last executing test programs: 57.822081427s ago: executing program 0 (id=1840): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x2000d041}, 0x4008000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r1, 0x6, 0x7fff, 0x6}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140f, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x453, 0x800, 0x70bd28, 0x25dfdbfd, "1ab8da2e2c64aa1993e920db76e8c88fba", ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x8, 0x100, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0x4, 0x73, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x8, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@local, 0x3}, {@multicast2, 0x8}, {@multicast2, 0x7}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xc, 0x9, 0x4cf, 0x280, r2, 0x9, '\x00', r4, r2, 0x3, 0x1, 0x2, 0x8, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1010}, 0x4000) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0xb, 0x6, 0x6a814f03da037b6f, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc7}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x54}}, 0x2000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x61c080, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x1409, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20000050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) connect$bt_l2cap(r2, &(0x7f0000000d40)={0x1f, 0x400, @any, 0x8}, 0xe) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000d80)={{0xa, 0x4e24, 0x80000000, @mcast1, 0x4}, {0xa, 0x4e21, 0x400, @private2, 0xfffffff7}, 0x0, {[0x0, 0x5, 0x8, 0x101, 0x7482d4f, 0x0, 0x5059, 0x101]}}, 0x5c) syz_emit_ethernet(0x5e, &(0x7f0000000e00)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x1f, 0x1, 0x0, 0x0, "2fff699ddbd6ad82230e7a3f3ba94308dbe9c569000c03deaf5460e5be95bbd73e72c7e5fc807dcce7d2fd4a21c40a1381672c57a00498387fcf895c59b2957b"}}}}, &(0x7f0000000e80)={0x1, 0x3, [0x4df, 0x2ca, 0x459, 0x59d]}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 45.456074534s ago: executing program 0 (id=1840): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x2000d041}, 0x4008000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r1, 0x6, 0x7fff, 0x6}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140f, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x453, 0x800, 0x70bd28, 0x25dfdbfd, "1ab8da2e2c64aa1993e920db76e8c88fba", ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x8, 0x100, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0x4, 0x73, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x8, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@local, 0x3}, {@multicast2, 0x8}, {@multicast2, 0x7}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xc, 0x9, 0x4cf, 0x280, r2, 0x9, '\x00', r4, r2, 0x3, 0x1, 0x2, 0x8, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1010}, 0x4000) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0xb, 0x6, 0x6a814f03da037b6f, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc7}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x54}}, 0x2000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x61c080, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x1409, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20000050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) connect$bt_l2cap(r2, &(0x7f0000000d40)={0x1f, 0x400, @any, 0x8}, 0xe) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000d80)={{0xa, 0x4e24, 0x80000000, @mcast1, 0x4}, {0xa, 0x4e21, 0x400, @private2, 0xfffffff7}, 0x0, {[0x0, 0x5, 0x8, 0x101, 0x7482d4f, 0x0, 0x5059, 0x101]}}, 0x5c) syz_emit_ethernet(0x5e, &(0x7f0000000e00)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x1f, 0x1, 0x0, 0x0, "2fff699ddbd6ad82230e7a3f3ba94308dbe9c569000c03deaf5460e5be95bbd73e72c7e5fc807dcce7d2fd4a21c40a1381672c57a00498387fcf895c59b2957b"}}}}, &(0x7f0000000e80)={0x1, 0x3, [0x4df, 0x2ca, 0x459, 0x59d]}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 30.711847132s ago: executing program 0 (id=1840): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x2000d041}, 0x4008000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r1, 0x6, 0x7fff, 0x6}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140f, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x453, 0x800, 0x70bd28, 0x25dfdbfd, "1ab8da2e2c64aa1993e920db76e8c88fba", ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x8, 0x100, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0x4, 0x73, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x8, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@local, 0x3}, {@multicast2, 0x8}, {@multicast2, 0x7}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xc, 0x9, 0x4cf, 0x280, r2, 0x9, '\x00', r4, r2, 0x3, 0x1, 0x2, 0x8, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1010}, 0x4000) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0xb, 0x6, 0x6a814f03da037b6f, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc7}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x54}}, 0x2000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x61c080, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x1409, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20000050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) connect$bt_l2cap(r2, &(0x7f0000000d40)={0x1f, 0x400, @any, 0x8}, 0xe) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000d80)={{0xa, 0x4e24, 0x80000000, @mcast1, 