last executing test programs: 11.034456351s ago: executing program 1 (id=3186): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000002"], 0x58}}, 0x0) (fail_nth: 9) 10.882699806s ago: executing program 1 (id=3187): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de21", 0x22}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 10.811121975s ago: executing program 1 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 10.114812471s ago: executing program 1 (id=3193): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x44}, 0xffff}}, [0x9, 0x0, 0x986, 0x7, 0x3ff, 0xfffffffffffffffa, 0x3, 0xe8bf, 0x1, 0x1, 0x9, 0xffffffffffff693c, 0x1, 0x400, 0x86c2]}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ac00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000380)={0x0, 'caif0\x00'}, 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x4000080}, {0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)=[@op={0x18}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c80)="5e6432724957fd70305cd57fb8fedd9e0c92eacbc48e5d6ed9c2ffe30afbc0af99b2bef519a7bf98f3466a59a0118892469f40e099f9c1c8837db16769e7b74b3b897dba69e59fec5d4fdd7ca65922bf566e7c6b0ce5392ab4855adda7aebf681fde0481bd3b27c47d12ae9a9c9fb3dbfe36849a3537f3c57b0f1c2f179cc94d55722be7b77e1824fcc747fbc27cafd5fc94db09135bd2fed756143ade408a0105502316b6ab57217825ed9230ef511e39e7c20cbdc343d365c4de08563f2d3936d42a4df03216605e10", 0xca}, {&(0x7f0000000d80)="b585f319bdfa168b6460220dc13466133fba51d326222d477599c5687eb7fef4641438965253c76ea62d218478e62c94711fc1d491e4e4d97daf336f10d3df3927cb3008357ceaef9874985d9b42727de2e5407542961a6facd5ccd0aa10c84e549d9de2f43d1001838a9493955669be2674f8e92b0af9011d98eeac4c7dc1d7407ba952614abc0458c595e03b18479e9c43371509fcf1e46585e54c433b6ec94c475dd293b82df628e3eaf5ded4458dc06fbd2310e87fb6773f730155", 0xbd}, {&(0x7f0000000e40)="8ca4e1ebca13adb49051e3ce9458914c81d81020f2110b0c1baf128e4eb2748d9b222f6b4095c07bfcb00bfe046df527ba42389d32169bc0fcfc1c431a6e462ed4d66a475b93dc6db5cc2d4be85f5f352f97953ea37a89e3be7d1ded16b0ffac2656fe7488897d02f2ba51f9d93a7361afd50687137f22d81a18f249103cca1f0c554d020f468c2275748a6de35da61ea26321126e55103dde40baa0e51cd7d9e1b301a7c95635d00339723289b8da2eb28a6d5ea9b5076da3f4379664371bcbb21cd3c7d880ace887f96edf911bc5ab2d0bd90d84d4931402c9f5f1b5bbd0457c3a4fcaff", 0xe5}, {&(0x7f0000000f40)="42d45ea84c27466a89fbe1109089d1d4b5c1d6305f3774561652b65c64f08278773fc3f1b2bdbd6b9dd8df6b68847c92537daf33ab10feea6f412f7e9d5e1ef145456397e82b5a234c03420d70c153fca2c12e1eac9f0a94da96416f22cc4bd2b4c2782b604a85e2f8212bdd72424a5a86dac9f593e321dce504932a1aad8d", 0x7f}, {&(0x7f0000002140)="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", 0x1000}], 0x5, &(0x7f0000001040)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x20008000}], 0x3, 0x8000) r1 = socket(0x1e, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x49, 0xbc, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7, 0x80, 0xe7, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa0800450000280064000004029005000000e0e000020211009078e000000200010001000008e000000000"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 9.968481408s ago: executing program 1 (id=3195): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000080000000000000000000000000000000000000000000000000020000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ff010000000000000000000000000001000004d23300"], 0x1bc}}, 0x4000) 9.781802104s ago: executing program 1 (id=3197): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de21", 0x22}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 4.141970079s ago: executing program 2 (id=3236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000068120040168c30c4069b62b54e07af04acb96d2aa882f901d7a5837327c109c8bc349f725ab76f5de31856db4a3b7093ce822e34216e705f9523ad3962ed50ddac9fbdc038"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x2, 0x2, 0x0, 0x80}}, 0x2e) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000019000100f7ffffff000000001c140000fe03000100000000080001"], 0x24}}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r10 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r9, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000000)={0x2a, 0x2, 0x7fff}, 0xc) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xf, 0x0, &(0x7f0000000840)) connect$qrtr(r10, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r10, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) setsockopt$sock_attach_bpf(r8, 0x1, 0x24, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f00000002c0)={'ipvlan1\x00', @link_local}) 2.742715751s ago: executing program 3 (id=3245): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x8}, {}, 0x0, 0x0, 0x2, 0x4, 0x80}, [@algo_auth_trunc={0x8d, 0x14, {{'sm3\x00'}, 0x208, 0x0, "776c3dac4c123121daa2ff5cd87186c96a82d89c65ea6ba138aa025681856d0f5f5e956336d23906f1a7e9087ab152c38d015e5be92b828b1f0eb091afe0a4e2ce"}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/178, 0x1000000, 0x800, 0x7}, 0x20) r2 = socket(0x11, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r4 = getpid() sendmsg$nl_netfilter(r2, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="04005f800800f000e0000001000000"], 0x158}, 0x1, 0x0, 0x0, 0x20000800}, 0x75ebb25dfad0e253) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000069842a7a32b357316cf9789ef251e4b6ad00505900843db0996bd80ccd97a01ac57bf7c0e9faa990980e2b14deead4698bcd2b1a9db1070c512a3a8cfd76433c5bc99d3abd598f8b2a552f237c3a673e8dc5801dfa210bc0463cf0edf7272ff529da3ef40aee9af985f80eec2d2735025227fe6303352c65d65035199e40bccd5712eca56e1854d798ca46fbe4fbf91c621b23e10311636e536174ca839e0cd8e9c75b0b4d143eced7d226", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0xe0}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r7, 0x6, 0x1b, &(0x7f0000000040)=0x4, 0x4) r8 = socket$inet(0x2, 0xa, 0x0) r9 = socket(0x10, 0x80002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000", @ANYRES16=r11, @ANYBLOB="050200000000000000100f00000008000300", @ANYRES32=r12, @ANYBLOB="4d000e0080000000080211000001ffffffffffff0802110000000000000000000000000064007f5d0100060204022a01022d1a0020190900000000000000c90007001900000008000b0000000400000004000f00080026006c09000008000c006400000008000d00ffffffff0500d50003000000"], 0x90}}, 0x0) sendmmsg$alg(r9, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="a18027", 0x3}], 0x1, 0x0, 0x0, 0x404c080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x4e20, @empty}, 'bond0\x00'}) 2.039926143s ago: executing program 2 (id=3246): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r3, @ANYRES64=r4, @ANYRES64=r4], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x88a4) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010000000000000000", @ANYRES32=r4, @ANYBLOB="08000800000022ff"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x3, 0x4) (async) setsockopt$inet_msfilter(r2, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) (async) socket(0x10, 0x803, 0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000200)=0xfeffdff9, 0x4) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@mss, @sack_perm, @timestamp, @timestamp, @timestamp], 0x5) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) (async) gettid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 1.770542653s ago: executing program 2 (id=3250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18a600000000000066d7fe0688000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1}}}], 0x20}, 0x20002800) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@dev, @remote}, &(0x7f0000000180)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r7, @ANYBLOB="08000b002100000008000200ac"], 0x54}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x200003, 0x10}, 0xc) sendto$inet6(r9, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000400)={@private=0xa010102, @empty, @empty}, 0xc) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$netrom_NETROM_IDLE(r8, 0x103, 0x7, &(0x7f0000000500)=0x7, &(0x7f0000000580)=0x4) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r12, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x14) 1.640284277s ago: executing program 4 (id=3252): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x40, 0x7, 0x3ff, 0x7, {{0x26, 0x4, 0x3, 0x2, 0x98, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2d, 0xfffffffffffffffc, [{0x7, 0xd, "205e0768e61d7f5908fc82"}, {0x0, 0x8, "f6a95b5ff3ab"}, {0x5, 0x8, "05641e10bcee"}, {0x5, 0xa, "467eb89cad2ddbe0"}]}, @rr={0x7, 0x1b, 0x1a, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @multicast1, @local, @multicast2, @multicast2]}, @ssrr={0x89, 0xb, 0xd9, [@remote, @multicast2]}, @noop, @lsrr={0x83, 0x13, 0x84, [@loopback, @remote, @remote, @private=0xa010102]}, @lsrr={0x83, 0x7, 0x5c, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0x4d, 0x0, 0x9, [0x11e4, 0x7, 0x2, 0x3]}]}}}}}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x2, 0x0, 0x0, "25796a17bca6fca1"}, 0x2}}]}, 0x2c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000013c0)={r2, 0x0, "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", "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"}) 1.474982219s ago: executing program 4 (id=3253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000200000f9ffff3f0000000000"], 0xb8}}, 0x0) 1.430902097s ago: executing program 3 (id=3254): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x3c}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 1.426172382s ago: executing program 0 (id=3255): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000ffff00000000ac14144200000000000000000000000000000000000080000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r4], 0x7c}}, 0x80) 1.286843095s ago: executing program 2 (id=3256): connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x54) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x20048050) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x8000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc00000021000100ff84000015000000ff010000000000008a00000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000000000000000000000003c000000000000000a000a002c0013007f000001000000000000000000000000e0000001000000000000000000000000000000000a000000"], 0xcc}}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003308fd906b771ab5030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112", 0xb8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 1.282943444s ago: executing program 3 (id=3257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000ffff27bd7000fbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500480012800e0001006970366772657461700000003400028014000600fe8000000000000000000000000000aa140007000000000000000041"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 1.256408593s ago: executing program 4 (id=3258): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x44}, 0xffff}}, [0x9, 0x0, 0x986, 0x7, 0x3ff, 0xfffffffffffffffa, 0x3, 0xe8bf, 0x1, 0x1, 0x9, 0xffffffffffff693c, 0x1, 0x400, 0x86c2]}, &(0x7f0000000000)=0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000380)={0x0, 'caif0\x00'}, 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x4000080}, {0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)=[@op={0x18}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c80)="5e6432724957fd70305cd57fb8fedd9e0c92eacbc48e5d6ed9c2ffe30afbc0af99b2bef519a7bf98f3466a59a0118892469f40e099f9c1c8837db16769e7b74b3b897dba69e59fec5d4fdd7ca65922bf566e7c6b0ce5392ab4855adda7aebf681fde0481bd3b27c47d12ae9a9c9fb3dbfe36849a3537f3c57b0f1c2f179cc94d55722be7b77e1824fcc747fbc27cafd5fc94db09135bd2fed756143ade408a0105502316b6ab57217825ed9230ef511e39e7c20cbdc343d365c4de08563f2d3936d42a4df03216605e10", 0xca}, {&(0x7f0000000d80)="b585f319bdfa168b6460220dc13466133fba51d326222d477599c5687eb7fef4641438965253c76ea62d218478e62c94711fc1d491e4e4d97daf336f10d3df3927cb3008357ceaef9874985d9b42727de2e5407542961a6facd5ccd0aa10c84e549d9de2f43d1001838a9493955669be2674f8e92b0af9011d98eeac4c7dc1d7407ba952614abc0458c595e03b18479e9c43371509fcf1e46585e54c433b6ec94c475dd293b82df628e3eaf5ded4458dc06fbd2310e87fb6773f730155", 0xbd}, {&(0x7f0000000e40)="8ca4e1ebca13adb49051e3ce9458914c81d81020f2110b0c1baf128e4eb2748d9b222f6b4095c07bfcb00bfe046df527ba42389d32169bc0fcfc1c431a6e462ed4d66a475b93dc6db5cc2d4be85f5f352f97953ea37a89e3be7d1ded16b0ffac2656fe7488897d02f2ba51f9d93a7361afd50687137f22d81a18f249103cca1f0c554d020f468c2275748a6de35da61ea26321126e55103dde40baa0e51cd7d9e1b301a7c95635d00339723289b8da2eb28a6d5ea9b5076da3f4379664371bcbb21cd3c7d880ace887f96edf911bc5ab2d0bd90d84d4931402c9f5f1b5bbd0457c3a4fcaff", 0xe5}, {&(0x7f0000000f40)="42d45ea84c27466a89fbe1109089d1d4b5c1d6305f3774561652b65c64f08278773fc3f1b2bdbd6b9dd8df6b68847c92537daf33ab10feea6f412f7e9d5e1ef145456397e82b5a234c03420d70c153fca2c12e1eac9f0a94da96416f22cc4bd2b4c2782b604a85e2f8212bdd72424a5a86dac9f593e321dce504932a1aad8d", 0x7f}, {&(0x7f0000002140)="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", 0x1000}], 0x5, &(0x7f0000001040)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x20008000}], 0x3, 0x8000) r1 = socket(0x1e, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x49, 0xbc, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7, 0x80, 0xe7, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa0800450000280064000004029005000000e0e000020211009078e000000200010001000008e000000000"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 1.033070067s ago: executing program 3 (id=3259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) unshare(0x8040480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r3], 0x7c}}, 0x80) (fail_nth: 2) 1.022237221s ago: executing program 2 (id=3260): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) (fail_nth: 10) 1.021374027s ago: executing program 4 (id=3261): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000002030000004000000", @ANYRES32=0x0, @ANYBLOB="d486a41962e528e197f6cec67c0d968da9d40c0be2f5", @ANYRES64=0x0], 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="529bba0b", @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000002"], 0x58}}, 0x0) 954.764121ms ago: executing program 0 (id=3262): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001400010000008000000000000700"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x0, @hci={0x1f, 0xffffffffffffffff}, @sco, @sco, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='wlan0\x00', 0x264, 0x13, 0x80}) 875.194671ms ago: executing program 3 (id=3263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f00000001c0)=0x14) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7fffffff, 0xfe, 0x3, 0x11802, r0, 0x998a, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xd, @void, @value, @value=r3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x50) unshare(0x8040480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600", @ANYRES8=r5], 0x7c}}, 0x80) 746.020605ms ago: executing program 0 (id=3264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000800000000000000000000000000000000000000000050000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040105"], 0x1bc}}, 0x4000) 673.620006ms ago: executing program 0 (id=3265): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0000000000008000000000000000000000000000000000000000000000000002000000000000000080ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ff010000000000000000000000000001000004d23300"], 0x1bc}}, 0x4000) 353.29259ms ago: executing program 0 (id=3266): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x3c}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) 303.618448ms ago: executing program 2 (id=3267): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket$netlink(0x10, 0x3, 0x8) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="25b89ca38ffd48f3be52163448412ba88b3b3470", 0x14}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d", 0x6b}, {&(0x7f0000000800)="38c4340e8710b8eaedd392cbf07690d4a3f2b8eadcac25284b2afc2a941cbe880cf2d0823ecd83a7b84b4154e5a802b7de51c5b236647c77656a585c60798db780d8e1bf9d21f0f1f2719ed31a3c18c47b3c5abb4dea4c758c7eb47b7e982793ca63b0b9d4b4611fbcc0ffad443b9ef7358117a5", 0x74}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20044014) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000740)=""/125, 0x7d}], 0x3}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8044005}, 0x4084) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000400000020001000000000000000a18ff00000005000500000000000a"], 0x70}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c000280050011000600000095"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 208.281869ms ago: executing program 0 (id=3268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000ffff27bd7000fbdbdf25000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500480012800e0001006970366772657461700000003400028014000600fe8000000000000000000000000000aa140007000000000000000041"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) 102.828964ms ago: executing program 4 (id=3269): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x20000000) 37.567635ms ago: executing program 3 (id=3270): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) writev(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$inet(0x2b, 0x801, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) 0s ago: executing program 4 (id=3271): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x44}, 0xffff}}, [0x9, 0x0, 0x986, 0x7, 0x3ff, 0xfffffffffffffffa, 0x3, 0xe8bf, 0x1, 0x1, 0x9, 0xffffffffffff693c, 0x1, 0x400, 0x86c2]}, &(0x7f0000000000)=0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000380)={0x0, 'caif0\x00'}, 