last executing test programs: 11.385437396s ago: executing program 4 (id=1488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x4004814) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x3700, {0x1, 0x2}}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1300000010000000080000000000000000008000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) recvfrom$rose(r4, &(0x7f0000000500)=""/241, 0xf1, 0x40000001, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r13, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r11, r13, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r10}, 0x20) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000005, 0x8010, 0xffffffffffffffff, 0x425000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000000, 0x28011, r0, 0x513e9000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) 11.122926184s ago: executing program 4 (id=1492): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="5001000010001304000000000000000000000000000000000000ffffac141423e0000002000000000000000000000000fffd00004e0400000200002029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000200032000000fc0000000000000000200000000000010000000000000000070000000000000002000000000000000400000000000000ffffffffffffffff040000000000000008000000000200000000000000000000010000000100000008000000000000007f000000000000000000000000000000f6000000000000000000000000000000000000000200000100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x804) 10.965182482s ago: executing program 4 (id=1496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4, 0x0, 0x9}}}}}}}, 0x0) 10.746885751s ago: executing program 4 (id=1500): syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xfffffffffffffe0a, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0xa63}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000700ffff200007800c00018008000159da00000208000a400000000105000300020000000900020073797a31000000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 10.464054674s ago: executing program 4 (id=1505): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) (fail_nth: 1) 10.180565291s ago: executing program 4 (id=1508): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1d, 0xffffffbf, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c) listen(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESHEX=r0], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="bfc9090e8a8727dcc15eba0af1a3d6f930ec5da10d6e400dff743c8ed16ed6b10fb2c74fe898b066ba67788844e10869b7494abaf17a0d1930fa23d76c061bb7c3f1d399df59b8934d8cf5f997f5915ff36f04a50ee2009eb00784642702103d173a5bb4eb45", @ANYBLOB="68c84d116c1fab39fa3bddf68cb892ffc54a0b143ade55bfc017a6d79624e64d6c2a8eb11c6aad4537481c1079e16e9af4c740278e853c4411304b000a8148c4d80bdea94b7d1b1e1443ca7f17e6e20609532476fd23f034cba3ff0671b14482457b4c8e8c652ae3aa3aee4bb5520a646f4f1f05b8f2cac7da911cf42ea99ced6cf9d6f42f3df17d2e01018c66231b0bff0886bfc2f9f204f6a91652b34624a4cb8c8ac17127b525713e98fe49fb72c645066a4920e8551ad4244e755e4d16f11fb38725", @ANYRES16=r0], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, 0x0, 0x0) accept(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00070000000019993828f32aee3ba553b300"/30], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 9.849978097s ago: executing program 32 (id=1508): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e1d, 0xffffffbf, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}, 0x1c) listen(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRESHEX=r0], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="bfc9090e8a8727dcc15eba0af1a3d6f930ec5da10d6e400dff743c8ed16ed6b10fb2c74fe898b066ba67788844e10869b7494abaf17a0d1930fa23d76c061bb7c3f1d399df59b8934d8cf5f997f5915ff36f04a50ee2009eb00784642702103d173a5bb4eb45", @ANYBLOB="68c84d116c1fab39fa3bddf68cb892ffc54a0b143ade55bfc017a6d79624e64d6c2a8eb11c6aad4537481c1079e16e9af4c740278e853c4411304b000a8148c4d80bdea94b7d1b1e1443ca7f17e6e20609532476fd23f034cba3ff0671b14482457b4c8e8c652ae3aa3aee4bb5520a646f4f1f05b8f2cac7da911cf42ea99ced6cf9d6f42f3df17d2e01018c66231b0bff0886bfc2f9f204f6a91652b34624a4cb8c8ac17127b525713e98fe49fb72c645066a4920e8551ad4244e755e4d16f11fb38725", @ANYRES16=r0], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = socket$inet6(0xa, 0x5, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x1d0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, 0x0, 0x0) accept(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00070000000019993828f32aee3ba553b300"/30], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.562058471s ago: executing program 1 (id=1575): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="9e36d448b388dd96bd4c248786dd", 0x0, 0x700, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.380007204s ago: executing program 0 (id=1579): unshare(0x22020600) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4"], 0x6f4}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022100000000000014000300766c616e30000000000000000000000008000a00", @ANYBLOB="14001680100001"], 0x50}, 0x1, 0x0, 0x2100000000000000}, 0x0) 2.293771182s ago: executing program 1 (id=1580): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 2.193681304s ago: executing program 0 (id=1583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 2.161665049s ago: executing program 3 (id=1584): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db5264743cefb660278cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda2724091c98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec400346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c74e76aaeae46f57e25bf4c5b6735a3ecfb624ea045dadd2c32e8a24136161ce7ef213ea24f84f16c733fe057846ab0a2a8bbf52f0a9ac9bcbbb2c198b76034fe3afc742523c7c9213c91f3a42ed4c3227ca8abf15707dfe1f881f7afb3469eee31add058c70026f2590fefef80ffb98b239b37b7353585a9af554ee44f0b747aa70439c8ebed3528b8b6a9ba8f96cbc63b3f08f090037b165347bc61e413b28034d1186f41993c15a", 0xa9}, {&(0x7f0000000900)="34bef15ebc407b5e6bf691572f7ff606148f9ccf47e5d886b58eb9e80177a13db6af8f582c99626a874d95267720c4575e00e9dbaf7a5ca2eee375c7b4361040ccabf5fa9e7a7d7815ccdc6029d9d5c554013b819ca8fdceb346ef066dba0493b41243d38b5aa8759efdf200ad04c791a0ab36f8657ff6c78e5f728aca89e477bbd1415ea43e61b0eedb36e318b516a48cd5e94b0a28b84dea63e41752069cea4f52ebc48037b1a7fd2e447c30a7f10973d782e5e4c8c0e15d12b062", 0xbc}], 0x2}}], 0x3, 0x8800) 2.15854687s ago: executing program 1 (id=1585): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x3ff, 0x0, 0x3fa, 0x0, 0x91}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.117249586s ago: executing program 0 (id=1586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="5001000010001304000000000000000000000000000000000000ffffac141423e0000002000000000000000000000000fffd00004e0400000200002029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000200032000000fc0000000000000000810000000000010000000000000000070000000000000002000000000000000400000000000000ffffffffffffffff040000000000000008000000000200000000000000000000010000000100000008000000000000007f000000000000000000000000000000f6000000000000000000000000000000000000000200000100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x804) 1.955426441s ago: executing program 0 (id=1588): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x4c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x35, 0x11, 0x0, 0x1, [@generic="9e15c00619065e963eba3ef94d765eb501e2e4bea6b8d14b16632741a5bb965fe09b7844e4b103706a1038bc955454ed2f"]}]}, 0x4c}], 0x1}, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e40100000044000480050003000500000005000300010000000500030080ff00002000030005000000050003000500000055fe0300020000000500030000000000050003000100000008000200020000000800010003"], 0x68}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4b8b4dfa4a645212}, 0x48041) r8 = socket(0x1, 0x803, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x4, 0x2, 0x0, 0xa, 0x7, 0x88c1}, 0x20) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000600)=[{0x30, 0x3a, 0x1ff, "89129d60de36bb60be3e4273d2213437c777edae967529b36bf07214e5aa"}, {0x88, 0x5, 0x2, "c7e1b2e0f046ffb4e7e324c88cd08118cf333ecd451af14b36adbea09a5bd77f622b81bbcf88d0dc449ef6170161054c234c0574b3e4d45d1000882d7b861729c9f45668875cefa1de016d16fec66706532dd8aff71483afbf699d71de94a31f947f2ad95bf21157f1b86bc27f9cbfbc81cce357"}, {0x10, 0x88, 0x4}, {0x10, 0x102}], 0xd8}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r10, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0) 1.941414055s ago: executing program 2 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x403, 0x3000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x4000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x1b, 0x3}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0xba01, 0x0, 0x20008000}, 0x810) 1.785395234s ago: executing program 2 (id=1590): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18060000000000000000120000e0cc884fe45f0d4a8457606c7aed5e97efbebcc8d8639c97ebaa359f4c93f0340248f1722a21e952fa51d372b3a2deaf5ac963f25098517221f0c6bd79163300000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703001100000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) (async) accept4(r5, 0x0, 0x0, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 64) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) unshare(0x22020600) r13 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r13, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r13, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 1.418000447s ago: executing program 2 (id=1591): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/12, @ANYBLOB="00000000000000000000000000000000000000f9"], 0x50) r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x2c, 0x80000, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x4000) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x4) socket(0x23, 0xa62a95c318ef9d14, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001cfe0f001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1.228729359s ago: executing program 3 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a3fdffffff000000000d00000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) 1.181085663s ago: executing program 3 (id=1593): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="83450500010000001c0012800b00010067656e65766500000c00028005000d0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x2e}, @local}}}], 0x38}}], 0x2, 0x4000084) r4 = socket(0x10, 0x803, 0x0) unshare(0x24020400) bind$rxrpc(r2, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000d8ee31edd65fe90000"], 0x48) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000080), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000e1e6bf8f6427e41970dcbc1b364b03f6c96a2333fd7e4d42858b107a2b9eb74821f4e619278502de16436bdeb10ad3cf4e02ed30b252666e6b59ce3b19338ce91b0ab8d55df74d75546b744f2d", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}}, 0x8507, 0x1, 0x4, 0x3, 0x49, 0x1, 0x4}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711211000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800, @void, @value}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0xffffffffffffff87, &(0x7f0000000080)=[{&(0x7f0000000000)="bede8e0f1bf6b18f67ce958d32139b241d23a2354d58a65e5066baa8", 0x1c}], 0x1}, 0x4004010) 1.097613175s ago: executing program 1 (id=1594): pipe(&(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 372.251567ms ago: executing program 3 (id=1595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 365.417108ms ago: executing program 2 (id=1596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a740", 0xa0}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0x1, 0x0) 248.193929ms ago: executing program 0 (id=1597): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x1, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359, @void, @value}, 0xfffffffffffffe42) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4edb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f0000000400)='$', 0x1}], 0x1, 0xe) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x1a, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffef1, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @jmp={0x5, 0x1, 0xc, 0x2, 0x1, 0x4, 0x1}, @jmp={0x5, 0x0, 0x4, 0x5, 0x6, 0x8, 0x10}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @alu={0x4, 0x0, 0xc, 0x3, 0x1, 0x100, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x7}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x54279052, 0xb7, &(0x7f0000000480)=""/183, 0x41100, 0x65, '\x00', r6, @fallback=0x24, r7, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x6, 0x30, 0x7f}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000580)=[{0x1, 0x1, 0x1, 0x7}, {0x5, 0x4, 0x5, 0x4}, {0x2, 0x1, 0x9}, {0x5, 0x5, 0xf}, {0x0, 0x4, 0x4, 0xa}, {0x0, 0x3, 0x8, 0xb}, {0x2, 0x3, 0x0, 0x9}, {0x4, 0x3, 0x6}], 0x10, 0x4, @void, @value}, 0x94) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r3, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 247.642349ms ago: executing program 2 (id=1598): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x1f000000, 0xd2, &(0x7f0000000200)={@multicast2, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d844167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 201.729024ms ago: executing program 3 (id=1599): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980b", 0x11}, {&(0x7f00000001c0)="ada3468ff5b811c75a5cb675c4e3", 0xe}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x0, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) 200.05954ms ago: executing program 1 (id=1600): syz_emit_ethernet(0xae, &(0x7f0000000240)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 134.665855ms ago: executing program 3 (id=1601): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db5264743cefb660278cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda2724091c98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec400346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c74e76aaeae46f57e25bf4c5b6735a3ecfb624ea045dadd2c32e8a24136161ce7ef213ea24f84f16c733fe057846ab0a2a8bbf52f0a9ac9bcbbb2c198b76034fe3afc742523c7c9213c91f3a42ed4c3227ca8abf15707dfe1f881f7afb3469eee31add058c70026f2590fefef80ffb98b239b37b7353585a9af554ee44f0b747aa70439c8ebed3528b8b6a9ba8f96cbc63b3f08f090037b165347bc61e413b28034d1186f41993c15a", 0xa9}, {&(0x7f0000000900)="34bef15ebc407b5e6bf691572f7ff606148f9ccf47e5d886b58eb9e80177a13db6af8f582c99626a874d95267720c4575e00e9dbaf7a5ca2eee375c7b4361040ccabf5fa9e7a7d7815ccdc6029d9d5c554013b819ca8fdceb346ef066dba0493b41243d38b5aa8759efdf200ad04c791a0ab36f8657ff6c78e5f728aca89e477bbd1415ea43e61b0eedb36e318b516a48cd5e94b0a28b84dea63e41752069cea4f52ebc48037b1a7fd2e447c30a7f10973d782e5e4c8c0e15d12b062", 0xbc}], 0x2}}], 0x3, 0x8800) 41.87203ms ago: executing program 1 (id=1602): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20040884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r0], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/7, 0x7}], 0x1}, 0xffffc355}, {{&(0x7f0000000300)=@tipc=@name, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/214, 0xd6}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000002ec0)=""/60, 0x3c}], 0x5, &(0x7f00000006c0)=""/3, 0x3}, 0xffffe9da}, {{&(0x7f0000000700)=@xdp, 0x80, &(0x7f0000002d00)=[{&(0x7f0000000780)=""/220, 0xdc}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f0000000980)=""/24, 0x18}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/5, 0x5}, {&(0x7f0000001a00)=""/174, 0xae}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/206, 0xce}, {&(0x7f0000002bc0)=""/130, 0x82}, {&(0x7f0000002c80)=""/72, 0x48}], 0xa}, 0xff}], 0x3, 0x0, &(0x7f0000002e80)={0x0, 0x989680}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={r5, 0x401}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000580)={r5, 0x1}, &(0x7f0000002f00)=0x8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 18.341266ms ago: executing program 0 (id=1603): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0xfffffffffffffe0a, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b000000"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000005100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/17, 0x11}, 0xa63}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000700ffff200007800c00018008000159da00000208000a400000000105000300020000000900020073797a31000000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 0s ago: executing program 2 (id=1604): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x807, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x3, 0x3, 0x1, 0x8, 0x2, 0x20, 0x1}, @generic={0x8, 0x6, 0x0, 0x7fff, 0x1}, @exit, @ldst={0x1, 0x3, 0x6, 0x8, 0x1, 0x80, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x101, 0x0, 0x0, 0x41100, 0x808d3ad7d4fd3db7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xc, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x1, 0x8, 0x4}, {0x0, 0x4, 0xc, 0x2}, {0x1, 0x4, 0xb, 0xc}, {0x5, 0x2002, 0x0, 0x6}], 0x10, 0x3, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000140), &(0x7f0000000480)=r3}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@multicast2, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d844167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) kernel console output (not intermixed with test programs): ][ T8792] ? __fget_files+0x2a/0x420 [ 173.603687][ T8792] ? __fget_files+0x3a0/0x420 [ 173.603718][ T8792] __x64_sys_sendmsg+0x19b/0x260 [ 173.603748][ T8792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 173.603785][ T8792] ? __pfx_ksys_write+0x10/0x10 [ 173.603817][ T8792] ? rcu_is_watching+0x15/0xb0 [ 173.603852][ T8792] ? do_syscall_64+0xbe/0x3b0 [ 173.603877][ T8792] do_syscall_64+0xfa/0x3b0 [ 173.603896][ T8792] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.603915][ T8792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.603935][ T8792] ? clear_bhb_loop+0x60/0xb0 [ 173.603959][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.603978][ T8792] RIP: 0033:0x7f521c78e929 [ 173.603995][ T8792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.604011][ T8792] RSP: 002b:00007f521d54e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.604032][ T8792] RAX: ffffffffffffffda RBX: 00007f521c9b5fa0 RCX: 00007f521c78e929 [ 173.604046][ T8792] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000005 [ 173.604059][ T8792] RBP: 00007f521d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.604071][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.604083][ T8792] R13: 0000000000000000 R14: 00007f521c9b5fa0 R15: 00007fff87827a88 [ 173.604114][ T8792] [ 173.965458][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1064'. [ 174.304176][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1072'. [ 174.329238][ T8807] validate_nla: 1 callbacks suppressed [ 174.329253][ T8807] netlink: 'syz.3.1072': attribute type 7 has an invalid length. [ 174.357104][ T8807] netlink: 'syz.3.1072': attribute type 8 has an invalid length. [ 174.365269][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 174.380838][ T8809] tipc: Enabled bearer , priority 0 [ 174.409496][ T8808] tipc: Disabling bearer [ 174.825983][ T8825] FAULT_INJECTION: forcing a failure. [ 174.825983][ T8825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.858096][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.0.1080 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 174.858121][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.858132][ T8825] Call Trace: [ 174.858139][ T8825] [ 174.858146][ T8825] dump_stack_lvl+0x189/0x250 [ 174.858189][ T8825] ? __pfx____ratelimit+0x10/0x10 [ 174.858207][ T8825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.858234][ T8825] ? __pfx__printk+0x10/0x10 [ 174.858253][ T8825] ? __might_fault+0xb0/0x130 [ 174.858298][ T8825] should_fail_ex+0x414/0x560 [ 174.858326][ T8825] _copy_from_iter+0x1db/0x16f0 [ 174.858359][ T8825] ? rcu_is_watching+0x15/0xb0 [ 174.858389][ T8825] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 174.858410][ T8825] ? __pfx__copy_from_iter+0x10/0x10 [ 174.858439][ T8825] ? __build_skb_around+0x257/0x3e0 [ 174.858469][ T8825] ? netlink_sendmsg+0x642/0xb30 [ 174.858491][ T8825] ? skb_put+0x11b/0x210 [ 174.858520][ T8825] netlink_sendmsg+0x6b2/0xb30 [ 174.858553][ T8825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.858581][ T8825] ? aa_sock_msg_perm+0x94/0x160 [ 174.858607][ T8825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.858632][ T8825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.858656][ T8825] __sock_sendmsg+0x21c/0x270 [ 174.858678][ T8825] ____sys_sendmsg+0x505/0x830 [ 174.858709][ T8825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.858745][ T8825] ? import_iovec+0x74/0xa0 [ 174.858765][ T8825] ___sys_sendmsg+0x21f/0x2a0 [ 174.858793][ T8825] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.858855][ T8825] ? __fget_files+0x2a/0x420 [ 174.858873][ T8825] ? __fget_files+0x3a0/0x420 [ 174.858913][ T8825] __x64_sys_sendmsg+0x19b/0x260 [ 174.858940][ T8825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.858973][ T8825] ? __pfx_ksys_write+0x10/0x10 [ 174.858986][ T8825] ? rcu_is_watching+0x15/0xb0 [ 174.859017][ T8825] ? do_syscall_64+0xbe/0x3b0 [ 174.859039][ T8825] do_syscall_64+0xfa/0x3b0 [ 174.859055][ T8825] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.859072][ T8825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.859089][ T8825] ? clear_bhb_loop+0x60/0xb0 [ 174.859111][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.859127][ T8825] RIP: 0033:0x7fded8d8e929 [ 174.859142][ T8825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.859162][ T8825] RSP: 002b:00007fded9c06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.859182][ T8825] RAX: ffffffffffffffda RBX: 00007fded8fb5fa0 RCX: 00007fded8d8e929 [ 174.859194][ T8825] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 174.859205][ T8825] RBP: 00007fded9c06090 R08: 0000000000000000 R09: 0000000000000000 [ 174.859215][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.859225][ T8825] R13: 0000000000000000 R14: 00007fded8fb5fa0 R15: 00007ffccda828d8 [ 174.859252][ T8825] [ 175.429105][ T8814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.492562][ T8831] syz_tun: entered allmulticast mode [ 175.502424][ T8830] syz_tun: left allmulticast mode [ 175.946023][ T8844] tipc: Enabled bearer , priority 0 [ 175.990050][ T8843] tipc: Disabling bearer [ 176.207195][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 176.241477][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 176.428080][ T8858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1091'. [ 176.460414][ T8858] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1091'. [ 176.675297][ T8864] ip6t_srh: unknown srh match flags 5294 [ 177.232859][ T5829] cgroup: fork rejected by pids controller in /syz0 [ 177.247830][ T8894] bridge0: port 3(syz_tun) entered blocking state [ 177.267408][ T8894] bridge0: port 3(syz_tun) entered disabled state [ 177.284701][ T8894] syz_tun: entered allmulticast mode [ 177.290595][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1107'. [ 177.308459][ T8894] syz_tun: entered promiscuous mode [ 177.634555][ T8916] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1116'. [ 177.658562][ T5925] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.753105][ T5925] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.832405][ T5925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.920721][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1118'. [ 177.930930][ T8921] netlink: 'syz.4.1118': attribute type 7 has an invalid length. [ 177.950723][ T5925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.963386][ T8921] netlink: 'syz.4.1118': attribute type 8 has an invalid length. [ 177.972391][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1118'. [ 178.030449][ T8921] syz_tun: entered promiscuous mode [ 178.068029][ T8921] syz_tun: left promiscuous mode [ 178.124397][ T8926] tipc: Enabled bearer , priority 0 [ 178.152756][ T8928] netlink: 'syz.2.1120': attribute type 15 has an invalid length. [ 178.217984][ T8928] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1120'. [ 178.651587][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.664325][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.675036][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.683482][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.716749][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.840867][ T8958] FAULT_INJECTION: forcing a failure. [ 178.840867][ T8958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.894524][ T8958] CPU: 1 UID: 0 PID: 8958 Comm: syz.2.1130 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 178.894554][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.894565][ T8958] Call Trace: [ 178.894573][ T8958] [ 178.894582][ T8958] dump_stack_lvl+0x189/0x250 [ 178.894616][ T8958] ? __pfx____ratelimit+0x10/0x10 [ 178.894635][ T8958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.894664][ T8958] ? __pfx__printk+0x10/0x10 [ 178.894685][ T8958] ? __might_fault+0xb0/0x130 [ 178.894714][ T8958] should_fail_ex+0x414/0x560 [ 178.894748][ T8958] _copy_from_iter+0x1db/0x16f0 [ 178.894780][ T8958] ? rcu_is_watching+0x15/0xb0 [ 178.894817][ T8958] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 178.894838][ T8958] ? __pfx__copy_from_iter+0x10/0x10 [ 178.894867][ T8958] ? __build_skb_around+0x257/0x3e0 [ 178.894896][ T8958] ? netlink_sendmsg+0x642/0xb30 [ 178.894918][ T8958] ? skb_put+0x11b/0x210 [ 178.894946][ T8958] netlink_sendmsg+0x6b2/0xb30 [ 178.894980][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.895007][ T8958] ? aa_sock_msg_perm+0x94/0x160 [ 178.895033][ T8958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.895056][ T8958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.895081][ T8958] __sock_sendmsg+0x21c/0x270 [ 178.895105][ T8958] ____sys_sendmsg+0x505/0x830 [ 178.895139][ T8958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.895175][ T8958] ? import_iovec+0x74/0xa0 [ 178.895197][ T8958] ___sys_sendmsg+0x21f/0x2a0 [ 178.895226][ T8958] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.895289][ T8958] ? __fget_files+0x2a/0x420 [ 178.895308][ T8958] ? __fget_files+0x3a0/0x420 [ 178.895340][ T8958] __x64_sys_sendmsg+0x19b/0x260 [ 178.895371][ T8958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.895407][ T8958] ? __pfx_ksys_write+0x10/0x10 [ 178.895422][ T8958] ? rcu_is_watching+0x15/0xb0 [ 178.895456][ T8958] ? do_syscall_64+0xbe/0x3b0 [ 178.895479][ T8958] do_syscall_64+0xfa/0x3b0 [ 178.895496][ T8958] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.895514][ T8958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.895533][ T8958] ? clear_bhb_loop+0x60/0xb0 [ 178.895566][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.895582][ T8958] RIP: 0033:0x7f8e01f8e929 [ 178.895598][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.895613][ T8958] RSP: 002b:00007f8e02e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.895631][ T8958] RAX: ffffffffffffffda RBX: 00007f8e021b5fa0 RCX: 00007f8e01f8e929 [ 178.895644][ T8958] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 178.895655][ T8958] RBP: 00007f8e02e02090 R08: 0000000000000000 R09: 0000000000000000 [ 178.895666][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.895677][ T8958] R13: 0000000000000000 R14: 00007f8e021b5fa0 R15: 00007ffd3a027088 [ 178.895704][ T8958] [ 179.404060][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 179.756258][ T8991] FAULT_INJECTION: forcing a failure. [ 179.756258][ T8991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.769842][ T8991] CPU: 0 UID: 0 PID: 8991 Comm: syz.4.1137 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 179.769865][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.769876][ T8991] Call Trace: [ 179.769883][ T8991] [ 179.769891][ T8991] dump_stack_lvl+0x189/0x250 [ 179.769923][ T8991] ? __pfx____ratelimit+0x10/0x10 [ 179.769941][ T8991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.769968][ T8991] ? __pfx__printk+0x10/0x10 [ 179.769986][ T8991] ? __might_fault+0xb0/0x130 [ 179.770007][ T8991] should_fail_ex+0x414/0x560 [ 179.770030][ T8991] _copy_from_user+0x2d/0xb0 [ 179.770045][ T8991] __sys_bind+0x199/0x3e0 [ 179.770065][ T8991] ? __pfx___sys_bind+0x10/0x10 [ 179.770091][ T8991] ? __pfx_ksys_write+0x10/0x10 [ 179.770102][ T8991] ? rcu_is_watching+0x15/0xb0 [ 179.770132][ T8991] __x64_sys_bind+0x7a/0x90 [ 179.770152][ T8991] do_syscall_64+0xfa/0x3b0 [ 179.770167][ T8991] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.770183][ T8991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.770200][ T8991] ? clear_bhb_loop+0x60/0xb0 [ 179.770221][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.770237][ T8991] RIP: 0033:0x7fddbe58e929 [ 179.770253][ T8991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.770266][ T8991] RSP: 002b:00007fddbf32c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 179.770281][ T8991] RAX: ffffffffffffffda RBX: 00007fddbe7b5fa0 RCX: 00007fddbe58e929 [ 179.770292][ T8991] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 179.770300][ T8991] RBP: 00007fddbf32c090 R08: 0000000000000000 R09: 0000000000000000 [ 179.770309][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.770316][ T8991] R13: 0000000000000000 R14: 00007fddbe7b5fa0 R15: 00007fff712b3de8 [ 179.770339][ T8991] [ 180.155986][ T5925] bond0 (unregistering): Released all slaves [ 180.170745][ T5925] bond1 (unregistering): Released all slaves [ 180.232933][ T8987] tipc: Enabled bearer , priority 0 [ 180.350845][ T8973] tipc: Disabling bearer [ 180.406669][ T5925] tipc: Left network mode [ 180.611515][ T9003] Cannot find del_set index 286 as target [ 180.776742][ T5833] Bluetooth: hci0: command tx timeout [ 181.292296][ T9033] __nla_validate_parse: 5 callbacks suppressed [ 181.292313][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1152'. [ 181.336942][ T9033] netlink: 'syz.4.1152': attribute type 7 has an invalid length. [ 181.360057][ T9033] netlink: 'syz.4.1152': attribute type 8 has an invalid length. [ 181.383932][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 181.685684][ T9048] tipc: Enabling of bearer rejected, already enabled [ 181.708988][ T9046] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 181.731930][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 181.741789][ T8948] chnl_net:caif_netlink_parms(): no params data found [ 181.836414][ T9050] syz_tun: entered allmulticast mode [ 181.855091][ T9054] FAULT_INJECTION: forcing a failure. [ 181.855091][ T9054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.877097][ T9054] CPU: 1 UID: 0 PID: 9054 Comm: syz.3.1160 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 181.877120][ T9054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.877130][ T9054] Call Trace: [ 181.877138][ T9054] [ 181.877145][ T9054] dump_stack_lvl+0x189/0x250 [ 181.877186][ T9054] ? __pfx____ratelimit+0x10/0x10 [ 181.877204][ T9054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.877230][ T9054] ? __pfx__printk+0x10/0x10 [ 181.877249][ T9054] ? __might_fault+0xb0/0x130 [ 181.877276][ T9054] should_fail_ex+0x414/0x560 [ 181.877302][ T9054] _copy_from_user+0x2d/0xb0 [ 181.877320][ T9054] ___sys_recvmsg+0x12e/0x510 [ 181.877352][ T9054] ? __pfx____sys_recvmsg+0x10/0x10 [ 181.877402][ T9054] ? __fget_files+0x3a0/0x420 [ 181.877431][ T9054] do_recvmmsg+0x307/0x770 [ 181.877466][ T9054] ? __pfx_do_recvmmsg+0x10/0x10 [ 181.877504][ T9054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.877545][ T9054] __x64_sys_recvmmsg+0x190/0x240 [ 181.877575][ T9054] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 181.877600][ T9054] ? rcu_is_watching+0x15/0xb0 [ 181.877631][ T9054] ? do_syscall_64+0xbe/0x3b0 [ 181.877653][ T9054] do_syscall_64+0xfa/0x3b0 [ 181.877669][ T9054] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.877685][ T9054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.877703][ T9054] ? clear_bhb_loop+0x60/0xb0 [ 181.877724][ T9054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.877741][ T9054] RIP: 0033:0x7f521c78e929 [ 181.877760][ T9054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.877775][ T9054] RSP: 002b:00007f521d54e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.877798][ T9054] RAX: ffffffffffffffda RBX: 00007f521c9b5fa0 RCX: 00007f521c78e929 [ 181.877811][ T9054] RDX: 0000000000000001 RSI: 0000200000004200 RDI: 0000000000000003 [ 181.877822][ T9054] RBP: 00007f521d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 181.877833][ T9054] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 181.877843][ T9054] R13: 0000000000000000 R14: 00007f521c9b5fa0 R15: 00007fff87827a88 [ 181.877870][ T9054] [ 181.882247][ T9049] syz_tun: left allmulticast mode [ 182.109930][ T9058] xt_bpf: check failed: parse error [ 182.231223][ T9061] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 182.366895][ T5925] hsr_slave_0: left promiscuous mode [ 182.378356][ T5925] hsr_slave_1: left promiscuous mode [ 182.412549][ T5925] veth1_macvtap: left promiscuous mode [ 182.432647][ T5925] veth0_macvtap: left promiscuous mode [ 182.447894][ T5925] veth1_vlan: left promiscuous mode [ 182.453570][ T5925] veth0_vlan: left promiscuous mode [ 182.857746][ T5833] Bluetooth: hci0: command tx timeout [ 183.247219][ T9076] hsr0: entered promiscuous mode [ 183.365115][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.373993][ T9089] FAULT_INJECTION: forcing a failure. [ 183.373993][ T9089] name failslab, interval 1, probability 0, space 0, times 0 [ 183.380688][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.393844][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.3.1171 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 183.393867][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.393879][ T9089] Call Trace: [ 183.393886][ T9089] [ 183.393894][ T9089] dump_stack_lvl+0x189/0x250 [ 183.393927][ T9089] ? __pfx____ratelimit+0x10/0x10 [ 183.393945][ T9089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.393972][ T9089] ? __pfx__printk+0x10/0x10 [ 183.393994][ T9089] ? __pfx___might_resched+0x10/0x10 [ 183.394021][ T9089] ? fs_reclaim_acquire+0x7d/0x100 [ 183.394046][ T9089] should_fail_ex+0x414/0x560 [ 183.394070][ T9089] should_failslab+0xa8/0x100 [ 183.394089][ T9089] __kmalloc_noprof+0xcb/0x4f0 [ 183.394105][ T9089] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 183.394127][ T9089] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 183.394152][ T9089] genl_family_rcv_msg_doit+0xb8/0x300 [ 183.394175][ T9089] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.394206][ T9089] ? rcu_is_watching+0x15/0xb0 [ 183.394236][ T9089] ? apparmor_capable+0x137/0x1b0 [ 183.394255][ T9089] ? bpf_lsm_capable+0x9/0x20 [ 183.394270][ T9089] ? security_capable+0x7e/0x2e0 [ 183.394298][ T9089] genl_rcv_msg+0x60e/0x790 [ 183.394332][ T9089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.394358][ T9089] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 183.394405][ T9089] netlink_rcv_skb+0x205/0x470 [ 183.394427][ T9089] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.394455][ T9089] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.394493][ T9089] ? down_read+0x1ad/0x2e0 [ 183.394515][ T9089] genl_rcv+0x28/0x40 [ 183.394539][ T9089] netlink_unicast+0x758/0x8d0 [ 183.394566][ T9089] netlink_sendmsg+0x805/0xb30 [ 183.394598][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.394623][ T9089] ? aa_sock_msg_perm+0x94/0x160 [ 183.394648][ T9089] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.394669][ T9089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.394693][ T9089] __sock_sendmsg+0x21c/0x270 [ 183.394715][ T9089] ____sys_sendmsg+0x505/0x830 [ 183.394746][ T9089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.394781][ T9089] ? import_iovec+0x74/0xa0 [ 183.394802][ T9089] ___sys_sendmsg+0x21f/0x2a0 [ 183.394831][ T9089] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.394890][ T9089] ? __fget_files+0x2a/0x420 [ 183.394909][ T9089] ? __fget_files+0x3a0/0x420 [ 183.394938][ T9089] __x64_sys_sendmsg+0x19b/0x260 [ 183.394967][ T9089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.395003][ T9089] ? __pfx_ksys_write+0x10/0x10 [ 183.395017][ T9089] ? rcu_is_watching+0x15/0xb0 [ 183.395048][ T9089] ? do_syscall_64+0xbe/0x3b0 [ 183.395071][ T9089] do_syscall_64+0xfa/0x3b0 [ 183.395090][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.395106][ T9089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 183.395124][ T9089] ? clear_bhb_loop+0x60/0xb0 [ 183.395145][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.395162][ T9089] RIP: 0033:0x7f521c78e929 [ 183.395178][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.395194][ T9089] RSP: 002b:00007f521d54e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.395212][ T9089] RAX: ffffffffffffffda RBX: 00007f521c9b5fa0 RCX: 00007f521c78e929 [ 183.395224][ T9089] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 183.395235][ T9089] RBP: 00007f521d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 183.395245][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.395255][ T9089] R13: 0000000000000000 R14: 00007f521c9b5fa0 R15: 00007fff87827a88 [ 183.395283][ T9089] [ 183.404578][ T8948] bridge_slave_0: entered allmulticast mode [ 183.764576][ T8948] bridge_slave_0: entered promiscuous mode [ 183.773528][ T9075] hsr0: left promiscuous mode [ 183.788253][ T9092] syz_tun: entered allmulticast mode [ 183.807100][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.814534][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.875529][ T8948] bridge_slave_1: entered allmulticast mode [ 183.909252][ T8948] bridge_slave_1: entered promiscuous mode [ 184.180536][ T8948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.213231][ T8948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.485608][ T8948] team0: Port device team_slave_0 added [ 184.507400][ T8948] team0: Port device team_slave_1 added [ 184.528514][ T9123] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 184.542368][ T9123] CPU: 1 UID: 0 PID: 9123 Comm: syz.4.1182 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 184.542398][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.542412][ T9123] Call Trace: [ 184.542420][ T9123] [ 184.542429][ T9123] dump_stack_lvl+0x189/0x250 [ 184.542471][ T9123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.542503][ T9123] ? __pfx__printk+0x10/0x10 [ 184.542528][ T9123] ? kernfs_path_from_node+0x2c/0x260 [ 184.542555][ T9123] ? kernfs_path_from_node+0x2c/0x260 [ 184.542577][ T9123] ? kernfs_path_from_node+0x2c/0x260 [ 184.542604][ T9123] ? kernfs_path_from_node+0x22c/0x260 [ 184.542627][ T9123] ? kernfs_path_from_node+0x2c/0x260 [ 184.542657][ T9123] sysfs_warn_dup+0x8e/0xa0 [ 184.542681][ T9123] sysfs_do_create_link_sd+0xc0/0x110 [ 184.542717][ T9123] device_add_class_symlinks+0x1cf/0x240 [ 184.542742][ T9123] device_add+0x475/0xb50 [ 184.542765][ T9123] wiphy_register+0x199a/0x26b0 [ 184.542805][ T9123] ? __pfx_wiphy_register+0x10/0x10 [ 184.542826][ T9123] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 184.542856][ T9123] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 184.542885][ T9123] ieee80211_register_hw+0x33e1/0x4120 [ 184.542928][ T9123] ? ieee80211_register_hw+0x13f1/0x4120 [ 184.542962][ T9123] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 184.542992][ T9123] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.543035][ T9123] ? __hrtimer_setup+0x187/0x210 [ 184.543061][ T9123] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 184.543089][ T9123] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 184.543139][ T9123] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 184.543159][ T9123] ? trace_kmalloc+0x1f/0xd0 [ 184.543173][ T9123] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 184.543191][ T9123] ? kstrndup+0xbf/0x160 [ 184.543223][ T9123] hwsim_new_radio_nl+0xea4/0x1b10 [ 184.543247][ T9123] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.543287][ T9123] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.543322][ T9123] ? __nla_parse+0x40/0x60 [ 184.543352][ T9123] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 184.543378][ T9123] genl_family_rcv_msg_doit+0x212/0x300 [ 184.543403][ T9123] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 184.543443][ T9123] ? bpf_lsm_capable+0x9/0x20 [ 184.543459][ T9123] ? security_capable+0x7e/0x2e0 [ 184.543488][ T9123] genl_rcv_msg+0x60e/0x790 [ 184.543522][ T9123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.543550][ T9123] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 184.543586][ T9123] netlink_rcv_skb+0x205/0x470 [ 184.543609][ T9123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 184.543638][ T9123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.543677][ T9123] ? down_read+0x1ad/0x2e0 [ 184.543701][ T9123] genl_rcv+0x28/0x40 [ 184.543727][ T9123] netlink_unicast+0x758/0x8d0 [ 184.543758][ T9123] netlink_sendmsg+0x805/0xb30 [ 184.543792][ T9123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.543818][ T9123] ? aa_sock_msg_perm+0x94/0x160 [ 184.543843][ T9123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.543865][ T9123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.543888][ T9123] __sock_sendmsg+0x21c/0x270 [ 184.543911][ T9123] ____sys_sendmsg+0x505/0x830 [ 184.543943][ T9123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.543978][ T9123] ? import_iovec+0x74/0xa0 [ 184.543999][ T9123] ___sys_sendmsg+0x21f/0x2a0 [ 184.544044][ T9123] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.544108][ T9123] ? __fget_files+0x2a/0x420 [ 184.544127][ T9123] ? __fget_files+0x3a0/0x420 [ 184.544157][ T9123] __x64_sys_sendmsg+0x19b/0x260 [ 184.544185][ T9123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 184.544222][ T9123] ? rcu_is_watching+0x15/0xb0 [ 184.544254][ T9123] ? do_syscall_64+0xbe/0x3b0 [ 184.544276][ T9123] do_syscall_64+0xfa/0x3b0 [ 184.544294][ T9123] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.544310][ T9123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.544328][ T9123] ? clear_bhb_loop+0x60/0xb0 [ 184.544350][ T9123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.544367][ T9123] RIP: 0033:0x7fddbe58e929 [ 184.544383][ T9123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.544399][ T9123] RSP: 002b:00007fddbf32c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.544419][ T9123] RAX: ffffffffffffffda RBX: 00007fddbe7b5fa0 RCX: 00007fddbe58e929 [ 184.544432][ T9123] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 184.544444][ T9123] RBP: 00007fddbe610b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.544455][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.544465][ T9123] R13: 0000000000000000 R14: 00007fddbe7b5fa0 R15: 00007fff712b3de8 [ 184.544494][ T9123] [ 185.022242][ T5833] Bluetooth: hci0: command tx timeout [ 185.152452][ T8948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.160781][ T8948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.187364][ T8948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.211560][ T8948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.244108][ T8948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.270802][ T8948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.324375][ T9133] syz_tun: entered allmulticast mode [ 185.387545][ T9137] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 185.447603][ T9137] CPU: 0 UID: 0 PID: 9137 Comm: syz.4.1187 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 185.447634][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.447649][ T9137] Call Trace: [ 185.447657][ T9137] [ 185.447666][ T9137] dump_stack_lvl+0x189/0x250 [ 185.447709][ T9137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.447755][ T9137] ? __pfx__printk+0x10/0x10 [ 185.447779][ T9137] ? kernfs_path_from_node+0x2c/0x260 [ 185.447804][ T9137] ? kernfs_path_from_node+0x2c/0x260 [ 185.447825][ T9137] ? kernfs_path_from_node+0x2c/0x260 [ 185.447870][ T9137] ? kernfs_path_from_node+0x22c/0x260 [ 185.447905][ T9137] ? kernfs_path_from_node+0x2c/0x260 [ 185.447932][ T9137] sysfs_warn_dup+0x8e/0xa0 [ 185.447964][ T9137] sysfs_do_create_link_sd+0xc0/0x110 [ 185.447991][ T9137] device_add_class_symlinks+0x1cf/0x240 [ 185.448020][ T9137] device_add+0x475/0xb50 [ 185.448047][ T9137] wiphy_register+0x199a/0x26b0 [ 185.448094][ T9137] ? __pfx_wiphy_register+0x10/0x10 [ 185.448118][ T9137] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 185.448153][ T9137] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 185.448186][ T9137] ieee80211_register_hw+0x33e1/0x4120 [ 185.448253][ T9137] ? ieee80211_register_hw+0x13f1/0x4120 [ 185.448291][ T9137] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 185.448325][ T9137] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 185.448362][ T9137] ? __hrtimer_setup+0x187/0x210 [ 185.448389][ T9137] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 185.448418][ T9137] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 185.448475][ T9137] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 185.448497][ T9137] ? trace_kmalloc+0x1f/0xd0 [ 185.448512][ T9137] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 185.448531][ T9137] ? kstrndup+0xbf/0x160 [ 185.448566][ T9137] hwsim_new_radio_nl+0xea4/0x1b10 [ 185.448593][ T9137] ? __pfx___nla_validate_parse+0x10/0x10 [ 185.448637][ T9137] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.448675][ T9137] ? __nla_parse+0x40/0x60 [ 185.448708][ T9137] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 185.448736][ T9137] genl_family_rcv_msg_doit+0x212/0x300 [ 185.448763][ T9137] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.448808][ T9137] ? bpf_lsm_capable+0x9/0x20 [ 185.448824][ T9137] ? security_capable+0x7e/0x2e0 [ 185.448857][ T9137] genl_rcv_msg+0x60e/0x790 [ 185.448893][ T9137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.448922][ T9137] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.448971][ T9137] netlink_rcv_skb+0x205/0x470 [ 185.448996][ T9137] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.449027][ T9137] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.449071][ T9137] ? down_read+0x1ad/0x2e0 [ 185.449096][ T9137] genl_rcv+0x28/0x40 [ 185.449123][ T9137] netlink_unicast+0x758/0x8d0 [ 185.449157][ T9137] netlink_sendmsg+0x805/0xb30 [ 185.449192][ T9137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.449221][ T9137] ? aa_sock_msg_perm+0x94/0x160 [ 185.449248][ T9137] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.449271][ T9137] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.449297][ T9137] __sock_sendmsg+0x21c/0x270 [ 185.449322][ T9137] ____sys_sendmsg+0x505/0x830 [ 185.449356][ T9137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.449395][ T9137] ? import_iovec+0x74/0xa0 [ 185.449418][ T9137] ___sys_sendmsg+0x21f/0x2a0 [ 185.449449][ T9137] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.449519][ T9137] ? __fget_files+0x2a/0x420 [ 185.449539][ T9137] ? __fget_files+0x3a0/0x420 [ 185.449572][ T9137] __x64_sys_sendmsg+0x19b/0x260 [ 185.449603][ T9137] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.449643][ T9137] ? rcu_is_watching+0x15/0xb0 [ 185.449678][ T9137] ? do_syscall_64+0xbe/0x3b0 [ 185.449702][ T9137] do_syscall_64+0xfa/0x3b0 [ 185.449721][ T9137] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.449738][ T9137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.449757][ T9137] ? clear_bhb_loop+0x60/0xb0 [ 185.449781][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.449799][ T9137] RIP: 0033:0x7fddbe58e929 [ 185.449817][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.449834][ T9137] RSP: 002b:00007fddbf32c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.449855][ T9137] RAX: ffffffffffffffda RBX: 00007fddbe7b5fa0 RCX: 00007fddbe58e929 [ 185.449869][ T9137] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 185.449881][ T9137] RBP: 00007fddbe610b39 R08: 0000000000000000 R09: 0000000000000000 [ 185.449893][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.449904][ T9137] R13: 0000000000000000 R14: 00007fddbe7b5fa0 R15: 00007fff712b3de8 [ 185.449943][ T9137] [ 185.992799][ T9153] openvswitch: netlink: Key type 73 is out of range max 32 [ 186.087280][ T8948] hsr_slave_0: entered promiscuous mode [ 186.124191][ T8948] hsr_slave_1: entered promiscuous mode [ 186.140269][ T9155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.184396][ T8948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.244565][ T8948] Cannot create hsr debugfs directory [ 186.311378][ T9155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.600333][ T9162] FAULT_INJECTION: forcing a failure. [ 186.600333][ T9162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.631808][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.2.1193 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 186.631835][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.631849][ T9162] Call Trace: [ 186.631857][ T9162] [ 186.631866][ T9162] dump_stack_lvl+0x189/0x250 [ 186.631902][ T9162] ? __pfx____ratelimit+0x10/0x10 [ 186.631923][ T9162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.631955][ T9162] ? __pfx__printk+0x10/0x10 [ 186.631991][ T9162] should_fail_ex+0x414/0x560 [ 186.632023][ T9162] _copy_to_user+0x31/0xb0 [ 186.632047][ T9162] simple_read_from_buffer+0xe1/0x170 [ 186.632075][ T9162] proc_fail_nth_read+0x1df/0x250 [ 186.632112][ T9162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.632140][ T9162] ? rw_verify_area+0x258/0x650 [ 186.632170][ T9162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.632197][ T9162] vfs_read+0x1fd/0x980 [ 186.632234][ T9162] ? __pfx___mutex_lock+0x10/0x10 [ 186.632256][ T9162] ? __pfx_vfs_read+0x10/0x10 [ 186.632288][ T9162] ? __fget_files+0x2a/0x420 [ 186.632316][ T9162] ? __fget_files+0x3a0/0x420 [ 186.632337][ T9162] ? __fget_files+0x2a/0x420 [ 186.632369][ T9162] ksys_read+0x145/0x250 [ 186.632390][ T9162] ? __pfx_ksys_read+0x10/0x10 [ 186.632418][ T9162] ? rcu_is_watching+0x15/0xb0 [ 186.632455][ T9162] ? do_syscall_64+0xbe/0x3b0 [ 186.632481][ T9162] do_syscall_64+0xfa/0x3b0 [ 186.632501][ T9162] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.632521][ T9162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.632541][ T9162] ? clear_bhb_loop+0x60/0xb0 [ 186.632566][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.632586][ T9162] RIP: 0033:0x7f8e01f8d33c [ 186.632604][ T9162] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.632621][ T9162] RSP: 002b:00007f8e02e02030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.632643][ T9162] RAX: ffffffffffffffda RBX: 00007f8e021b5fa0 RCX: 00007f8e01f8d33c [ 186.632659][ T9162] RDX: 000000000000000f RSI: 00007f8e02e020a0 RDI: 0000000000000004 [ 186.632671][ T9162] RBP: 00007f8e02e02090 R08: 0000000000000000 R09: 0000000000000000 [ 186.632684][ T9162] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 186.632696][ T9162] R13: 0000000000000000 R14: 00007f8e021b5fa0 R15: 00007ffd3a027088 [ 186.632728][ T9162] [ 187.096546][ T5833] Bluetooth: hci0: command tx timeout [ 187.200389][ T9175] syz_tun: entered allmulticast mode [ 187.453084][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'. [ 187.674488][ T9186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.797338][ T9191] bond1: (slave veth5): Enslaving as an active interface with an up link [ 187.838851][ T9193] vlan3: entered allmulticast mode [ 187.850823][ T9193] veth1: entered allmulticast mode [ 187.862446][ T9193] veth1: entered promiscuous mode [ 187.882332][ T9193] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 188.182483][ T9197] FAULT_INJECTION: forcing a failure. [ 188.182483][ T9197] name failslab, interval 1, probability 0, space 0, times 0 [ 188.226589][ T9197] CPU: 1 UID: 0 PID: 9197 Comm: syz.3.1205 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 188.226616][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.226628][ T9197] Call Trace: [ 188.226635][ T9197] [ 188.226644][ T9197] dump_stack_lvl+0x189/0x250 [ 188.226700][ T9197] ? __pfx____ratelimit+0x10/0x10 [ 188.226719][ T9197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.226748][ T9197] ? __pfx__printk+0x10/0x10 [ 188.226770][ T9197] ? trace_fib_table_lookup+0x85/0x200 [ 188.226804][ T9197] should_fail_ex+0x414/0x560 [ 188.226832][ T9197] should_failslab+0xa8/0x100 [ 188.226854][ T9197] kmem_cache_alloc_noprof+0x73/0x3c0 [ 188.226881][ T9197] ? dst_alloc+0x105/0x170 [ 188.226896][ T9197] ? fib_lookup+0x76/0x440 [ 188.226926][ T9197] dst_alloc+0x105/0x170 [ 188.226948][ T9197] ip_route_output_key_hash_rcu+0x1482/0x23a0 [ 188.226988][ T9197] ? ip_route_output_key_hash+0xde/0x2e0 [ 188.227038][ T9197] ip_route_output_key_hash+0x1b9/0x2e0 [ 188.227072][ T9197] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 188.227109][ T9197] ? __lock_acquire+0xab9/0xd20 [ 188.227144][ T9197] ? dst_release+0x72/0x1b0 [ 188.227165][ T9197] __ip4_datagram_connect+0x8ec/0x1260 [ 188.227219][ T9197] udp_connect+0x33/0x1f0 [ 188.227250][ T9197] __sys_connect+0x316/0x440 [ 188.227276][ T9197] ? __fget_files+0x3a0/0x420 [ 188.227299][ T9197] ? __pfx___sys_connect+0x10/0x10 [ 188.227339][ T9197] ? __pfx_ksys_write+0x10/0x10 [ 188.227355][ T9197] ? rcu_is_watching+0x15/0xb0 [ 188.227394][ T9197] __x64_sys_connect+0x7a/0x90 [ 188.227421][ T9197] do_syscall_64+0xfa/0x3b0 [ 188.227442][ T9197] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.227460][ T9197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.227480][ T9197] ? clear_bhb_loop+0x60/0xb0 [ 188.227506][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.227524][ T9197] RIP: 0033:0x7f521c78e929 [ 188.227542][ T9197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.227559][ T9197] RSP: 002b:00007f521d54e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 188.227579][ T9197] RAX: ffffffffffffffda RBX: 00007f521c9b5fa0 RCX: 00007f521c78e929 [ 188.227595][ T9197] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 188.227607][ T9197] RBP: 00007f521d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 188.227629][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.227641][ T9197] R13: 0000000000000000 R14: 00007f521c9b5fa0 R15: 00007fff87827a88 [ 188.227673][ T9197] [ 188.566056][ T8948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.600044][ T8948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 188.639334][ T9199] FAULT_INJECTION: forcing a failure. [ 188.639334][ T9199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.669875][ T8948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 