0x4}, {0xa, 0x4e21, 0x400, @private2, 0xfffffff7}, 0x0, {[0x0, 0x5, 0x8, 0x101, 0x7482d4f, 0x0, 0x5059, 0x101]}}, 0x5c) syz_emit_ethernet(0x5e, &(0x7f0000000e00)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x1f, 0x1, 0x0, 0x0, "2fff699ddbd6ad82230e7a3f3ba94308dbe9c569000c03deaf5460e5be95bbd73e72c7e5fc807dcce7d2fd4a21c40a1381672c57a00498387fcf895c59b2957b"}}}}, &(0x7f0000000e80)={0x1, 0x3, [0x4df, 0x2ca, 0x459, 0x59d]}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 21.647867412s ago: executing program 0 (id=1840): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x2000d041}, 0x4008000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r1, 0x6, 0x7fff, 0x6}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140f, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x453, 0x800, 0x70bd28, 0x25dfdbfd, "1ab8da2e2c64aa1993e920db76e8c88fba", ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x8, 0x100, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0x4, 0x73, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x8, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@local, 0x3}, {@multicast2, 0x8}, {@multicast2, 0x7}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xc, 0x9, 0x4cf, 0x280, r2, 0x9, '\x00', r4, r2, 0x3, 0x1, 0x2, 0x8, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1010}, 0x4000) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0xb, 0x6, 0x6a814f03da037b6f, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc7}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x54}}, 0x2000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x61c080, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x1409, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20000050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) connect$bt_l2cap(r2, &(0x7f0000000d40)={0x1f, 0x400, @any, 0x8}, 0xe) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000d80)={{0xa, 0x4e24, 0x80000000, @mcast1, 0x4}, {0xa, 0x4e21, 0x400, @private2, 0xfffffff7}, 0x0, {[0x0, 0x5, 0x8, 0x101, 0x7482d4f, 0x0, 0x5059, 0x101]}}, 0x5c) syz_emit_ethernet(0x5e, &(0x7f0000000e00)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x1f, 0x1, 0x0, 0x0, "2fff699ddbd6ad82230e7a3f3ba94308dbe9c569000c03deaf5460e5be95bbd73e72c7e5fc807dcce7d2fd4a21c40a1381672c57a00498387fcf895c59b2957b"}}}}, &(0x7f0000000e80)={0x1, 0x3, [0x4df, 0x2ca, 0x459, 0x59d]}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 12.59748256s ago: executing program 0 (id=1840): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x2000d041}, 0x4008000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r1, 0x6, 0x7fff, 0x6}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140f, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x453, 0x800, 0x70bd28, 0x25dfdbfd, "1ab8da2e2c64aa1993e920db76e8c88fba", ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x8, 0x100, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0x4, 0x73, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x8, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@local, 0x3}, {@multicast2, 0x8}, {@multicast2, 0x7}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xc, 0x9, 0x4cf, 0x280, r2, 0x9, '\x00', r4, r2, 0x3, 0x1, 0x2, 0x8, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1010}, 0x4000) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0xb, 0x6, 0x6a814f03da037b6f, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc7}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x54}}, 0x2000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x61c080, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x1409, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20000050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) connect$bt_l2cap(r2, &(0x7f0000000d40)={0x1f, 0x400, @any, 0x8}, 0xe) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000d80)={{0xa, 0x4e24, 0x80000000, @mcast1, 0x4}, {0xa, 0x4e21, 0x400, @private2, 0xfffffff7}, 0x0, {[0x0, 0x5, 0x8, 0x101, 0x7482d4f, 0x0, 0x5059, 0x101]}}, 0x5c) syz_emit_ethernet(0x5e, &(0x7f0000000e00)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x1f, 0x1, 0x0, 0x0, "2fff699ddbd6ad82230e7a3f3ba94308dbe9c569000c03deaf5460e5be95bbd73e72c7e5fc807dcce7d2fd4a21c40a1381672c57a00498387fcf895c59b2957b"}}}}, &(0x7f0000000e80)={0x1, 0x3, [0x4df, 0x2ca, 0x459, 0x59d]}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 3.372981244s ago: executing program 3 (id=2302): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) 3.325180763s ago: executing program 4 (id=2303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x130}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x98, &(0x7f0000000000), &(0x7f0000000240)=0x4) r4 = socket$inet(0x2, 0x3, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fefffffffddbdf257b81d38608000300", @ANYRES32=r7], 0x38}}, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x88, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4048040) 3.297307565s ago: executing program 3 (id=2304): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.079430649s ago: executing program 1 (id=2306): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, 0x0, 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) unshare(0x20000400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) 3.069518158s ago: executing program 3 (id=2307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x11, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000) epoll_create1(0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000280)={0x5, 0x6, 0x3}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r3, 0x2000000, 0x1d, 0xfffffffffffffcbf, &(0x7f0000000440)="13435cd378b76a90bd300500dd0501d66fa9d9063e99ff1ec42f5a00", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x1d, &(0x7f00000008c0)=0x2, 0x4) close(0x4) 3.009623139s ago: executing program 4 (id=2309): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)='=', 0x1}], 0x1}, 0x20000001) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.796955617s ago: executing program 1 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x101, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000080)="85", 0x1, 0x890, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000000170a0101"], 0x20}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x4008000) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0000f14cffffffffffffaaaaaaaaaabb8100400086dd"], 0x32) 2.156618527s ago: executing program 2 (id=2314): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) 1.993196473s ago: executing program 2 (id=2315): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1.992836064s ago: executing program 4 (id=2316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x5}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x40400a4}, 0x808c0) 1.742282532s ago: executing program 2 (id=2317): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.732501094s ago: executing program 3 (id=2318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0xc8, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_USERDATA={0xb3, 0x6, "8f86b2259df40182bfdbeddb17abe5f091566ce940391a5ad70a32794322904dd4911d1190948993e897638ff29e2b0b5b66086efad9c4e183659a3693d3a3c866f26c1374fc50c8fb50a78bceae89a2374f65905d76ea471ad5dcebff2ff4cb258d01b519b6814a080dab36cfc81903a1a0ac53246cbc851e1f288b0a462255fa6785afca03027ae411ee1433fd78bb6e7b5f2d168b7f5fc02435aa011afd66e5ac6185e5bec9827fe10bc76d5dd1"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0x17c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a01010000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x8c}}, 0x0) sendto$inet6(r2, &(0x7f0000000100)='b', 0x1, 0x0, &(0x7f00000005c0)={0xa, 0x0, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x4}, 0x15}, 0x25) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000480)={0x2045, {{0xa, 0x4e24, 0xfffffff8, @remote, 0x200}}, 0x1}, 0x90) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x7c, 0x30, 0x9, 0xfffffffe, 0x25dfdbfd, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xf5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5ebc7}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2000}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r7 = socket$netlink(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r8, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="200000005e00210000000000feffffff0c000000010000000000008004007f80"], 0x20}], 0x1}, 0x20000080) close(0x4) 1.731932331s ago: executing program 4 (id=2319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x130}}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x98, &(0x7f0000000000), &(0x7f0000000240)=0x4) r4 = socket$inet(0x2, 0x3, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fefffffffddbdf257b81d38608000300", @ANYRES32=r7], 0x38}}, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x88, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4048040) 1.552306459s ago: executing program 0 (id=1840): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x3f9, 0x1, 0x70bd25, 0x25dfdbfb, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x2000d041}, 0x4008000) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={r1, 0x6, 0x7fff, 0x6}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x140f, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x453, 0x800, 0x70bd28, 0x25dfdbfd, "1ab8da2e2c64aa1993e920db76e8c88fba", ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x8, 0x100, {{0x10, 0x4, 0x0, 0x6, 0x40, 0x68, 0x0, 0x4, 0x73, 0x0, @private=0xa010100, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xd5, 0x1, 0x8, [{@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@local, 0x3}, {@multicast2, 0x8}, {@multicast2, 0x7}]}]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xc, 0x9, 0x4cf, 0x280, r2, 0x9, '\x00', r4, r2, 0x3, 0x1, 0x2, 0x8, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r6, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1010}, 0x4000) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, 0xb, 0x6, 0x6a814f03da037b6f, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xc7}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}]}, 0x54}}, 0x2000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000a80), 0x61c080, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x1409, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20000050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000d00), r2) connect$bt_l2cap(r2, &(0x7f0000000d40)={0x1f, 0x400, @any, 0x8}, 0xe) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000d80)={{0xa, 0x4e24, 0x80000000, @mcast1, 0x4}, {0xa, 0x4e21, 0x400, @private2, 0xfffffff7}, 0x0, {[0x0, 0x5, 0x8, 0x101, 0x7482d4f, 0x0, 0x5059, 0x101]}}, 0x5c) syz_emit_ethernet(0x5e, &(0x7f0000000e00)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x1f, 