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x4000080}, {0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)=[@op={0x18}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c80)="5e6432724957fd70305cd57fb8fedd9e0c92eacbc48e5d6ed9c2ffe30afbc0af99b2bef519a7bf98f3466a59a0118892469f40e099f9c1c8837db16769e7b74b3b897dba69e59fec5d4fdd7ca65922bf566e7c6b0ce5392ab4855adda7aebf681fde0481bd3b27c47d12ae9a9c9fb3dbfe36849a3537f3c57b0f1c2f179cc94d55722be7b77e1824fcc747fbc27cafd5fc94db09135bd2fed756143ade408a0105502316b6ab57217825ed9230ef511e39e7c20cbdc343d365c4de08563f2d3936d42a4df03216605e10", 0xca}, {&(0x7f0000000d80)="b585f319bdfa168b6460220dc13466133fba51d326222d477599c5687eb7fef4641438965253c76ea62d218478e62c94711fc1d491e4e4d97daf336f10d3df3927cb3008357ceaef9874985d9b42727de2e5407542961a6facd5ccd0aa10c84e549d9de2f43d1001838a9493955669be2674f8e92b0af9011d98eeac4c7dc1d7407ba952614abc0458c595e03b18479e9c43371509fcf1e46585e54c433b6ec94c475dd293b82df628e3eaf5ded4458dc06fbd2310e87fb6773f730155", 0xbd}, {&(0x7f0000000e40)="8ca4e1ebca13adb49051e3ce9458914c81d81020f2110b0c1baf128e4eb2748d9b222f6b4095c07bfcb00bfe046df527ba42389d32169bc0fcfc1c431a6e462ed4d66a475b93dc6db5cc2d4be85f5f352f97953ea37a89e3be7d1ded16b0ffac2656fe7488897d02f2ba51f9d93a7361afd50687137f22d81a18f249103cca1f0c554d020f468c2275748a6de35da61ea26321126e55103dde40baa0e51cd7d9e1b301a7c95635d00339723289b8da2eb28a6d5ea9b5076da3f4379664371bcbb21cd3c7d880ace887f96edf911bc5ab2d0bd90d84d4931402c9f5f1b5bbd0457c3a4fcaff", 0xe5}, {&(0x7f0000000f40)="42d45ea84c27466a89fbe1109089d1d4b5c1d6305f3774561652b65c64f08278773fc3f1b2bdbd6b9dd8df6b68847c92537daf33ab10feea6f412f7e9d5e1ef145456397e82b5a234c03420d70c153fca2c12e1eac9f0a94da96416f22cc4bd2b4c2782b604a85e2f8212bdd72424a5a86dac9f593e321dce504932a1aad8d", 0x7f}, {&(0x7f0000002140)="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", 0x1000}], 0x5, &(0x7f0000001040)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}], 0x30, 0x20008000}], 0x3, 0x8000) r1 = socket(0x1e, 0x4, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl0\x00', r2, 0x29, 0x49, 0xbc, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7, 0x80, 0xe7, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa0800450000280064000004029005000000e0e000020211009078e000000200010001000008e000000000"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) kernel console output (not intermixed with test programs): 14701] pimreg: entered allmulticast mode [ 348.730322][T14690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.974950][T14722] __nla_validate_parse: 2 callbacks suppressed [ 348.974971][T14722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2643'. [ 349.463476][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'. [ 350.725070][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2660'. [ 350.840008][T14785] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2662'. [ 350.853831][T14785] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2662'. [ 350.870150][T14785] pimreg: left allmulticast mode [ 350.962193][T14785] rdma_rxe: rxe_newlink: failed to add lo [ 350.981996][T14794] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2665'. [ 350.983987][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2662'. [ 351.011086][T14793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2665'. [ 351.069704][T14793] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2665'. [ 351.322322][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'. [ 352.803352][T14880] bridge0: port 1(erspan0) entered blocking state [ 352.810538][T14880] bridge0: port 1(erspan0) entered disabled state [ 352.817323][T14880] erspan0: entered allmulticast mode [ 352.824987][T14880] erspan0: entered promiscuous mode [ 352.890006][T14885] erspan0: left allmulticast mode [ 352.900916][T14885] erspan0: left promiscuous mode [ 352.910121][T14885] bridge0: port 1(erspan0) entered disabled state [ 353.039414][T14890] netlink: 'syz.4.2694': attribute type 3 has an invalid length. [ 353.763812][T14917] netlink: 'syz.3.2700': attribute type 1 has an invalid length. [ 353.794294][T14917] netlink: 'syz.3.2700': attribute type 2 has an invalid length. [ 353.807112][T14917] netlink: 'syz.3.2700': attribute type 1 has an invalid length. [ 353.820278][T14917] netlink: 'syz.3.2700': attribute type 2 has an invalid length. [ 354.497024][T14940] tipc: Enabling of bearer rejected, already enabled [ 354.510839][T14940] tipc: Enabling of bearer rejected, already enabled [ 354.996764][T14955] netlink: 'syz.1.2711': attribute type 12 has an invalid length. [ 355.048310][T14955] __nla_validate_parse: 4 callbacks suppressed [ 355.048333][T14955] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2711'. [ 355.084472][T14955] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2711'. [ 355.096260][T14955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2711'. [ 355.308531][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 355.964363][T14992] tipc: Cannot configure node identity twice [ 355.970901][T14992] tipc: Cannot configure node identity twice [ 357.206231][T15039] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2737'. [ 357.339843][T15048] netlink: 'syz.0.2734': attribute type 1 has an invalid length. [ 357.347722][T15048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2734'. [ 357.725627][T15070] FAULT_INJECTION: forcing a failure. [ 357.725627][T15070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.746433][T15070] CPU: 0 UID: 0 PID: 15070 Comm: syz.1.2748 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 357.746465][T15070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.746477][T15070] Call Trace: [ 357.746486][T15070] [ 357.746494][T15070] dump_stack_lvl+0x189/0x250 [ 357.746523][T15070] ? __pfx____ratelimit+0x10/0x10 [ 357.746549][T15070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.746585][T15070] ? __pfx__printk+0x10/0x10 [ 357.746612][T15070] ? __might_fault+0xb0/0x130 [ 357.746653][T15070] should_fail_ex+0x414/0x560 [ 357.746683][T15070] _copy_from_user+0x2d/0xb0 [ 357.746705][T15070] core_sys_select+0x4b7/0xa20 [ 357.746748][T15070] ? __pfx_core_sys_select+0x10/0x10 [ 357.746803][T15070] ? __pfx_set_user_sigmask+0x10/0x10 [ 357.746837][T15070] __se_sys_pselect6+0x27a/0x300 [ 357.746871][T15070] ? __pfx___se_sys_pselect6+0x10/0x10 [ 357.746897][T15070] ? __pfx_ksys_write+0x10/0x10 [ 357.746928][T15070] ? __x64_sys_pselect6+0x21/0xf0 [ 357.746958][T15070] do_syscall_64+0xfa/0x3b0 [ 357.746982][T15070] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.747004][T15070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.747022][T15070] ? clear_bhb_loop+0x60/0xb0 [ 357.747046][T15070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.747064][T15070] RIP: 0033:0x7fd51258ebe9 [ 357.747082][T15070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.747099][T15070] RSP: 002b:00007fd513381038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 357.747121][T15070] RAX: ffffffffffffffda RBX: 00007fd5127b6090 RCX: 00007fd51258ebe9 [ 357.747142][T15070] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 357.747154][T15070] RBP: 00007fd513381090 R08: 0000000000000000 R09: 0000000000000000 [ 357.747165][T15070] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 357.747177][T15070] R13: 00007fd5127b6128 R14: 00007fd5127b6090 R15: 00007ffd62e4b558 [ 357.747211][T15070] [ 358.179212][T15077] tipc: Enabled bearer , priority 0 [ 358.194911][T15077] syzkaller0: entered promiscuous mode [ 358.202030][T15077] syzkaller0: entered allmulticast mode [ 358.240104][T15077] tipc: Resetting bearer [ 358.253620][T15076] tipc: Resetting bearer [ 358.282378][T15076] tipc: Disabling bearer [ 358.344307][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2751'. [ 358.510857][T15083] FAULT_INJECTION: forcing a failure. [ 358.510857][T15083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.524349][T15083] CPU: 0 UID: 0 PID: 15083 Comm: syz.4.2753 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 358.524380][T15083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.524392][T15083] Call Trace: [ 358.524401][T15083] [ 358.524409][T15083] dump_stack_lvl+0x189/0x250 [ 358.524439][T15083] ? __pfx____ratelimit+0x10/0x10 [ 358.524465][T15083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.524489][T15083] ? __pfx__printk+0x10/0x10 [ 358.524517][T15083] ? __might_fault+0xb0/0x130 [ 358.524558][T15083] should_fail_ex+0x414/0x560 [ 358.524588][T15083] _copy_from_user+0x2d/0xb0 [ 358.524609][T15083] ___sys_sendmsg+0x158/0x2a0 [ 358.524642][T15083] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.524715][T15083] ? __fget_files+0x2a/0x420 [ 358.524743][T15083] ? __fget_files+0x3a0/0x420 [ 358.524785][T15083] __x64_sys_sendmsg+0x19b/0x260 [ 358.524818][T15083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.524859][T15083] ? __pfx_ksys_write+0x10/0x10 [ 358.524882][T15083] ? rcu_is_watching+0x15/0xb0 [ 358.524919][T15083] ? do_syscall_64+0xbe/0x3b0 [ 358.524950][T15083] do_syscall_64+0xfa/0x3b0 [ 358.524973][T15083] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.524996][T15083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.525016][T15083] ? clear_bhb_loop+0x60/0xb0 [ 358.525041][T15083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.525060][T15083] RIP: 0033:0x7f9f2398ebe9 [ 358.525079][T15083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.525097][T15083] RSP: 002b:00007f9f247cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.525119][T15083] RAX: ffffffffffffffda RBX: 00007f9f23bb5fa0 RCX: 00007f9f2398ebe9 [ 358.525134][T15083] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 358.525147][T15083] RBP: 00007f9f247cd090 R08: 0000000000000000 R09: 0000000000000000 [ 358.525159][T15083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.525172][T15083] R13: 00007f9f23bb6038 R14: 00007f9f23bb5fa0 R15: 00007fffee2764a8 [ 358.525207][T15083] [ 358.859807][T15091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2755'. [ 359.032151][T15097] netlink: 'syz.0.2759': attribute type 12 has an invalid length. [ 359.053251][T15097] netlink: 'syz.0.2759': attribute type 18 has an invalid length. [ 359.078527][T15097] netlink: 'syz.0.2759': attribute type 21 has an invalid length. [ 359.096649][T15097] netlink: 'syz.0.2759': attribute type 26 has an invalid length. [ 359.237726][T15112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2764'. [ 359.379740][T15119] FAULT_INJECTION: forcing a failure. [ 359.379740][T15119] name failslab, interval 1, probability 0, space 0, times 0 [ 359.437944][T15119] CPU: 0 UID: 0 PID: 15119 Comm: syz.1.2768 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 359.437977][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.437989][T15119] Call Trace: [ 359.437997][T15119] [ 359.438007][T15119] dump_stack_lvl+0x189/0x250 [ 359.438038][T15119] ? __pfx____ratelimit+0x10/0x10 [ 359.438064][T15119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.438088][T15119] ? __pfx__printk+0x10/0x10 [ 359.438122][T15119] ? __pfx___might_resched+0x10/0x10 [ 359.438147][T15119] should_fail_ex+0x414/0x560 [ 359.438176][T15119] should_failslab+0xa8/0x100 [ 359.438207][T15119] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 359.438235][T15119] ? __alloc_skb+0x112/0x2d0 [ 359.438266][T15119] __alloc_skb+0x112/0x2d0 [ 359.438297][T15119] netlink_sendmsg+0x5c6/0xb30 [ 359.438335][T15119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.438365][T15119] ? aa_sock_msg_perm+0xf1/0x1d0 [ 359.438393][T15119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.438416][T15119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.438443][T15119] __sock_sendmsg+0x219/0x270 [ 359.438469][T15119] ____sys_sendmsg+0x505/0x830 [ 359.438505][T15119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.438544][T15119] ? import_iovec+0x74/0xa0 [ 359.438577][T15119] ___sys_sendmsg+0x21f/0x2a0 [ 359.438608][T15119] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.438679][T15119] ? __fget_files+0x2a/0x420 [ 359.438707][T15119] ? __fget_files+0x3a0/0x420 [ 359.438748][T15119] __x64_sys_sendmsg+0x19b/0x260 [ 359.438780][T15119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.438820][T15119] ? __pfx_ksys_write+0x10/0x10 [ 359.438842][T15119] ? rcu_is_watching+0x15/0xb0 [ 359.438868][T15119] ? do_syscall_64+0xbe/0x3b0 [ 359.438898][T15119] do_syscall_64+0xfa/0x3b0 [ 359.438921][T15119] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.438944][T15119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.438964][T15119] ? clear_bhb_loop+0x60/0xb0 [ 359.438988][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.439007][T15119] RIP: 0033:0x7fd51258ebe9 [ 359.439025][T15119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.439042][T15119] RSP: 002b:00007fd5133a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.439065][T15119] RAX: ffffffffffffffda RBX: 00007fd5127b5fa0 RCX: 00007fd51258ebe9 [ 359.439080][T15119] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 359.439093][T15119] RBP: 00007fd5133a2090 R08: 0000000000000000 R09: 0000000000000000 [ 359.439105][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.439117][T15119] R13: 00007fd5127b6038 R14: 00007fd5127b5fa0 R15: 00007ffd62e4b558 [ 359.439152][T15119] [ 360.088790][ T5879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.120859][ T5879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.131535][ T5879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.146860][ T5879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.168243][ T5879] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.730690][T15150] tipc: Enabled bearer , priority 0 [ 360.763381][T15150] syzkaller0: entered promiscuous mode [ 360.778177][T15150] syzkaller0: entered allmulticast mode [ 360.938728][T15150] tipc: Resetting bearer [ 360.975341][T15148] tipc: Resetting bearer [ 361.032502][T15148] tipc: Disabling bearer [ 361.088769][T15133] chnl_net:caif_netlink_parms(): no params data found [ 361.394913][T15166] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2782'. [ 361.427086][T15166] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2782'. [ 361.496180][T15133] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.535603][T15133] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.557089][T15166] rdma_rxe: rxe_newlink: failed to add lo [ 361.572108][T15133] bridge_slave_0: entered allmulticast mode [ 361.584503][T15178] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2784'. [ 361.588612][T15133] bridge_slave_0: entered promiscuous mode [ 361.640248][T15166] syz_tun: left promiscuous mode [ 361.671951][T15166] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 361.696554][T15133] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.729076][T15133] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.748427][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2785'. [ 361.759616][T15133] bridge_slave_1: entered allmulticast mode [ 361.770929][T15133] bridge_slave_1: entered promiscuous mode [ 361.991726][T15133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.012741][T15133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.228179][ T5879] Bluetooth: hci5: command tx timeout [ 362.256847][T15133] team0: Port device team_slave_0 added [ 362.281238][T15133] team0: Port device team_slave_1 added [ 362.415836][T15133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.437868][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.505234][T15133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.546807][T15133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.563423][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.601028][T15133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.819519][T15209] batadv_slave_1: entered promiscuous mode [ 362.835240][T15133] hsr_slave_0: entered promiscuous mode [ 362.859132][T15133] hsr_slave_1: entered promiscuous mode [ 362.955542][T15208] batadv_slave_1: left promiscuous mode [ 363.599491][T15201] netlink: 'syz.1.2792': attribute type 13 has an invalid length. [ 363.607352][T15201] netlink: 'syz.1.2792': attribute type 17 has an invalid length. [ 363.913175][T15201] ip6gretap0: left promiscuous mode [ 363.939658][T15201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.964553][T15201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.117189][T15238] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 364.307844][ T5879] Bluetooth: hci5: command tx timeout [ 364.415211][T15246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.922677][T15133] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 364.986652][T15133] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 365.012174][T15133] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 365.039448][T15133] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 365.267037][T15133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.293574][T15281] netlink: 'syz.2.2818': attribute type 2 has an invalid length. [ 365.309386][T15133] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.317326][T15281] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 365.332675][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.336324][T15281] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2818'. [ 365.341085][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.355446][T15282] netlink: 'syz.2.2818': attribute type 2 has an invalid length. [ 365.374084][T15282] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 365.382622][T15282] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2818'. [ 365.405755][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.413009][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.752310][ T5923] IPVS: starting estimator thread 0... [ 365.862747][T15293] IPVS: using max 25 ests per chain, 60000 per kthread [ 366.216139][T15310] netlink: 'syz.3.2823': attribute type 11 has an invalid length. [ 366.350742][T15133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.391988][ T5879] Bluetooth: hci5: command tx timeout [ 366.586082][T15133] veth0_vlan: entered promiscuous mode [ 366.610421][T15133] veth1_vlan: entered promiscuous mode [ 366.852414][T15133] veth0_macvtap: entered promiscuous mode [ 366.879126][T15133] veth1_macvtap: entered promiscuous mode [ 366.944423][T15133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.984441][T15133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.051681][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.063656][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.125333][ T6134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.168273][ T6134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.353649][ T6141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.380748][ T6141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.490691][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.513271][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.625357][T15350] FAULT_INJECTION: forcing a failure. [ 367.625357][T15350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.641823][T15350] CPU: 1 UID: 0 PID: 15350 Comm: syz.2.2838 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 367.641853][T15350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.641865][T15350] Call Trace: [ 367.641874][T15350] [ 367.641883][T15350] dump_stack_lvl+0x189/0x250 [ 367.641914][T15350] ? __pfx____ratelimit+0x10/0x10 [ 367.641941][T15350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.641966][T15350] ? __pfx__printk+0x10/0x10 [ 367.641996][T15350] ? __might_fault+0xb0/0x130 [ 367.642038][T15350] should_fail_ex+0x414/0x560 [ 367.642067][T15350] _copy_from_user+0x2d/0xb0 [ 367.642089][T15350] ___sys_sendmsg+0x158/0x2a0 [ 367.642122][T15350] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.642194][T15350] ? __fget_files+0x2a/0x420 [ 367.642223][T15350] ? __fget_files+0x3a0/0x420 [ 367.642265][T15350] __x64_sys_sendmsg+0x19b/0x260 [ 367.642297][T15350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.642338][T15350] ? __pfx_ksys_write+0x10/0x10 [ 367.642369][T15350] ? do_syscall_64+0xbe/0x3b0 [ 367.642399][T15350] do_syscall_64+0xfa/0x3b0 [ 367.642421][T15350] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.642445][T15350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.642464][T15350] ? clear_bhb_loop+0x60/0xb0 [ 367.642489][T15350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.642508][T15350] RIP: 0033:0x7fea91d8ebe9 [ 367.642526][T15350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.642544][T15350] RSP: 002b:00007fea92cb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.642566][T15350] RAX: ffffffffffffffda RBX: 00007fea91fb5fa0 RCX: 00007fea91d8ebe9 [ 367.642581][T15350] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 367.642593][T15350] RBP: 00007fea92cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 367.642606][T15350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.642618][T15350] R13: 00007fea91fb6038 R14: 00007fea91fb5fa0 R15: 00007fff777cb2c8 [ 367.642652][T15350] [ 367.714205][T15356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.908354][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 367.936697][T15358] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 368.113029][T15371] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 368.469263][ T5879] Bluetooth: hci5: command tx timeout [ 368.872376][T15385] FAULT_INJECTION: forcing a failure. [ 368.872376][T15385] name failslab, interval 1, probability 0, space 0, times 0 [ 368.908087][T15385] CPU: 0 UID: 0 PID: 15385 Comm: syz.1.2852 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 368.908121][T15385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.908134][T15385] Call Trace: [ 368.908142][T15385] [ 368.908151][T15385] dump_stack_lvl+0x189/0x250 [ 368.908182][T15385] ? __pfx____ratelimit+0x10/0x10 [ 368.908208][T15385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.908232][T15385] ? __pfx__printk+0x10/0x10 [ 368.908267][T15385] ? __pfx___might_resched+0x10/0x10 [ 368.908293][T15385] should_fail_ex+0x414/0x560 [ 368.908323][T15385] should_failslab+0xa8/0x100 [ 368.908355][T15385] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 368.908383][T15385] ? __alloc_skb+0x112/0x2d0 [ 368.908416][T15385] __alloc_skb+0x112/0x2d0 [ 368.908462][T15385] netlink_sendmsg+0x5c6/0xb30 [ 368.908502][T15385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.908532][T15385] ? aa_sock_msg_perm+0xf1/0x1d0 [ 368.908562][T15385] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.908584][T15385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.908611][T15385] __sock_sendmsg+0x219/0x270 [ 368.908638][T15385] ____sys_sendmsg+0x505/0x830 [ 368.908674][T15385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.908713][T15385] ? import_iovec+0x74/0xa0 [ 368.908737][T15385] ___sys_sendmsg+0x21f/0x2a0 [ 368.908769][T15385] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.908843][T15385] ? __fget_files+0x2a/0x420 [ 368.908871][T15385] ? __fget_files+0x3a0/0x420 [ 368.908914][T15385] __x64_sys_sendmsg+0x19b/0x260 [ 368.908946][T15385] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.908987][T15385] ? __pfx_ksys_write+0x10/0x10 [ 368.909009][T15385] ? rcu_is_watching+0x15/0xb0 [ 368.909036][T15385] ? do_syscall_64+0xbe/0x3b0 [ 368.909067][T15385] do_syscall_64+0xfa/0x3b0 [ 368.909090][T15385] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.909114][T15385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.909133][T15385] ? clear_bhb_loop+0x60/0xb0 [ 368.909158][T15385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.909177][T15385] RIP: 0033:0x7fd51258ebe9 [ 368.909197][T15385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.909215][T15385] RSP: 002b:00007fd5133a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.909238][T15385] RAX: ffffffffffffffda RBX: 00007fd5127b5fa0 RCX: 00007fd51258ebe9 [ 368.909253][T15385] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 368.909266][T15385] RBP: 00007fd5133a2090 R08: 0000000000000000 R09: 0000000000000000 [ 368.909278][T15385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.909290][T15385] R13: 00007fd5127b6038 R14: 00007fd5127b5fa0 R15: 00007ffd62e4b558 [ 368.909324][T15385] [ 369.391891][T15393] tipc: Started in network mode [ 369.408967][T15393] tipc: Node identity 86de631bed58, cluster identity 4711 [ 369.450603][T15393] tipc: Enabled bearer , priority 0 [ 369.460638][T15397] syzkaller0: entered promiscuous mode [ 369.519072][T15397] syzkaller0: entered allmulticast mode [ 369.535408][T15400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 369.607434][T15393] tipc: Resetting bearer [ 369.638064][T15392] tipc: Resetting bearer [ 369.708716][T15392] tipc: Disabling bearer [ 369.761572][T15410] netlink: 'syz.3.2859': attribute type 1 has an invalid length. [ 370.534392][T15444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 370.535289][T15445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.553748][ T5879] Bluetooth: hci5: command tx timeout [ 371.048776][T15465] FAULT_INJECTION: forcing a failure. [ 371.048776][T15465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.085732][T15463] netlink: 'syz.4.2881': attribute type 12 has an invalid length. [ 371.086213][T15465] CPU: 1 UID: 0 PID: 15465 Comm: syz.3.2880 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 371.086241][T15465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.086252][T15465] Call Trace: [ 371.086259][T15465] [ 371.086267][T15465] dump_stack_lvl+0x189/0x250 [ 371.086294][T15465] ? __pfx____ratelimit+0x10/0x10 [ 371.086317][T15465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.086338][T15465] ? __pfx__printk+0x10/0x10 [ 371.086364][T15465] ? __might_fault+0xb0/0x130 [ 371.086400][T15465] should_fail_ex+0x414/0x560 [ 371.086426][T15465] _copy_from_iter+0x1db/0x16f0 [ 371.086465][T15465] ? rcu_is_watching+0x15/0xb0 [ 371.086484][T15465] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 371.086511][T15465] ? __pfx__copy_from_iter+0x10/0x10 [ 371.086538][T15465] ? __build_skb_around+0x257/0x3e0 [ 371.086565][T15465] ? netlink_sendmsg+0x642/0xb30 [ 371.086586][T15465] ? skb_put+0x11b/0x210 [ 371.086614][T15465] netlink_sendmsg+0x6b2/0xb30 [ 371.086646][T15465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.086672][T15465] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.086699][T15465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.086718][T15465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.086742][T15465] __sock_sendmsg+0x219/0x270 [ 371.086766][T15465] ____sys_sendmsg+0x505/0x830 [ 371.086797][T15465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.086833][T15465] ? import_iovec+0x74/0xa0 [ 371.086854][T15465] ___sys_sendmsg+0x21f/0x2a0 [ 371.086882][T15465] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.086946][T15465] ? __fget_files+0x2a/0x420 [ 371.086971][T15465] ? __fget_files+0x3a0/0x420 [ 371.087009][T15465] __x64_sys_sendmsg+0x19b/0x260 [ 371.087037][T15465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.087074][T15465] ? __pfx_ksys_write+0x10/0x10 [ 371.087094][T15465] ? rcu_is_watching+0x15/0xb0 [ 371.087117][T15465] ? do_syscall_64+0xbe/0x3b0 [ 371.087144][T15465] do_syscall_64+0xfa/0x3b0 [ 371.087164][T15465] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.087185][T15465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.087203][T15465] ? clear_bhb_loop+0x60/0xb0 [ 371.087225][T15465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.087242][T15465] RIP: 0033:0x7fd213b8ebe9 [ 371.087259][T15465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.087274][T15465] RSP: 002b:00007fd21493a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.087295][T15465] RAX: ffffffffffffffda RBX: 00007fd213db5fa0 RCX: 00007fd213b8ebe9 [ 371.087308][T15465] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 371.087319][T15465] RBP: 00007fd21493a090 R08: 0000000000000000 R09: 0000000000000000 [ 371.087330][T15465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.087340][T15465] R13: 00007fd213db6038 R14: 00007fd213db5fa0 R15: 00007ffe019795f8 [ 371.087370][T15465] [ 371.579415][T15478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 371.594619][T15478] bridge0: port 1(bond9) entered blocking state [ 371.601729][T15478] bridge0: port 1(bond9) entered disabled state [ 371.608568][T15478] bond9: entered allmulticast mode [ 371.616666][T15478] bond9: entered promiscuous mode [ 371.653802][T15483] vlan0: entered allmulticast mode [ 371.659074][T15483] bridge_slave_0: entered allmulticast mode [ 372.270326][T15522] FAULT_INJECTION: forcing a failure. [ 372.270326][T15522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.285730][T15522] CPU: 1 UID: 0 PID: 15522 Comm: syz.4.2901 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 372.285761][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.285773][T15522] Call Trace: [ 372.285781][T15522] [ 372.285789][T15522] dump_stack_lvl+0x189/0x250 [ 372.285818][T15522] ? __pfx____ratelimit+0x10/0x10 [ 372.285844][T15522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.285868][T15522] ? __pfx__printk+0x10/0x10 [ 372.285896][T15522] ? __might_fault+0xb0/0x130 [ 372.285937][T15522] should_fail_ex+0x414/0x560 [ 372.285965][T15522] _copy_from_iter+0x1db/0x16f0 [ 372.285999][T15522] ? rcu_is_watching+0x15/0xb0 [ 372.286021][T15522] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 372.286050][T15522] ? __pfx__copy_from_iter+0x10/0x10 [ 372.286080][T15522] ? __build_skb_around+0x257/0x3e0 [ 372.286112][T15522] ? netlink_sendmsg+0x642/0xb30 [ 372.286135][T15522] ? skb_put+0x11b/0x210 [ 372.286166][T15522] netlink_sendmsg+0x6b2/0xb30 [ 372.286202][T15522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.286232][T15522] ? aa_sock_msg_perm+0xf1/0x1d0 [ 372.286262][T15522] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.286283][T15522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.286310][T15522] __sock_sendmsg+0x219/0x270 [ 372.286336][T15522] ____sys_sendmsg+0x505/0x830 [ 372.286371][T15522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.286412][T15522] ? import_iovec+0x74/0xa0 [ 372.286435][T15522] ___sys_sendmsg+0x21f/0x2a0 [ 372.286461][T15522] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.286531][T15522] ? __fget_files+0x2a/0x420 [ 372.286565][T15522] ? __fget_files+0x3a0/0x420 [ 372.286606][T15522] __x64_sys_sendmsg+0x19b/0x260 [ 372.286638][T15522] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.286679][T15522] ? __pfx_ksys_write+0x10/0x10 [ 372.286719][T15522] ? do_syscall_64+0xbe/0x3b0 [ 372.286750][T15522] do_syscall_64+0xfa/0x3b0 [ 372.286775][T15522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.286794][T15522] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.286814][T15522] ? clear_bhb_loop+0x60/0xb0 [ 372.286839][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.286858][T15522] RIP: 0033:0x7f9f2398ebe9 [ 372.286876][T15522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.286893][T15522] RSP: 002b:00007f9f247cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.286916][T15522] RAX: ffffffffffffffda RBX: 00007f9f23bb5fa0 RCX: 00007f9f2398ebe9 [ 372.286930][T15522] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 372.286943][T15522] RBP: 00007f9f247cd090 R08: 0000000000000000 R09: 0000000000000000 [ 372.286955][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.286967][T15522] R13: 00007f9f23bb6038 R14: 00007f9f23bb5fa0 R15: 00007fffee2764a8 [ 372.287002][T15522] [ 372.766109][T15528] netlink: 'syz.2.2903': attribute type 5 has an invalid length. [ 372.774266][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 372.987166][T15541] FAULT_INJECTION: forcing a failure. [ 372.987166][T15541] name failslab, interval 1, probability 0, space 0, times 0 [ 373.015577][T15541] CPU: 0 UID: 0 PID: 15541 Comm: syz.1.2908 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 373.015608][T15541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.015619][T15541] Call Trace: [ 373.015627][T15541] [ 373.015636][T15541] dump_stack_lvl+0x189/0x250 [ 373.015667][T15541] ? __pfx____ratelimit+0x10/0x10 [ 373.015693][T15541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.015716][T15541] ? __pfx__printk+0x10/0x10 [ 373.015746][T15541] ? __lock_acquire+0xab9/0xd20 [ 373.015787][T15541] should_fail_ex+0x414/0x560 [ 373.015816][T15541] should_failslab+0xa8/0x100 [ 373.015847][T15541] kmem_cache_alloc_noprof+0x73/0x3c0 [ 373.015873][T15541] ? skb_clone+0x212/0x3a0 [ 373.015897][T15541] skb_clone+0x212/0x3a0 [ 373.015921][T15541] __netlink_deliver_tap+0x404/0x850 [ 373.015964][T15541] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.015992][T15541] netlink_deliver_tap+0x19c/0x1b0 [ 373.016019][T15541] netlink_unicast+0x7fa/0x9e0 [ 373.016053][T15541] ? __pfx_netlink_unicast+0x10/0x10 [ 373.016079][T15541] ? netlink_sendmsg+0x642/0xb30 [ 373.016101][T15541] ? skb_put+0x11b/0x210 [ 373.016133][T15541] netlink_sendmsg+0x805/0xb30 [ 373.016170][T15541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.016200][T15541] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.016230][T15541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.016251][T15541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.016278][T15541] __sock_sendmsg+0x219/0x270 [ 373.016305][T15541] ____sys_sendmsg+0x505/0x830 [ 373.016341][T15541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.016382][T15541] ? import_iovec+0x74/0xa0 [ 373.016407][T15541] ___sys_sendmsg+0x21f/0x2a0 [ 373.016438][T15541] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.016522][T15541] ? __fget_files+0x2a/0x420 [ 373.016550][T15541] ? __fget_files+0x3a0/0x420 [ 373.016598][T15541] __x64_sys_sendmsg+0x19b/0x260 [ 373.016630][T15541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.016671][T15541] ? __pfx_ksys_write+0x10/0x10 [ 373.016695][T15541] ? rcu_is_watching+0x15/0xb0 [ 373.016720][T15541] ? do_syscall_64+0xbe/0x3b0 [ 373.016751][T15541] do_syscall_64+0xfa/0x3b0 [ 373.016774][T15541] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.016797][T15541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.016817][T15541] ? clear_bhb_loop+0x60/0xb0 [ 373.016842][T15541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.016861][T15541] RIP: 0033:0x7fd51258ebe9 [ 373.016880][T15541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.016897][T15541] RSP: 002b:00007fd5133a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.016921][T15541] RAX: ffffffffffffffda RBX: 00007fd5127b5fa0 RCX: 00007fd51258ebe9 [ 373.016935][T15541] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 373.016948][T15541] RBP: 00007fd5133a2090 R08: 0000000000000000 R09: 0000000000000000 [ 373.016960][T15541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.016973][T15541] R13: 00007fd5127b6038 R14: 00007fd5127b5fa0 R15: 00007ffd62e4b558 [ 373.017008][T15541] [ 373.455632][T15543] sctp: [Deprecated]: syz.2.2910 (pid 15543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.455632][T15543] Use struct sctp_sack_info instead [ 373.474165][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2913'. [ 373.612815][T15556] netlink: 'syz.0.2914': attribute type 5 has an invalid length. [ 373.662104][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2914'. [ 