu_is_watching+0x15/0xb0 [ 254.319060][T12111] ? do_syscall_64+0xbe/0x3b0 [ 254.319079][T12111] do_syscall_64+0xfa/0x3b0 [ 254.319093][T12111] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.319108][T12111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.319117][T12116] netlink: 'syz.4.1881': attribute type 2 has an invalid length. [ 254.319123][T12111] ? clear_bhb_loop+0x60/0xb0 [ 254.319143][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.319156][T12111] RIP: 0033:0x7fce73f8e929 [ 254.319171][T12111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.319184][T12111] RSP: 002b:00007fce74ea8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.319203][T12111] RAX: ffffffffffffffda RBX: 00007fce741b5fa0 RCX: 00007fce73f8e929 [ 254.319214][T12111] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 254.319224][T12111] RBP: 00007fce74ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 254.319234][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.319244][T12111] R13: 0000000000000000 R14: 00007fce741b5fa0 R15: 00007ffd666ccb68 [ 254.319272][T12111] [ 254.436377][T12111] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 254.586866][T12119] netlink: 'syz.2.1883': attribute type 1 has an invalid length. [ 254.619985][T12111] netlink: 'syz.4.1881': attribute type 2 has an invalid length. [ 254.634733][T12119] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1883'. [ 254.915581][T11881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.958863][T11881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.066456][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1886'. [ 255.115587][T11881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.142528][T12134] dummy0: left allmulticast mode [ 255.147911][ T5835] Bluetooth: hci0: command tx timeout [ 255.158787][T12134] dummy0: left promiscuous mode [ 255.164021][T12134] bridge0: port 3(dummy0) entered disabled state [ 255.177045][T12134] bridge_slave_1: left allmulticast mode [ 255.183193][T12134] bridge_slave_1: left promiscuous mode [ 255.189669][T12134] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.201611][T12134] bridge_slave_0: left allmulticast mode [ 255.207852][T12134] bridge_slave_0: left promiscuous mode [ 255.213735][T12134] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.358846][T11881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.632801][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.682807][T11881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.712079][T12156] tipc: Enabling of bearer rejected, already enabled [ 255.751275][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.764644][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.771857][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.819130][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.826315][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.388892][T11881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.521866][T11881] veth0_vlan: entered promiscuous mode [ 256.553113][T11881] veth1_vlan: entered promiscuous mode [ 256.643368][T12198] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1907'. [ 256.688016][T11881] veth0_macvtap: entered promiscuous mode [ 256.725048][T11881] veth1_macvtap: entered promiscuous mode [ 256.793643][T11881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.814579][T11881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.842625][T12202] tipc: Enabling of bearer rejected, failed to enable media [ 256.880448][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.899997][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.909203][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 256.981373][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.999267][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.136835][T12212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input26 [ 257.363474][T11807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.399682][T11807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.430376][T12221] dvmrp1: entered allmulticast mode [ 257.490677][T12221] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1913'. [ 257.546216][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 257.600473][T12210] syzkaller0: entered promiscuous mode [ 257.609407][T12210] syzkaller0: entered allmulticast mode [ 257.670819][T11807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.687496][T11807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.852178][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1917'. [ 257.943970][T12236] netlink: 'syz.0.1917': attribute type 4 has an invalid length. [ 258.013883][T12239] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1918'. [ 258.026243][ T5835] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 258.034357][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 259.395480][T12252] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.1921'. [ 259.688431][T12260] FAULT_INJECTION: forcing a failure. [ 259.688431][T12260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.742257][T12260] CPU: 1 UID: 0 PID: 12260 Comm: syz.4.1924 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 259.742286][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.742297][T12260] Call Trace: [ 259.742304][T12260] [ 259.742311][T12260] dump_stack_lvl+0x189/0x250 [ 259.742343][T12260] ? __pfx____ratelimit+0x10/0x10 [ 259.742362][T12260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.742385][T12260] ? __pfx__printk+0x10/0x10 [ 259.742403][T12260] ? __might_fault+0xb0/0x130 [ 259.742432][T12260] should_fail_ex+0x414/0x560 [ 259.742458][T12260] _copy_to_iter+0x1db/0x16f0 [ 259.742481][T12260] ? __local_bh_enable_ip+0x12d/0x1c0 [ 259.742504][T12260] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.742525][T12260] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 259.742547][T12260] ? __pfx__copy_to_iter+0x10/0x10 [ 259.742569][T12260] ? do_raw_spin_unlock+0x122/0x240 [ 259.742589][T12260] ? cprng_get_random+0x427/0x4c0 [ 259.742622][T12260] rng_recvmsg+0x1ba/0x260 [ 259.742646][T12260] ? __pfx_rng_recvmsg+0x10/0x10 [ 259.742679][T12260] ? aa_sock_msg_perm+0x94/0x160 [ 259.742701][T12260] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 