188.685963][ T8948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 188.691128][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.3.1206 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 188.691155][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.691169][ T9199] Call Trace: [ 188.691177][ T9199] [ 188.691186][ T9199] dump_stack_lvl+0x189/0x250 [ 188.691224][ T9199] ? __pfx____ratelimit+0x10/0x10 [ 188.691245][ T9199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.691277][ T9199] ? __pfx__printk+0x10/0x10 [ 188.691315][ T9199] should_fail_ex+0x414/0x560 [ 188.691346][ T9199] _copy_to_user+0x31/0xb0 [ 188.691370][ T9199] simple_read_from_buffer+0xe1/0x170 [ 188.691399][ T9199] proc_fail_nth_read+0x1df/0x250 [ 188.691427][ T9199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.691457][ T9199] ? rw_verify_area+0x258/0x650 [ 188.691488][ T9199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.691515][ T9199] vfs_read+0x1fd/0x980 [ 188.691558][ T9199] ? __pfx___mutex_lock+0x10/0x10 [ 188.691600][ T9199] ? __pfx_vfs_read+0x10/0x10 [ 188.691654][ T9199] ? __fget_files+0x2a/0x420 [ 188.691687][ T9199] ? __fget_files+0x3a0/0x420 [ 188.691711][ T9199] ? __fget_files+0x2a/0x420 [ 188.691749][ T9199] ksys_read+0x145/0x250 [ 188.691772][ T9199] ? __pfx_ksys_read+0x10/0x10 [ 188.691805][ T9199] ? rcu_is_watching+0x15/0xb0 [ 188.691847][ T9199] ? do_syscall_64+0xbe/0x3b0 [ 188.691876][ T9199] do_syscall_64+0xfa/0x3b0 [ 188.691905][ T9199] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.691928][ T9199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.691949][ T9199] ? clear_bhb_loop+0x60/0xb0 [ 188.691978][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.692001][ T9199] RIP: 0033:0x7f521c78d33c [ 188.692021][ T9199] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 188.692040][ T9199] RSP: 002b:00007f521d54e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.692065][ T9199] RAX: ffffffffffffffda RBX: 00007f521c9b5fa0 RCX: 00007f521c78d33c [ 188.692082][ T9199] RDX: 000000000000000f RSI: 00007f521d54e0a0 RDI: 0000000000000004 [ 188.692096][ T9199] RBP: 00007f521d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 188.692115][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.692129][ T9199] R13: 0000000000000000 R14: 00007f521c9b5fa0 R15: 00007fff87827a88 [ 188.692165][ T9199] [ 188.740606][ T9203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1208'. [ 188.959309][ T9203] FAULT_INJECTION: forcing a failure. [ 188.959309][ T9203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.990276][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.4.1208 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 188.990302][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.990314][ T9203] Call Trace: [ 188.990322][ T9203] [ 188.990330][ T9203] dump_stack_lvl+0x189/0x250 [ 188.990364][ T9203] ? __pfx____ratelimit+0x10/0x10 [ 188.990383][ T9203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.990412][ T9203] ? __pfx__printk+0x10/0x10 [ 188.990432][ T9203] ? __might_fault+0xb0/0x130 [ 188.990460][ T9203] should_fail_ex+0x414/0x560 [ 188.990489][ T9203] _copy_from_user+0x2d/0xb0 [ 188.990509][ T9203] kstrtouint_from_user+0xc4/0x170 [ 188.990538][ T9203] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 188.990590][ T9203] proc_fail_nth_write+0x88/0x240 [ 188.990611][ T9203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.990637][ T9203] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 188.990659][ T9203] vfs_write+0x27b/0xa90 [ 188.990694][ T9203] ? __pfx_vfs_write+0x10/0x10 [ 188.990722][ T9203] ? __fget_files+0x2a/0x420 [ 188.990746][ T9203] ? __fget_files+0x3a0/0x420 [ 188.990764][ T9203] ? __fget_files+0x2a/0x420 [ 188.990791][ T9203] ksys_write+0x145/0x250 [ 188.990809][ T9203] ? __pfx_ksys_write+0x10/0x10 [ 188.990823][ T9203] ? rcu_is_watching+0x15/0xb0 [ 188.990855][ T9203] ? do_syscall_64+0xbe/0x3b0 [ 188.990885][ T9203] do_syscall_64+0xfa/0x3b0 [ 188.990902][ T9203] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.990918][ T9203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.990935][ T9203] ? clear_bhb_loop+0x60/0xb0 [ 188.990956][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.990972][ T9203] RIP: 0033:0x7fddbe58d3df [ 188.990987][ T9203] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 188.991002][ T9203] RSP: 002b:00007fddbf32c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 188.991020][ T9203] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fddbe58d3df [ 188.991032][ T9203] RDX: 0000000000000001 RSI: 00007fddbf32c0a0 RDI: 0000000000000004 [ 188.991043][ T9203] RBP: 00007fddbf32c090 R08: 0000000000000000 R09: 0000000000000000 [ 188.991053][ T9203] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 188.991063][ T9203] R13: 0000000000000000 R14: 00007fddbe7b5fa0 R15: 00007fff712b3de8 [ 188.991091][ T9203] [ 189.246016][ T9205] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 189.450828][ T8948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.473525][ T8948] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.490180][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.497359][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.545574][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.552784][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.975154][ T9247] FAULT_INJECTION: forcing a failure. [ 189.975154][ T9247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.015000][ T9247] CPU: 1 UID: 0 PID: 9247 Comm: syz.3.1220 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 190.015028][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.015040][ T9247] Call Trace: [ 190.015048][ T9247] [ 190.015056][ T9247] dump_stack_lvl+0x189/0x250 [ 190.015090][ T9247] ? __pfx____ratelimit+0x10/0x10 [ 190.015109][ T9247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.015138][ T9247] ? __pfx__printk+0x10/0x10 [ 190.015158][ T9247] ? __might_fault+0xb0/0x130 [ 190.015185][ T9247] should_fail_ex+0x414/0x560 [ 190.015212][ T9247] _copy_from_user+0x2d/0xb0 [ 190.015232][ T9247] __sys_sendto+0x25c/0x520 [ 190.015259][ T9247] ? __pfx___sys_sendto+0x10/0x10 [ 190.015292][ T9247] ? count_memcg_event_mm+0x21/0x260 [ 190.015331][ T9247] ? exc_page_fault+0x76/0xf0 [ 190.015353][ T9247] ? do_user_addr_fault+0xc8a/0x1390 [ 190.015383][ T9247] __x64_sys_sendto+0xde/0x100 [ 190.015411][ T9247] do_syscall_64+0xfa/0x3b0 [ 190.015429][ T9247] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.015446][ T9247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.015464][ T9247] ? clear_bhb_loop+0x60/0xb0 [ 190.015487][ T9247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.015505][ T9247] RIP: 0033:0x7f521c7907bc [ 190.015521][ T9247] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 190.015537][ T9247] RSP: 002b:00007f521d54cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 190.015557][ T9247] RAX: ffffffffffffffda RBX: 00007f521d54cfc0 RCX: 00007f521c7907bc [ 190.015570][ T9247] RDX: 0000000000000020 RSI: 00007f521d54d010 RDI: 0000000000000003 [ 190.015581][ T9247] RBP: 0000000000000000 R08: 00007f521d54cf14 R09: 000000000000000c [ 190.015592][ T9247] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 190.015602][ T9247] R13: 00007f521d54cf68 R14: 00007f521d54d010 R15: 0000000000000000 [ 190.015630][ T9247] [ 190.354595][ T8948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.426466][ T8948] veth0_vlan: entered promiscuous mode [ 190.451032][ T8948] veth1_vlan: entered promiscuous mode [ 190.570994][ T8948] veth0_macvtap: entered promiscuous mode [ 190.601483][ T8948] veth1_macvtap: entered promiscuous mode [ 190.653958][ T8948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.702891][ T8948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.785501][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.803255][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.825999][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.850535][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.989531][ T9266] tipc: New replicast peer: 255.255.255.255 [ 191.027491][ T9266] tipc: Enabled bearer , priority 10 [ 191.128942][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1228'. [ 191.164542][ T9266] tipc: Disabling bearer [ 191.204863][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.242566][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.366146][ T1317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.380387][ T1317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.802689][ T9279] tipc: Enabled bearer , priority 0 [ 191.983471][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 191.996238][ T9293] FAULT_INJECTION: forcing a failure. [ 191.996238][ T9293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.012678][ T9293] CPU: 1 UID: 0 PID: 9293 Comm: syz.3.1237 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 192.012720][ T9293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.012732][ T9293] Call Trace: [ 192.012740][ T9293] [ 192.012748][ T9293] dump_stack_lvl+0x189/0x250 [ 192.012792][ T9293] ? __pfx____ratelimit+0x10/0x10 [ 192.012810][ T9293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.012837][ T9293] ? __pfx__printk+0x10/0x10 [ 192.012857][ T9293] ? __might_fault+0xb0/0x130 [ 192.012885][ T9293] should_fail_ex+0x414/0x560 [ 192.012912][ T9293] _copy_from_user+0x2d/0xb0 [ 192.012931][ T9293] ethtool_set_per_queue+0xb9/0x1c0 [ 192.012954][ T9293] ? __pfx_ethtool_set_per_queue+0x10/0x10 [ 192.013023][ T9293] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.013042][ T9293] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 192.013068][ T9293] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.013109][ T9293] dev_ethtool+0x1819/0x19b0 [ 192.013146][ T9293] ? __pfx_dev_ethtool+0x10/0x10 [ 192.013188][ T9293] ? dev_load+0x21/0x1f0 [ 192.013210][ T9293] dev_ioctl+0x392/0x1150 [ 192.013235][ T9293] sock_do_ioctl+0x22c/0x300 [ 192.013257][ T9293] ? __pfx_sock_do_ioctl+0x10/0x10 [ 192.013273][ T9293] ? __lock_acquire+0xab9/0xd20 [ 192.013314][ T9293] sock_ioctl+0x576/0x790 [ 192.013334][ T9293] ? __pfx_sock_ioctl+0x10/0x10 [ 192.013353][ T9293] ? __fget_files+0x2a/0x420 [ 192.013371][ T9293] ? __fget_files+0x3a0/0x420 [ 192.013389][ T9293] ? __fget_files+0x2a/0x420 [ 192.013411][ T9293] ? bpf_lsm_file_ioctl+0x9/0x20 [ 192.013436][ T9293] ? __pfx_sock_ioctl+0x10/0x10 [ 192.013453][ T9293] __se_sys_ioctl+0xfc/0x170 [ 192.013481][ T9293] do_syscall_64+0xfa/0x3b0 [ 192.013498][ T9293] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.013514][ T9293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.013531][ T9293] ? clear_bhb_loop+0x60/0xb0 [ 192.013553][ T9293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.013570][ T9293] RIP: 0033:0x7f521c78e929 [ 192.013586][ T9293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.013601][ T9293] RSP: 002b:00007f521d54e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.013619][ T9293] RAX: ffffffffffffffda RBX: 00007f521c9b5fa0 RCX: 00007f521c78e929 [ 192.013632][ T9293] RDX: 0000200000000f00 RSI: 0000000000008946 RDI: 0000000000000004 [ 192.013649][ T9293] RBP: 00007f521d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 192.013659][ T9293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.013670][ T9293] R13: 0000000000000000 R14: 00007f521c9b5fa0 R15: 00007fff87827a88 [ 192.013698][ T9293] [ 192.648262][ T9309] netlink: 'syz.3.1242': attribute type 16 has an invalid length. [ 192.667158][ T9309] netlink: 'syz.3.1242': attribute type 17 has an invalid length. [ 192.686808][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1242'. [ 192.705060][ T9309] IPv6: NLM_F_REPLACE set, but no existing node found! [ 192.768035][ T5925] syzkaller0: tun_net_xmit 76 [ 192.794983][ T5925] syzkaller0: tun_net_xmit 48 [ 192.800072][ T5895] syzkaller0: tun_net_xmit 76 [ 192.825844][ T9312] tipc: Started in network mode [ 192.854102][ T9312] tipc: Node identity , cluster identity 4711 [ 192.866581][ T9312] tipc: Failed to obtain node identity [ 192.872084][ T9312] tipc: Enabling of bearer rejected, failed to enable media [ 192.908963][ T5895] syzkaller0: tun_net_xmit 76 [ 193.039830][ T9325] syz_tun: entered allmulticast mode [ 193.040209][ T9323] vxcan1 speed is unknown, defaulting to 1000 [ 193.054571][ T9323] vxcan1 speed is unknown, defaulting to 1000 [ 193.070903][ T9327] sctp: [Deprecated]: syz.1.1248 (pid 9327) Use of int in max_burst socket option. [ 193.070903][ T9327] Use struct sctp_assoc_value instead [ 193.221071][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 194.069665][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.079487][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.313285][ T9323] vxcan1 speed is unknown, defaulting to 1000 [ 194.396550][ T9320] syz_tun: left allmulticast mode [ 194.713365][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1260'. [ 194.733150][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'. [ 194.743403][ T9353] netlink: 'syz.0.1260': attribute type 19 has an invalid length. [ 194.771704][ T9353] vlan0: entered promiscuous mode [ 194.790171][ T9353] team0: Port device vlan0 added [ 194.815548][ T9355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.872205][ T9359] xt_bpf: check failed: parse error [ 194.893463][ T9323] infiniband syz2: set down [ 194.898105][ T5895] vxcan1 speed is unknown, defaulting to 1000 [ 194.904353][ T5895] syz2: Port: 1 Link DOWN [ 194.909537][ T9323] infiniband syz2: added vxcan1 [ 194.915064][ T9323] syz2: rxe_create_cq: returned err = -12 [ 194.933402][ T9323] infiniband syz2: Couldn't create ib_mad CQ [ 194.947956][ T9323] infiniband syz2: Couldn't open port 1 [ 195.040790][ T9323] RDS/IB: syz2: added [ 195.044874][ T9323] smc: adding ib device syz2 with port count 1 [ 195.076610][ T9323] smc: ib device syz2 port 1 has pnetid [ 195.092822][ T5895] vxcan1 speed is unknown, defaulting to 1000 [ 195.103298][ T9368] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1268'. [ 195.113307][ T9323] vxcan1 speed is unknown, defaulting to 1000 [ 195.122377][ T9368] netlink: zone id is out of range [ 195.135246][ T9368] netlink: zone id is out of range [ 195.149726][ T9368] netlink: zone id is out of range [ 195.164004][ T9368] netlink: zone id is out of range [ 195.168580][ T9369] vxcan1: tx address claim with dlc 0 [ 195.174190][ T9370] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 195.203924][ T9368] netlink: zone id is out of range [ 195.210395][ T9368] netlink: zone id is out of range [ 195.215731][ T9368] netlink: zone id is out of range [ 195.226211][ T9368] netlink: zone id is out of range [ 195.233568][ T9368] netlink: zone id is out of range [ 195.257409][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1269'. [ 195.258711][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1268'. [ 195.311489][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'. [ 195.329889][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1269'. [ 195.387724][ T9372] syz_tun: entered promiscuous mode [ 195.401402][ T9372] syz_tun: left promiscuous mode [ 195.637536][ T9388] FAULT_INJECTION: forcing a failure. [ 195.637536][ T9388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.677920][ T9323] vxcan1 speed is unknown, defaulting to 1000 [ 195.694410][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 195.703845][ T9388] CPU: 0 UID: 0 PID: 9388 Comm: syz.4.1276 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 195.703866][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.703877][ T9388] Call Trace: [ 195.703884][ T9388] [ 195.703891][ T9388] dump_stack_lvl+0x189/0x250 [ 195.703923][ T9388] ? __pfx____ratelimit+0x10/0x10 [ 195.703941][ T9388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.703968][ T9388] ? __pfx__printk+0x10/0x10 [ 195.703987][ T9388] ? __might_fault+0xb0/0x130 [ 195.704023][ T9388] should_fail_ex+0x414/0x560 [ 195.704051][ T9388] _copy_from_user+0x2d/0xb0 [ 195.704070][ T9388] kstrtouint_from_user+0xc4/0x170 [ 195.704098][ T9388] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 195.704138][ T9388] proc_fail_nth_write+0x88/0x240 [ 195.704160][ T9388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.704187][ T9388] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.704210][ T9388] vfs_write+0x27b/0xa90 [ 195.704245][ T9388] ? __pfx_vfs_write+0x10/0x10 [ 195.704275][ T9388] ? __fget_files+0x2a/0x420 [ 195.704299][ T9388] ? __fget_files+0x3a0/0x420 [ 195.704317][ T9388] ? __fget_files+0x2a/0x420 [ 195.704344][ T9388] ksys_write+0x145/0x250 [ 195.704363][ T9388] ? __pfx_ksys_write+0x10/0x10 [ 195.704376][ T9388] ? rcu_is_watching+0x15/0xb0 [ 195.704407][ T9388] ? do_syscall_64+0xbe/0x3b0 [ 195.704428][ T9388] do_syscall_64+0xfa/0x3b0 [ 195.704445][ T9388] ? lockdep_hardirqs_on+0x9c/0x150 [ 195.704460][ T9388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.704477][ T9388] ? clear_bhb_loop+0x60/0xb0 [ 195.704499][ T9388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.704515][ T9388] RIP: 0033:0x7fddbe58d3df [ 195.704530][ T9388] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 195.704545][ T9388] RSP: 002b:00007fddbf32c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 195.704563][ T9388] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fddbe58d3df [ 195.704575][ T9388] RDX: 0000000000000001 RSI: 00007fddbf32c0a0 RDI: 0000000000000004 [ 195.704586][ T9388] RBP: 00007fddbf32c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.704597][ T9388] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 195.704607][ T9388] R13: 0000000000000000 R14: 00007fddbe7b5fa0 R15: 00007fff712b3de8 [ 195.704635][ T9388] [ 196.003810][ T9399] netlink: 'syz.0.1281': attribute type 7 has an invalid length. [ 196.015826][ T9399] netlink: 'syz.0.1281': attribute type 8 has an invalid length. [ 196.079306][ T9402] netlink: 'syz.4.1282': attribute type 7 has an invalid length. [ 196.087213][ T9402] netlink: 'syz.4.1282': attribute type 8 has an invalid length. [ 196.239681][ T9323] vxcan1 speed is unknown, defaulting to 1000 [ 196.268865][ T9410] netlink: 'syz.2.1286': attribute type 10 has an invalid length. [ 196.606067][ T9323] vxcan1 speed