0x1, 0x0, 0x0, "2fff699ddbd6ad82230e7a3f3ba94308dbe9c569000c03deaf5460e5be95bbd73e72c7e5fc807dcce7d2fd4a21c40a1381672c57a00498387fcf895c59b2957b"}}}}, &(0x7f0000000e80)={0x1, 0x3, [0x4df, 0x2ca, 0x459, 0x59d]}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PBSS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) 527.726362ms ago: executing program 1 (id=2320): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, 0x0, 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, 0x0) unshare(0x20000400) splice(0xffffffffffffffff, &(0x7f0000000040)=0x3ede51f8, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffff9, 0xffffffffffffffff, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000041000701fcfffffffddbdf25017c0000040036802e01"], 0x148}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 526.57989ms ago: executing program 2 (id=2321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000f10000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001080008400000000114000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x2c}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x10) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local={0xac, 0x14, 0x1d}}}]}, 0x58}, 0x1, 0x7}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@alu={0x6, 0x0, 0x3, 0x0, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @alu={0x4}, @exit], {0x95, 0x2}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000600), r3) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r9, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040021}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x84, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2004c845}, 0x44081) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 525.8733ms ago: executing program 3 (id=2322): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3052, 0xffffffffffffffff, 0x2000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="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"], 0x144}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r10, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0xa6ff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 525.136001ms ago: executing program 4 (id=2323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001100010028bd", @ANYRES32=0x0, @ANYBLOB="e204000080100000140035"], 0x34}, 0x1, 0x0, 0x0, 0x20000055}, 0x64040100) 371.780472ms ago: executing program 1 (id=2324): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x30, r1, 0x805, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 291.911451ms ago: executing program 4 (id=2325): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x300000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 173.552233ms ago: executing program 3 (id=2326): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000800850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r4, &(0x7f0000001640)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xffffffffffffff18, 0x840, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x2, 0x2, @vifc_lcl_addr=@broadcast, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f00000007c0)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000070000000000"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6d616e676865000000000000000000000000000000000000000000000000000005"], 0x78) 172.772881ms ago: executing program 1 (id=2327): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000003c0)=[{0x0, 0x1, {}, {0x1, 0xff, 0x2}, 0x2, 0x2}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x0, 0xf0, 0x2}, 0xfe, 0xff}], 0x40) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58, @void, @value}, 0xfeb0) 121.697831ms ago: executing program 2 (id=2328): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (fail_nth: 3) 797.297µs ago: executing program 1 (id=2329): syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2c, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x24008804) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newsa={0x140, 0x10, 0x633, 0x0, 0xfffffffc, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in=@private=0xa010102, {0x327, 0x5, 0x0, 0x4, 0xfff, 0x0, 0x8}, {}, {0x8f, 0x80000000, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x16, 0x6}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) write(r3, &(0x7f0000000040)="0500ff97010000", 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x5c, 0x24, 0xf0b, 0x400004, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20060000}, 0x0) sendmmsg$inet(r6, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 0s ago: executing program 2 (id=2330): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3052, 0xffffffffffffffff, 0x2000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB="44010000", @ANYRES16=r4, @ANYBLOB="010000000000000008000100000004000480080002000100000008000100000000000400088018010c8054000b800800090000000000080009000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000008000900000000000c000b8008000a000000000014000b8008000900c81e173808000a0083ec000004000b8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a00000000003c000b80080009000000000008000a000000000008000a000000000008000900000000000800090080000000080009000000000008000900000000000c000b800800090000000080"], 0x144}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r10, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r0, 0x1, 0x0, 