259.742719][T12260] ? security_socket_recvmsg+0x7e/0x2e0 [ 259.742743][T12260] ? __pfx_rng_recvmsg+0x10/0x10 [ 259.742763][T12260] sock_recvmsg+0x22c/0x270 [ 259.742787][T12260] __sys_recvfrom+0x1f6/0x340 [ 259.742812][T12260] ? __pfx___sys_recvfrom+0x10/0x10 [ 259.742830][T12260] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 259.742862][T12260] ? __fget_files+0x3a0/0x420 [ 259.742891][T12260] ? ksys_write+0x22a/0x250 [ 259.742910][T12260] ? __pfx_ksys_write+0x10/0x10 [ 259.742923][T12260] ? rcu_is_watching+0x15/0xb0 [ 259.742952][T12260] __x64_sys_recvfrom+0xde/0x100 [ 259.742977][T12260] do_syscall_64+0xfa/0x3b0 [ 259.742993][T12260] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.743010][T12260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.743026][T12260] ? clear_bhb_loop+0x60/0xb0 [ 259.743047][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.743069][T12260] RIP: 0033:0x7fce73f8e929 [ 259.743085][T12260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.743099][T12260] RSP: 002b:00007fce74ea8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 259.743117][T12260] RAX: ffffffffffffffda RBX: 00007fce741b5fa0 RCX: 00007fce73f8e929 [ 259.743129][T12260] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000004 [ 259.743140][T12260] RBP: 00007fce74ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 259.743151][T12260] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.743161][T12260] R13: 0000000000000000 R14: 00007fce741b5fa0 R15: 00007ffd666ccb68 [ 259.743189][T12260] [ 260.149497][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'. [ 260.252823][ T748] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.475245][ T748] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.555416][ T748] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.611406][ T748] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.704244][ T748] bridge_slave_1: left allmulticast mode [ 260.710112][ T748] bridge_slave_1: left promiscuous mode [ 260.715790][ T748] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.725374][ T748] bridge_slave_0: left allmulticast mode [ 260.731244][ T748] bridge_slave_0: left promiscuous mode [ 260.737214][ T748] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.746157][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 261.045016][ T748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.059110][ T748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.069329][ T748] bond0 (unregistering): Released all slaves [ 261.264429][ T748] hsr_slave_0: left promiscuous mode [ 261.271069][ T748] hsr_slave_1: left promiscuous mode [ 261.278517][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.286098][ T748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.293877][ T748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.301446][ T748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.322992][ T748] veth1_macvtap: left promiscuous mode [ 261.328675][ T748] veth0_macvtap: left promiscuous mode [ 261.334250][ T748] veth1_vlan: left promiscuous mode [ 261.339775][ T748] veth0_vlan: left promiscuous mode [ 261.561148][T12276] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1931'. [ 261.647488][T12282] netlink: 'syz.2.1930': attribute type 4 has an invalid length. [ 261.915708][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.938510][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.950735][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.961775][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.971638][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.139732][ T748] team0 (unregistering): Port device team_slave_1 removed [ 262.179549][ T748] team0 (unregistering): Port device team_slave_0 removed [ 262.690774][T12296] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1934'. [ 262.793395][T12298] syzkaller1: entered promiscuous mode [ 262.800629][T12298] syzkaller1: entered allmulticast mode [ 263.012546][T12300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1938'. [ 263.066274][T12308] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 263.074041][T12308] netlink: 'syz.0.1940': attribute type 2 has an invalid length. [ 263.109484][T12308] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 263.117521][T12308] netlink: 'syz.0.1940': attribute type 2 has an invalid length. [ 263.285344][T12321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1943'. [ 263.309942][T12287] chnl_net:caif_netlink_parms(): no params data found [ 263.394661][T12326] netlink: 'syz.3.1945': attribute type 21 has an invalid length. [ 263.740578][T12346] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.1949'. [ 263.792139][T12287] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.831244][T12287] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.838560][T12287] bridge_slave_0: entered allmulticast mode [ 263.846482][T12287] bridge_slave_0: entered promiscuous mode [ 263.854865][T12287] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.866282][T12287] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.873495][T12287] bridge_slave_1: entered allmulticast mode [ 263.880976][T12287] bridge_slave_1: entered promiscuous mode [ 264.029503][ T5835] Bluetooth: hci0: command tx timeout [ 264.043913][T12359] netlink: 'syz.0.1952': attribute type 39 has an invalid length. [ 264.189417][T12287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.228676][T12287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.310081][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 264.417491][T12287] team0: Port device team_slave_0 added [ 264.431299][T12287] team0: Port device team_slave_1 added [ 264.522193][T12384] Bluetooth: MGMT ver 1.23 [ 264.562274][T12287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.572235][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.613939][T12287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.650685][T12287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.658065][T12287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.684559][T12287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.835155][T12393] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 