373.719535][T15562] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2917'. [ 373.834465][T15571] FAULT_INJECTION: forcing a failure. [ 373.834465][T15571] name failslab, interval 1, probability 0, space 0, times 0 [ 373.849535][T15571] CPU: 1 UID: 0 PID: 15571 Comm: syz.0.2919 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 373.849566][T15571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.849578][T15571] Call Trace: [ 373.849587][T15571] [ 373.849595][T15571] dump_stack_lvl+0x189/0x250 [ 373.849627][T15571] ? __pfx____ratelimit+0x10/0x10 [ 373.849650][T15571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.849674][T15571] ? __pfx__printk+0x10/0x10 [ 373.849709][T15571] ? __pfx___might_resched+0x10/0x10 [ 373.849728][T15571] ? fs_reclaim_acquire+0x7d/0x100 [ 373.849764][T15571] should_fail_ex+0x414/0x560 [ 373.849799][T15571] should_failslab+0xa8/0x100 [ 373.849830][T15571] __kmalloc_noprof+0xcb/0x4f0 [ 373.849854][T15571] ? kfree+0x4d/0x440 [ 373.849875][T15571] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.849910][T15571] tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.849940][T15571] ? tomoyo_domain+0xd9/0x130 [ 373.849976][T15571] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 373.850000][T15571] tomoyo_path_number_perm+0x1e8/0x5a0 [ 373.850027][T15571] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 373.850072][T15571] ? __lock_acquire+0xab9/0xd20 [ 373.850126][T15571] ? __fget_files+0x2a/0x420 [ 373.850160][T15571] ? __fget_files+0x2a/0x420 [ 373.850187][T15571] ? __fget_files+0x3a0/0x420 [ 373.850214][T15571] ? __fget_files+0x2a/0x420 [ 373.850247][T15571] security_file_ioctl+0xcb/0x2d0 [ 373.850273][T15571] __se_sys_ioctl+0x47/0x170 [ 373.850301][T15571] do_syscall_64+0xfa/0x3b0 [ 373.850325][T15571] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.850348][T15571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.850368][T15571] ? clear_bhb_loop+0x60/0xb0 [ 373.850403][T15571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.850423][T15571] RIP: 0033:0x7f54c578ebe9 [ 373.850442][T15571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.850460][T15571] RSP: 002b:00007f54c653e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.850483][T15571] RAX: ffffffffffffffda RBX: 00007f54c59b5fa0 RCX: 00007f54c578ebe9 [ 373.850498][T15571] RDX: 0000200000000080 RSI: 0000000000008953 RDI: 0000000000000003 [ 373.850511][T15571] RBP: 00007f54c653e090 R08: 0000000000000000 R09: 0000000000000000 [ 373.850524][T15571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.850536][T15571] R13: 00007f54c59b6038 R14: 00007f54c59b5fa0 R15: 00007ffca21c4588 [ 373.850572][T15571] [ 373.850649][T15571] ERROR: Out of memory at tomoyo_realpath_from_path. [ 374.018696][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2920'. [ 374.463213][T15583] netlink: 'syz.4.2924': attribute type 5 has an invalid length. [ 374.487807][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2924'. [ 374.879944][T15596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2930'. [ 374.924431][T15598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2930'. [ 375.078554][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'. [ 375.679347][T15627] netlink: 'syz.3.2938': attribute type 5 has an invalid length. [ 375.703518][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2938'. [ 375.904724][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2944'. [ 376.603572][T15669] FAULT_INJECTION: forcing a failure. [ 376.603572][T15669] name failslab, interval 1, probability 0, space 0, times 0 [ 376.687620][T15669] CPU: 0 UID: 0 PID: 15669 Comm: syz.4.2954 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 376.687664][T15669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.687677][T15669] Call Trace: [ 376.687685][T15669] [ 376.687694][T15669] dump_stack_lvl+0x189/0x250 [ 376.687725][T15669] ? __pfx____ratelimit+0x10/0x10 [ 376.687751][T15669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.687774][T15669] ? __pfx__printk+0x10/0x10 [ 376.687805][T15669] ? __pfx___might_resched+0x10/0x10 [ 376.687825][T15669] ? fs_reclaim_acquire+0x7d/0x100 [ 376.687860][T15669] should_fail_ex+0x414/0x560 [ 376.687888][T15669] should_failslab+0xa8/0x100 [ 376.687919][T15669] __kmalloc_cache_noprof+0x70/0x3d0 [ 376.687945][T15669] ? xfrm_policy_alloc+0x78/0x2b0 [ 376.687978][T15669] xfrm_policy_alloc+0x78/0x2b0 [ 376.688008][T15669] xfrm_policy_construct+0x39/0x6b0 [ 376.688044][T15669] xfrm_add_policy+0x267/0x800 [ 376.688069][T15669] ? __pfx_xfrm_add_policy+0x10/0x10 [ 376.688086][T15669] ? apparmor_capable+0x137/0x1b0 [ 376.688112][T15669] ? __nla_parse+0x40/0x60 [ 376.688142][T15669] xfrm_user_rcv_msg+0x7a3/0xab0 [ 376.688171][T15669] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 376.688233][T15669] ? __pfx___mutex_trylock_common+0x10/0x10 [ 376.688257][T15669] ? rcu_is_watching+0x15/0xb0 [ 376.688275][T15669] ? trace_contention_end+0x39/0x120 [ 376.688293][T15669] ? __mutex_lock+0x335/0x1360 [ 376.688321][T15669] netlink_rcv_skb+0x208/0x470 [ 376.688345][T15669] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 376.688363][T15669] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.688400][T15669] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.688420][T15669] ? netlink_deliver_tap+0x2e/0x1b0 [ 376.688444][T15669] xfrm_netlink_rcv+0x79/0x90 [ 376.688462][T15669] netlink_unicast+0x82f/0x9e0 [ 376.688491][T15669] ? __pfx_netlink_unicast+0x10/0x10 [ 376.688512][T15669] ? netlink_sendmsg+0x642/0xb30 [ 376.688532][T15669] ? skb_put+0x11b/0x210 [ 376.688562][T15669] netlink_sendmsg+0x805/0xb30 [ 376.688592][T15669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.688620][T15669] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.688649][T15669] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.688680][T15669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.688707][T15669] __sock_sendmsg+0x219/0x270 [ 376.688735][T15669] ____sys_sendmsg+0x505/0x830 [ 376.688772][T15669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.688813][T15669] ? import_iovec+0x74/0xa0 [ 376.688839][T15669] ___sys_sendmsg+0x21f/0x2a0 [ 376.688871][T15669] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.688945][T15669] ? __fget_files+0x2a/0x420 [ 376.688973][T15669] ? __fget_files+0x3a0/0x420 [ 376.689013][T15669] __x64_sys_sendmsg+0x19b/0x260 [ 376.689045][T15669] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.689083][T15669] ? __pfx_ksys_write+0x10/0x10 [ 376.689106][T15669] ? rcu_is_watching+0x15/0xb0 [ 376.689132][T15669] ? do_syscall_64+0xbe/0x3b0 [ 376.689161][T15669] do_syscall_64+0xfa/0x3b0 [ 376.689183][T15669] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.689205][T15669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.689225][T15669] ? clear_bhb_loop+0x60/0xb0 [ 376.689250][T15669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.689269][T15669] RIP: 0033:0x7f9f2398ebe9 [ 376.689287][T15669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.689305][T15669] RSP: 002b:00007f9f247cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.689327][T15669] RAX: ffffffffffffffda RBX: 00007f9f23bb5fa0 RCX: 00007f9f2398ebe9 [ 376.689341][T15669] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 376.689354][T15669] RBP: 00007f9f247cd090 R08: 0000000000000000 R09: 0000000000000000 [ 376.689366][T15669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.689379][T15669] R13: 00007f9f23bb6038 R14: 00007f9f23bb5fa0 R15: 00007fffee2764a8 [ 376.689410][T15669] [ 377.148408][T15678] netlink: 'syz.2.2957': attribute type 21 has an invalid length. [ 377.156391][T15678] netlink: 'syz.2.2957': attribute type 1 has an invalid length. [ 377.806951][T15707] FAULT_INJECTION: forcing a failure. [ 377.806951][T15707] name failslab, interval 1, probability 0, space 0, times 0 [ 377.820602][T15707] CPU: 1 UID: 0 PID: 15707 Comm: syz.0.2967 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 377.820634][T15707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.820646][T15707] Call Trace: [ 377.820655][T15707] [ 377.820665][T15707] dump_stack_lvl+0x189/0x250 [ 377.820695][T15707] ? __pfx____ratelimit+0x10/0x10 [ 377.820721][T15707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.820746][T15707] ? __pfx__printk+0x10/0x10 [ 377.820778][T15707] ? __pfx___might_resched+0x10/0x10 [ 377.820797][T15707] ? fs_reclaim_acquire+0x7d/0x100 [ 377.820834][T15707] should_fail_ex+0x414/0x560 [ 377.820863][T15707] should_failslab+0xa8/0x100 [ 377.820894][T15707] __kmalloc_noprof+0xcb/0x4f0 [ 377.820919][T15707] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 377.820947][T15707] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 377.820977][T15707] genl_family_rcv_msg_doit+0xb8/0x300 [ 377.821006][T15707] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 377.821037][T15707] ? apparmor_capable+0x137/0x1b0 [ 377.821061][T15707] ? bpf_lsm_capable+0x9/0x20 [ 377.821086][T15707] ? security_capable+0x7e/0x2e0 [ 377.821121][T15707] genl_rcv_msg+0x60e/0x790 [ 377.821150][T15707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.821168][T15707] ? __pfx_ip_vs_genl_set_daemon+0x10/0x10 [ 377.821193][T15707] ? __asan_memcpy+0x40/0x70 [ 377.821215][T15707] ? __pfx_ref_tracker_free+0x10/0x10 [ 377.821249][T15707] netlink_rcv_skb+0x208/0x470 [ 377.821272][T15707] ? __lock_acquire+0xab9/0xd20 [ 377.821301][T15707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.821323][T15707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.821374][T15707] ? down_read+0x1ad/0x2e0 [ 377.821414][T15707] genl_rcv+0x28/0x40 [ 377.821441][T15707] netlink_unicast+0x82f/0x9e0 [ 377.821477][T15707] ? __pfx_netlink_unicast+0x10/0x10 [ 377.821502][T15707] ? netlink_sendmsg+0x642/0xb30 [ 377.821525][T15707] ? skb_put+0x11b/0x210 [ 377.821557][T15707] netlink_sendmsg+0x805/0xb30 [ 377.821595][T15707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.821625][T15707] ? aa_sock_msg_perm+0xf1/0x1d0 [ 377.821653][T15707] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.821674][T15707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.821701][T15707] __sock_sendmsg+0x219/0x270 [ 377.821730][T15707] ____sys_sendmsg+0x505/0x830 [ 377.821767][T15707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.821809][T15707] ? import_iovec+0x74/0xa0 [ 377.821834][T15707] ___sys_sendmsg+0x21f/0x2a0 [ 377.821866][T15707] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.821945][T15707] ? __fget_files+0x2a/0x420 [ 377.821973][T15707] ? __fget_files+0x3a0/0x420 [ 377.822016][T15707] __x64_sys_sendmsg+0x19b/0x260 [ 377.822049][T15707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.822092][T15707] ? __pfx_ksys_write+0x10/0x10 [ 377.822126][T15707] ? do_syscall_64+0xbe/0x3b0 [ 377.822157][T15707] do_syscall_64+0xfa/0x3b0 [ 377.822180][T15707] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.822203][T15707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.822223][T15707] ? clear_bhb_loop+0x60/0xb0 [ 377.822249][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.822268][T15707] RIP: 0033:0x7f54c578ebe9 [ 377.822287][T15707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.822305][T15707] RSP: 002b:00007f54c653e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.822327][T15707] RAX: ffffffffffffffda RBX: 00007f54c59b5fa0 RCX: 00007f54c578ebe9 [ 377.822342][T15707] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 377.822355][T15707] RBP: 00007f54c653e090 R08: 0000000000000000 R09: 0000000000000000 [ 377.822367][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.822379][T15707] R13: 00007f54c59b6038 R14: 00007f54c59b5fa0 R15: 00007ffca21c4588 [ 377.822424][T15707] [ 378.580021][T15724] __nla_validate_parse: 7 callbacks suppressed [ 378.580043][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 378.873540][T15744] FAULT_INJECTION: forcing a failure. [ 378.873540][T15744] name failslab, interval 1, probability 0, space 0, times 0 [ 378.913125][T15744] CPU: 0 UID: 0 PID: 15744 Comm: syz.0.2982 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 378.913157][T15744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 378.913169][T15744] Call Trace: [ 378.913177][T15744] [ 378.913186][T15744] dump_stack_lvl+0x189/0x250 [ 378.913217][T15744] ? __pfx____ratelimit+0x10/0x10 [ 378.913242][T15744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.913265][T15744] ? __pfx__printk+0x10/0x10 [ 378.913295][T15744] ? __pfx___might_resched+0x10/0x10 [ 378.913314][T15744] ? fs_reclaim_acquire+0x7d/0x100 [ 378.913359][T15744] should_fail_ex+0x414/0x560 [ 378.913388][T15744] should_failslab+0xa8/0x100 [ 378.913418][T15744] __kmalloc_noprof+0xcb/0x4f0 [ 378.913443][T15744] ? tomoyo_encode+0x28b/0x550 [ 378.913475][T15744] tomoyo_encode+0x28b/0x550 [ 378.913510][T15744] tomoyo_realpath_from_path+0x58d/0x5d0 [ 378.913541][T15744] ? tomoyo_domain+0xd9/0x130 [ 378.913576][T15744] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 378.913599][T15744] tomoyo_path_number_perm+0x1e8/0x5a0 [ 378.913627][T15744] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 378.913672][T15744] ? __lock_acquire+0xab9/0xd20 [ 378.913726][T15744] ? __fget_files+0x2a/0x420 [ 378.913758][T15744] ? __fget_files+0x2a/0x420 [ 378.913784][T15744] ? __fget_files+0x3a0/0x420 [ 378.913811][T15744] ? __fget_files+0x2a/0x420 [ 378.913842][T15744] security_file_ioctl+0xcb/0x2d0 [ 378.913868][T15744] __se_sys_ioctl+0x47/0x170 [ 378.913896][T15744] do_syscall_64+0xfa/0x3b0 [ 378.913920][T15744] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.913943][T15744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.913962][T15744] ? clear_bhb_loop+0x60/0xb0 [ 378.913986][T15744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.914004][T15744] RIP: 0033:0x7f54c578ebe9 [ 378.914023][T15744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.914041][T15744] RSP: 002b:00007f54c653e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.914064][T15744] RAX: ffffffffffffffda RBX: 00007f54c59b5fa0 RCX: 00007f54c578ebe9 [ 378.914079][T15744] RDX: 0000200000000080 RSI: 0000000000008953 RDI: 0000000000000003 [ 378.914090][T15744] RBP: 00007f54c653e090 R08: 0000000000000000 R09: 0000000000000000 [ 378.914102][T15744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.914113][T15744] R13: 00007f54c59b6038 R14: 00007f54c59b5fa0 R15: 00007ffca21c4588 [ 378.914149][T15744] [ 378.914421][T15744] ERROR: Out of memory at tomoyo_realpath_from_path. [ 378.963731][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'. [ 380.398447][T15785] hsr0: entered promiscuous mode [ 380.407941][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 380.441259][T15786] hsr_slave_0: left promiscuous mode [ 380.472534][T15786] hsr_slave_1: left promiscuous mode [ 380.536788][T15786] hsr0 (unregistering): left promiscuous mode [ 380.640456][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 380.657272][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 380.670228][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3000'. [ 380.695877][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 380.752046][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 380.778015][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 380.823439][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2998'. [ 380.885129][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.894681][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.903270][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.913101][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.922252][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.675951][T15797] chnl_net:caif_netlink_parms(): no params data found [ 381.705164][T15835] FAULT_INJECTION: forcing a failure. [ 381.705164][T15835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.748727][T15835] CPU: 1 UID: 0 PID: 15835 Comm: syz.2.3013 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 381.748759][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.748771][T15835] Call Trace: [ 381.748779][T15835] [ 381.748788][T15835] dump_stack_lvl+0x189/0x250 [ 381.748818][T15835] ? __pfx____ratelimit+0x10/0x10 [ 381.748843][T15835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.748868][T15835] ? __pfx__printk+0x10/0x10 [ 381.748896][T15835] ? __might_fault+0xb0/0x130 [ 381.748937][T15835] should_fail_ex+0x414/0x560 [ 381.748967][T15835] _copy_from_user+0x2d/0xb0 [ 381.748988][T15835] core_sys_select+0x4b7/0xa20 [ 381.749031][T15835] ? __pfx_core_sys_select+0x10/0x10 [ 381.749090][T15835] ? __pfx_set_user_sigmask+0x10/0x10 [ 381.749125][T15835] __se_sys_pselect6+0x27a/0x300 [ 381.749161][T15835] ? __pfx___se_sys_pselect6+0x10/0x10 [ 381.749189][T15835] ? __pfx_ksys_write+0x10/0x10 [ 381.749222][T15835] ? __x64_sys_pselect6+0x21/0xf0 [ 381.749254][T15835] do_syscall_64+0xfa/0x3b0 [ 381.749277][T15835] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.749300][T15835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.749330][T15835] ? clear_bhb_loop+0x60/0xb0 [ 381.749355][T15835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.749374][T15835] RIP: 0033:0x7fea91d8ebe9 [ 381.749392][T15835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.749409][T15835] RSP: 002b:00007fea92c98038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 381.749432][T15835] RAX: ffffffffffffffda RBX: 00007fea91fb6090 RCX: 00007fea91d8ebe9 [ 381.749447][T15835] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 381.749460][T15835] RBP: 00007fea92c98090 R08: 0000000000000000 R09: 0000000000000000 [ 381.749472][T15835] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 