0xa6ff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) kernel console output (not intermixed with test programs): ) comm="syz.3.1163" name="memory.events" dev="tmpfs" ino=1098 res=0 errno=0 [ 170.085738][ T30] audit: type=1804 audit(1744318559.162:59): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1163" name="/newroot/214/memory.events" dev="tmpfs" ino=1098 res=1 errno=0 [ 170.431340][ T8960] __nla_validate_parse: 22 callbacks suppressed [ 170.431362][ T8960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1170'. [ 170.601489][ T8964] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 170.662086][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 170.689580][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 171.212916][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 171.256818][ T8993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.419588][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 171.456203][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 171.476897][ T9006] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 172.433751][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 172.509989][ T9045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.640800][ T9051] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 173.879270][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'. [ 173.934589][ T9102] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.214568][ T9113] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 174.729011][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 174.738223][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 174.891967][ T9147] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.154987][ T9162] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 175.885497][ T9198] __nla_validate_parse: 1 callbacks suppressed [ 175.885520][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 175.935364][ T9198] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.061678][ T9203] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 176.341146][ T30] audit: type=1800 audit(1744318565.492:60): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1259" name="memory.events" dev="tmpfs" ino=1310 res=0 errno=0 [ 176.410311][ T30] audit: type=1804 audit(1744318565.492:61): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1259" name="/newroot/257/memory.events" dev="tmpfs" ino=1310 res=1 errno=0 [ 176.776277][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 176.820951][ T9239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.250805][ T9252] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 177.454260][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 177.961534][ T9280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 178.104792][ T9280] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.322304][ T9297] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 178.998492][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 179.247423][ T9330] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.085441][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 180.149361][ T9368] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.182260][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 180.276429][ T9372] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.325989][ T30] audit: type=1800 audit(1744318570.462:62): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1331" name="memory.events" dev="tmpfs" ino=1234 res=0 errno=0 [ 181.412912][ T30] audit: type=1804 audit(1744318570.462:63): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1331" name="/newroot/241/memory.events" dev="tmpfs" ino=1234 res=1 errno=0 [ 181.492056][ T30] audit: type=1800 audit(1744318570.462:64): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1332" name="memory.events" dev="tmpfs" ino=1371 res=0 errno=0 [ 181.531566][ T30] audit: type=1804 audit(1744318570.462:65): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1332" name="/newroot/269/memory.events" dev="tmpfs" ino=1371 res=1 errno=0 [ 181.636521][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'. [ 181.732756][ T9430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.954408][ T9444] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 181.963084][ T30] audit: type=1800 audit(1744318571.102:66): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1345" name="memory.events" dev="tmpfs" ino=1250 res=0 errno=0 [ 182.017681][ T30] audit: type=1804 audit(1744318571.102:67): pid=9448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1345" name="/newroot/244/memory.events" dev="tmpfs" ino=1250 res=1 errno=0 [ 182.503781][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 182.553897][ T9476] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.565552][ T30] audit: type=1800 audit(1744318571.712:68): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1357" name="memory.events" dev="tmpfs" ino=1266 res=0 errno=0 [ 182.607358][ T30] audit: type=1804 audit(1744318571.742:69): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1357" name="/newroot/247/memory.events" dev="tmpfs" ino=1266 res=1 errno=0 [ 182.815234][ T9489] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 183.464844][ T30] audit: type=1800 audit(1744318572.612:70): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1370" name="memory.events" dev="tmpfs" ino=1402 res=0 errno=0 [ 