264.850884][T12393] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 264.872735][T12395] FAULT_INJECTION: forcing a failure. [ 264.872735][T12395] name failslab, interval 1, probability 0, space 0, times 0 [ 264.912631][T12395] CPU: 1 UID: 0 PID: 12395 Comm: syz.4.1964 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 264.912657][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.912668][T12395] Call Trace: [ 264.912675][T12395] [ 264.912683][T12395] dump_stack_lvl+0x189/0x250 [ 264.912712][T12395] ? __pfx____ratelimit+0x10/0x10 [ 264.912730][T12395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.912752][T12395] ? __pfx__printk+0x10/0x10 [ 264.912783][T12395] should_fail_ex+0x414/0x560 [ 264.912810][T12395] should_failslab+0xa8/0x100 [ 264.912830][T12395] __kmalloc_cache_noprof+0x70/0x3d0 [ 264.912846][T12395] ? sctp_add_bind_addr+0x8c/0x370 [ 264.912869][T12395] sctp_add_bind_addr+0x8c/0x370 [ 264.912891][T12395] sctp_copy_local_addr_list+0x30b/0x4e0 [ 264.912914][T12395] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 264.912933][T12395] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 264.912954][T12395] ? sctp_v6_is_any+0x64/0x80 [ 264.912975][T12395] ? sctp_copy_one_addr+0x93/0x360 [ 264.912997][T12395] sctp_bind_addr_copy+0xb3/0x3c0 [ 264.913017][T12395] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 264.913044][T12395] sctp_connect_new_asoc+0x2e0/0x690 [ 264.913069][T12395] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 264.913089][T12395] ? __local_bh_enable_ip+0x12d/0x1c0 [ 264.913118][T12395] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 264.913138][T12395] ? security_sctp_bind_connect+0x7e/0x2e0 [ 264.913157][T12395] sctp_sendmsg+0x155c/0x2810 [ 264.913189][T12395] ? __pfx_sctp_sendmsg+0x10/0x10 [ 264.913215][T12395] ? aa_sk_perm+0x81e/0x950 [ 264.913237][T12395] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.913257][T12395] ? sock_rps_record_flow+0x19/0x410 [ 264.913276][T12395] ? inet_sendmsg+0x2f4/0x370 [ 264.913299][T12395] __sock_sendmsg+0x19c/0x270 [ 264.913320][T12395] ____sys_sendmsg+0x52d/0x830 [ 264.913350][T12395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.913384][T12395] ? import_iovec+0x74/0xa0 [ 264.913404][T12395] ___sys_sendmsg+0x21f/0x2a0 [ 264.913429][T12395] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.913498][T12395] ? __fget_files+0x2a/0x420 [ 264.913515][T12395] ? __fget_files+0x3a0/0x420 [ 264.913539][T12395] __sys_sendmmsg+0x227/0x430 [ 264.913567][T12395] ? __pfx___sys_sendmmsg+0x10/0x10 [ 264.913584][T12395] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 264.913630][T12395] ? ksys_write+0x22a/0x250 [ 264.913648][T12395] ? __pfx_ksys_write+0x10/0x10 [ 264.913660][T12395] ? rcu_is_watching+0x15/0xb0 [ 264.913691][T12395] __x64_sys_sendmmsg+0xa0/0xc0 [ 264.913715][T12395] do_syscall_64+0xfa/0x3b0 [ 264.913731][T12395] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.913747][T12395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.913763][T12395] ? clear_bhb_loop+0x60/0xb0 [ 264.913783][T12395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.913797][T12395] RIP: 0033:0x7fce73f8e929 [ 264.913812][T12395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.913826][T12395] RSP: 002b:00007fce74ea8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.913844][T12395] RAX: ffffffffffffffda RBX: 00007fce741b5fa0 RCX: 00007fce73f8e929 [ 264.913856][T12395] RDX: 0000000000000002 RSI: 0000200000001740 RDI: 0000000000000003 [ 264.913867][T12395] RBP: 00007fce74ea8090 R08: 0000000000000000 R09: 0000000000000000 [ 264.913877][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.913886][T12395] R13: 0000000000000000 R14: 00007fce741b5fa0 R15: 00007ffd666ccb68 [ 264.913915][T12395] [ 265.313622][T12287] hsr_slave_0: entered promiscuous mode [ 265.323180][T12287] hsr_slave_1: entered promiscuous mode [ 265.475645][T12408] Cannot find add_set index 2 as target [ 265.499960][T12410] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1968'. [ 265.669639][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 265.696459][T12416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1972'. [ 265.710196][T12416] net_ratelimit: 4 callbacks suppressed [ 265.710213][T12416] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 265.753206][T12416] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 266.004865][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 266.056879][T12431] netlink: 'syz.0.1976': attribute type 9 has an invalid length. [ 266.098710][T12431] macvlan3: entered allmulticast mode [ 266.110357][ T5835] Bluetooth: hci0: command tx timeout [ 266.176024][T12287] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.207322][T12287] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.250672][T12287] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.260452][T12434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1977'. [ 266.295350][T12287] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 267.993367][T12505] __nla_validate_parse: 3 callbacks suppressed [ 267.993386][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1987'. [ 268.043355][T12506] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1986'. [ 268.091382][T12287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.121059][T12287] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.159962][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.167168][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.186416][ T5851] Bluetooth: hci0: command tx timeout [ 268.203254][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.210482][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.236529][T12511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1988'. [ 268.258640][T12509] netlink: 'syz.3.1989': attribute type 72 has an invalid length. [ 268.618263][T12528] netlink: 460 bytes leftover after parsing attributes in process `syz.4.1994'. [ 268.743353][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1993'. [ 268.911229][T12287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.972511][T12287] veth0_vlan: entered promiscuous mode [ 268.985823][T12287] veth1_vlan: entered promiscuous mode [ 269.001959][T12546] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 