381.749484][T15835] R13: 00007fea91fb6128 R14: 00007fea91fb6090 R15: 00007fff777cb2c8 [ 381.749519][T15835] [ 382.226779][T15797] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.252653][T15797] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.265384][T15797] bridge_slave_0: entered allmulticast mode [ 382.283712][T15797] bridge_slave_0: entered promiscuous mode [ 382.293537][T15797] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.300890][T15797] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.308249][T15797] bridge_slave_1: entered allmulticast mode [ 382.317293][T15797] bridge_slave_1: entered promiscuous mode [ 382.387409][T15797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.411417][T15797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.436680][T15856] netlink: 'syz.4.3019': attribute type 10 has an invalid length. [ 382.541531][T15797] team0: Port device team_slave_0 added [ 382.585963][T15797] team0: Port device team_slave_1 added [ 382.676863][T15866] tipc: Enabled bearer , priority 0 [ 382.725246][T15797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.732848][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.772859][T15797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.818806][T15866] tipc: Disabling bearer [ 382.831758][T15797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.839612][T15797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.841328][T15874] FAULT_INJECTION: forcing a failure. [ 382.841328][T15874] name failslab, interval 1, probability 0, space 0, times 0 [ 382.872741][T15797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.889843][T15874] CPU: 0 UID: 0 PID: 15874 Comm: syz.2.3024 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 382.889872][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 382.889884][T15874] Call Trace: [ 382.889892][T15874] [ 382.889901][T15874] dump_stack_lvl+0x189/0x250 [ 382.889932][T15874] ? __pfx____ratelimit+0x10/0x10 [ 382.889958][T15874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.889982][T15874] ? __pfx__printk+0x10/0x10 [ 382.890014][T15874] ? __pfx___might_resched+0x10/0x10 [ 382.890034][T15874] ? fs_reclaim_acquire+0x7d/0x100 [ 382.890079][T15874] should_fail_ex+0x414/0x560 [ 382.890110][T15874] should_failslab+0xa8/0x100 [ 382.890140][T15874] __kmalloc_cache_noprof+0x70/0x3d0 [ 382.890166][T15874] ? xfrm_policy_alloc+0x78/0x2b0 [ 382.890200][T15874] xfrm_policy_alloc+0x78/0x2b0 [ 382.890230][T15874] xfrm_policy_construct+0x39/0x6b0 [ 382.890254][T15874] ? preempt_schedule_common+0x83/0xd0 [ 382.890287][T15874] xfrm_add_policy+0x267/0x800 [ 382.890324][T15874] ? __pfx_xfrm_add_policy+0x10/0x10 [ 382.890342][T15874] ? apparmor_capable+0x137/0x1b0 [ 382.890370][T15874] ? __nla_parse+0x40/0x60 [ 382.890402][T15874] xfrm_user_rcv_msg+0x7a3/0xab0 [ 382.890430][T15874] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 382.890496][T15874] ? __pfx___mutex_trylock_common+0x10/0x10 [ 382.890525][T15874] ? rcu_is_watching+0x15/0xb0 [ 382.890545][T15874] ? trace_contention_end+0x39/0x120 [ 382.890566][T15874] ? __mutex_lock+0x335/0x1360 [ 382.890600][T15874] netlink_rcv_skb+0x208/0x470 [ 382.890624][T15874] ? rcu_is_watching+0x15/0xb0 [ 382.890644][T15874] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 382.890667][T15874] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.890711][T15874] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.890742][T15874] xfrm_netlink_rcv+0x79/0x90 [ 382.890763][T15874] netlink_unicast+0x82f/0x9e0 [ 382.890797][T15874] ? __pfx_netlink_unicast+0x10/0x10 [ 382.890823][T15874] ? netlink_sendmsg+0x642/0xb30 [ 382.890846][T15874] ? skb_put+0x11b/0x210 [ 382.890878][T15874] netlink_sendmsg+0x805/0xb30 [ 382.890915][T15874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.890944][T15874] ? aa_sock_msg_perm+0xf1/0x1d0 [ 382.890973][T15874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 382.890994][T15874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.891021][T15874] __sock_sendmsg+0x219/0x270 [ 382.891048][T15874] ____sys_sendmsg+0x505/0x830 [ 382.891084][T15874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.891124][T15874] ? import_iovec+0x74/0xa0 [ 382.891155][T15874] ___sys_sendmsg+0x21f/0x2a0 [ 382.891187][T15874] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.891262][T15874] ? __fget_files+0x2a/0x420 [ 382.891289][T15874] ? __fget_files+0x3a0/0x420 [ 382.891339][T15874] __x64_sys_sendmsg+0x19b/0x260 [ 382.891372][T15874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.891412][T15874] ? __pfx_ksys_write+0x10/0x10 [ 382.891435][T15874] ? rcu_is_watching+0x15/0xb0 [ 382.891461][T15874] ? do_syscall_64+0xbe/0x3b0 [ 382.891492][T15874] do_syscall_64+0xfa/0x3b0 [ 382.891520][T15874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.891538][T15874] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 382.891558][T15874] ? clear_bhb_loop+0x60/0xb0 [ 382.891582][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.891601][T15874] RIP: 0033:0x7fea91d8ebe9 [ 382.891620][T15874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.891637][T15874] RSP: 002b:00007fea92cb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.891660][T15874] RAX: ffffffffffffffda RBX: 00007fea91fb5fa0 RCX: 00007fea91d8ebe9 [ 382.891675][T15874] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 382.891687][T15874] RBP: 00007fea92cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 382.891700][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.891711][T15874] R13: 00007fea91fb6038 R14: 00007fea91fb5fa0 R15: 00007fff777cb2c8 [ 382.891746][T15874] [ 382.995050][T15876] FAULT_INJECTION: forcing a failure. [ 382.995050][T15876] name failslab, interval 1, probability 0, space 0, times 0 [ 383.048173][ T5879] Bluetooth: hci0: command tx timeout [ 383.057920][T15876] CPU: 0 UID: 0 PID: 15876 Comm: syz.2.3025 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 383.057946][T15876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.057957][T15876] Call Trace: [ 383.057964][T15876] [ 383.057972][T15876] dump_stack_lvl+0x189/0x250 [ 383.057999][T15876] ? __pfx____ratelimit+0x10/0x10 [ 383.058022][T15876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.058043][T15876] ? __pfx__printk+0x10/0x10 [ 383.058078][T15876] ? __pfx___might_resched+0x10/0x10 [ 383.058097][T15876] ? fs_reclaim_acquire+0x7d/0x100 [ 383.058131][T15876] should_fail_ex+0x414/0x560 [ 383.058158][T15876] should_failslab+0xa8/0x100 [ 383.058189][T15876] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 383.058216][T15876] ? __alloc_skb+0x112/0x2d0 [ 383.058248][T15876] __alloc_skb+0x112/0x2d0 [ 383.058279][T15876] netlink_ack+0x146/0xa50 [ 383.058301][T15876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.058338][T15876] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 383.058377][T15876] netlink_rcv_skb+0x28c/0x470 [ 383.058399][T15876] ? __lock_acquire+0xab9/0xd20 [ 383.058427][T15876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.058449][T15876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.058497][T15876] ? down_read+0x1ad/0x2e0 [ 383.058528][T15876] genl_rcv+0x28/0x40 [ 383.058555][T15876] netlink_unicast+0x82f/0x9e0 [ 383.058589][T15876] ? __pfx_netlink_unicast+0x10/0x10 [ 383.058613][T15876] ? netlink_sendmsg+0x642/0xb30 [ 383.058636][T15876] ? skb_put+0x11b/0x210 [ 383.058667][T15876] netlink_sendmsg+0x805/0xb30 [ 383.058704][T15876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.058733][T15876] ? aa_sock_msg_perm+0xf1/0x1d0 [ 383.058763][T15876] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.058784][T15876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.058810][T15876] __sock_sendmsg+0x219/0x270 [ 383.058835][T15876] ____sys_sendmsg+0x505/0x830 [ 383.058867][T15876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.058904][T15876] ? import_iovec+0x74/0xa0 [ 383.058926][T15876] ___sys_sendmsg+0x21f/0x2a0 [ 383.058954][T15876] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.059021][T15876] ? __fget_files+0x2a/0x420 [ 383.059046][T15876] ? __fget_files+0x3a0/0x420 [ 383.059083][T15876] __x64_sys_sendmsg+0x19b/0x260 [ 383.059112][T15876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.059148][T15876] ? __pfx_ksys_write+0x10/0x10 [ 383.059168][T15876] ? rcu_is_watching+0x15/0xb0 [ 383.059191][T15876] ? do_syscall_64+0xbe/0x3b0 [ 383.059218][T15876] do_syscall_64+0xfa/0x3b0 [ 383.059239][T15876] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.059260][T15876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.059277][T15876] ? clear_bhb_loop+0x60/0xb0 [ 383.059300][T15876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.059325][T15876] RIP: 0033:0x7fea91d8ebe9 [ 383.059342][T15876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.059357][T15876] RSP: 002b:00007fea92cb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.059377][T15876] RAX: ffffffffffffffda RBX: 00007fea91fb5fa0 RCX: 00007fea91d8ebe9 [ 383.059391][T15876] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 383.059403][T15876] RBP: 00007fea92cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 383.059414][T15876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.059424][T15876] R13: 00007fea91fb6038 R14: 00007fea91fb5fa0 R15: 00007fff777cb2c8 [ 383.059456][T15876] [ 383.727911][T15797] hsr_slave_0: entered promiscuous mode [ 383.734700][T15797] hsr_slave_1: entered promiscuous mode [ 383.743275][T15797] debugfs: 'hsr0' already exists in 'hsr' [ 383.749086][T15797] Cannot create hsr debugfs directory [ 383.865916][T15894] __nla_validate_parse: 33 callbacks suppressed [ 383.865938][T15894] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3034'. [ 383.904472][T15897] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3033'. [ 383.924778][T15898] dvmrp0: entered allmulticast mode [ 384.043540][T15899] dvmrp0: left allmulticast mode [ 384.114165][T15903] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3036'. [ 384.132235][T15903] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 384.181632][T15797] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.266099][T15797] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.361293][T15797] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.459561][T15797] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.794474][T15797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.836241][T15797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.867066][T15797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 384.893190][T15797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 384.980843][T15927] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3044'. [ 385.157051][T15935] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3045'. [ 385.258051][T15797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.335706][T15797] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.430254][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.437932][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.478252][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.485424][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.551746][T15946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3050'. [ 385.668092][ T5879] Bluetooth: hci0: command tx timeout [ 385.807965][T15955] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3055'. [ 385.857522][T15959] FAULT_INJECTION: forcing a failure. [ 385.857522][T15959] name failslab, interval 1, probability 0, space 0, times 0 [ 385.887859][T15959] CPU: 0 UID: 0 PID: 15959 Comm: syz.0.3056 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 385.887890][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.887902][T15959] Call Trace: [ 385.887911][T15959] [ 385.887920][T15959] dump_stack_lvl+0x189/0x250 [ 385.887950][T15959] ? __pfx____ratelimit+0x10/0x10 [ 385.887976][T15959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.888000][T15959] ? __pfx__printk+0x10/0x10 [ 385.888031][T15959] ? __pfx___might_resched+0x10/0x10 [ 385.888051][T15959] ? fs_reclaim_acquire+0x7d/0x100 [ 385.888088][T15959] should_fail_ex+0x414/0x560 [ 385.888117][T15959] should_failslab+0xa8/0x100 [ 385.888148][T15959] __kmalloc_noprof+0xcb/0x4f0 [ 385.888173][T15959] ? tomoyo_encode+0x28b/0x550 [ 385.888207][T15959] tomoyo_encode+0x28b/0x550 [ 385.888241][T15959] tomoyo_realpath_from_path+0x58d/0x5d0 [ 385.888281][T15959] ? tomoyo_domain+0xd9/0x130 [ 385.888317][T15959] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 385.888341][T15959] tomoyo_path_number_perm+0x1e8/0x5a0 [ 385.888369][T15959] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 385.888414][T15959] ? __lock_acquire+0xab9/0xd20 [ 385.888469][T15959] ? __fget_files+0x2a/0x420 [ 385.888500][T15959] ? __fget_files+0x2a/0x420 [ 385.888527][T15959] ? __fget_files+0x3a0/0x420 [ 385.888555][T15959] ? __fget_files+0x2a/0x420 [ 385.888589][T15959] security_file_ioctl+0xcb/0x2d0 [ 385.888615][T15959] __se_sys_ioctl+0x47/0x170 [ 385.888643][T15959] do_syscall_64+0xfa/0x3b0 [ 385.888667][T15959] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.888691][T15959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.888711][T15959] ? clear_bhb_loop+0x60/0xb0 [ 385.888737][T15959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.888756][T15959] RIP: 0033:0x7f54c578ebe9 [ 385.888775][T15959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.888793][T15959] RSP: 002b:00007f54c653e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.888817][T15959] RAX: ffffffffffffffda RBX: 00007f54c59b5fa0 RCX: 00007f54c578ebe9 [ 385.888831][T15959] RDX: 0000200000000080 RSI: 0000000000008953 RDI: 0000000000000003 [ 385.888845][T15959] RBP: 00007f54c653e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.888857][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.888870][T15959] R13: 00007f54c59b6038 R14: 00007f54c59b5fa0 R15: 00007ffca21c4588 [ 385.888906][T15959] [ 385.888931][T15959] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.166430][T15963] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3057'. [ 386.323359][T15797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.518584][T15797] veth0_vlan: entered promiscuous mode [ 386.544581][T15976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3062'. [ 386.550712][T15797] veth1_vlan: entered promiscuous mode [ 386.695937][T15797] veth0_macvtap: entered promiscuous mode [ 386.731302][T15797] veth1_macvtap: entered promiscuous mode [ 386.786741][T15986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3066'. [ 386.830920][T15797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.865980][T15797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.919573][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.939036][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.962696][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.978906][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.575217][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.586860][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.702556][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.722141][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.748190][ T5879] Bluetooth: hci0: command tx timeout [ 388.228290][T16034] FAULT_INJECTION: forcing a failure. [ 388.228290][T16034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.278280][T16034] CPU: 1 UID: 0 PID: 16034 Comm: syz.3.3083 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 388.278313][T16034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.278325][T16034] Call Trace: [ 388.278333][T16034] [ 388.278342][T16034] dump_stack_lvl+0x189/0x250 [ 388.278373][T16034] ? __pfx____ratelimit+0x10/0x10 [ 388.278398][T16034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.278422][T16034] ? __pfx__printk+0x10/0x10 [ 388.278449][T16034] ? __might_fault+0xb0/0x130 [ 388.278489][T16034] should_fail_ex+0x414/0x560 [ 388.278517][T16034] _copy_from_user+0x2d/0xb0 [ 388.278539][T16034] core_sys_select+0x604/0xa20 [ 388.278581][T16034] ? __pfx_core_sys_select+0x10/0x10 [ 388.278639][T16034] ? __pfx_set_user_sigmask+0x10/0x10 [ 388.278673][T16034] __se_sys_pselect6+0x27a/0x300 [ 388.278708][T16034] ? __pfx___se_sys_pselect6+0x10/0x10 [ 388.278734][T16034] ? __pfx_ksys_write+0x10/0x10 [ 388.278768][T16034] ? __x64_sys_pselect6+0x21/0xf0 [ 388.278799][T16034] do_syscall_64+0xfa/0x3b0 [ 388.278822][T16034] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.278846][T16034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.278865][T16034] ? clear_bhb_loop+0x60/0xb0 [ 388.278889][T16034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.278908][T16034] RIP: 0033:0x7f006518ebe9 [ 388.278927][T16034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.278944][T16034] RSP: 002b:00007f0065f54038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 388.278968][T16034] RAX: ffffffffffffffda RBX: 00007f00653b6090 RCX: 00007f006518ebe9 [ 388.278982][T16034] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 388.278995][T16034] RBP: 00007f0065f54090 R08: 0000000000000000 R09: 0000000000000000 [ 388.279008][T16034] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 388.279021][T16034] R13: 00007f00653b6128 R14: 00007f00653b6090 R15: 00007ffc902999d8 [ 388.279055][T16034] [ 388.586501][T16039] FAULT_INJECTION: forcing a failure. [ 388.586501][T16039] name failslab, interval 1, probability 0, space 0, times 0 [ 388.629357][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.2.3087 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 388.629389][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.629401][T16039] Call