is unknown, defaulting to 1000 [ 196.755269][ T9423] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 196.778866][ T9423] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 196.790316][ T9423] tipc: Resetting bearer [ 196.799104][ T49] tipc: Resetting bearer [ 196.905952][ T9323] vxcan1 speed is unknown, defaulting to 1000 [ 197.120625][ T5925] smc: removing ib device syz2 [ 198.069909][ T9454] __nla_validate_parse: 9 callbacks suppressed [ 198.069936][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 198.126990][ T9454] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1303'. [ 198.170468][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 198.554379][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 198.579208][ T9460] Bluetooth: MGMT ver 1.23 [ 198.808654][ T9470] tipc: Started in network mode [ 198.813672][ T9470] tipc: Node identity , cluster identity 4711 [ 198.821541][ T9470] tipc: Failed to obtain node identity [ 198.827210][ T9470] tipc: Enabling of bearer rejected, failed to enable media [ 198.941153][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 199.279182][ T9482] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 199.718961][ T9494] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 200.027328][ T9505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'. [ 200.037150][ T9505] netlink: 'syz.4.1324': attribute type 7 has an invalid length. [ 200.045592][ T9505] netlink: 'syz.4.1324': attribute type 8 has an invalid length. [ 200.053904][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1324'. [ 201.083485][ T9526] dummy0: entered promiscuous mode [ 201.097512][ T9526] vlan3: entered promiscuous mode [ 201.282418][ T9530] netlink: 'syz.4.1333': attribute type 29 has an invalid length. [ 201.313676][ T9532] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 201.329080][ T9532] CPU: 1 UID: 0 PID: 9532 Comm: syz.0.1334 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 201.329107][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.329119][ T9532] Call Trace: [ 201.329126][ T9532] [ 201.329134][ T9532] dump_stack_lvl+0x189/0x250 [ 201.329171][ T9532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.329200][ T9532] ? __pfx__printk+0x10/0x10 [ 201.329220][ T9532] ? kernfs_path_from_node+0x2c/0x260 [ 201.329243][ T9532] ? kernfs_path_from_node+0x2c/0x260 [ 201.329262][ T9532] ? kernfs_path_from_node+0x2c/0x260 [ 201.329285][ T9532] ? kernfs_path_from_node+0x22c/0x260 [ 201.329305][ T9532] ? kernfs_path_from_node+0x2c/0x260 [ 201.329329][ T9532] sysfs_warn_dup+0x8e/0xa0 [ 201.329351][ T9532] sysfs_do_create_link_sd+0xc0/0x110 [ 201.329375][ T9532] device_add_class_symlinks+0x1cf/0x240 [ 201.329400][ T9532] device_add+0x475/0xb50 [ 201.329425][ T9532] wiphy_register+0x199a/0x26b0 [ 201.329466][ T9532] ? __pfx_wiphy_register+0x10/0x10 [ 201.329487][ T9532] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 201.329519][ T9532] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 201.329548][ T9532] ieee80211_register_hw+0x33e1/0x4120 [ 201.329593][ T9532] ? ieee80211_register_hw+0x13f1/0x4120 [ 201.329629][ T9532] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 201.329659][ T9532] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 201.329696][ T9532] ? __hrtimer_setup+0x187/0x210 [ 201.329722][ T9532] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 201.329757][ T9532] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 201.329812][ T9532] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 201.329833][ T9532] ? trace_kmalloc+0x1f/0xd0 [ 201.329847][ T9532] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 201.329866][ T9532] ? kstrndup+0xbf/0x160 [ 201.329898][ T9532] hwsim_new_radio_nl+0xea4/0x1b10 [ 201.329924][ T9532] ? __pfx___nla_validate_parse+0x10/0x10 [ 201.329966][ T9532] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.330001][ T9532] ? __nla_parse+0x40/0x60 [ 201.330031][ T9532] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 201.330059][ T9532] genl_family_rcv_msg_doit+0x212/0x300 [ 201.330084][ T9532] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.330127][ T9532] ? bpf_lsm_capable+0x9/0x20 [ 201.330142][ T9532] ? security_capable+0x7e/0x2e0 [ 201.330171][ T9532] genl_rcv_msg+0x60e/0x790 [ 201.330207][ T9532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.330235][ T9532] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.330271][ T9532] netlink_rcv_skb+0x205/0x470 [ 201.330295][ T9532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.330325][ T9532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.330367][ T9532] ? down_read+0x1ad/0x2e0 [ 201.330390][ T9532] genl_rcv+0x28/0x40 [ 201.330414][ T9532] netlink_unicast+0x758/0x8d0 [ 201.330446][ T9532] netlink_sendmsg+0x805/0xb30 [ 201.330478][ T9532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.330505][ T9532] ? aa_sock_msg_perm+0x94/0x160 [ 201.330530][ T9532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.330552][ T9532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.330576][ T9532] __sock_sendmsg+0x21c/0x270 [ 201.330600][ T9532] ____sys_sendmsg+0x505/0x830 [ 201.330633][ T9532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.330669][ T9532] ? import_iovec+0x74/0xa0 [ 201.330691][ T9532] ___sys_sendmsg+0x21f/0x2a0 [ 201.330720][ T9532] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.330795][ T9532] ? __fget_files+0x2a/0x420 [ 201.330815][ T9532] ? __fget_files+0x3a0/0x420 [ 201.330847][ T9532] __x64_sys_sendmsg+0x19b/0x260 [ 201.330877][ T9532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.330913][ T9532] ? rcu_is_watching+0x15/0xb0 [ 201.330946][ T9532] ? do_syscall_64+0xbe/0x3b0 [ 201.330970][ T9532] do_syscall_64+0xfa/0x3b0 [ 201.330988][ T9532] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.331005][ T9532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.331023][ T9532] ? clear_bhb_loop+0x60/0xb0 [ 201.331047][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.331064][ T9532] RIP: 0033:0x7fe81538e929 [ 201.331081][ T9532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.331097][ T9532] RSP: 002b:00007fe8131f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.331116][ T9532] RAX: ffffffffffffffda RBX: 00007fe8155b5fa0 RCX: 00007fe81538e929 [ 201.331130][ T9532] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 201.331141][ T9532] RBP: 00007fe815410b39 R08: 0000000000000000 R09: 0000000000000000 [ 201.331151][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.331161][ T9532] R13: 0000000000000000 R14: 00007fe8155b5fa0 R15: 00007ffc98718598 [ 201.331193][ T9532] [ 201.383701][ T9530] netlink: 'syz.4.1333': attribute type 29 has an invalid length. [ 201.466261][ T9533] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1333'. [ 201.751030][ T5833] Bluetooth: hci1: command 0x080f tx timeout [ 201.934204][ T9543] syz_tun: entered allmulticast mode [ 201.942570][ T9541] veth0: entered promiscuous mode [ 201.951105][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 202.144467][ T9540] syz_tun: left allmulticast mode [ 202.152496][ T9545] tipc: Started in network mode [ 202.157819][ T9545] tipc: Node identity , cluster identity 4711 [ 202.163975][ T9545] tipc: Failed to obtain node identity [ 202.181987][ T9545] tipc: Enabling of bearer rejected, failed to enable media [ 202.191517][ T6068] syzkaller0: tun_net_xmit 76 [ 202.197671][ T6068] syzkaller0: tun_net_xmit 48 [ 202.217105][ T5902] syzkaller0: tun_net_xmit 76 [ 202.373268][ T9553] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1341'. [ 203.514841][ T9558] netlink: 'syz.3.1342': attribute type 14 has an invalid length. [ 203.824412][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 203.885009][ T9579] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1349'. [ 203.902515][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 204.056669][ T9590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1354'. [ 204.065724][ T9590] netlink: 'syz.0.1354': attribute type 7 has an invalid length. [ 204.079491][ T9590] netlink: 'syz.0.1354': attribute type 8 has an invalid length. [ 204.093896][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 204.119909][ T9594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1356'. [ 204.416379][ T9604] netlink: 'syz.1.1360': attribute type 21 has an invalid length. [ 204.450397][ T9604] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1360'. [ 204.540497][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1361'. [ 204.877349][ T9620] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1367'. [ 205.202204][ T9636] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 205.387644][ T9635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1368'. [ 205.412519][ T9636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.462760][ T9640] veth5: entered promiscuous mode [ 205.468083][ T9636] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 205.480148][ T9640] bond1: (slave veth5): Enslaving as an active interface with a down link [ 205.622086][ T9636] erspan0: entered allmulticast mode [ 205.637191][ T9644] FAULT_INJECTION: forcing a failure. [ 205.637191][ T9644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.675796][ T9644] CPU: 1 UID: 0 PID: 9644 Comm: syz.2.1374 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 205.675822][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.675834][ T9644] Call Trace: [ 205.675840][ T9644] [ 205.675848][ T9644] dump_stack_lvl+0x189/0x250 [ 205.675878][ T9644] ? __pfx____ratelimit+0x10/0x10 [ 205.675897][ T9644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.675923][ T9644] ? __pfx__printk+0x10/0x10 [ 205.675943][ T9644] ? __might_fault+0xb0/0x130 [ 205.675970][ T9644] should_fail_ex+0x414/0x560 [ 205.675997][ T9644] _copy_from_iter+0x1db/0x16f0 [ 205.676045][ T9644] ? rcu_is_watching+0x15/0xb0 [ 205.676075][ T9644] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 205.676096][ T9644] ? __pfx__copy_from_iter+0x10/0x10 [ 205.676125][ T9644] ? __build_skb_around+0x257/0x3e0 [ 205.676154][ T9644] ? netlink_sendmsg+0x642/0xb30 [ 205.676176][ T9644] ? skb_put+0x11b/0x210 [ 205.676215][ T9644] netlink_sendmsg+0x6b2/0xb30 [ 205.676246][ T9644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.676271][ T9644] ? aa_sock_msg_perm+0x94/0x160 [ 205.676296][ T9644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.676318][ T9644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.676341][ T9644] __sock_sendmsg+0x21c/0x270 [ 205.676364][ T9644] __sys_sendto+0x3bd/0x520 [ 205.676389][ T9644] ? __pfx___sys_sendto+0x10/0x10 [ 205.676422][ T9644] ? count_memcg_event_mm+0x21/0x260 [ 205.676469][ T9644] ? exc_page_fault+0x76/0xf0 [ 205.676489][ T9644] ? do_user_addr_fault+0xc8a/0x1390 [ 205.676517][ T9644] __x64_sys_sendto+0xde/0x100 [ 205.676544][ T9644] do_syscall_64+0xfa/0x3b0 [ 205.676561][ T9644] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.676577][ T9644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.676594][ T9644] ? clear_bhb_loop+0x60/0xb0 [ 205.676633][ T9644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.676651][ T9644] RIP: 0033:0x7f8e01f907bc [ 205.676668][ T9644] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 205.676684][ T9644] RSP: 002b:00007f8e02e00ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 205.676704][ T9644] RAX: ffffffffffffffda RBX: 00007f8e02e00fc0 RCX: 00007f8e01f907bc [ 205.676718][ T9644] RDX: 0000000000000020 RSI: 00007f8e02e01010 RDI: 0000000000000003 [ 205.676730][ T9644] RBP: 0000000000000000 R08: 00007f8e02e00f14 R09: 000000000000000c [ 205.676741][ T9644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 205.676752][ T9644] R13: 00007f8e02e00f68 R14: 00007f8e02e01010 R15: 0000000000000000 [ 205.676781][ T9644] [ 206.380744][ T51] Bluetooth: hci1: command 0x080f tx timeout [ 206.386920][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 206.393414][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.438048][ T9658] FAULT_INJECTION: forcing a failure. [ 206.438048][ T9658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.466930][ T9658] CPU: 0 UID: 0 PID: 9658 Comm: syz.4.1380 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 206.466957][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.466969][ T9658] Call Trace: [ 206.466977][ T9658] [ 206.466984][ T9658] dump_stack_lvl+0x189/0x250 [ 206.467028][ T9658] ? __pfx____ratelimit+0x10/0x10 [ 206.467046][ T9658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.467075][ T9658] ? __pfx__printk+0x10/0x10 [ 206.467096][ T9658] ? __might_fault+0xb0/0x130 [ 206.467125][ T9658] should_fail_ex+0x414/0x560 [ 206.467154][ T9658] _copy_from_iter+0x1db/0x16f0 [ 206.467186][ T9658] ? rcu_is_watching+0x15/0xb0 [ 206.467216][ T9658] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 206.467236][ T9658] ? __pfx__copy_from_iter+0x10/0x10 [ 206.467265][ T9658] ? __build_skb_around+0x257/0x3e0 [ 206.467294][ T9658] ? netlink_sendmsg+0x642/0xb30 [ 206.467316][ T9658] ? skb_put+0x11b/0x210 [ 206.467345][ T9658] netlink_sendmsg+0x6b2/0xb30 [ 206.467377][ T9658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.467404][ T9658] ? aa_sock_msg_perm+0x94/0x160 [ 206.467429][ T9658] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.467453][ T9658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.467477][ T9658] __sock_sendmsg+0x21c/0x270 [ 206.467501][ T9658] ____sys_sendmsg+0x505/0x830 [ 206.467534][ T9658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.467570][ T9658] ? import_iovec+0x74/0xa0 [ 206.467592][ T9658] ___sys_sendmsg+0x21f/0x2a0 [ 206.467621][ T9658] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.467685][ T9658] ? __fget_files+0x2a/0x420 [ 206.467714][ T9658] ? __fget_files+0x3a0/0x420 [ 206.467745][ T9658] __x64_sys_sendmsg+0x19b/0x260 [ 206.467775][ T9658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.467813][ T9658] ? __pfx_ksys_write+0x10/0x10 [ 206.467828][ T9658] ? rcu_is_watching+0x15/0xb0 [ 206.467860][ T9658] ? do_syscall_64+0xbe/0x3b0 [ 206.467884][ T9658] do_syscall_64+0xfa/0x3b0 [ 206.467901][ T9658] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.467919][ T9658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.467936][ T9658] ? clear_bhb_loop+0x60/0xb0 [ 206.467959][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.467977][ T9658] RIP: 0033:0x7fddbe58e929 [ 206.467993][ T9658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.468015][ T9658] RSP: 002b:00007fddbf32c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.468035][ T9658] RAX: ffffffffffffffda RBX: 00007fddbe7b5fa0 RCX: 00007fddbe58e929 [ 206.468048][ T9658] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 206.468070][ T9658] RBP: 00007fddbf32c090 R08: 0000000000000000 R09: 0000000000000000 [ 206.468081][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.468091][ T9658] R13: 0000000000000000 R14: 00007fddbe7b5fa0 R15: 00007fff712b3de8 [ 206.468118][ T9658] [ 206.998194][ T9671] xt_bpf: check failed: parse error [ 207.462441][ T9688] pim6reg1: entered promiscuous mode [ 207.468028][ T9688] pim6reg1: entered allmulticast mode [ 207.704079][ T9692] net_ratelimit: 11 callbacks suppressed [ 207.704099][ T9692] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 207.716354][ T9692] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 208.064505][ T9708] netlink: 'syz.4.1400': attribute type 33 has an invalid length. [ 208.373954][ T9709] tipc: Started in network mode [ 208.389380][ T9709] tipc: Node identity , cluster identity 4711 [ 208.418634][ T9709] tipc: Failed to obtain node identity [ 208.431764][ T9709] tipc: Enabling of bearer rejected, failed to enable media [ 208.437041][ T9721] Bluetooth: MGMT ver 1.23 [ 208.477682][ T1333] syzkaller0: tun_net_xmit 76 [ 208.506052][ T1333] syzkaller0: tun_net_xmit 48 [ 208.513085][ T5831] syzkaller0: tun_net_xmit 76 [ 208.557746][ T9725] netlink: 'syz.1.1406': attribute type 7 has an invalid length. [ 208.582969][ T9725] netlink: 'syz.1.1406': attribute type 8 has an invalid length. [ 208.656778][ T7446] syzkaller0: tun_net_xmit 76 [ 208.750913][ T9730] FAULT_INJECTION: forcing a failure. [ 208.750913][ T9730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.767993][ T9730] CPU: 1 UID: 0 PID: 9730 Comm: syz.2.1408 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 208.768018][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.768028][ T9730] Call Trace: [ 208.768036][ T9730] [ 208.768043][ T9730] dump_stack_lvl+0x189/0x250 [ 208.768074][ T9730] ? __pfx____ratelimit+0x10/0x10 [ 208.768091][ T9730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.768117][ T9730] ? __pfx__printk+0x10/0x10 [ 208.768147][ T9730] should_fail_ex+0x414/0x560 [ 208.768173][ T9730] _copy_from_user+0x2d/0xb0 [ 208.768191][ T9730] bpf_test_init+0xf8/0x170 [ 208.768216][ T9730] bpf_prog_test_run_skb+0x1e9/0x1560 [ 208.768235][ T9730] ? __fget_files+0x2a/0x420 [ 208.768256][ T9730] ? __fget_files+0x2a/0x420 [ 208.768282][ T9730] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 208.768303][ T9730] bpf_prog_test_run+0x2c4/0x340 [ 208.768331][ T9730] __sys_bpf+0x4a4/0x860 [ 208.768354][ T9730] ? __pfx___sys_bpf+0x10/0x10 [ 208.768388][ T9730] ? ksys_write+0x22a/0x250 [ 208.768406][ T9730] ? __pfx_ksys_write+0x10/0x10 [ 208.768419][ T9730] ? rcu_is_watching+0x15/0xb0 [ 208.768452][ T9730] __x64_sys_bpf+0x7c/0x90 [ 208.768472][ T9730] do_syscall_64+0xfa/0x3b0 [ 208.768489][ T9730] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.768504][ T9730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.768521][ T9730] ? clear_bhb_loop+0x60/0xb0 [ 208.768541][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.768557][ T9730] RIP: 0033:0x7f8e01f8e929 [ 208.768572][ T9730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.768587][ T9730] RSP: 002b:00007f8e02e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.768605][ T9730] RAX: ffffffffffffffda RBX: 00007f8e021b5fa0 RCX: 00007f8e01f8e929 [ 208.768618][ T9730] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 208.768629][ T9730] RBP: 00007f8e02e02090 R08: 0000000000000000 R09: 0000000000000000 [ 208.768639][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.768649][ T9730] R13: 