269.010273][T12546] netlink: 'syz.3.1998': attribute type 2 has an invalid length. [ 269.023763][T12546] netlink: 'syz.3.1998': attribute type 1 has an invalid length. [ 269.029866][T12287] veth0_macvtap: entered promiscuous mode [ 269.037473][T12546] netlink: 'syz.3.1998': attribute type 2 has an invalid length. [ 269.050152][T12287] veth1_macvtap: entered promiscuous mode [ 269.085661][T12287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.112158][T12287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.133648][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.147668][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.158752][T12548] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1999'. [ 269.173442][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.183330][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.267485][T12489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.295760][T12489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.314827][T12551] lo speed is unknown, defaulting to 1000 [ 269.335679][T12551] lo speed is unknown, defaulting to 1000 [ 269.339326][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.343833][T12551] lo speed is unknown, defaulting to 1000 [ 269.352043][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.409512][T12554] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2001'. [ 269.688785][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2004'. [ 269.713910][T12562] vlan1: entered promiscuous mode [ 269.764801][T12551] infiniband syz0: set down [ 269.773968][T12551] infiniband syz0: added lo [ 269.806098][ T43] lo speed is unknown, defaulting to 1000 [ 269.871696][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2007'. [ 269.908654][T12551] RDS/IB: syz0: added [ 269.932572][T12573] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 269.936424][T12551] smc: adding ib device syz0 with port count 1 [ 269.940858][T12573] netlink: 'syz.0.2009': attribute type 2 has an invalid length. [ 269.947133][ T5835] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 269.958104][T12573] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 269.979421][T12551] smc: ib device syz0 port 1 has pnetid [ 269.986465][T12573] netlink: 'syz.0.2009': attribute type 2 has an invalid length. [ 269.992646][ T5899] lo speed is unknown, defaulting to 1000 [ 270.007499][T12551] lo speed is unknown, defaulting to 1000 [ 270.244439][T12578] sctp: [Deprecated]: syz.3.2010 (pid 12578) Use of int in max_burst socket option deprecated. [ 270.244439][T12578] Use struct sctp_assoc_value instead [ 270.273835][T12583] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2012'. [ 270.367472][T12587] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input27 [ 270.539637][T12489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.578514][T12551] lo speed is unknown, defaulting to 1000 [ 270.809671][T12489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.892382][T12551] lo speed is unknown, defaulting to 1000 [ 271.065772][T12489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.113681][T12551] lo speed is unknown, defaulting to 1000 [ 271.250117][T12551] lo speed is unknown, defaulting to 1000 [ 271.443294][T12489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.521918][T12489] bridge_slave_1: left allmulticast mode [ 271.529583][T12489] bridge_slave_1: left promiscuous mode [ 271.535295][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.544257][T12489] bridge_slave_0: left allmulticast mode [ 271.551537][T12489] bridge_slave_0: left promiscuous mode [ 271.557586][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.812135][T12489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.824948][T12489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.835708][T12489] bond0 (unregistering): Released all slaves [ 272.130545][T12614] syzkaller1: entered promiscuous mode [ 272.149242][T12614] syzkaller1: entered allmulticast mode [ 272.342279][T12609] lo speed is unknown, defaulting to 1000 [ 272.594798][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.605150][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.611144][T12625] netlink: zone id is out of range [ 272.618821][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.631198][T12625] netlink: zone id is out of range [ 272.637033][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.642332][T12625] netlink: zone id is out of range [ 272.653198][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.680460][T12625] netlink: zone id is out of range [ 272.700098][T12625] netlink: zone id is out of range [ 272.715052][T12625] netlink: zone id is out of range [ 272.759920][T12625] netlink: zone id is out of range [ 272.767635][T12625] netlink: zone id is out of range [ 272.778301][T12625] netlink: zone id is out of range [ 272.792891][T12625] netlink: zone id is out of range [ 273.011571][T12624] lo speed is unknown, defaulting to 1000 [ 273.212662][T12489] hsr_slave_0: left promiscuous mode [ 273.219013][T12489] hsr_slave_1: left promiscuous mode [ 273.241839][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.249370][T12489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.278936][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.304763][T12489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.359764][T12489] veth1_macvtap: left promiscuous mode [ 273.365337][T12489] veth0_macvtap: left promiscuous mode [ 273.386680][T12489] veth1_vlan: left promiscuous mode [ 273.391998][T12489] veth0_vlan: left promiscuous mode [ 273.815601][T12489] team0 (unregistering): Port device team_slave_1 removed [ 273.865386][T12489] team0 (unregistering): Port device team_slave_0 removed [ 274.175462][T12660] __nla_validate_parse: 3 callbacks suppressed [ 274.175482][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 274.186710][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 274.748130][ T5851] Bluetooth: hci0: command tx timeout [ 275.097761][T12624] chnl_net:caif_netlink_parms(): no params data found [ 275.160570][T12693] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 275.170902][T12693] team0: Device ipvlan3 is already an upper device of the team interface [ 