Trace: [ 388.629410][T16039] [ 388.629419][T16039] dump_stack_lvl+0x189/0x250 [ 388.629449][T16039] ? __pfx____ratelimit+0x10/0x10 [ 388.629475][T16039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.629509][T16039] ? __pfx__printk+0x10/0x10 [ 388.629544][T16039] ? __pfx___might_resched+0x10/0x10 [ 388.629563][T16039] ? fs_reclaim_acquire+0x7d/0x100 [ 388.629599][T16039] should_fail_ex+0x414/0x560 [ 388.629629][T16039] should_failslab+0xa8/0x100 [ 388.629660][T16039] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 388.629687][T16039] ? __alloc_skb+0x112/0x2d0 [ 388.629719][T16039] __alloc_skb+0x112/0x2d0 [ 388.629750][T16039] netlink_ack+0x146/0xa50 [ 388.629778][T16039] ? rcu_is_watching+0x15/0xb0 [ 388.629800][T16039] ? trace_contention_end+0x39/0x120 [ 388.629834][T16039] netlink_rcv_skb+0x28c/0x470 [ 388.629860][T16039] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 388.629883][T16039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.629926][T16039] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.629949][T16039] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.629977][T16039] xfrm_netlink_rcv+0x79/0x90 [ 388.629997][T16039] netlink_unicast+0x82f/0x9e0 [ 388.630031][T16039] ? __pfx_netlink_unicast+0x10/0x10 [ 388.630065][T16039] ? netlink_sendmsg+0x642/0xb30 [ 388.630087][T16039] ? skb_put+0x11b/0x210 [ 388.630119][T16039] netlink_sendmsg+0x805/0xb30 [ 388.630156][T16039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.630187][T16039] ? aa_sock_msg_perm+0xf1/0x1d0 [ 388.630217][T16039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.630237][T16039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.630264][T16039] __sock_sendmsg+0x219/0x270 [ 388.630292][T16039] ____sys_sendmsg+0x505/0x830 [ 388.630328][T16039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.630387][T16039] ? import_iovec+0x74/0xa0 [ 388.630413][T16039] ___sys_sendmsg+0x21f/0x2a0 [ 388.630445][T16039] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.630527][T16039] ? __fget_files+0x2a/0x420 [ 388.630556][T16039] ? __fget_files+0x3a0/0x420 [ 388.630597][T16039] __x64_sys_sendmsg+0x19b/0x260 [ 388.630630][T16039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.630672][T16039] ? __pfx_ksys_write+0x10/0x10 [ 388.630695][T16039] ? rcu_is_watching+0x15/0xb0 [ 388.630722][T16039] ? do_syscall_64+0xbe/0x3b0 [ 388.630753][T16039] do_syscall_64+0xfa/0x3b0 [ 388.630777][T16039] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.630800][T16039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.630820][T16039] ? clear_bhb_loop+0x60/0xb0 [ 388.630846][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.630865][T16039] RIP: 0033:0x7fea91d8ebe9 [ 388.630884][T16039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.630901][T16039] RSP: 002b:00007fea92cb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.630924][T16039] RAX: ffffffffffffffda RBX: 00007fea91fb5fa0 RCX: 00007fea91d8ebe9 [ 388.630939][T16039] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 388.630952][T16039] RBP: 00007fea92cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 388.630964][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.630976][T16039] R13: 00007fea91fb6038 R14: 00007fea91fb5fa0 R15: 00007fff777cb2c8 [ 388.631012][T16039] [ 389.277390][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.287450][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.301661][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.323603][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.336173][T16054] FAULT_INJECTION: forcing a failure. [ 389.336173][T16054] name failslab, interval 1, probability 0, space 0, times 0 [ 389.352736][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.360096][T16054] CPU: 1 UID: 0 PID: 16054 Comm: syz.2.3090 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 389.360128][T16054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.360139][T16054] Call Trace: [ 389.360147][T16054] [ 389.360156][T16054] dump_stack_lvl+0x189/0x250 [ 389.360186][T16054] ? __pfx____ratelimit+0x10/0x10 [ 389.360220][T16054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.360244][T16054] ? __pfx__printk+0x10/0x10 [ 389.360269][T16054] ? genl_rcv+0x28/0x40 [ 389.360299][T16054] ? ____sys_sendmsg+0x505/0x830 [ 389.360327][T16054] ? __x64_sys_sendmsg+0x19b/0x260 [ 389.360368][T16054] should_fail_ex+0x414/0x560 [ 389.360397][T16054] should_failslab+0xa8/0x100 [ 389.360429][T16054] kmem_cache_alloc_noprof+0x73/0x3c0 [ 389.360455][T16054] ? skb_clone+0x212/0x3a0 [ 389.360478][T16054] skb_clone+0x212/0x3a0 [ 389.360501][T16054] __netlink_deliver_tap+0x404/0x850 [ 389.360541][T16054] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.360569][T16054] netlink_deliver_tap+0x19c/0x1b0 [ 389.360595][T16054] netlink_sendskb+0x68/0x140 [ 389.360621][T16054] netlink_unicast+0x397/0x9e0 [ 389.360640][T16054] ? __asan_memcpy+0x40/0x70 [ 389.360673][T16054] ? __pfx_netlink_unicast+0x10/0x10 [ 389.360709][T16054] netlink_rcv_skb+0x28c/0x470 [ 389.360731][T16054] ? __lock_acquire+0xab9/0xd20 [ 389.360760][T16054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 389.360782][T16054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.360831][T16054] ? down_read+0x1ad/0x2e0 [ 389.360861][T16054] genl_rcv+0x28/0x40 [ 389.360889][T16054] netlink_unicast+0x82f/0x9e0 [ 389.360923][T16054] ? __pfx_netlink_unicast+0x10/0x10 [ 389.360948][T16054] ? netlink_sendmsg+0x642/0xb30 [ 389.360971][T16054] ? skb_put+0x11b/0x210 [ 389.361002][T16054] netlink_sendmsg+0x805/0xb30 [ 389.361040][T16054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.361070][T16054] ? aa_sock_msg_perm+0xf1/0x1d0 [ 389.361100][T16054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.361121][T16054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.361148][T16054] __sock_sendmsg+0x219/0x270 [ 389.361174][T16054] ____sys_sendmsg+0x505/0x830 [ 389.361211][T16054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.361264][T16054] ? import_iovec+0x74/0xa0 [ 389.361288][T16054] ___sys_sendmsg+0x21f/0x2a0 [ 389.361320][T16054] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.361395][T16054] ? __fget_files+0x2a/0x420 [ 389.361423][T16054] ? __fget_files+0x3a0/0x420 [ 389.361465][T16054] __x64_sys_sendmsg+0x19b/0x260 [ 389.361497][T16054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.361538][T16054] ? __pfx_ksys_write+0x10/0x10 [ 389.361562][T16054] ? rcu_is_watching+0x15/0xb0 [ 389.361589][T16054] ? do_syscall_64+0xbe/0x3b0 [ 389.361619][T16054] do_syscall_64+0xfa/0x3b0 [ 389.361642][T16054] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.361665][T16054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.361685][T16054] ? clear_bhb_loop+0x60/0xb0 [ 389.361711][T16054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.361731][T16054] RIP: 0033:0x7fea91d8ebe9 [ 389.361750][T16054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.361768][T16054] RSP: 002b:00007fea92c98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.361790][T16054] RAX: ffffffffffffffda RBX: 00007fea91fb6090 RCX: 00007fea91d8ebe9 [ 389.361805][T16054] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 389.361818][T16054] RBP: 00007fea92c98090 R08: 0000000000000000 R09: 0000000000000000 [ 389.361830][T16054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.361842][T16054] R13: 00007fea91fb6128 R14: 00007fea91fb6090 R15: 00007fff777cb2c8 [ 389.361878][T16054] [ 389.827890][ T5871] Bluetooth: hci0: command tx timeout [ 389.836016][T16061] __nla_validate_parse: 4 callbacks suppressed [ 389.836034][T16061] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3094'. [ 389.965946][T16067] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3096'. [ 390.597467][T16093] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3104'. [ 390.702744][T16048] chnl_net:caif_netlink_parms(): no params data found [ 390.995025][T16106] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3109'. [ 391.289016][ T6135] batman_adv: batadv0: Removing interface: gretap2 [ 391.429668][ T5871] Bluetooth: hci3: command tx timeout [ 391.755308][ T6135] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 391.766058][ T6135] bond0 (unregistering): Released all slaves [ 391.782381][ T6135] bond1 (unregistering): Released all slaves [ 391.798583][ T6135] bond2 (unregistering): Released all slaves [ 391.916392][ T6135] bond3 (unregistering): Released all slaves [ 392.036252][ T6135] bond4 (unregistering): Released all slaves [ 392.051944][ T6135] bond5 (unregistering): Released all slaves [ 392.281068][ T6135] tipc: Disabling bearer [ 392.299617][ T6135] tipc: Left network mode [ 392.313572][T16125] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3117'. [ 392.598208][T16048] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.605465][T16048] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.634226][T16048] bridge_slave_0: entered allmulticast mode [ 392.647950][T16048] bridge_slave_0: entered promiscuous mode [ 392.670071][T16048] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.677254][T16048] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.694299][T16048] bridge_slave_1: entered allmulticast mode [ 392.703606][T16048] bridge_slave_1: entered promiscuous mode [ 393.011984][T16048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.084445][T16048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.163691][T16156] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3126'. [ 393.265443][T16160] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3128'. [ 393.374476][T16048] team0: Port device team_slave_0 added [ 393.399149][T16048] team0: Port device team_slave_1 added [ 393.470533][ T6135] hsr_slave_0: left promiscuous mode [ 393.499808][ T6135] hsr_slave_1: left promiscuous mode [ 393.512477][ T5871] Bluetooth: hci3: command tx timeout [ 393.624049][T16171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3132'. [ 394.454642][T16183] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3136'. [ 394.957113][T16048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.964558][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.991762][T16048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.016469][T16168] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3129'. [ 395.025900][T16168] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 395.042800][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3131'. [ 395.102985][T16174] bond2: (slave gretap1): Releasing active interface [ 395.132251][T16174] bond3: (slave bridge3): Releasing backup interface [ 395.155428][T16174] bond5: (slave macvlan2): Releasing backup interface [ 395.167050][T16174] bond7: (slave bridge0): Releasing active interface [ 395.179714][T16187] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3138'. [ 395.190986][T16174] bond9: left allmulticast mode [ 395.195880][T16174] bond9: left promiscuous mode [ 395.211613][T16174] bridge0: port 1(bond9) entered disabled state [ 395.233715][T16048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.265629][T16048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.302919][T16048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.341910][T16191] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3140'. [ 395.516806][T16048] hsr_slave_0: entered promiscuous mode [ 395.551939][T16048] hsr_slave_1: entered promiscuous mode [ 395.575212][T16048] debugfs: 'hsr0' already exists in 'hsr' [ 395.593583][ T5871] Bluetooth: hci3: command tx timeout [ 395.604841][T16048] Cannot create hsr debugfs directory [ 395.615250][T16201] FAULT_INJECTION: forcing a failure. [ 395.615250][T16201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.637886][T16201] CPU: 1 UID: 0 PID: 16201 Comm: syz.2.3144 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 395.637915][T16201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 395.637927][T16201] Call Trace: [ 395.637935][T16201] [ 395.637944][T16201] dump_stack_lvl+0x189/0x250 [ 395.637973][T16201] ? __pfx____ratelimit+0x10/0x10 [ 395.637998][T16201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.638022][T16201] ? __pfx__printk+0x10/0x10 [ 395.638066][T16201] should_fail_ex+0x414/0x560 [ 395.638095][T16201] _copy_to_user+0x31/0xb0 [ 395.638118][T16201] simple_read_from_buffer+0xe1/0x170 [ 395.638152][T16201] proc_fail_nth_read+0x1b3/0x220 [ 395.638177][T16201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.638203][T16201] ? rw_verify_area+0x2a6/0x4d0 [ 395.638226][T16201] ? __lock_acquire+0xab9/0xd20 [ 395.638252][T16201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 395.638276][T16201] vfs_read+0x200/0x980 [ 395.638301][T16201] ? fdget_pos+0x247/0x320 [ 395.638323][T16201] ? __pfx___mutex_lock+0x10/0x10 [ 395.638350][T16201] ? __pfx_vfs_read+0x10/0x10 [ 395.638378][T16201] ? __fget_files+0x2a/0x420 [ 395.638412][T16201] ? __fget_files+0x3a0/0x420 [ 395.638450][T16201] ? __fget_files+0x2a/0x420 [ 395.638489][T16201] ksys_read+0x145/0x250 [ 395.638518][T16201] ? __pfx_ksys_read+0x10/0x10 [ 395.638540][T16201] ? rcu_is_watching+0x15/0xb0 [ 395.638568][T16201] ? do_syscall_64+0xbe/0x3b0 [ 395.638599][T16201] do_syscall_64+0xfa/0x3b0 [ 395.638622][T16201] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.638645][T16201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.638665][T16201] ? clear_bhb_loop+0x60/0xb0 [ 395.638691][T16201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.638710][T16201] RIP: 0033:0x7fea91d8d5fc [ 395.638729][T16201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 395.638747][T16201] RSP: 002b:00007fea92cb9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 395.638769][T16201] RAX: ffffffffffffffda RBX: 00007fea91fb5fa0 RCX: 00007fea91d8d5fc [ 395.638784][T16201] RDX: 000000000000000f RSI: 00007fea92cb90a0 RDI: 0000000000000004 [ 395.638796][T16201] RBP: 00007fea92cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 395.638809][T16201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.638821][T16201] R13: 00007fea91fb6038 R14: 00007fea91fb5fa0 R15: 00007fff777cb2c8 [ 395.638856][T16201] [ 395.969537][T16207] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3147'. [ 396.180533][T16213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3149'. [ 396.219168][T16211] netlink: 'syz.3.3146': attribute type 1 has an invalid length. [ 396.237783][T16213] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3149'. [ 396.318024][T16216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.325329][T16216] IPv6: NLM_F_CREATE should be set when creating new route [ 396.332641][T16216] IPv6: NLM_F_CREATE should be set when creating new route [ 396.358769][T16222] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3152'. [ 396.414741][T16216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.436102][T16226] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3154'. [ 396.751659][T16235] veth0_to_bridge: entered promiscuous mode [ 396.759337][T16235] veth0_to_bridge: left promiscuous mode [ 396.993331][T16245] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3160'. [ 397.118932][T16048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.220255][T16048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.328447][T16048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.448432][T16048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.668131][ T5871] Bluetooth: hci3: command tx timeout [ 397.890360][T16048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.939282][T16048] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.986656][ T7498] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 398.019584][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.026817][ T6135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.039194][ T7498] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 398.070721][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.077972][ T6135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.079289][ T7498] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 398.114443][T16048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 398.158050][T16048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.325211][T16048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.359734][T16303] FAULT_INJECTION: forcing a failure. [ 399.359734][T16303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.388225][T16303] CPU: 0 UID: 0 PID: 16303 Comm: syz.2.3178 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 399.388258][T16303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.388270][T16303] Call Trace: [ 399.388278][T16303] [ 399.388287][T16303] dump_stack_lvl+0x189/0x250 [ 399.388317][T16303] ? __pfx____ratelimit+0x10/0x10 [ 399.388341][T16303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.388365][T16303] ? __pfx__printk+0x10/0x10 [ 399.388392][T16303] ? __might_fault+0xb0/0x130 [ 399.388432][T16303] should_fail_ex+0x414/0x560 [ 399.388459][T16303] core_sys_select+0x724/0xa20 [ 399.388499][T16303] ? __pfx_core_sys_select+0x10/0x10 [ 399.388553][T16303] ? __pfx_set_user_sigmask+0x10/0x10 [ 399.388587][T16303] __se_sys_pselect6+0x27a/0x300 [ 399.388622][T16303] ? __pfx___se_sys_pselect6+0x10/0x10 [ 399.388650][T16303] ? __pfx_ksys_write+0x10/0x10 [ 399.388683][T16303] ? __x64_sys_pselect6+0x21/0xf0 [ 399.388714][T16303] do_syscall_64+0xfa/0x3b0 [ 399.388738][T16303] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.388763][T16303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.388782][T16303] ? clear_bhb_loop+0x60/0xb0 [ 399.388807][T16303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.388827][T16303] RIP: 