0000000000000000 R14: 00007f8e021b5fa0 R15: 00007ffd3a027088 [ 208.768675][ T9730] [ 209.175303][ T9736] __nla_validate_parse: 10 callbacks suppressed [ 209.175322][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 209.291689][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 210.528822][ T9760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.671493][ T9770] lo speed is unknown, defaulting to 1000 [ 210.711263][ T9770] lo speed is unknown, defaulting to 1000 [ 210.802589][ T9770] lo speed is unknown, defaulting to 1000 [ 210.844296][ T9770] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 210.881493][ T9780] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 210.886767][ T9772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1423'. [ 210.914757][ T9770] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 211.024347][ T9770] lo speed is unknown, defaulting to 1000 [ 211.030901][ T9789] tipc: Started in network mode [ 211.053092][ T9789] tipc: Node identity , cluster identity 4711 [ 211.071797][ T9789] tipc: Failed to obtain node identity [ 211.084920][ T9789] tipc: Enabling of bearer rejected, failed to enable media [ 211.104189][ T9792] FAULT_INJECTION: forcing a failure. [ 211.104189][ T9792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.121683][ T7912] syzkaller0: tun_net_xmit 76 [ 211.124631][ T9794] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1429'. [ 211.127120][ T7912] syzkaller0: tun_net_xmit 48 [ 211.141256][ T9794] netlink: 'syz.1.1429': attribute type 7 has an invalid length. [ 211.144731][ T9792] CPU: 0 UID: 0 PID: 9792 Comm: syz.0.1430 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 211.144760][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.144771][ T9792] Call Trace: [ 211.144779][ T9792] [ 211.144787][ T9792] dump_stack_lvl+0x189/0x250 [ 211.144824][ T9792] ? __pfx____ratelimit+0x10/0x10 [ 211.144844][ T9792] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.144874][ T9792] ? __pfx__printk+0x10/0x10 [ 211.144908][ T9792] should_fail_ex+0x414/0x560 [ 211.144939][ T9792] _copy_to_user+0x31/0xb0 [ 211.144962][ T9792] simple_read_from_buffer+0xe1/0x170 [ 211.144988][ T9792] proc_fail_nth_read+0x1df/0x250 [ 211.145017][ T9792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.145044][ T9792] ? rw_verify_area+0x258/0x650 [ 211.145072][ T9792] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.145097][ T9792] vfs_read+0x1fd/0x980 [ 211.145131][ T9792] ? __pfx___mutex_lock+0x10/0x10 [ 211.145153][ T9792] ? __pfx_vfs_read+0x10/0x10 [ 211.145184][ T9792] ? __fget_files+0x2a/0x420 [ 211.145212][ T9792] ? __fget_files+0x3a0/0x420 [ 211.145231][ T9792] ? __fget_files+0x2a/0x420 [ 211.145262][ T9792] ksys_read+0x145/0x250 [ 211.145282][ T9792] ? __pfx_ksys_read+0x10/0x10 [ 211.145308][ T9792] ? rcu_is_watching+0x15/0xb0 [ 211.145344][ T9792] ? do_syscall_64+0xbe/0x3b0 [ 211.145369][ T9792] do_syscall_64+0xfa/0x3b0 [ 211.145387][ T9792] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.145407][ T9792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.145426][ T9792] ? clear_bhb_loop+0x60/0xb0 [ 211.145449][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.145469][ T9792] RIP: 0033:0x7fe81538d33c [ 211.145486][ T9792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 211.145502][ T9792] RSP: 002b:00007fe8131f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.145523][ T9792] RAX: ffffffffffffffda RBX: 00007fe8155b5fa0 RCX: 00007fe81538d33c [ 211.145537][ T9792] RDX: 000000000000000f RSI: 00007fe8131f60a0 RDI: 0000000000000004 [ 211.145551][ T9792] RBP: 00007fe8131f6090 R08: 0000000000000000 R09: 0000000000000000 [ 211.145564][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.145576][ T9792] R13: 0000000000000000 R14: 00007fe8155b5fa0 R15: 00007ffc98718598 [ 211.145614][ T9792] [ 211.150158][ T5902] syzkaller0: tun_net_xmit 76 [ 211.181641][ T9794] netlink: 'syz.1.1429': attribute type 8 has an invalid length. [ 211.334291][ T9770] lo speed is unknown, defaulting to 1000 [ 211.466517][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 211.559657][ T9770] lo speed is unknown, defaulting to 1000 [ 211.588862][ T9770] lo speed is unknown, defaulting to 1000 [ 211.750362][ T9807] FAULT_INJECTION: forcing a failure. [ 211.750362][ T9807] name failslab, interval 1, probability 0, space 0, times 0 [ 211.763168][ T9807] CPU: 0 UID: 0 PID: 9807 Comm: syz.3.1434 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 211.763192][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.763203][ T9807] Call Trace: [ 211.763210][ T9807] [ 211.763217][ T9807] dump_stack_lvl+0x189/0x250 [ 211.763248][ T9807] ? __pfx____ratelimit+0x10/0x10 [ 211.763266][ T9807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.763293][ T9807] ? __pfx__printk+0x10/0x10 [ 211.763317][ T9807] ? __pfx___might_resched+0x10/0x10 [ 211.763348][ T9807] should_fail_ex+0x414/0x560 [ 211.763375][ T9807] should_failslab+0xa8/0x100 [ 211.763395][ T9807] __kmalloc_noprof+0xcb/0x4f0 [ 211.763412][ T9807] ? sk_prot_alloc+0xe7/0x220 [ 211.763440][ T9807] sk_prot_alloc+0xe7/0x220 [ 211.763462][ T9807] ? sk_alloc+0x24/0x370 [ 211.763487][ T9807] sk_alloc+0x3a/0x370 [ 211.763508][ T9807] ? bpf_ctx_init+0x167/0x1d0 [ 211.763531][ T9807] bpf_prog_test_run_skb+0x2ed/0x1560 [ 211.763551][ T9807] ? __fget_files+0x2a/0x420 [ 211.763602][ T9807] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 211.763625][ T9807] bpf_prog_test_run+0x2c4/0x340 [ 211.763654][ T9807] __sys_bpf+0x4a4/0x860 [ 211.763677][ T9807] ? __pfx___sys_bpf+0x10/0x10 [ 211.763728][ T9807] ? ksys_write+0x22a/0x250 [ 211.763745][ T9807] ? __pfx_ksys_write+0x10/0x10 [ 211.763758][ T9807] ? rcu_is_watching+0x15/0xb0 [ 211.763802][ T9807] __x64_sys_bpf+0x7c/0x90 [ 211.763823][ T9807] do_syscall_64+0xfa/0x3b0 [ 211.763840][ T9807] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.763856][ T9807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.763872][ T9807] ? clear_bhb_loop+0x60/0xb0 [ 211.763893][ T9807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.763908][ T9807] RIP: 0033:0x7f521c78e929 [ 211.763923][ T9807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.763938][ T9807] RSP: 002b:00007f521d54e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.763956][ T9807] RAX: ffffffffffffffda RBX: 00007f521c9b5fa0 RCX: 00007f521c78e929 [ 211.763968][ T9807] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 211.763979][ T9807] RBP: 00007f521d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.763989][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.763998][ T9807] R13: 0000000000000000 R14: 00007f521c9b5fa0 R15: 00007fff87827a88 [ 211.764025][ T9807] [ 212.985544][ T9802] batadv_slave_1: entered promiscuous mode [ 212.992002][ T9770] lo speed is unknown, defaulting to 1000 [ 213.008634][ T9811] gtp0: entered promiscuous mode [ 213.023788][ T9811] gtp0: entered allmulticast mode [ 213.152371][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1439'. [ 213.248750][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1441'. [ 213.377780][ T9802] batadv_slave_1: left promiscuous mode [ 213.403869][ T9832] netlink: 'syz.4.1442': attribute type 21 has an invalid length. [ 213.451106][ T9833] tipc: Resetting bearer [ 213.511951][ T9836] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 213.518439][ T9836] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 213.600466][ T9833] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 213.609321][ T9833] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 213.625869][ T9833] gtp0: left promiscuous mode [ 213.646237][ T9833] gtp0: left allmulticast mode [ 213.675930][ T9832] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1442'. [ 213.930310][ T9825] lo speed is unknown, defaulting to 1000 [ 214.797751][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 214.845871][ T9875] syzkaller1: entered promiscuous mode [ 214.848684][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1461'. [ 214.881452][ T9875] syzkaller1: entered allmulticast mode [ 215.167660][ T9889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'. [ 215.191655][ T9889] netlink: 'syz.3.1465': attribute type 7 has an invalid length. [ 215.226377][ T9889] netlink: 'syz.3.1465': attribute type 8 has an invalid length. [ 215.234176][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1465'. [ 215.440862][ T9903] vcan1: entered allmulticast mode [ 215.585245][ T9909] xt_cgroup: path and classid specified [ 215.599336][ T9909] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20004 [ 215.642251][ T9909] netlink: zone id is out of range [ 215.647453][ T9909] netlink: zone id is out of range [ 215.652914][ T9909] netlink: zone id is out of range [ 215.658729][ T9909] netlink: zone id is out of range [ 215.664156][ T9909] netlink: zone id is out of range [ 215.715672][ T9909] netlink: zone id is out of range [ 215.740538][ T9917] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 215.776553][ T9909] netlink: zone id is out of range [ 215.786874][ T9909] netlink: zone id is out of range [ 215.819337][ T9918] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 215.920232][ T9918] netlink: 'syz.4.1470': attribute type 2 has an invalid length. [ 216.437018][ T9953] lo: entered promiscuous mode [ 216.464186][ T9953] lo: entered allmulticast mode [ 216.511570][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1484'. [ 216.603795][ T9944] raw_sendmsg: syz.0.1484 forgot to set AF_INET. Fix it! [ 216.636725][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1491'. [ 216.655554][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 216.729902][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 216.783153][ T9966] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 217.117716][ T9989] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 217.175004][ T9989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.192510][ T9993] gretap2: entered promiscuous mode [ 217.203344][ T9993] bond2: (slave gretap2): making interface the new active one [ 217.212953][ T9993] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 217.243749][ T9989] bond2: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 217.312529][T10002] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1502'. [ 217.346828][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 217.549943][T10004] syz_tun (unregistering): left allmulticast mode [ 217.564401][T10009] syz_tun: entered allmulticast mode [ 217.575225][T10008] syz_tun: left allmulticast mode [ 217.991728][T10020] tipc: Enabling of bearer rejected, already enabled [ 218.327075][T10030] FAULT_INJECTION: forcing a failure. [ 218.327075][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 218.365269][T10030] CPU: 0 UID: 0 PID: 10030 Comm: syz.1.1517 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 218.365302][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.365314][T10030] Call Trace: [ 218.365323][T10030] [ 218.365331][T10030] dump_stack_lvl+0x189/0x250 [ 218.365375][T10030] ? __pfx____ratelimit+0x10/0x10 [ 218.365393][T10030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.365421][T10030] ? __pfx__printk+0x10/0x10 [ 218.365444][T10030] ? __pfx___might_resched+0x10/0x10 [ 218.365492][T10030] should_fail_ex+0x414/0x560 [ 218.365521][T10030] should_failslab+0xa8/0x100 [ 218.365543][T10030] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 218.365562][T10030] ? __alloc_skb+0x112/0x2d0 [ 218.365592][T10030] __alloc_skb+0x112/0x2d0 [ 218.365620][T10030] netlink_sendmsg+0x5c6/0xb30 [ 218.365654][T10030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.365681][T10030] ? aa_sock_msg_perm+0x94/0x160 [ 218.365708][T10030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.365731][T10030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.365757][T10030] __sock_sendmsg+0x21c/0x270 [ 218.365781][T10030] ____sys_sendmsg+0x505/0x830 [ 218.365814][T10030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.365850][T10030] ? import_iovec+0x74/0xa0 [ 218.365872][T10030] ___sys_sendmsg+0x21f/0x2a0 [ 218.365884][T10033] FAULT_INJECTION: forcing a failure. [ 218.365884][T10033] name failslab, interval 1, probability 0, space 0, times 0 [ 218.365901][T10030] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.365993][T10030] ? __fget_files+0x2a/0x420 [ 218.366015][T10030] ? __fget_files+0x3a0/0x420 [ 218.366061][T10030] __x64_sys_sendmsg+0x19b/0x260 [ 218.366095][T10030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.366134][T10030] ? __pfx_ksys_write+0x10/0x10 [ 218.366149][T10030] ? rcu_is_watching+0x15/0xb0 [ 218.366183][T10030] ? do_syscall_64+0xbe/0x3b0 [ 218.366209][T10030] do_syscall_64+0xfa/0x3b0 [ 218.366227][T10030] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.366247][T10030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.366266][T10030] ? clear_bhb_loop+0x60/0xb0 [ 218.366290][T10030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.366309][T10030] RIP: 0033:0x7fa80298e929 [ 218.366326][T10030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.366343][T10030] RSP: 002b:00007fa8038da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.366363][T10030] RAX: ffffffffffffffda RBX: 00007fa802bb5fa0 RCX: 00007fa80298e929 [ 218.366378][T10030] RDX: 0000000020000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 218.366391][T10030] RBP: 00007fa8038da090 R08: 0000000000000000 R09: 0000000000000000 [ 218.366402][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.366418][T10030] R13: 0000000000000000 R14: 00007fa802bb5fa0 R15: 00007ffc31945af8 [ 218.366449][T10030] [ 218.665639][T10033] CPU: 1 UID: 0 PID: 10033 Comm: syz.3.1520 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 218.665666][T10033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.665677][T10033] Call Trace: [ 218.665684][T10033] [ 218.665712][T10033] dump_stack_lvl+0x189/0x250 [ 218.665744][T10033] ? __pfx____ratelimit+0x10/0x10 [ 218.665763][T10033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.665793][T10033] ? __pfx__printk+0x10/0x10 [ 218.665828][T10033] ? __pfx___might_resched+0x10/0x10 [ 218.665854][T10033] ? fs_reclaim_acquire+0x7d/0x100 [ 218.665879][T10033] should_fail_ex+0x414/0x560 [ 218.665915][T10033] should_failslab+0xa8/0x100 [ 218.665936][T10033] __kmalloc_noprof+0xcb/0x4f0 [ 218.665952][T10033] ? security_sk_alloc+0x52/0x390 [ 218.665973][T10033] security_sk_alloc+0x52/0x390 [ 218.665993][T10033] sk_prot_alloc+0x101/0x220 [ 218.666016][T10033] ? sk_alloc+0x24/0x370 [ 218.666042][T10033] sk_alloc+0x3a/0x370 [ 218.666064][T10033] ? bpf_ctx_init+0x167/0x1d0 [ 218.666088][T10033] bpf_prog_test_run_skb+0x2ed/0x1560 [ 218.666109][T10033] ? __fget_files+0x2a/0x420 [ 218.666141][T10033] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 218.666163][T10033] bpf_prog_test_run+0x2c4/0x340 [ 218.666191][T10033] __sys_bpf+0x4a4/0x860 [ 218.666216][T10033] ? __pfx___sys_bpf+0x10/0x10 [ 218.666252][T10033] ? ksys_write+0x22a/0x250 [ 218.666270][T10033] ? __pfx_ksys_write+0x10/0x10 [ 218.666283][T10033] ? rcu_is_watching+0x15/0xb0 [ 218.666330][T10033] __x64_sys_bpf+0x7c/0x90 [ 218.666348][T10033] do_syscall_64+0xfa/0x3b0 [ 218.666363][T10033] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.666376][T10033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.666390][T10033] ? clear_bhb_loop+0x60/0xb0 [ 218.666408][T10033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.666426][T10033] RIP: 0033:0x7f521c78e929 [ 218.666439][T10033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.666452][T10033] RSP: 002b:00007f521d54e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.666468][T10033] RAX: ffffffffffffffda RBX: 00007f521c9b5fa0 RCX: 00007f521c78e929 [ 218.666479][T10033] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 218.666488][T10033] RBP: 00007f521d54e090 R08: 0000000000000000 R09: 0000000000000000 [ 218.666497][T10033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.666505][T10033] R13: 0000000000000000 R14: 00007f521c9b5fa0 R15: 00007fff87827a88 [ 218.666527][T10033] [ 219.095181][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.104078][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.116483][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.125210][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.133578][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.163060][T10047] netlink: 'syz.0.1525': attribute type 4 has an invalid length. [ 219.267076][T10049] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 219.281899][T10049] CPU: 0 UID: 0 PID: 10049 Comm: syz.2.1527 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 219.281930][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.281945][T10049] Call Trace: [ 219.281954][T10049] [ 219.281963][T10049] dump_stack_lvl+0x189/0x250 [ 219.282006][T10049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.282039][T10049] ? __pfx__printk+0x10/0x10 [ 219.282063][T10049] ? kernfs_path_from_node+0x2c/0x260 [ 219.282088][T10049] ? kernfs_path_from_node+0x2c/0x260 [ 219.282111][T10049] ? kernfs_path_from_node+0x2c/0x260 [ 219.282138][T10049] ? kernfs_path_from_node+0x22c/0x260 [ 219.282160][T10049] ? kernfs_path_from_node+0x2c/0x260 [ 219.282196][T10049] sysfs_warn_dup+0x8e/0xa0 [ 219.282220][T10049] sysfs_do_create_link_sd+0xc0/0x110 [ 219.282247][T10049] device_add_class_symlinks+0x1cf/0x240 [ 219.282276][T10049] device_add+0x475/0xb50 [ 219.282304][T10049] wiphy_register+0x199a/0x26b0 [ 219.282349][T10049] ? __pfx_wiphy_register+0x10/0x10 [ 219.282372][T10049] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 219.282408][T10049] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 219.282443][T10049] ieee80211_register_hw+0x33e1/0x4120 [ 219.282493][T10049] ? ieee80211_register_hw+0x13f1/0x4120 [ 219.282533][T10049] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 219.282568][T10049] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 219.282609][T10049] ? __hrtimer_setup+0x187/0x210 [ 219.282640][T10049] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 219.282672][T10049] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 219.282734][T10049] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 