275.360932][T12624] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.371240][T12624] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.378973][T12624] bridge_slave_0: entered allmulticast mode [ 275.390456][T12624] bridge_slave_0: entered promiscuous mode [ 275.399587][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2050'. [ 275.399927][T12624] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.418671][T12624] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.426085][T12707] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2050'. [ 275.426105][T12624] bridge_slave_1: entered allmulticast mode [ 275.445299][T12624] bridge_slave_1: entered promiscuous mode [ 275.465441][T12711] xt_bpf: check failed: parse error [ 275.494095][T12624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.512561][T12624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.586883][T12624] team0: Port device team_slave_0 added [ 275.602793][T12624] team0: Port device team_slave_1 added [ 275.746751][T12624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.759739][T12719] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2053'. [ 275.768877][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.796649][T12624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.836383][T12624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.853610][T12624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.912865][T12624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.945270][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2056'. [ 275.954766][T12723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2056'. [ 276.001195][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2055'. [ 276.029790][T12731] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.2057'. [ 276.102257][T12624] hsr_slave_0: entered promiscuous mode [ 276.130483][T12624] hsr_slave_1: entered promiscuous mode [ 276.154358][T12737] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2058'. [ 276.528002][T12757] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 276.537175][T12757] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 276.544923][T12757] netlink: 'syz.3.2065': attribute type 2 has an invalid length. [ 276.760442][T12768] netlink: 'syz.3.2070': attribute type 4 has an invalid length. [ 276.826135][ T5851] Bluetooth: hci0: command tx timeout [ 276.961800][T12777] FAULT_INJECTION: forcing a failure. [ 276.961800][T12777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.986100][T12777] CPU: 1 UID: 0 PID: 12777 Comm: syz.3.2073 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 276.986127][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.986137][T12777] Call Trace: [ 276.986144][T12777] [ 276.986151][T12777] dump_stack_lvl+0x189/0x250 [ 276.986179][T12777] ? __pfx____ratelimit+0x10/0x10 [ 276.986195][T12777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.986216][T12777] ? __pfx__printk+0x10/0x10 [ 276.986233][T12777] ? __might_fault+0xb0/0x130 [ 276.986261][T12777] should_fail_ex+0x414/0x560 [ 276.986287][T12777] _copy_from_user+0x2d/0xb0 [ 276.986305][T12777] ___sys_sendmsg+0x158/0x2a0 [ 276.986341][T12777] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.986402][T12777] ? __fget_files+0x2a/0x420 [ 276.986419][T12777] ? __fget_files+0x3a0/0x420 [ 276.986448][T12777] __x64_sys_sendmsg+0x19b/0x260 [ 276.986473][T12777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.986506][T12777] ? __pfx_ksys_write+0x10/0x10 [ 276.986519][T12777] ? rcu_is_watching+0x15/0xb0 [ 276.986547][T12777] ? do_syscall_64+0xbe/0x3b0 [ 276.986566][T12777] do_syscall_64+0xfa/0x3b0 [ 276.986582][T12777] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.986598][T12777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.986615][T12777] ? clear_bhb_loop+0x60/0xb0 [ 276.986635][T12777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.986651][T12777] RIP: 0033:0x7fdd6778e929 [ 276.986667][T12777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.986682][T12777] RSP: 002b:00007fdd68519038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.986700][T12777] RAX: ffffffffffffffda RBX: 00007fdd679b5fa0 RCX: 00007fdd6778e929 [ 276.986713][T12777] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 276.986724][T12777] RBP: 00007fdd68519090 R08: 0000000000000000 R09: 0000000000000000 [ 276.986734][T12777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.986744][T12777] R13: 0000000000000000 R14: 00007fdd679b5fa0 R15: 00007ffe8a9fc9b8 [ 276.986770][T12777] [ 276.988473][T12777] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 277.206212][T12777] netlink: 'syz.3.2073': attribute type 2 has an invalid length. [ 277.327726][T12785] netlink: 'syz.2.2076': attribute type 4 has an invalid length. [ 277.504976][T12789] FAULT_INJECTION: forcing a failure. [ 277.504976][T12789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.529950][T12789] CPU: 0 UID: 0 PID: 12789 Comm: syz.3.2077 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 277.529972][T12789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.529980][T12789] Call Trace: [ 277.529986][T12789] [ 277.529992][T12789] dump_stack_lvl+0x189/0x250 [ 277.530017][T12789] ? __pfx____ratelimit+0x10/0x10 [ 277.530031][T12789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.530049][T12789] ? __pfx__printk+0x10/0x10 [ 277.530063][T12789] ? __might_fault+0xb0/0x130 [ 277.530085][T12789] should_fail_ex+0x414/0x560 [ 277.530105][T12789] _copy_from_iter+0x1db/0x16f0 [ 277.530127][T12789] ? rcu_is_watching+0x15/0xb0 [ 277.530148][T12789] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 277.530162][T12789] ? __pfx__copy_from_iter+0x10/0x10 [ 277.530180][T12789] ? __build_skb_around+0x257/0x3e0 [ 277.530201][T12789] ? netlink_sendmsg+0x642/0xb30 [ 277.530216][T12789] ? skb_put+0x11b/0x210 [ 277.530236][T12789] netlink_sendmsg+0x6b2/0xb30 [ 277.530259][T12789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.530280][T12789] ? aa_sock_msg_perm+0x94/0x160 [ 277.530298][T12789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.530313][T12789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.530329][T12789] __sock_sendmsg+0x21c/0x270 [ 277.530346][T12789] ____sys_sendmsg+0x505/0x830 [ 