0033:0x7fea91d8ebe9 [ 399.388846][T16303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.388863][T16303] RSP: 002b:00007fea92c98038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 399.388886][T16303] RAX: ffffffffffffffda RBX: 00007fea91fb6090 RCX: 00007fea91d8ebe9 [ 399.388902][T16303] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 399.388914][T16303] RBP: 00007fea92c98090 R08: 0000000000000000 R09: 0000000000000000 [ 399.388927][T16303] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 399.388939][T16303] R13: 00007fea91fb6128 R14: 00007fea91fb6090 R15: 00007fff777cb2c8 [ 399.388972][T16303] [ 399.804233][T16290] netlink: 'syz.1.3174': attribute type 6 has an invalid length. [ 400.505225][T16338] __nla_validate_parse: 2 callbacks suppressed [ 400.505246][T16338] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3184'. [ 400.551007][T16341] FAULT_INJECTION: forcing a failure. [ 400.551007][T16341] name failslab, interval 1, probability 0, space 0, times 0 [ 400.571332][T16341] CPU: 0 UID: 0 PID: 16341 Comm: syz.1.3186 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 400.571373][T16341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.571385][T16341] Call Trace: [ 400.571393][T16341] [ 400.571402][T16341] dump_stack_lvl+0x189/0x250 [ 400.571432][T16341] ? __pfx____ratelimit+0x10/0x10 [ 400.571457][T16341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.571481][T16341] ? __pfx__printk+0x10/0x10 [ 400.571505][T16341] ? genl_rcv+0x28/0x40 [ 400.571541][T16341] ? ____sys_sendmsg+0x505/0x830 [ 400.571568][T16341] ? __x64_sys_sendmsg+0x19b/0x260 [ 400.571610][T16341] should_fail_ex+0x414/0x560 [ 400.571639][T16341] should_failslab+0xa8/0x100 [ 400.571671][T16341] kmem_cache_alloc_noprof+0x73/0x3c0 [ 400.571696][T16341] ? skb_clone+0x212/0x3a0 [ 400.571721][T16341] skb_clone+0x212/0x3a0 [ 400.571744][T16341] __netlink_deliver_tap+0x404/0x850 [ 400.571785][T16341] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.571813][T16341] netlink_deliver_tap+0x19c/0x1b0 [ 400.571839][T16341] netlink_sendskb+0x68/0x140 [ 400.571865][T16341] netlink_unicast+0x397/0x9e0 [ 400.571885][T16341] ? __asan_memcpy+0x40/0x70 [ 400.571919][T16341] ? __pfx_netlink_unicast+0x10/0x10 [ 400.571956][T16341] netlink_rcv_skb+0x28c/0x470 [ 400.571978][T16341] ? __lock_acquire+0xab9/0xd20 [ 400.572007][T16341] ? __pfx_genl_rcv_msg+0x10/0x10 [ 400.572029][T16341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.572079][T16341] ? down_read+0x1ad/0x2e0 [ 400.572110][T16341] genl_rcv+0x28/0x40 [ 400.572137][T16341] netlink_unicast+0x82f/0x9e0 [ 400.572172][T16341] ? __pfx_netlink_unicast+0x10/0x10 [ 400.572198][T16341] ? netlink_sendmsg+0x642/0xb30 [ 400.572221][T16341] ? skb_put+0x11b/0x210 [ 400.572253][T16341] netlink_sendmsg+0x805/0xb30 [ 400.572292][T16341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.572322][T16341] ? aa_sock_msg_perm+0xf1/0x1d0 [ 400.572360][T16341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.572381][T16341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.572408][T16341] __sock_sendmsg+0x219/0x270 [ 400.572435][T16341] ____sys_sendmsg+0x505/0x830 [ 400.572472][T16341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.572513][T16341] ? import_iovec+0x74/0xa0 [ 400.572538][T16341] ___sys_sendmsg+0x21f/0x2a0 [ 400.572571][T16341] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.572648][T16341] ? __fget_files+0x2a/0x420 [ 400.572676][T16341] ? __fget_files+0x3a0/0x420 [ 400.572719][T16341] __x64_sys_sendmsg+0x19b/0x260 [ 400.572751][T16341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.572794][T16341] ? __pfx_ksys_write+0x10/0x10 [ 400.572817][T16341] ? rcu_is_watching+0x15/0xb0 [ 400.572844][T16341] ? do_syscall_64+0xbe/0x3b0 [ 400.572875][T16341] do_syscall_64+0xfa/0x3b0 [ 400.572899][T16341] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.572922][T16341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.572941][T16341] ? clear_bhb_loop+0x60/0xb0 [ 400.572966][T16341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.572985][T16341] RIP: 0033:0x7fd51258ebe9 [ 400.573003][T16341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.573020][T16341] RSP: 002b:00007fd5133a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.573043][T16341] RAX: ffffffffffffffda RBX: 00007fd5127b5fa0 RCX: 00007fd51258ebe9 [ 400.573057][T16341] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 400.573070][T16341] RBP: 00007fd5133a2090 R08: 0000000000000000 R09: 0000000000000000 [ 400.573083][T16341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.573093][T16341] R13: 00007fd5127b6038 R14: 00007fd5127b5fa0 R15: 00007ffd62e4b558 [ 400.573129][T16341] [ 400.582314][T16048] veth0_vlan: entered promiscuous mode [ 400.777946][T16348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3188'. [ 400.834993][T16048] veth1_vlan: entered promiscuous mode [ 401.097459][T16353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 401.101224][T16048] veth0_macvtap: entered promiscuous mode [ 401.194321][T16048] veth1_macvtap: entered promiscuous mode [ 401.322440][T16048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.339585][T16048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.369442][ T6135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.396625][ T6135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.447124][ T6135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.476667][ T6135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.622772][T16375] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3194'. [ 401.666897][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.686541][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.743735][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.754180][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.965208][T16386] netlink: 'syz.4.3082': attribute type 15 has an invalid length. [ 402.092906][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'. [ 402.220076][T16386] syzkaller0: entered promiscuous mode [ 402.262355][T16386] syzkaller0: entered allmulticast mode [ 402.442906][T16393] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3200'. [ 402.481773][T16396] Bluetooth: MGMT ver 1.23 [ 403.175849][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 403.197049][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.207955][ T5879] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.222131][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 403.238261][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.506953][T16423] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3211'. [ 405.347985][ T5871] Bluetooth: hci1: command tx timeout [ 405.541415][T16454] FAULT_INJECTION: forcing a failure. [ 405.541415][T16454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.566797][T16454] CPU: 0 UID: 0 PID: 16454 Comm: syz.2.3223 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 405.566828][T16454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.566840][T16454] Call Trace: [ 405.566849][T16454] [ 405.566858][T16454] dump_stack_lvl+0x189/0x250 [ 405.566888][T16454] ? __pfx____ratelimit+0x10/0x10 [ 405.566914][T16454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.566937][T16454] ? __pfx__printk+0x10/0x10 [ 405.566966][T16454] ? __might_fault+0xb0/0x130 [ 405.567008][T16454] should_fail_ex+0x414/0x560 [ 405.567037][T16454] _copy_from_user+0x2d/0xb0 [ 405.567058][T16454] ___sys_sendmsg+0x158/0x2a0 [ 405.567091][T16454] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.567164][T16454] ? __fget_files+0x2a/0x420 [ 405.567192][T16454] ? __fget_files+0x3a0/0x420 [ 405.567234][T16454] __x64_sys_sendmsg+0x19b/0x260 [ 405.567266][T16454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.567318][T16454] ? __pfx_ksys_write+0x10/0x10 [ 405.567341][T16454] ? rcu_is_watching+0x15/0xb0 [ 405.567367][T16454] ? do_syscall_64+0xbe/0x3b0 [ 405.567398][T16454] do_syscall_64+0xfa/0x3b0 [ 405.567420][T16454] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.567444][T16454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.567464][T16454] ? clear_bhb_loop+0x60/0xb0 [ 405.567488][T16454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.567508][T16454] RIP: 0033:0x7fea91d8ebe9 [ 405.567533][T16454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.567552][T16454] RSP: 002b:00007fea92cb9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.567576][T16454] RAX: ffffffffffffffda RBX: 00007fea91fb5fa0 RCX: 00007fea91d8ebe9 [ 405.567591][T16454] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 000000000000000c [ 405.567604][T16454] RBP: 00007fea92cb9090 R08: 0000000000000000 R09: 0000000000000000 [ 405.567617][T16454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.567629][T16454] R13: 00007fea91fb6038 R14: 00007fea91fb5fa0 R15: 00007fff777cb2c8 [ 405.567664][T16454] [ 405.857365][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3224'. [ 405.904901][T16448] netlink: 'syz.0.3221': attribute type 10 has an invalid length. [ 405.913423][T16448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3221'. [ 406.015092][T16452] sysfs: cannot create duplicate filename '/class/ieee80211/!å ' [ 406.047599][T16452] CPU: 0 UID: 0 PID: 16452 Comm: syz.4.3224 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 406.047634][T16452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.047647][T16452] Call Trace: [ 406.047655][T16452] [ 406.047664][T16452] dump_stack_lvl+0x189/0x250 [ 406.047699][T16452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.047723][T16452] ? __pfx__printk+0x10/0x10 [ 406.047757][T16452] ? kernfs_path_from_node+0x2f/0x290 [ 406.047780][T16452] ? kernfs_path_from_node+0x250/0x290 [ 406.047800][T16452] ? kernfs_path_from_node+0x2f/0x290 [ 406.047828][T16452] sysfs_warn_dup+0x8e/0xa0 [ 406.047852][T16452] sysfs_do_create_link_sd+0xc0/0x110 [ 406.047878][T16452] device_add_class_symlinks+0x1cf/0x240 [ 406.047914][T16452] device_add+0x475/0xb50 [ 406.047951][T16452] wiphy_register+0x1ba6/0x28d0 [ 406.047999][T16452] ? __pfx_wiphy_register+0x10/0x10 [ 406.048024][T16452] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 406.048063][T16452] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 406.048099][T16452] ieee80211_register_hw+0x3425/0x4080 [ 406.048152][T16452] ? ieee80211_register_hw+0x1421/0x4080 [ 406.048193][T16452] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 406.048231][T16452] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 406.048263][T16452] ? __hrtimer_setup+0x187/0x210 [ 406.048281][T16452] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 406.048320][T16452] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 406.048380][T16452] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 406.048402][T16452] ? trace_kmalloc+0x1f/0xd0 [ 406.048425][T16452] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 406.048453][T16452] ? kstrndup+0xbf/0x160 [ 406.048488][T16452] hwsim_new_radio_nl+0xea4/0x1b10 [ 406.048514][T16452] ? __pfx___nla_validate_parse+0x10/0x10 [ 406.048561][T16452] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 406.048600][T16452] ? __nla_parse+0x40/0x60 [ 406.048631][T16452] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 406.048664][T16452] genl_family_rcv_msg_doit+0x212/0x300 [ 406.048695][T16452] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 406.048734][T16452] ? bpf_lsm_capable+0x9/0x20 [ 406.048761][T16452] ? security_capable+0x7e/0x2e0 [ 406.048797][T16452] genl_rcv_msg+0x60e/0x790 [ 406.048825][T16452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.048843][T16452] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 406.048886][T16452] netlink_rcv_skb+0x208/0x470 [ 406.048910][T16452] ? __lock_acquire+0xab9/0xd20 [ 406.048940][T16452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.048963][T16452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.049016][T16452] ? down_read+0x1ad/0x2e0 [ 406.049048][T16452] genl_rcv+0x28/0x40 [ 406.049076][T16452] netlink_unicast+0x82f/0x9e0 [ 406.049113][T16452] ? __pfx_netlink_unicast+0x10/0x10 [ 406.049140][T16452] ? netlink_sendmsg+0x642/0xb30 [ 406.049163][T16452] ? skb_put+0x11b/0x210 [ 406.049197][T16452] netlink_sendmsg+0x805/0xb30 [ 406.049238][T16452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.049270][T16452] ? aa_sock_msg_perm+0xf1/0x1d0 [ 406.049310][T16452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.049331][T16452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.049358][T16452] __sock_sendmsg+0x219/0x270 [ 406.049387][T16452] ____sys_sendmsg+0x505/0x830 [ 406.049426][T16452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.049468][T16452] ? import_iovec+0x74/0xa0 [ 406.049492][T16452] ___sys_sendmsg+0x21f/0x2a0 [ 406.049526][T16452] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.049604][T16452] ? __fget_files+0x2a/0x420 [ 406.049633][T16452] ? __fget_files+0x3a0/0x420 [ 406.049677][T16452] __x64_sys_sendmsg+0x19b/0x260 [ 406.049712][T16452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.049757][T16452] ? rcu_is_watching+0x15/0xb0 [ 406.049786][T16452] ? do_syscall_64+0xbe/0x3b0 [ 406.049819][T16452] do_syscall_64+0xfa/0x3b0 [ 406.049843][T16452] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.049867][T16452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.049888][T16452] ? clear_bhb_loop+0x60/0xb0 [ 406.049920][T16452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.049940][T16452] RIP: 0033:0x7f95ab18ebe9 [ 406.049959][T16452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.049978][T16452] RSP: 002b:00007f95abf69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.050002][T16452] RAX: ffffffffffffffda RBX: 00007f95ab3b5fa0 RCX: 00007f95ab18ebe9 [ 406.050018][T16452] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 406.050030][T16452] RBP: 00007f95ab211e19 R08: 0000000000000000 R09: 0000000000000000 [ 406.050042][T16452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.050055][T16452] R13: 00007f95ab3b6038 R14: 00007f95ab3b5fa0 R15: 00007ffd55b21bc8 [ 406.050092][T16452] [ 406.598951][T16471] pimreg: entered allmulticast mode [ 406.900509][T16482] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3230'. [ 406.941133][T16485] FAULT_INJECTION: forcing a failure. [ 406.941133][T16485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.978288][T16485] CPU: 1 UID: 0 PID: 16485 Comm: syz.3.3233 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 406.978330][T16485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.978342][T16485] Call Trace: [ 406.978351][T16485] [ 406.978360][T16485] dump_stack_lvl+0x189/0x250 [ 406.978390][T16485] ? __pfx____ratelimit+0x10/0x10 [ 406.978415][T16485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.978439][T16485] ? __pfx__printk+0x10/0x10 [ 406.978467][T16485] ? __might_fault+0xb0/0x130 [ 406.978507][T16485] should_fail_ex+0x414/0x560 [ 406.978536][T16485] _copy_from_user+0x2d/0xb0 [ 406.978558][T16485] ___sys_sendmsg+0x158/0x2a0 [ 406.978591][T16485] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.978628][T16485] ? rcu_read_lock_any_held+0xb3/0x120 [ 406.978666][T16485] ? sb_end_write+0xe9/0x1c0 [ 406.978702][T16485] ? __pfx_vfs_write+0x10/0x10 [ 406.978740][T16485] __x64_sys_sendmsg+0x19b/0x260 [ 406.978773][T16485] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.978813][T16485] ? __pfx_ksys_write+0x10/0x10 [ 406.978836][T16485] ? rcu_is_watching+0x15/0xb0 [ 406.978862][T16485] ? do_syscall_64+0xbe/0x3b0 [ 406.978892][T16485] do_syscall_64+0xfa/0x3b0 [ 406.978915][T16485] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.978938][T16485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.978958][T16485] ? clear_bhb_loop+0x60/0xb0 [ 406.978982][T16485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.979000][T16485] RIP: 0033:0x7f006518ebe9 [ 406.979019][T16485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.979037][T16485] RSP: 002b:00007f0065f75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.979059][T16485] RAX: ffffffffffffffda RBX: 00007f00653b5fa0 RCX: 00007f006518ebe9 [ 406.979074][T16485] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 000000000000000b [ 406.979087][T16485] RBP: 00007f0065f75090 R08: 0000000000000000 R09: 0000000000000000 [ 406.979099][T16485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.979112][T16485] R13: 00007f00653b6038 R14: 00007f00653b5fa0 R15: 00007ffc902999d8 [ 406.979147][T16485] [ 407.327366][T16489] nft_compat: unsupported protocol 5 [ 407.388302][T16411] chnl_net:caif_netlink_parms(): no params data found [ 407.427909][ T5871] Bluetooth: hci1: command tx timeout [ 407.498682][T16500] FAULT_INJECTION: forcing a failure. [ 407.498682][T16500] name failslab, interval 1, probability 0, space 0, times 0 [ 407.511703][T16500] CPU: 1 UID: 0 PID: 16500 Comm: syz.0.3239 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 407.511732][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.511743][T16500] Call Trace: [ 407.511752][T16500] [ 407.511761][T16500] dump_stack_lvl+0x189/0x250 [ 407.511791][T16500] ? __pfx____ratelimit+0x10/0x10 [ 407.511815][T16500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.511839][T16500] ? __pfx__printk+0x10/0x10 [ 407.511864][T16500] ? xfrm_netlink_rcv+0x79/0x90 [ 407.511884][T16500] ? ____sys_sendmsg+0x505/0x830 [ 407.511911][T16500] ? __x64_sys_sendmsg+0x19b/0x260 [ 407.511952][T16500] should_fail_ex+0x414/0x560 [ 407.511981][T16500] should_failslab+0xa8/0x100 [ 407.512010][T16500] kmem_cache_alloc_noprof+0x73/0x3c0 [ 407.512045][T16500] ? skb_clone+0x212/0x3a0 [ 