219.282768][T10049] ? trace_kmalloc+0x1f/0xd0 [ 219.282784][T10049] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 219.282803][T10049] ? kstrndup+0xbf/0x160 [ 219.282845][T10049] hwsim_new_radio_nl+0xea4/0x1b10 [ 219.282869][T10049] ? __pfx___nla_validate_parse+0x10/0x10 [ 219.282909][T10049] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 219.282943][T10049] ? __nla_parse+0x40/0x60 [ 219.282972][T10049] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 219.282999][T10049] genl_family_rcv_msg_doit+0x212/0x300 [ 219.283023][T10049] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 219.283064][T10049] ? bpf_lsm_capable+0x9/0x20 [ 219.283079][T10049] ? security_capable+0x7e/0x2e0 [ 219.283108][T10049] genl_rcv_msg+0x60e/0x790 [ 219.283142][T10049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.283168][T10049] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 219.283209][T10049] netlink_rcv_skb+0x205/0x470 [ 219.283232][T10049] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.283261][T10049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.283300][T10049] ? down_read+0x1ad/0x2e0 [ 219.283323][T10049] genl_rcv+0x28/0x40 [ 219.283348][T10049] netlink_unicast+0x758/0x8d0 [ 219.283378][T10049] netlink_sendmsg+0x805/0xb30 [ 219.283410][T10049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.283436][T10049] ? aa_sock_msg_perm+0x94/0x160 [ 219.283461][T10049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.283483][T10049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.283507][T10049] __sock_sendmsg+0x21c/0x270 [ 219.283529][T10049] ____sys_sendmsg+0x505/0x830 [ 219.283561][T10049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.283595][T10049] ? import_iovec+0x74/0xa0 [ 219.283616][T10049] ___sys_sendmsg+0x21f/0x2a0 [ 219.283644][T10049] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.283707][T10049] ? __fget_files+0x2a/0x420 [ 219.283726][T10049] ? __fget_files+0x3a0/0x420 [ 219.283756][T10049] __x64_sys_sendmsg+0x19b/0x260 [ 219.283785][T10049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.283822][T10049] ? rcu_is_watching+0x15/0xb0 [ 219.283855][T10049] ? do_syscall_64+0xbe/0x3b0 [ 219.283878][T10049] do_syscall_64+0xfa/0x3b0 [ 219.283894][T10049] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.283911][T10049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.283928][T10049] ? clear_bhb_loop+0x60/0xb0 [ 219.283951][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.283968][T10049] RIP: 0033:0x7f8e01f8e929 [ 219.283984][T10049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.284000][T10049] RSP: 002b:00007f8e02e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.284019][T10049] RAX: ffffffffffffffda RBX: 00007f8e021b5fa0 RCX: 00007f8e01f8e929 [ 219.284032][T10049] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 219.284043][T10049] RBP: 00007f8e02010b39 R08: 0000000000000000 R09: 0000000000000000 [ 219.284054][T10049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.284064][T10049] R13: 0000000000000000 R14: 00007f8e021b5fa0 R15: 00007ffd3a027088 [ 219.284094][T10049] [ 219.770226][T10051] netlink: 'syz.0.1528': attribute type 7 has an invalid length. [ 219.778036][T10051] netlink: 'syz.0.1528': attribute type 8 has an invalid length. [ 219.791552][T10051] syz_tun: entered promiscuous mode [ 219.825683][T10051] syz_tun: left promiscuous mode [ 219.922682][T10057] FAULT_INJECTION: forcing a failure. [ 219.922682][T10057] name failslab, interval 1, probability 0, space 0, times 0 [ 219.935580][T10057] CPU: 0 UID: 0 PID: 10057 Comm: syz.1.1531 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 219.935606][T10057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.935617][T10057] Call Trace: [ 219.935625][T10057] [ 219.935633][T10057] dump_stack_lvl+0x189/0x250 [ 219.935667][T10057] ? __pfx____ratelimit+0x10/0x10 [ 219.935686][T10057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.935714][T10057] ? __pfx__printk+0x10/0x10 [ 219.935737][T10057] ? __pfx___might_resched+0x10/0x10 [ 219.935766][T10057] ? fs_reclaim_acquire+0x7d/0x100 [ 219.935792][T10057] should_fail_ex+0x414/0x560 [ 219.935822][T10057] should_failslab+0xa8/0x100 [ 219.935844][T10057] __kmalloc_noprof+0xcb/0x4f0 [ 219.935861][T10057] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 219.935886][T10057] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 219.935913][T10057] genl_family_rcv_msg_doit+0xb8/0x300 [ 219.935938][T10057] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 219.935971][T10057] ? __pfx_genl_get_cmd+0x10/0x10 [ 219.936015][T10057] genl_rcv_msg+0x60e/0x790 [ 219.936057][T10057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.936084][T10057] ? ref_tracker_free+0x63a/0x7d0 [ 219.936108][T10057] ? __pfx_ctrl_getfamily+0x10/0x10 [ 219.936136][T10057] ? __pfx_ref_tracker_free+0x10/0x10 [ 219.936173][T10057] netlink_rcv_skb+0x205/0x470 [ 219.936197][T10057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.936226][T10057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.936267][T10057] ? down_read+0x1ad/0x2e0 [ 219.936292][T10057] genl_rcv+0x28/0x40 [ 219.936317][T10057] netlink_unicast+0x758/0x8d0 [ 219.936350][T10057] netlink_sendmsg+0x805/0xb30 [ 219.936383][T10057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.936420][T10057] ? aa_sock_msg_perm+0x94/0x160 [ 219.936446][T10057] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 219.936470][T10057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.936495][T10057] __sock_sendmsg+0x21c/0x270 [ 219.936519][T10057] __sys_sendto+0x3bd/0x520 [ 219.936546][T10057] ? __pfx___sys_sendto+0x10/0x10 [ 219.936581][T10057] ? count_memcg_event_mm+0x21/0x260 [ 219.936621][T10057] ? exc_page_fault+0x76/0xf0 [ 219.936642][T10057] ? do_user_addr_fault+0xc8a/0x1390 [ 219.936671][T10057] __x64_sys_sendto+0xde/0x100 [ 219.936700][T10057] do_syscall_64+0xfa/0x3b0 [ 219.936719][T10057] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.936735][T10057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.936754][T10057] ? clear_bhb_loop+0x60/0xb0 [ 219.936777][T10057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.936796][T10057] RIP: 0033:0x7fa8029907bc [ 219.936812][T10057] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 219.936828][T10057] RSP: 002b:00007fa8038d8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 219.936848][T10057] RAX: ffffffffffffffda RBX: 00007fa8038d8fc0 RCX: 00007fa8029907bc [ 219.936861][T10057] RDX: 0000000000000020 RSI: 00007fa8038d9010 RDI: 0000000000000003 [ 219.936873][T10057] RBP: 0000000000000000 R08: 00007fa8038d8f14 R09: 000000000000000c [ 219.936884][T10057] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 219.936895][T10057] R13: 00007fa8038d8f68 R14: 00007fa8038d9010 R15: 0000000000000000 [ 219.936925][T10057] [ 220.386169][T10062] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 220.416099][T10062] net_ratelimit: 16 callbacks suppressed [ 220.416118][T10062] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 220.425917][T10064] __nla_validate_parse: 6 callbacks suppressed [ 220.425934][T10064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 220.444698][T10040] lo speed is unknown, defaulting to 1000 [ 220.537022][T10069] netlink: 'syz.2.1535': attribute type 21 has an invalid length. [ 220.544899][T10069] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.1535'. [ 220.745383][T10077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1537'. [ 220.913298][T10040] chnl_net:caif_netlink_parms(): no params data found [ 221.176675][ T5840] Bluetooth: hci1: command tx timeout [ 221.280597][T10040] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.289667][T10040] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.297344][T10101] FAULT_INJECTION: forcing a failure. [ 221.297344][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 221.318801][T10101] CPU: 1 UID: 0 PID: 10101 Comm: syz.2.1544 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 221.318824][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.318835][T10101] Call Trace: [ 221.318842][T10101] [ 221.318849][T10101] dump_stack_lvl+0x189/0x250 [ 221.318881][T10101] ? __pfx____ratelimit+0x10/0x10 [ 221.318899][T10101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.318927][T10101] ? __pfx__printk+0x10/0x10 [ 221.318951][T10101] ? __pfx___might_resched+0x10/0x10 [ 221.318977][T10101] ? fs_reclaim_acquire+0x7d/0x100 [ 221.319003][T10101] should_fail_ex+0x414/0x560 [ 221.319030][T10101] should_failslab+0xa8/0x100 [ 221.319051][T10101] __kmalloc_cache_noprof+0x70/0x3d0 [ 221.319068][T10101] ? genl_start+0x1c9/0x6c0 [ 221.319088][T10101] genl_start+0x1c9/0x6c0 [ 221.319101][T10101] ? netlink_lookup+0x30/0x200 [ 221.319128][T10101] __netlink_dump_start+0x469/0x7e0 [ 221.319157][T10101] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 221.319186][T10101] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 221.319210][T10101] ? genl_get_cmd+0x67f/0x910 [ 221.319232][T10040] bridge_slave_0: entered allmulticast mode [ 221.319235][T10101] ? __pfx___mutex_lock+0x10/0x10 [ 221.319261][T10101] ? __pfx_genl_start+0x10/0x10 [ 221.319274][T10101] ? __pfx_genl_dumpit+0x10/0x10 [ 221.319287][T10101] ? __pfx_genl_done+0x10/0x10 [ 221.319317][T10101] genl_rcv_msg+0x5da/0x790 [ 221.319350][T10101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.319380][T10101] ? __pfx_nfc_genl_dump_targets+0x10/0x10 [ 221.319407][T10101] ? __pfx_nfc_genl_dump_targets_done+0x10/0x10 [ 221.319452][T10101] netlink_rcv_skb+0x205/0x470 [ 221.319478][T10101] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.319510][T10101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.319552][T10101] ? down_read+0x1ad/0x2e0 [ 221.319576][T10101] genl_rcv+0x28/0x40 [ 221.319603][T10101] netlink_unicast+0x758/0x8d0 [ 221.319637][T10101] netlink_sendmsg+0x805/0xb30 [ 221.319681][T10101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.319711][T10101] ? aa_sock_msg_perm+0x94/0x160 [ 221.319738][T10101] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.319762][T10101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.319790][T10101] __sock_sendmsg+0x21c/0x270 [ 221.319814][T10101] ____sys_sendmsg+0x505/0x830 [ 221.319849][T10101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.319888][T10101] ? import_iovec+0x74/0xa0 [ 221.319911][T10101] ___sys_sendmsg+0x21f/0x2a0 [ 221.319942][T10101] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.320011][T10101] ? __fget_files+0x2a/0x420 [ 221.320032][T10101] ? __fget_files+0x3a0/0x420 [ 221.320065][T10101] __x64_sys_sendmsg+0x19b/0x260 [ 221.320097][T10101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.320137][T10101] ? __pfx_ksys_write+0x10/0x10 [ 221.320152][T10101] ? rcu_is_watching+0x15/0xb0 [ 221.320188][T10101] ? do_syscall_64+0xbe/0x3b0 [ 221.320214][T10101] do_syscall_64+0xfa/0x3b0 [ 221.320232][T10101] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.320249][T10101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.320268][T10101] ? clear_bhb_loop+0x60/0xb0 [ 221.320292][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.320311][T10101] RIP: 0033:0x7f8e01f8e929 [ 221.320329][T10101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.320345][T10101] RSP: 002b:00007f8e02e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.320366][T10101] RAX: ffffffffffffffda RBX: 00007f8e021b5fa0 RCX: 00007f8e01f8e929 [ 221.320380][T10101] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 221.320392][T10101] RBP: 00007f8e02e02090 R08: 0000000000000000 R09: 0000000000000000 [ 221.320405][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.320416][T10101] R13: 0000000000000000 R14: 00007f8e021b5fa0 R15: 00007ffd3a027088 [ 221.320447][T10101] [ 221.629979][T10109] xt_bpf: check failed: parse error [ 221.715127][T10040] bridge_slave_0: entered promiscuous mode [ 221.737034][T10040] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.746666][T10040] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.754110][T10040] bridge_slave_1: entered allmulticast mode [ 221.765080][T10040] bridge_slave_1: entered promiscuous mode [ 221.841327][T10040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.863938][T10040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.994117][T10040] team0: Port device team_slave_0 added [ 222.003049][T10118] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 222.022606][T10040] team0: Port device team_slave_1 added [ 222.094081][ T5925] bridge_slave_1: left allmulticast mode [ 222.109079][ T5925] bridge_slave_1: left promiscuous mode [ 222.122154][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.122540][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1555'. [ 222.142802][ T5925] bridge_slave_0: left allmulticast mode [ 222.157209][ T5925] bridge_slave_0: left promiscuous mode [ 222.166789][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.614174][ T5925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.626198][ T5925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.647184][ T5925] bond0 (unregistering): Released all slaves [ 222.744793][ T5925] bond1 (unregistering): (slave veth5): Releasing active interface [ 222.754422][ T5925] bond1 (unregistering): Released all slaves [ 222.885320][T10040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.912638][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.941664][T10040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.955168][T10040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.962226][T10040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.988735][T10040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.092919][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 223.143894][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1564'. [ 223.169975][T10139] syzkaller0: entered promiscuous mode [ 223.176588][T10139] syzkaller0: entered allmulticast mode [ 223.200657][T10141] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 223.249931][T10141] CPU: 1 UID: 0 PID: 10141 Comm: syz.2.1565 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 223.249960][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.249974][T10141] Call Trace: [ 223.249983][T10141] [ 223.249992][T10141] dump_stack_lvl+0x189/0x250 [ 223.250034][T10141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.250067][T10141] ? __pfx__printk+0x10/0x10 [ 223.250090][T10141] ? kernfs_path_from_node+0x2c/0x260 [ 223.250115][T10141] ? kernfs_path_from_node+0x2c/0x260 [ 223.250138][T10141] ? kernfs_path_from_node+0x2c/0x260 [ 223.250164][T10141] ? kernfs_path_from_node+0x22c/0x260 [ 223.250192][T10141] ? kernfs_path_from_node+0x2c/0x260 [ 223.250220][T10141] sysfs_warn_dup+0x8e/0xa0 [ 223.250243][T10141] sysfs_do_create_link_sd+0xc0/0x110 [ 223.250271][T10141] device_add_class_symlinks+0x1cf/0x240 [ 223.250298][T10141] device_add+0x475/0xb50 [ 223.250326][T10141] wiphy_register+0x199a/0x26b0 [ 223.250372][T10141] ? __pfx_wiphy_register+0x10/0x10 [ 223.250395][T10141] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 223.250431][T10141] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 223.250476][T10141] ieee80211_register_hw+0x33e1/0x4120 [ 223.250523][T10141] ? ieee80211_register_hw+0x13f1/0x4120 [ 223.250560][T10141] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 223.250592][T10141] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 223.250630][T10141] ? __hrtimer_setup+0x187/0x210 [ 223.250657][T10141] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 223.250687][T10141] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 223.250760][T10141] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 223.250780][T10141] ? trace_kmalloc+0x1f/0xd0 [ 223.250795][T10141] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 223.250813][T10141] ? kstrndup+0xbf/0x160 [ 223.250846][T10141] hwsim_new_radio_nl+0xea4/0x1b10 [ 223.250870][T10141] ? __pfx___nla_validate_parse+0x10/0x10 [ 223.250912][T10141] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 223.250946][T10141] ? __nla_parse+0x40/0x60 [ 223.250976][T10141] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 223.251003][T10141] genl_family_rcv_msg_doit+0x212/0x300 [ 223.251028][T10141] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 223.251070][T10141] ? bpf_lsm_capable+0x9/0x20 [ 223.251086][T10141] ? security_capable+0x7e/0x2e0 [ 223.251132][T10141] genl_rcv_msg+0x60e/0x790 [ 223.251170][T10141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.251198][T10141] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 223.251238][T10141] netlink_rcv_skb+0x205/0x470 [ 223.251263][T10141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 223.251294][T10141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.251338][T10141] ? down_read+0x1ad/0x2e0 [ 223.251362][T10141] genl_rcv+0x28/0x40 [ 223.251389][T10141] netlink_unicast+0x758/0x8d0 [ 223.251423][T10141] netlink_sendmsg+0x805/0xb30 [ 223.251458][T10141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.251488][T10141] ? aa_sock_msg_perm+0x94/0x160 [ 223.251515][T10141] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.251538][T10141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.251564][T10141] __sock_sendmsg+0x21c/0x270 [ 223.251607][T10141] ____sys_sendmsg+0x505/0x830 [ 223.251645][T10141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.251688][T10141] ? import_iovec+0x74/0xa0 [ 223.251714][T10141] ___sys_sendmsg+0x21f/0x2a0 [ 223.251754][T10141] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.251831][T10141] ? __fget_files+0x2a/0x420 [ 223.251853][T10141] ? __fget_files+0x3a0/0x420 [ 223.251890][T10141] __x64_sys_sendmsg+0x19b/0x260 [ 223.251925][T10141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.251971][T10141] ? rcu_is_watching+0x15/0xb0 [ 223.252010][T10141] ? do_syscall_64+0xbe/0x3b0 [ 223.252037][T10141] do_syscall_64+0xfa/0x3b0 [ 223.252057][T10141] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.252077][T10141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.252098][T10141] ? clear_bhb_loop+0x60/0xb0 [ 223.252125][T10141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.252145][T10141] RIP: 0033:0x7f8e01f8e929 [ 