277.530369][T12789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.530395][T12789] ? import_iovec+0x74/0xa0 [ 277.530411][T12789] ___sys_sendmsg+0x21f/0x2a0 [ 277.530437][T12789] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.530493][T12789] ? __fget_files+0x2a/0x420 [ 277.530518][T12789] ? __fget_files+0x3a0/0x420 [ 277.530544][T12789] __x64_sys_sendmsg+0x19b/0x260 [ 277.530568][T12789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 277.530598][T12789] ? __pfx_ksys_write+0x10/0x10 [ 277.530616][T12789] ? do_syscall_64+0xbe/0x3b0 [ 277.530637][T12789] do_syscall_64+0xfa/0x3b0 [ 277.530651][T12789] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.530667][T12789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.530682][T12789] ? clear_bhb_loop+0x60/0xb0 [ 277.530702][T12789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.530717][T12789] RIP: 0033:0x7fdd6778e929 [ 277.530731][T12789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.530746][T12789] RSP: 002b:00007fdd655f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.530764][T12789] RAX: ffffffffffffffda RBX: 00007fdd679b6080 RCX: 00007fdd6778e929 [ 277.530776][T12789] RDX: 000000000000c010 RSI: 00002000000002c0 RDI: 0000000000000011 [ 277.530787][T12789] RBP: 00007fdd655f6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.530798][T12789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.530808][T12789] R13: 0000000000000000 R14: 00007fdd679b6080 R15: 00007ffe8a9fc9b8 [ 277.530836][T12789] [ 277.531046][T12790] FAULT_INJECTION: forcing a failure. [ 277.531046][T12790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.614499][T12794] netlink: 'syz.0.2080': attribute type 10 has an invalid length. [ 277.621642][T12790] CPU: 1 UID: 0 PID: 12790 Comm: syz.2.2078 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 277.621666][T12790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.621676][T12790] Call Trace: [ 277.621683][T12790] [ 277.621691][T12790] dump_stack_lvl+0x189/0x250 [ 277.621718][T12790] ? __pfx____ratelimit+0x10/0x10 [ 277.621736][T12790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.621758][T12790] ? __pfx__printk+0x10/0x10 [ 277.621789][T12790] should_fail_ex+0x414/0x560 [ 277.621814][T12790] _copy_from_user+0x2d/0xb0 [ 277.621832][T12790] ___bpf_copy_key+0xa5/0x110 [ 277.621857][T12790] map_update_elem+0x200/0x750 [ 277.621880][T12790] ? bpf_lsm_bpf+0x9/0x20 [ 277.621898][T12790] __sys_bpf+0x6a9/0x860 [ 277.621920][T12790] ? __pfx___sys_bpf+0x10/0x10 [ 277.621953][T12790] ? ksys_write+0x22a/0x250 [ 277.621971][T12790] ? __pfx_ksys_write+0x10/0x10 [ 277.621984][T12790] ? rcu_is_watching+0x15/0xb0 [ 277.622013][T12790] __x64_sys_bpf+0x7c/0x90 [ 277.622033][T12790] do_syscall_64+0xfa/0x3b0 [ 277.622049][T12790] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.622065][T12790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.622079][T12790] ? clear_bhb_loop+0x60/0xb0 [ 277.622099][T12790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.622115][T12790] RIP: 0033:0x7f8153b8e929 [ 277.622130][T12790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.622143][T12790] RSP: 002b:00007f8154a67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.622161][T12790] RAX: ffffffffffffffda RBX: 00007f8153db5fa0 RCX: 00007f8153b8e929 [ 277.622173][T12790] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000002 [ 277.622183][T12790] RBP: 00007f8154a67090 R08: 0000000000000000 R09: 0000000000000000 [ 277.622193][T12790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.622203][T12790] R13: 0000000000000000 R14: 00007f8153db5fa0 R15: 00007fffc4330d48 [ 277.622235][T12790] [ 278.034964][T12794] bridge0: port 3(dummy0) entered disabled state [ 278.053308][T12794] bridge0: port 3(dummy0) entered blocking state [ 278.059841][T12794] bridge0: port 3(dummy0) entered forwarding state [ 278.072581][T12794] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 278.244722][T12624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.292894][T12802] macvtap1: entered promiscuous mode [ 278.307931][T12802] hsr0: entered promiscuous mode [ 278.317954][T12802] macvtap1: entered allmulticast mode [ 278.349265][T12802] hsr0: entered allmulticast mode [ 278.384768][T12802] hsr_slave_0: entered allmulticast mode [ 278.412255][T12802] hsr_slave_1: entered allmulticast mode [ 278.443488][T12624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.463402][T12624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.492034][T12624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.701183][T12823] syz_tun (unregistering): left promiscuous mode [ 278.794700][T12624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.859721][T12827] lo speed is unknown, defaulting to 1000 [ 278.897801][T12624] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.907930][ T5851] Bluetooth: hci0: command tx timeout [ 278.932090][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.939409][T12491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.955599][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.962806][T12489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.478544][T12854] netlink: 'syz.3.2094': attribute type 9 has an invalid length. [ 279.486755][T12854] netlink: 'syz.3.2094': attribute type 1 has an invalid length. [ 279.494971][T12854] __nla_validate_parse: 12 callbacks suppressed [ 279.494988][T12854] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2094'. [ 279.660863][T12624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.789946][T12624] veth0_vlan: entered promiscuous mode [ 279.821447][T12624] veth1_vlan: entered promiscuous mode [ 279.923779][T12624] veth0_macvtap: entered promiscuous mode [ 280.082162][T12624] veth1_macvtap: entered promiscuous mode [ 280.123179][T12868] FAULT_INJECTION: forcing a failure. [ 280.123179][T12868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.146035][T12864] lo speed is unknown, defaulting to 1000 [ 280.151855][T12868] CPU: 0 UID: 0 PID: 12868 Comm: syz.0.2098 Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 280.151879][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.151889][T12868] Call Trace: [ 280.151896][T12868] [ 280.151902][T12868] dump_stack_lvl+0x189/0x250 [ 