407.512068][T16500] skb_clone+0x212/0x3a0 [ 407.512088][T16500] __netlink_deliver_tap+0x404/0x850 [ 407.512129][T16500] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.512155][T16500] netlink_deliver_tap+0x19c/0x1b0 [ 407.512182][T16500] netlink_sendskb+0x68/0x140 [ 407.512208][T16500] netlink_unicast+0x397/0x9e0 [ 407.512227][T16500] ? __asan_memcpy+0x40/0x70 [ 407.512260][T16500] ? __pfx_netlink_unicast+0x10/0x10 [ 407.512294][T16500] netlink_rcv_skb+0x28c/0x470 [ 407.512320][T16500] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 407.512343][T16500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.512386][T16500] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.512410][T16500] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.512438][T16500] xfrm_netlink_rcv+0x79/0x90 [ 407.512458][T16500] netlink_unicast+0x82f/0x9e0 [ 407.512489][T16500] ? __pfx_netlink_unicast+0x10/0x10 [ 407.512512][T16500] ? netlink_sendmsg+0x642/0xb30 [ 407.512532][T16500] ? skb_put+0x11b/0x210 [ 407.512563][T16500] netlink_sendmsg+0x805/0xb30 [ 407.512598][T16500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.512629][T16500] ? aa_sock_msg_perm+0xf1/0x1d0 [ 407.512658][T16500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.512679][T16500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.512706][T16500] __sock_sendmsg+0x219/0x270 [ 407.512733][T16500] ____sys_sendmsg+0x505/0x830 [ 407.512769][T16500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.512811][T16500] ? import_iovec+0x74/0xa0 [ 407.512836][T16500] ___sys_sendmsg+0x21f/0x2a0 [ 407.512868][T16500] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.512945][T16500] ? __fget_files+0x2a/0x420 [ 407.512974][T16500] ? __fget_files+0x3a0/0x420 [ 407.513017][T16500] __x64_sys_sendmsg+0x19b/0x260 [ 407.513060][T16500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.513102][T16500] ? __pfx_ksys_write+0x10/0x10 [ 407.513124][T16500] ? rcu_is_watching+0x15/0xb0 [ 407.513153][T16500] ? do_syscall_64+0xbe/0x3b0 [ 407.513189][T16500] do_syscall_64+0xfa/0x3b0 [ 407.513213][T16500] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.513237][T16500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.513257][T16500] ? clear_bhb_loop+0x60/0xb0 [ 407.513281][T16500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.513301][T16500] RIP: 0033:0x7f54c578ebe9 [ 407.513320][T16500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.513337][T16500] RSP: 002b:00007f54c653e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.513359][T16500] RAX: ffffffffffffffda RBX: 00007f54c59b5fa0 RCX: 00007f54c578ebe9 [ 407.513374][T16500] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 407.513386][T16500] RBP: 00007f54c653e090 R08: 0000000000000000 R09: 0000000000000000 [ 407.513397][T16500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.513407][T16500] R13: 00007f54c59b6038 R14: 00007f54c59b5fa0 R15: 00007ffca21c4588 [ 407.513442][T16500] [ 407.986330][T16497] netlink: 'syz.3.3238': attribute type 4 has an invalid length. [ 408.003849][T16504] FAULT_INJECTION: forcing a failure. [ 408.003849][T16504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.017674][T16504] CPU: 1 UID: 0 PID: 16504 Comm: syz.0.3240 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 408.017705][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.017716][T16504] Call Trace: [ 408.017724][T16504] [ 408.017732][T16504] dump_stack_lvl+0x189/0x250 [ 408.017762][T16504] ? __pfx____ratelimit+0x10/0x10 [ 408.017787][T16504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.017811][T16504] ? __pfx__printk+0x10/0x10 [ 408.017855][T16504] should_fail_ex+0x414/0x560 [ 408.017884][T16504] _copy_to_user+0x31/0xb0 [ 408.017908][T16504] simple_read_from_buffer+0xe1/0x170 [ 408.017942][T16504] proc_fail_nth_read+0x1b3/0x220 [ 408.017969][T16504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.017995][T16504] ? rw_verify_area+0x2a6/0x4d0 [ 408.018018][T16504] ? __lock_acquire+0xab9/0xd20 [ 408.018044][T16504] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.018068][T16504] vfs_read+0x200/0x980 [ 408.018092][T16504] ? fdget_pos+0x247/0x320 [ 408.018115][T16504] ? __pfx___mutex_lock+0x10/0x10 [ 408.018142][T16504] ? __pfx_vfs_read+0x10/0x10 [ 408.018169][T16504] ? __fget_files+0x2a/0x420 [ 408.018203][T16504] ? __fget_files+0x3a0/0x420 [ 408.018230][T16504] ? __fget_files+0x2a/0x420 [ 408.018278][T16504] ksys_read+0x145/0x250 [ 408.018306][T16504] ? __pfx_ksys_read+0x10/0x10 [ 408.018329][T16504] ? rcu_is_watching+0x15/0xb0 [ 408.018355][T16504] ? do_syscall_64+0xbe/0x3b0 [ 408.018385][T16504] do_syscall_64+0xfa/0x3b0 [ 408.018407][T16504] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.018431][T16504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.018450][T16504] ? clear_bhb_loop+0x60/0xb0 [ 408.018475][T16504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.018494][T16504] RIP: 0033:0x7f54c578d5fc [ 408.018513][T16504] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 408.018531][T16504] RSP: 002b:00007f54c653e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.018553][T16504] RAX: ffffffffffffffda RBX: 00007f54c59b5fa0 RCX: 00007f54c578d5fc [ 408.018568][T16504] RDX: 000000000000000f RSI: 00007f54c653e0a0 RDI: 0000000000000004 [ 408.018581][T16504] RBP: 00007f54c653e090 R08: 0000000000000000 R09: 0000000000000000 [ 408.018593][T16504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.018605][T16504] R13: 00007f54c59b6038 R14: 00007f54c59b5fa0 R15: 00007ffca21c4588 [ 408.018641][T16504] [ 408.362026][T16511] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3244'. [ 409.206208][ T13] bond0 (unregistering): Released all slaves [ 409.244805][ T13] bond1 (unregistering): Released all slaves [ 409.367352][ T13] bond2 (unregistering): Released all slaves [ 409.472562][T16411] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.498145][T16411] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.507928][ T5871] Bluetooth: hci1: command tx timeout [ 409.513177][T16411] bridge_slave_0: entered allmulticast mode [ 409.526439][T16411] bridge_slave_0: entered promiscuous mode [ 409.591615][ T13] þ: left promiscuous mode [ 409.658099][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3248'. [ 409.684411][T16411] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.705728][T16411] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.728285][T16411] bridge_slave_1: entered allmulticast mode [ 409.749648][T16411] bridge_slave_1: entered promiscuous mode [ 409.793101][T16538] netlink: 'syz.2.3250': attribute type 11 has an invalid length. [ 409.801328][T16538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3250'. [ 409.979653][ T13] tipc: Left network mode [ 409.987517][T16411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.043582][T16411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.282910][T16411] team0: Port device team_slave_0 added [ 410.298691][T16559] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3257'. [ 410.362446][T16411] team0: Port device team_slave_1 added [ 410.382236][T16554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3255'. [ 410.526868][T16564] FAULT_INJECTION: forcing a failure. [ 410.526868][T16564] name failslab, interval 1, probability 0, space 0, times 0 [ 410.570786][T16564] CPU: 0 UID: 0 PID: 16564 Comm: syz.3.3259 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 410.570817][T16564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.570829][T16564] Call Trace: [ 410.570837][T16564] [ 410.570846][T16564] dump_stack_lvl+0x189/0x250 [ 410.570876][T16564] ? __pfx____ratelimit+0x10/0x10 [ 410.570901][T16564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.570925][T16564] ? __pfx__printk+0x10/0x10 [ 410.570961][T16564] ? __pfx___might_resched+0x10/0x10 [ 410.570996][T16564] should_fail_ex+0x414/0x560 [ 410.571026][T16564] should_failslab+0xa8/0x100 [ 410.571056][T16564] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 410.571083][T16564] ? __alloc_skb+0x112/0x2d0 [ 410.571115][T16564] __alloc_skb+0x112/0x2d0 [ 410.571145][T16564] netlink_sendmsg+0x5c6/0xb30 [ 410.571183][T16564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.571213][T16564] ? aa_sock_msg_perm+0xf1/0x1d0 [ 410.571242][T16564] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.571262][T16564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.571289][T16564] __sock_sendmsg+0x219/0x270 [ 410.571314][T16564] ____sys_sendmsg+0x505/0x830 [ 410.571349][T16564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.571387][T16564] ? import_iovec+0x74/0xa0 [ 410.571409][T16564] ___sys_sendmsg+0x21f/0x2a0 [ 410.571439][T16564] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.571476][T16564] ? rcu_read_lock_any_held+0xb3/0x120 [ 410.571512][T16564] ? sb_end_write+0xe9/0x1c0 [ 410.571547][T16564] ? __pfx_vfs_write+0x10/0x10 [ 410.571584][T16564] __x64_sys_sendmsg+0x19b/0x260 [ 410.571615][T16564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 410.571654][T16564] ? __pfx_ksys_write+0x10/0x10 [ 410.571676][T16564] ? rcu_is_watching+0x15/0xb0 [ 410.571701][T16564] ? do_syscall_64+0xbe/0x3b0 [ 410.571729][T16564] do_syscall_64+0xfa/0x3b0 [ 410.571763][T16564] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.571786][T16564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.571806][T16564] ? clear_bhb_loop+0x60/0xb0 [ 410.571831][T16564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.571850][T16564] RIP: 0033:0x7f006518ebe9 [ 410.571868][T16564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.571886][T16564] RSP: 002b:00007f0065f75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.571909][T16564] RAX: ffffffffffffffda RBX: 00007f00653b5fa0 RCX: 00007f006518ebe9 [ 410.571923][T16564] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 000000000000000b [ 410.571935][T16564] RBP: 00007f0065f75090 R08: 0000000000000000 R09: 0000000000000000 [ 410.571948][T16564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.571959][T16564] R13: 00007f00653b6038 R14: 00007f00653b5fa0 R15: 00007ffc902999d8 [ 410.572002][T16564] [ 410.583462][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 410.646800][T16573] FAULT_INJECTION: forcing a failure. [ 410.646800][T16573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.890045][T16573] CPU: 0 UID: 0 PID: 16573 Comm: syz.2.3260 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 410.890077][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 410.890089][T16573] Call Trace: [ 410.890097][T16573] [ 410.890107][T16573] dump_stack_lvl+0x189/0x250 [ 410.890137][T16573] ? __pfx____ratelimit+0x10/0x10 [ 410.890162][T16573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.890186][T16573] ? __pfx__printk+0x10/0x10 [ 410.890230][T16573] should_fail_ex+0x414/0x560 [ 410.890260][T16573] _copy_to_user+0x31/0xb0 [ 410.890281][T16573] simple_read_from_buffer+0xe1/0x170 [ 410.890318][T16573] proc_fail_nth_read+0x1b3/0x220 [ 410.890344][T16573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.890370][T16573] ? rw_verify_area+0x2a6/0x4d0 [ 410.890393][T16573] ? __lock_acquire+0xab9/0xd20 [ 410.890419][T16573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.890443][T16573] vfs_read+0x200/0x980 [ 410.890467][T16573] ? fdget_pos+0x247/0x320 [ 410.890490][T16573] ? __pfx___mutex_lock+0x10/0x10 [ 410.890517][T16573] ? __pfx_vfs_read+0x10/0x10 [ 410.890545][T16573] ? __fget_files+0x2a/0x420 [ 410.890579][T16573] ? __fget_files+0x3a0/0x420 [ 410.890605][T16573] ? __fget_files+0x2a/0x420 [ 410.890646][T16573] ksys_read+0x145/0x250 [ 410.890674][T16573] ? __pfx_ksys_read+0x10/0x10 [ 410.890696][T16573] ? rcu_is_watching+0x15/0xb0 [ 410.890723][T16573] ? do_syscall_64+0xbe/0x3b0 [ 410.890754][T16573] do_syscall_64+0xfa/0x3b0 [ 410.890777][T16573] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.890801][T16573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.890820][T16573] ? clear_bhb_loop+0x60/0xb0 [ 410.890846][T16573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.890865][T16573] RIP: 0033:0x7fea91d8d5fc [ 410.890884][T16573] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 410.890902][T16573] RSP: 002b:00007fea92c98030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.890926][T16573] RAX: ffffffffffffffda RBX: 00007fea91fb6090 RCX: 00007fea91d8d5fc [ 410.890941][T16573] RDX: 000000000000000f RSI: 00007fea92c980a0 RDI: 0000000000000005 [ 410.890954][T16573] RBP: 00007fea92c98090 R08: 0000000000000000 R09: 0000000000000000 [ 410.890967][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.890980][T16573] R13: 00007fea91fb6128 R14: 00007fea91fb6090 R15: 00007fff777cb2c8 [ 410.891016][T16573] [ 411.240656][T16411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.265830][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.300259][T16411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.333905][T16588] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3268'. [ 411.361795][T16572] netlink: 'syz.3.3263': attribute type 7 has an invalid length. [ 411.377813][T16572] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3263'. [ 411.508304][ C0] ------------[ cut here ]------------ [ 411.514093][ C0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 411.519972][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 411.526244][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-syzkaller-12128-g875c541ea680 #0 PREEMPT(full) [ 411.537813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.547893][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 411.553125][ C0] Code: 8e ae 00 e9 45 ff ff ff e8 e2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 90 0e 8a 03 e9 4d ff ff ff e8 c6 24 4b 00 90 <0f> 0b e8 be 24 4b 00 90 0f 0b e8 b6 24 4b 00 90 0f 0b 0f 1f 00 90 [ 411.572770][ C0] RSP: 0000:ffffc90000147878 EFLAGS: 00010246 [ 411.578852][ C0] RAX: ffffffff817486ea RBX: 00007780fffe0000 RCX: ffff88801ce9bc00 [ 411.586830][ C0] RDX: 0000000000000100 RSI: 000000017ffe0000 RDI: 00007780fffe0000 [ 411.594803][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a7f847 [ 411.602880][ C0] R10: dffffc0000000000 R11: ffffffff8a0147c0 R12: ffffffff8a0147c0 [ 411.610849][ C0] R13: ffffffff81a7f847 R14: 000000017ffe0000 R15: dffffc0000000000 [ 411.619080][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 411.628030][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.634624][ C0] CR2: 000000110c2ec792 CR3: 000000000df36000 CR4: 00000000003526f0 [ 411.642596][ C0] Call Trace: [ 411.645873][ C0] [ 411.648803][ C0] ? in_dev_free_rcu+0x49/0x60 [ 411.653571][ C0] kfree+0x77/0x440 [ 411.657376][ C0] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 411.662661][ C0] ? rcu_core+0xc37/0x1770 [ 411.667080][ C0] in_dev_free_rcu+0x49/0x60 [ 411.671673][ C0] rcu_core+0xca8/0x1770 [ 411.675920][ C0] ? __lock_acquire+0xab9/0xd20 [ 411.680785][ C0] ? __pfx_rcu_core+0x10/0x10 [ 411.685483][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 411.690683][ C0] ? sched_clock_cpu+0x74/0x430 [ 411.695557][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 411.700862][ C0] ? __local_bh_disable_ip+0xf1/0x190 [ 411.706246][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 411.712074][ C0] handle_softirqs+0x283/0x870 [ 411.716845][ C0] ? run_ksoftirqd+0x9b/0x100 [ 411.721523][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 411.726810][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 411.731842][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 411.736873][ C0] run_ksoftirqd+0x9b/0x100 [ 411.741381][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 411.746497][ C0] smpboot_thread_fn+0x53f/0xa60 [ 411.751436][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 411.756458][ C0] kthread+0x70e/0x8a0 [ 411.760532][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 411.765992][ C0] ? __pfx_kthread+0x10/0x10 [ 411.770586][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.775783][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.780981][ C0] ? __pfx_kthread+0x10/0x10 [ 411.785573][ C0] ret_from_fork+0x3fc/0x770 [ 411.790166][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 411.795275][ C0] ? __switch_to_asm+0x39/0x70 [ 411.800039][ C0] ? __switch_to_asm+0x33/0x70 [ 411.804802][ C0] ? __pfx_kthread+0x10/0x10 [ 411.809391][ C0] ret_from_fork_asm+0x1a/0x30 [ 411.814163][ C0] [ 411.817176][ C0] Modules linked in: [ 411.821212][ C0] ---[ end trace 0000000000000000 ]--- [ 411.821216][ T5871] Bluetooth: hci1: command tx timeout [ 411.832129][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 411.837363][ C0] Code: 8e ae 00 e9 45 ff ff ff e8 e2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 90 0e 8a 03 e9 4d ff ff ff e8 c6 24 4b 00 90 <0f> 0b e8 be 24 4b 00 90 0f 0b e8 b6 24 4b 00 90 0f 0b 0f 1f 00 90 [ 411.857016][ C0] RSP: 0000:ffffc90000147878 EFLAGS: 00010246 [ 411.863133][ C0] RAX: ffffffff817486ea RBX: 00007780fffe0000 RCX: ffff88801ce9bc00 [ 411.871244][ C0] RDX: 0000000000000100 RSI: 000000017ffe0000 RDI: 00007780fffe0000 [ 411.879261][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a7f847 [ 411.887266][ C0] R10: dffffc0000000000 R11: ffffffff8a0147c0 R12: ffffffff8a0147c0 [ 411.895293][ C0] R13: ffffffff81a7f847 R14: 000000017ffe0000 R15: dffffc0000000000 [ 411.903312][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 411.912283][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.918907][ C0] CR2: 000000110c2ec792 CR3: 000000000df36000 CR4: 00000000003526f0 [ 411.926917][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 411.934410][ C0] Kernel Offset: disabled [ 411.938729][ C0] Rebooting in 86400 seconds..