223.252164][T10141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.252183][T10141] RSP: 002b:00007f8e02e02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.252207][T10141] RAX: ffffffffffffffda RBX: 00007f8e021b5fa0 RCX: 00007f8e01f8e929 [ 223.252223][T10141] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 223.252236][T10141] RBP: 00007f8e02010b39 R08: 0000000000000000 R09: 0000000000000000 [ 223.252248][T10141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.252260][T10141] R13: 0000000000000000 R14: 00007f8e021b5fa0 R15: 00007ffd3a027088 [ 223.252295][T10141] [ 223.710613][ T5840] Bluetooth: hci1: command tx timeout [ 223.728183][T10040] hsr_slave_0: entered promiscuous mode [ 223.734504][T10040] hsr_slave_1: entered promiscuous mode [ 223.757623][T10040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.765209][T10040] Cannot create hsr debugfs directory [ 224.103258][T10171] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.161500][T10173] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 225.737622][ T5840] Bluetooth: hci1: command tx timeout [ 225.975209][T10213] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 226.003855][T10213] CPU: 0 UID: 0 PID: 10213 Comm: syz.0.1588 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 226.003884][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.003896][T10213] Call Trace: [ 226.003903][T10213] [ 226.003911][T10213] dump_stack_lvl+0x189/0x250 [ 226.003966][T10213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.003997][T10213] ? __pfx__printk+0x10/0x10 [ 226.004030][T10213] ? kernfs_path_from_node+0x2c/0x260 [ 226.004050][T10213] ? kernfs_path_from_node+0x2c/0x260 [ 226.004070][T10213] ? kernfs_path_from_node+0x2c/0x260 [ 226.004093][T10213] ? kernfs_path_from_node+0x22c/0x260 [ 226.004112][T10213] ? kernfs_path_from_node+0x2c/0x260 [ 226.004153][T10213] sysfs_warn_dup+0x8e/0xa0 [ 226.004174][T10213] sysfs_do_create_link_sd+0xc0/0x110 [ 226.004199][T10213] device_add_class_symlinks+0x1cf/0x240 [ 226.004224][T10213] device_add+0x475/0xb50 [ 226.004257][T10213] wiphy_register+0x199a/0x26b0 [ 226.004298][T10213] ? __pfx_wiphy_register+0x10/0x10 [ 226.004323][T10213] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 226.004356][T10213] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 226.004388][T10213] ieee80211_register_hw+0x33e1/0x4120 [ 226.004434][T10213] ? ieee80211_register_hw+0x13f1/0x4120 [ 226.004487][T10213] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 226.004520][T10213] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.004574][T10213] ? __hrtimer_setup+0x187/0x210 [ 226.004620][T10213] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 226.004652][T10213] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 226.004711][T10213] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 226.004734][T10213] ? trace_kmalloc+0x1f/0xd0 [ 226.004750][T10213] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 226.004771][T10213] ? kstrndup+0xbf/0x160 [ 226.004807][T10213] hwsim_new_radio_nl+0xea4/0x1b10 [ 226.004834][T10213] ? __pfx___nla_validate_parse+0x10/0x10 [ 226.004881][T10213] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 226.004910][T10213] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 226.004939][T10213] ? __nla_parse+0x40/0x60 [ 226.004973][T10213] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 226.005002][T10213] genl_family_rcv_msg_doit+0x212/0x300 [ 226.005030][T10213] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.005077][T10213] ? bpf_lsm_capable+0x9/0x20 [ 226.005095][T10213] ? security_capable+0x7e/0x2e0 [ 226.005128][T10213] genl_rcv_msg+0x60e/0x790 [ 226.005167][T10213] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.005197][T10213] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 226.005246][T10213] netlink_rcv_skb+0x205/0x470 [ 226.005272][T10213] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.005306][T10213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.005352][T10213] ? down_read+0x1ad/0x2e0 [ 226.005378][T10213] genl_rcv+0x28/0x40 [ 226.005407][T10213] netlink_unicast+0x758/0x8d0 [ 226.005443][T10213] netlink_sendmsg+0x805/0xb30 [ 226.005480][T10213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.005511][T10213] ? aa_sock_msg_perm+0x94/0x160 [ 226.005540][T10213] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.005565][T10213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.005591][T10213] __sock_sendmsg+0x21c/0x270 [ 226.005618][T10213] ____sys_sendmsg+0x505/0x830 [ 226.005654][T10213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.005695][T10213] ? import_iovec+0x74/0xa0 [ 226.005719][T10213] ___sys_sendmsg+0x21f/0x2a0 [ 226.005752][T10213] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.005832][T10213] ? __fget_files+0x2a/0x420 [ 226.005852][T10213] ? __fget_files+0x3a0/0x420 [ 226.005884][T10213] __x64_sys_sendmsg+0x19b/0x260 [ 226.005916][T10213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.005975][T10213] ? rcu_is_watching+0x15/0xb0 [ 226.006013][T10213] ? do_syscall_64+0xbe/0x3b0 [ 226.006039][T10213] do_syscall_64+0xfa/0x3b0 [ 226.006058][T10213] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.006078][T10213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.006097][T10213] ? clear_bhb_loop+0x60/0xb0 [ 226.006133][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.006151][T10213] RIP: 0033:0x7fe81538e929 [ 226.006168][T10213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.006185][T10213] RSP: 002b:00007fe8131f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.006205][T10213] RAX: ffffffffffffffda RBX: 00007fe8155b5fa0 RCX: 00007fe81538e929 [ 226.006219][T10213] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 226.006238][T10213] RBP: 00007fe815410b39 R08: 0000000000000000 R09: 0000000000000000 [ 226.006249][T10213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.006260][T10213] R13: 0000000000000000 R14: 00007fe8155b5fa0 R15: 00007ffc98718598 [ 226.006309][T10213] [ 226.099432][T10040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.505130][ T5925] hsr_slave_0: left promiscuous mode [ 226.533773][ T5925] hsr_slave_1: left promiscuous mode [ 226.717351][T10230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1594'. [ 226.729323][T10230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1594'. [ 226.742165][T10231] tipc: Can't bind to reserved service type 0 [ 226.965647][ T5925] team0 (unregistering): Port device team_slave_1 removed [ 227.000106][ T5925] team0 (unregistering): Port device team_slave_0 removed [ 227.313199][T10040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.341428][T10230] ip6gretap0: entered promiscuous mode [ 227.349197][T10230] syz_tun: entered promiscuous mode [ 227.378769][T10040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.409661][T10040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.429770][ T49] netdevsim netdevsim3 ªªªªªª: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.462451][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.525893][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.586927][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.781762][T10040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.817238][ T5840] Bluetooth: hci1: command tx timeout [ 227.834815][T10040] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.862777][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.870055][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.895440][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.902654][ T6068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.917480][ C0] ------------[ cut here ]------------ [ 227.923156][ C0] WARNING: CPU: 0 PID: 5882 at net/ipv4/ipmr.c:2302 ip_mr_output+0xbb1/0xe70 [ 227.931986][ C0] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 227.936062][ C0] CPU: 0 UID: 0 PID: 5882 Comm: napi/wg0-0 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 227.948085][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.958188][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 227.963501][ C0] Code: df e9 63 f6 ff ff e8 ce 33 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 9a 09 4c ff e9 45 f6 ff ff e8 b0 33 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 a2 33 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 227.983142][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 227.989258][ C0] RAX: ffffffff89fa28a0 RBX: ffff8880290cb3c0 RCX: ffff88802f249e00 [ 227.992989][T10040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.997270][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.997304][ C0] RBP: ffffc90000007a10 R08: ffff88802f249e00 R09: 0000000000000004 [ 227.997322][ C0] R10: 0000000000000003 R11: ffffffff89fa1cf0 R12: 0000000000000010 [ 227.997338][ C0] R13: dffffc0000000000 R14: ffff88802fc51000 R15: 0000000000000000 [ 227.997355][ C0] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 227.997374][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 227.997391][ C0] CR2: 0000001b3041aff8 CR3: 000000006ba10000 CR4: 00000000003526f0 [ 227.997410][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 227.997423][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 227.997438][ C0] Call Trace: [ 227.997447][ C0] [ 227.997458][ C0] ? __pfx_dst_output+0x10/0x10 [ 227.997497][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 228.036260][T10040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.039753][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 228.039787][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 228.039820][ C0] ? skb_dst+0x4f/0xd0 [ 228.039853][ C0] ? dst_output+0x177/0x1c0 [ 228.125700][ C0] igmp_send_report+0x89e/0xdb0 [ 228.130588][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 228.135988][ C0] ? do_raw_spin_lock+0x121/0x290 [ 228.141076][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 228.146301][ C0] igmp_timer_expire+0x204/0x510 [ 228.151287][ C0] call_timer_fn+0x17e/0x5f0 [ 228.155896][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 228.161393][ C0] ? call_timer_fn+0xbe/0x5f0 [ 228.166093][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 228.171253][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.176498][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.181715][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 228.187249][ C0] __run_timer_base+0x61a/0x860 [ 228.192128][ C0] ? ktime_get+0x3e/0x1f0 [ 228.196515][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 228.201931][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 228.208237][ C0] run_timer_softirq+0xb7/0x180 [ 228.213130][ C0] handle_softirqs+0x286/0x870 [ 228.217962][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 228.222789][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 228.228163][ C0] __irq_exit_rcu+0xca/0x1f0 [ 228.232798][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 228.238097][ C0] irq_exit_rcu+0x9/0x30 [ 228.242382][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 228.248088][ C0] [ 228.251045][ C0] [ 228.254000][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 228.260047][ C0] RIP: 0010:do_exit+0x1856/0x22e0 [ 228.265110][ C0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 d3 d5 9e 00 4c 8b 3b bb 08 00 00 00 41 be f8 7f 00 00 49 8d 3c 1f 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 ae d5 9e 00 49 83 3c 1f 00 75 0f e8 82 57 [ 228.284762][ C0] RSP: 0018:ffffc900043dfc00 EFLAGS: 00000a06 [ 228.290887][ C0] RAX: 1ffff9200087b3e4 RBX: 0000000000001f20 RCX: ffff88802f249e00 [ 228.298906][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900043d9f20 [ 228.306977][ C0] RBP: ffffc900043dfd58 R08: ffffffff8fa11ff7 R09: 1ffffffff1f423fe [ 228.314997][ C0] R10: dffffc0000000000 R11: fffffbfff1f423ff R12: dffffc0000000000 [ 228.323026][ C0] R13: 1ffff11005e49486 R14: 00000000000060e0 R15: ffffc900043d8000 [ 228.331075][ C0] ? __pfx_do_exit+0x10/0x10 [ 228.335691][ C0] ? schedule+0x91/0x360 [ 228.340054][ C0] ? kthread_should_stop+0xac/0xf0 [ 228.345256][ C0] kthread_exit+0x22c/0x280 [ 228.349825][ C0] kthread+0x72f/0x8a0 [ 228.353934][ C0] ? __pfx_napi_threaded_poll+0x10/0x10 [ 228.359624][ C0] ? __pfx_kthread+0x10/0x10 [ 228.364250][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.369587][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.374799][ C0] ? __pfx_kthread+0x10/0x10 [ 228.379431][ C0] ret_from_fork+0x3f9/0x770 [ 228.384046][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 228.389326][ C0] ? __switch_to_asm+0x39/0x70 [ 228.394114][ C0] ? __switch_to_asm+0x33/0x70 [ 228.398914][ C0] ? __pfx_kthread+0x10/0x10 [ 228.403518][ C0] ret_from_fork_asm+0x1a/0x30 [ 228.408326][ C0] [ 228.411374][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 228.418663][ C0] CPU: 0 UID: 0 PID: 5882 Comm: napi/wg0-0 Not tainted 6.16.0-rc2-syzkaller-00591-g4f4040ea5d3e #0 PREEMPT(full) [ 228.430636][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.440700][ C0] Call Trace: [ 228.443980][ C0] [ 228.446823][ C0] dump_stack_lvl+0x99/0x250 [ 228.451427][ C0] ? __asan_memcpy+0x40/0x70 [ 228.456026][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.461238][ C0] ? __pfx__printk+0x10/0x10 [ 228.465844][ C0] panic+0x2db/0x790 [ 228.469769][ C0] ? __pfx_panic+0x10/0x10 [ 228.474197][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 228.479401][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 228.484341][ C0] __warn+0x31b/0x4b0 [ 228.488349][ C0] ? ip_mr_output+0xbb1/0xe70 [ 228.493073][ C0] ? ip_mr_output+0xbb1/0xe70 [ 228.497759][ C0] report_bug+0x2be/0x4f0 [ 228.502095][ C0] ? ip_mr_output+0xbb1/0xe70 [ 228.506812][ C0] ? ip_mr_output+0xbb1/0xe70 [ 228.511498][ C0] ? ip_mr_output+0xbb3/0xe70 [ 228.516188][ C0] handle_bug+0x84/0x160 [ 228.520432][ C0] exc_invalid_op+0x1a/0x50 [ 228.524945][ C0] asm_exc_invalid_op+0x1a/0x20 [ 228.529796][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 228.535084][ C0] Code: df e9 63 f6 ff ff e8 ce 33 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 9a 09 4c ff e9 45 f6 ff ff e8 b0 33 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 a2 33 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 228.554681][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 228.560746][ C0] RAX: ffffffff89fa28a0 RBX: ffff8880290cb3c0 RCX: ffff88802f249e00 [ 228.568722][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.576692][ C0] RBP: ffffc90000007a10 R08: ffff88802f249e00 R09: 0000000000000004 [ 228.584676][ C0] R10: 0000000000000003 R11: ffffffff89fa1cf0 R12: 0000000000000010 [ 228.592667][ C0] R13: dffffc0000000000 R14: ffff88802fc51000 R15: 0000000000000000 [ 228.600645][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 228.605672][ C0] ? ip_mr_output+0xbb0/0xe70 [ 228.610376][ C0] ? __pfx_dst_output+0x10/0x10 [ 228.615231][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 228.620606][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 228.626672][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 228.631700][ C0] ? skb_dst+0x4f/0xd0 [ 228.635777][ C0] ? dst_output+0x177/0x1c0 [ 228.640282][ C0] igmp_send_report+0x89e/0xdb0 [ 228.645134][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 228.650506][ C0] ? do_raw_spin_lock+0x121/0x290 [ 228.655596][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 228.660795][ C0] igmp_timer_expire+0x204/0x510 [ 228.665740][ C0] call_timer_fn+0x17e/0x5f0 [ 228.670330][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 228.675788][ C0] ? call_timer_fn+0xbe/0x5f0 [ 228.680467][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 228.685606][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.690804][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.696091][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 228.701566][ C0] __run_timer_base+0x61a/0x860 [ 228.706446][ C0] ? ktime_get+0x3e/0x1f0 [ 228.710792][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 228.716163][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 228.722416][ C0] run_timer_softirq+0xb7/0x180 [ 228.727274][ C0] handle_softirqs+0x286/0x870 [ 228.732051][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 228.736832][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 228.742163][ C0] __irq_exit_rcu+0xca/0x1f0 [ 228.746770][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 228.751998][ C0] irq_exit_rcu+0x9/0x30 [ 228.756249][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 228.761892][ C0] [ 228.764828][ C0] [ 228.767789][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 228.773778][ C0] RIP: 0010:do_exit+0x1856/0x22e0 [ 228.778811][ C0] Code: e8 03 42 80 3c 20 00 74 08 48 89 df e8 d3 d5 9e 00 4c 8b 3b bb 08 00 00 00 41 be f8 7f 00 00 49 8d 3c 1f 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 ae d5 9e 00 49 83 3c 1f 00 75 0f e8 82 57 [ 228.798419][ C0] RSP: 0018:ffffc900043dfc00 EFLAGS: 00000a06 [ 228.805180][ C0] RAX: 1ffff9200087b3e4 RBX: 0000000000001f20 RCX: ffff88802f249e00 [ 228.813151][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900043d9f20 [ 228.821122][ C0] RBP: ffffc900043dfd58 R08: ffffffff8fa11ff7 R09: 1ffffffff1f423fe [ 228.829102][ C0] R10: dffffc0000000000 R11: fffffbfff1f423ff R12: dffffc0000000000 [ 228.837070][ C0] R13: 1ffff11005e49486 R14: 00000000000060e0 R15: ffffc900043d8000 [ 228.845070][ C0] ? __pfx_do_exit+0x10/0x10 [ 228.849664][ C0] ? schedule+0x91/0x360 [ 228.853920][ C0] ? kthread_should_stop+0xac/0xf0 [ 228.859038][ C0] kthread_exit+0x22c/0x280 [ 228.863554][ C0] kthread+0x72f/0x8a0 [ 228.867634][ C0] ? __pfx_napi_threaded_poll+0x10/0x10 [ 228.873184][ C0] ? __pfx_kthread+0x10/0x10 [ 228.877784][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 228.882995][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.888190][ C0] ? __pfx_kthread+0x10/0x10 [ 228.892794][ C0] ret_from_fork+0x3f9/0x770 [ 228.897407][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 228.902539][ C0] ? __switch_to_asm+0x39/0x70 [ 228.907304][ C0] ? __switch_to_asm+0x33/0x70 [ 228.912063][ C0] ? __pfx_kthread+0x10/0x10 [ 228.916659][ C0] ret_from_fork_asm+0x1a/0x30 [ 228.921438][ C0] [ 228.924889][ C0] Kernel Offset: disabled [ 228.929219][ C0] Rebooting in 86400 seconds..