280.151928][T12868] ? __pfx____ratelimit+0x10/0x10 [ 280.151944][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.151964][T12868] ? __pfx__printk+0x10/0x10 [ 280.151980][T12868] ? __might_fault+0xb0/0x130 [ 280.152007][T12868] should_fail_ex+0x414/0x560 [ 280.152033][T12868] _copy_from_iter+0x1db/0x16f0 [ 280.152058][T12868] ? sock_alloc_send_pskb+0x875/0x990 [ 280.152081][T12868] ? __pfx__copy_from_iter+0x10/0x10 [ 280.152112][T12868] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 280.152132][T12868] skb_copy_datagram_from_iter+0xf5/0x720 [ 280.152151][T12868] ? sk_psock_verdict_data_ready+0xcb/0x390 [ 280.152171][T12868] ? skb_put+0x11b/0x210 [ 280.152196][T12868] unix_stream_sendmsg+0x5a1/0xc90 [ 280.152232][T12868] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 280.152260][T12868] ? aa_sock_msg_perm+0x94/0x160 [ 280.152278][T12868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.152302][T12868] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 280.152322][T12868] __sock_sendmsg+0x21c/0x270 [ 280.152342][T12868] ____sys_sendmsg+0x505/0x830 [ 280.152369][T12868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.152401][T12868] ? import_iovec+0x74/0xa0 [ 280.152422][T12868] ___sys_sendmsg+0x21f/0x2a0 [ 280.152447][T12868] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.152507][T12868] ? __fget_files+0x2a/0x420 [ 280.152525][T12868] ? __fget_files+0x3a0/0x420 [ 280.152553][T12868] __x64_sys_sendmsg+0x19b/0x260 [ 280.152579][T12868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.152610][T12868] ? __pfx_ksys_write+0x10/0x10 [ 280.152621][T12868] ? rcu_is_watching+0x15/0xb0 [ 280.152649][T12868] ? do_syscall_64+0xbe/0x3b0 [ 280.152670][T12868] do_syscall_64+0xfa/0x3b0 [ 280.152686][T12868] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.152703][T12868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.152719][T12868] ? clear_bhb_loop+0x60/0xb0 [ 280.152739][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.152754][T12868] RIP: 0033:0x7f0eb578e929 [ 280.152770][T12868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.152782][T12868] RSP: 002b:00007f0eb66b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.152800][T12868] RAX: ffffffffffffffda RBX: 00007f0eb59b5fa0 RCX: 00007f0eb578e929 [ 280.152812][T12868] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000003 [ 280.152823][T12868] RBP: 00007f0eb66b4090 R08: 0000000000000000 R09: 0000000000000000 [ 280.152834][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.152868][T12868] R13: 0000000000000000 R14: 00007f0eb59b5fa0 R15: 00007ffca822b498 [ 280.152897][T12868] [ 280.550606][T12624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.654308][T12624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.736878][ T10] lo speed is unknown, defaulting to 1000 [ 280.742651][ T10] syz0: Port: 1 Link ACTIVE [ 280.778065][ T10] lo speed is unknown, defaulting to 1000 [ 280.812898][T12491] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.850080][T12491] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.972126][T12491] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.989910][ T5851] Bluetooth: hci0: command tx timeout [ 280.992694][T12491] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.138074][T12892] xt_policy: too many policy elements [ 281.152493][T12891] tipc: Enabling of bearer rejected, failed to enable media [ 281.163732][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.189110][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.384968][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.386341][T12896] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2108'. [ 281.401628][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.628811][T12901] xt_cgroup: invalid path, errno=-2 [ 281.640064][T12624] ------------[ cut here ]------------ [ 281.645759][T12624] refcount_t: underflow; use-after-free. [ 281.652259][T12624] WARNING: CPU: 0 PID: 12624 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 281.662097][T12624] Modules linked in: [ 281.666608][T12624] CPU: 0 UID: 0 PID: 12624 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 281.678916][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.689031][T12624] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 281.695216][T12624] Code: 00 41 e2 8b e8 f7 92 c2 fc 90 0f 0b 90 90 eb d7 e8 3b e8 fe fc c6 05 95 aa c9 0a 01 90 48 c7 c7 60 41 e2 8b e8 d7 92 c2 fc 90 <0f> 0b 90 90 eb b7 e8 1b e8 fe fc c6 05 72 aa c9 0a 01 90 48 c7 c7 [ 281.715080][T12624] RSP: 0018:ffffc90004a077d8 EFLAGS: 00010246 [ 281.721203][T12624] RAX: 76f7f08531d36400 RBX: 0000000000000003 RCX: ffff888030650000 [ 281.729219][T12624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 281.737234][T12624] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 281.745216][T12624] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffff888031382400 [ 281.753248][T12624] R13: ffff88805d6c8c60 R14: ffff88805d6c8c78 R15: dffffc0000000000 [ 281.761274][T12624] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 281.763480][T12905] net_ratelimit: 4 callbacks suppressed [ 281.763495][T12905] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 281.770240][T12624] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.790339][T12624] CR2: 0000200000004000 CR3: 000000007a7c8000 CR4: 00000000003526f0 [ 281.798366][T12624] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 281.806408][T12624] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 281.814390][T12624] Call Trace: [ 281.817729][T12624] [ 281.820665][T12624] klist_dec_and_del+0x3c7/0x3d0 [ 281.825633][T12624] klist_remove+0x1bd/0x340 [ 281.830246][T12624] ? __pfx_klist_children_put+0x10/0x10 [ 281.835809][T12624] ? __pfx_klist_remove+0x10/0x10 [ 281.840906][T12624] ? __pfx_kobject_move+0x10/0x10 [ 281.845970][T12624] ? get_device_parent+0x366/0x3a0 [ 281.851097][T12624] device_move+0x193/0x700 [ 281.855545][T12624] hci_conn_del_sysfs+0xb8/0x170 [ 281.860559][T12624] hci_conn_del+0x8ff/0xcb0 [ 281.865084][T12624] hci_conn_hash_flush+0x191/0x230 [ 281.870408][T12624] hci_dev_close_sync+0xaef/0x1330 [ 281.875543][T12624] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 281.881130][T12624] ? up_write+0x1c4/0x420 [ 281.885482][T12624] hci_unregister_dev+0x206/0x500 [ 281.890616][T12624] vhci_release+0x80/0xd0 [ 281.894961][T12624] ? __pfx_vhci_release+0x10/0x10 [ 281.900045][T12624] __fput+0x44c/0xa70 [ 281.904065][T12624] task_work_run+0x1d1/0x260 [ 281.908752][T12624] ? __pfx_task_work_run+0x10/0x10 [ 281.913882][T12624] ? kmem_cache_free+0x18f/0x400 [ 281.918883][T12624] do_exit+0x6ad/0x22e0 [ 281.923056][T12624] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 281.928482][T12624] ? __pfx_do_exit+0x10/0x10 [ 281.933105][T12624] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.938383][T12624] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.943607][T12624] do_group_exit+0x21c/0x2d0 [ 281.948322][T12624] __x64_sys_exit_group+0x3f/0x40 [ 281.953364][T12624] x64_sys_call+0x21ba/0x21c0 [ 281.958145][T12624] do_syscall_64+0xfa/0x3b0 [ 281.962663][T12624] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.967909][T12624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.973993][T12624] ? clear_bhb_loop+0x60/0xb0 [ 281.978830][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.984731][T12624] RIP: 0033:0x7fbd0b38e929 [ 281.989167][T12624] Code: Unable to access opcode bytes at 0x7fbd0b38e8ff. [ 281.996200][T12624] RSP: 002b:00007ffd2eb068c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 282.004621][T12624] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd0b38e929 [ 282.012619][T12624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 282.020652][T12624] RBP: 00007fbd0b3ee8f0 R08: 00007ffd2eb04667 R09: 0000000000000003 [ 282.029176][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.037370][T12624] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd2eb06a80 [ 282.045375][T12624] [ 282.048462][T12624] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 282.055747][T12624] CPU: 0 UID: 0 PID: 12624 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00622-g091d019adce0 #0 PREEMPT(full) [ 282.067970][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.078013][T12624] Call Trace: [ 282.081292][T12624] [ 282.084225][T12624] dump_stack_lvl+0x99/0x250 [ 282.088825][T12624] ? __asan_memcpy+0x40/0x70 [ 282.093412][T12624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.098607][T12624] ? __pfx__printk+0x10/0x10 [ 282.103216][T12624] panic+0x2db/0x790 [ 282.107120][T12624] ? __pfx_panic+0x10/0x10 [ 282.111549][T12624] __warn+0x31b/0x4b0 [ 282.115529][T12624] ? refcount_warn_saturate+0x11a/0x1d0 [ 282.121070][T12624] ? refcount_warn_saturate+0x11a/0x1d0 [ 282.126618][T12624] report_bug+0x2be/0x4f0 [ 282.130957][T12624] ? refcount_warn_saturate+0x11a/0x1d0 [ 282.136498][T12624] ? refcount_warn_saturate+0x11a/0x1d0 [ 282.142392][T12624] ? refcount_warn_saturate+0x11c/0x1d0 [ 282.148033][T12624] handle_bug+0x84/0x160 [ 282.152283][T12624] exc_invalid_op+0x1a/0x50 [ 282.156784][T12624] asm_exc_invalid_op+0x1a/0x20 [ 282.161629][T12624] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 282.167770][T12624] Code: 00 41 e2 8b e8 f7 92 c2 fc 90 0f 0b 90 90 eb d7 e8 3b e8 fe fc c6 05 95 aa c9 0a 01 90 48 c7 c7 60 41 e2 8b e8 d7 92 c2 fc 90 <0f> 0b 90 90 eb b7 e8 1b e8 fe fc c6 05 72 aa c9 0a 01 90 48 c7 c7 [ 282.187368][T12624] RSP: 0018:ffffc90004a077d8 EFLAGS: 00010246 [ 282.193426][T12624] RAX: 76f7f08531d36400 RBX: 0000000000000003 RCX: ffff888030650000 [ 282.201383][T12624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 282.209337][T12624] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 282.217295][T12624] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffff888031382400 [ 282.225251][T12624] R13: ffff88805d6c8c60 R14: ffff88805d6c8c78 R15: dffffc0000000000 [ 282.233225][T12624] ? refcount_warn_saturate+0x119/0x1d0 [ 282.238760][T12624] klist_dec_and_del+0x3c7/0x3d0 [ 282.243686][T12624] klist_remove+0x1bd/0x340 [ 282.248171][T12624] ? __pfx_klist_children_put+0x10/0x10 [ 282.253705][T12624] ? __pfx_klist_remove+0x10/0x10 [ 282.258715][T12624] ? __pfx_kobject_move+0x10/0x10 [ 282.263722][T12624] ? get_device_parent+0x366/0x3a0 [ 282.268827][T12624] device_move+0x193/0x700 [ 282.273234][T12624] hci_conn_del_sysfs+0xb8/0x170 [ 282.278162][T12624] hci_conn_del+0x8ff/0xcb0 [ 282.282656][T12624] hci_conn_hash_flush+0x191/0x230 [ 282.287760][T12624] hci_dev_close_sync+0xaef/0x1330 [ 282.292867][T12624] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 282.298397][T12624] ? up_write+0x1c4/0x420 [ 282.302723][T12624] hci_unregister_dev+0x206/0x500 [ 282.307737][T12624] vhci_release+0x80/0xd0 [ 282.312055][T12624] ? __pfx_vhci_release+0x10/0x10 [ 282.317063][T12624] __fput+0x44c/0xa70 [ 282.321042][T12624] task_work_run+0x1d1/0x260 [ 282.325624][T12624] ? __pfx_task_work_run+0x10/0x10 [ 282.330724][T12624] ? kmem_cache_free+0x18f/0x400 [ 282.335648][T12624] do_exit+0x6ad/0x22e0 [ 282.339794][T12624] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 282.345158][T12624] ? __pfx_do_exit+0x10/0x10 [ 282.349740][T12624] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.354929][T12624] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.360113][T12624] do_group_exit+0x21c/0x2d0 [ 282.364692][T12624] __x64_sys_exit_group+0x3f/0x40 [ 282.369704][T12624] x64_sys_call+0x21ba/0x21c0 [ 282.374363][T12624] do_syscall_64+0xfa/0x3b0 [ 282.378851][T12624] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.384034][T12624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.390081][T12624] ? clear_bhb_loop+0x60/0xb0 [ 282.394747][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.400624][T12624] RIP: 0033:0x7fbd0b38e929 [ 282.405026][T12624] Code: Unable to access opcode bytes at 0x7fbd0b38e8ff. [ 282.412024][T12624] RSP: 002b:00007ffd2eb068c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 282.420434][T12624] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd0b38e929 [ 282.428388][T12624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 282.436341][T12624] RBP: 00007fbd0b3ee8f0 R08: 00007ffd2eb04667 R09: 0000000000000003 [ 282.444296][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.452249][T12624] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd2eb06a80 [ 282.460221][T12624] [ 282.463471][T12624] Kernel Offset: disabled [ 282.467793][T12624] Rebooting in 86400 seconds..