183.529616][ T30] audit: type=1804 audit(1744318572.642:71): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1370" name="/newroot/274/memory.events" dev="tmpfs" ino=1402 res=1 errno=0 [ 183.572644][ T30] audit: type=1800 audit(1744318572.722:72): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1381" name="memory.events" dev="tmpfs" ino=1514 res=0 errno=0 [ 183.673500][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1373'. [ 183.689675][ T9523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1372'. [ 183.705485][ T9524] siw: device registration error -23 [ 183.741687][ T9523] dummy0: entered promiscuous mode [ 183.750037][ T9523] dummy0: left promiscuous mode [ 183.802813][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1375'. [ 184.048015][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 184.104422][ T9539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.784076][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1388'. [ 185.125389][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1395'. [ 185.144278][ T9582] gretap0: entered promiscuous mode [ 185.171636][ T9582] gretap0: left promiscuous mode [ 185.498471][ T9595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.610626][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1404'. [ 186.365256][ T9644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1418'. [ 186.938681][ T9665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1430'. [ 187.112073][ T9680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1433'. [ 187.147882][ T9680] gretap0: entered promiscuous mode [ 187.181045][ T9680] gretap0: left promiscuous mode [ 187.548880][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1442'. [ 187.709205][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 187.709226][ T30] audit: type=1800 audit(1744318576.862:78): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1445" name="memory.events" dev="tmpfs" ino=1463 res=0 errno=0 [ 187.782368][ T30] audit: type=1804 audit(1744318576.892:79): pid=9709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1445" name="/newroot/286/memory.events" dev="tmpfs" ino=1463 res=1 errno=0 [ 188.249016][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1456'. [ 188.271707][ T9733] dummy0: entered promiscuous mode [ 188.285576][ T9733] dummy0: left promiscuous mode [ 188.373464][ T30] audit: type=1800 audit(1744318577.522:80): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1458" name="memory.events" dev="tmpfs" ino=1382 res=0 errno=0 [ 188.411375][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1459'. [ 188.414619][ T30] audit: type=1804 audit(1744318577.522:81): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1458" name="/newroot/270/memory.events" dev="tmpfs" ino=1382 res=1 errno=0 [ 188.986559][ T30] audit: type=1800 audit(1744318578.142:82): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1470" name="memory.events" dev="tmpfs" ino=1459 res=0 errno=0 [ 189.067243][ T30] audit: type=1804 audit(1744318578.172:83): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1470" name="/newroot/286/memory.events" dev="tmpfs" ino=1459 res=1 errno=0 [ 189.072464][ T9773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1472'. [ 189.117976][ T30] audit: type=1800 audit(1744318578.272:84): pid=9775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1471" name="memory.events" dev="tmpfs" ino=1403 res=0 errno=0 [ 189.159478][ T30] audit: type=1804 audit(1744318578.302:85): pid=9775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1471" name="/newroot/274/memory.events" dev="tmpfs" ino=1403 res=1 errno=0 [ 189.167049][ T9776] siw: device registration error -23 [ 189.240095][ T9779] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 189.269750][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1474'. [ 189.349115][ T9783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.636601][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1490'. [ 190.021181][ T9817] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 190.221822][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 190.242873][ T9828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'. [ 190.299960][ T9826] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.769256][ T9854] dummy0: entered promiscuous mode [ 190.780473][ T9854] dummy0: left promiscuous mode [ 190.889006][ T9859] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 191.256406][ T9872] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 192.563651][ T9902] __nla_validate_parse: 1 callbacks suppressed [ 192.563672][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1522'. [ 192.644530][ T9902] dummy0: entered promiscuous mode [ 192.671744][ T9902] dummy0: left promiscuous mode [ 192.750446][ T9908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1524'. [ 193.155728][ T30] audit: type=1800 audit(1744318582.302:86): pid=9930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1534" name="memory.events" dev="tmpfs" ino=1657 res=0 errno=0 [ 193.312065][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1537'. [ 193.559680][ T9944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.210757][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1549'. [ 194.385319][ T9973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.436143][ T9976] FAULT_INJECTION: forcing a failure. [ 194.436143][ T9976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.452092][ T9976] CPU: 1 UID: 0 PID: 9976 Comm: syz.3.1554 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 194.452123][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.452136][ T9976] Call Trace: [ 194.452144][ T9976] [ 194.452153][ T9976] dump_stack_lvl+0x241/0x360 [ 194.452193][ T9976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.452223][ T9976] ? __pfx__printk+0x10/0x10 [ 194.452267][ T9976] should_fail_ex+0x424/0x570 [ 194.452295][ T9976] _copy_from_iter+0x211/0x1c70 [ 194.452329][ T9976] ? __build_skb_around+0x247/0x3d0 [ 194.452367][ T9976] ? __alloc_skb+0x298/0x480 [ 194.452385][ T9976] ? __pfx__copy_from_iter+0x10/0x10 [ 194.452416][ T9976] ? __pfx___alloc_skb+0x10/0x10 [ 194.452438][ T9976] ? skb_put+0x114/0x1f0 [ 194.452462][ T9976] netlink_sendmsg+0x73c/0xcd0 [ 194.452507][ T9976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.452542][ T9976] ? aa_sock_msg_perm+0x91/0x160 [ 194.452577][ T9976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.452605][ T9976] __sock_sendmsg+0x221/0x270 [ 194.452636][ T9976] ____sys_sendmsg+0x523/0x860 [ 194.452668][ T9976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.452688][ T9976] ? __fget_files+0x2a/0x420 [ 194.452717][ T9976] ? __fget_files+0x2a/0x420 [ 194.452747][ T9976] __sys_sendmsg+0x271/0x360 [ 194.452776][ T9976] ? __pfx___sys_sendmsg+0x10/0x10 [ 194.452858][ T9976] ? do_syscall_64+0xb6/0x230 [ 194.452888][ T9976] do_syscall_64+0xf3/0x230 [ 194.452914][ T9976] ? clear_bhb_loop+0x45/0xa0 [ 194.452938][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.452958][ T9976] RIP: 0033:0x7f1f0518d169 [ 194.452977][ T9976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.452993][ T9976] RSP: 002b:00007f1f05f08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.453017][ T9976] RAX: ffffffffffffffda RBX: 00007f1f053a5fa0 RCX: 00007f1f0518d169 [ 194.453032][ T9976] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 194.453045][ T9976] RBP: 00007f1f05f08090 R08: 0000000000000000 R09: 0000000000000000 [ 194.453057][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.453070][ T9976] R13: 0000000000000000 R14: 00007f1f053a5fa0 R15: 00007fff3c0194f8 [ 194.453102][ T9976] [ 195.115389][T10000] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1565'. [ 195.540546][T10026] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.930314][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1582'. [ 196.330003][T10067] wireguard: wg2: Could not create IPv4 socket [ 196.452175][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1591'. [ 196.780601][T10076] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1592'. [ 196.954693][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1595'. [ 197.151577][T10091] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1600'. [ 197.906157][T10130] __nla_validate_parse: 1 callbacks suppressed [ 197.906187][T10130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1612'. [ 198.078843][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 198.088472][T10133] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1613'. [ 198.250484][T10141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1616'. [ 198.356067][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1619'. [ 198.387669][T10146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1619'. [ 198.451312][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1619'. [ 198.479684][T10146] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1619'. [ 198.561037][T10157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1623'. [ 198.762743][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1626'. [ 198.954613][T10182] bridge_slave_0: left allmulticast mode [ 198.961063][T10182] bridge_slave_0: left promiscuous mode [ 198.991385][T10182] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.022412][T10182] bridge_slave_1: left allmulticast mode [ 199.029024][T10182] bridge_slave_1: left promiscuous mode [ 199.035031][T10182] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.051442][T10182] bond0: (slave bond_slave_0): Releasing backup interface [ 199.064766][T10182] bond0: (slave bond_slave_1): Releasing backup interface [ 199.087295][T10182] team0: Port device team_slave_0 removed [ 199.100161][T10182] team0: Port device team_slave_1 removed [ 199.108799][T10182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.117344][T10182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.127212][T10182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.134763][T10182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.171544][T10186] team0: entered promiscuous mode [ 199.177138][T10186] team_slave_0: entered promiscuous mode [ 199.183068][T10186] team_slave_1: entered promiscuous mode [ 199.191409][T10186] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 199.202593][T10186] team0: left promiscuous mode [ 199.207558][T10186] team_slave_0: left promiscuous mode [ 199.213468][T10186] team_slave_1: left promiscuous mode [ 199.628989][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.637741][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.888284][ T5947] IPVS: starting estimator thread 0... [ 199.939642][T10204] bridge_slave_0: left allmulticast mode [ 199.945367][T10204] bridge_slave_0: left promiscuous mode [ 199.952153][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.035835][T10208] IPVS: using max 26 ests per chain, 62400 per kthread [ 200.095206][T10204] bridge_slave_1: left allmulticast mode [ 200.104254][T10204] bridge_slave_1: left promiscuous mode [ 200.121307][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.314132][T10204] bond0: (slave bond_slave_0): Releasing backup interface [ 200.512995][T10204] bond0: (slave bond_slave_1): Releasing backup interface [ 200.683206][T10204] team_slave_0: left promiscuous mode [ 200.723017][T10204] team0: Port device team_slave_0 removed [ 200.737826][T10204] team_slave_1: left promiscuous mode [ 200.798468][T10204] team0: Port device team_slave_1 removed [ 200.815667][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.823648][T10204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.849348][T10204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.858145][T10204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.572911][T10255] team0: entered promiscuous mode [ 201.578482][T10255] team_slave_0: entered promiscuous mode [ 201.584561][T10255] team_slave_1: entered promiscuous mode [ 201.593052][T10255] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.605298][T10255] team0: left promiscuous mode [ 201.611354][T10255] team_slave_0: left promiscuous mode [ 201.619141][T10255] team_slave_1: left promiscuous mode [ 202.176875][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.200330][T10276] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 202.455356][T10289] bond0: entered promiscuous mode [ 202.491174][T10289] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.529936][T10289] bond0: left promiscuous mode [ 203.019560][T10321] __nla_validate_parse: 11 callbacks suppressed [ 203.019583][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 203.093989][T10321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.394054][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1685'. [ 203.414566][T10334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.429997][T10333] bond0: entered promiscuous mode [ 203.443643][T10333] bond_slave_0: entered promiscuous mode [ 203.452943][T10333] bond_slave_1: entered promiscuous mode [ 203.467932][T10333] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.537015][T10325] infiniband syz!: set down [ 203.541832][T10325] infiniband syz!: added team_slave_0 [ 203.570434][T10333] bond0: left promiscuous mode [ 203.579217][T10333] bond_slave_0: left promiscuous mode [ 203.585047][T10333] bond_slave_1: left promiscuous mode [ 203.601099][T10325] RDS/IB: syz!: added [ 203.606124][T10325] smc: adding ib device syz! with port count 1 [ 203.613502][T10325] smc: ib device syz! port 1 has pnetid [ 203.878060][T10341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.225864][T10341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.321775][T10341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.483006][T10341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.647087][T10341] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.668063][T10341] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.690920][T10341] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.710998][T10341] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.983372][T10411] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1710'. [ 205.992830][T10411] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1710'. [ 206.403178][T10420] netlink: 'syz.2.1713': attribute type 3 has an invalid length. [ 206.616683][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 207.187637][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1723'. [ 208.007310][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 208.222883][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 208.240525][T10489] IPVS: Error joining to the multicast group [ 208.860720][T10513] netlink: 'syz.2.1749': attribute type 10 has an invalid length. [ 208.949599][T10513] batman_adv: batadv0: Adding interface: team0 [ 208.979929][T10513] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.040486][T10513] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 209.199621][T10532] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1754'. [ 209.510988][T10542] FAULT_INJECTION: forcing a failure. [ 209.510988][T10542] name failslab, interval 1, probability 0, space 0, times 0 [ 209.524333][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.0.1758 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 209.524364][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.524378][T10542] Call Trace: [ 209.524386][T10542] [ 209.524394][T10542] dump_stack_lvl+0x241/0x360 [ 209.524433][T10542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.524464][T10542] ? __pfx__printk+0x10/0x10 [ 209.524492][T10542] ? stack_depot_save_flags+0x44/0x940 [ 209.524519][T10542] ? __pfx___might_resched+0x10/0x10 [ 209.524550][T10542] should_fail_ex+0x424/0x570 [ 209.524577][T10542] should_failslab+0xac/0x100 [ 209.524609][T10542] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 209.524641][T10542] ? __alloc_skb+0x1c2/0x480 [ 209.524667][T10542] __alloc_skb+0x1c2/0x480 [ 209.524693][T10542] ? __pfx___alloc_skb+0x10/0x10 [ 209.524720][T10542] ? netlink_ack_tlv_len+0x6e/0x200 [ 209.524758][T10542] netlink_ack+0x147/0xa70 [ 209.524799][T10542] ? nfnetlink_rcv+0x1095/0x28f0 [ 209.524827][T10542] nfnetlink_rcv+0x2366/0x28f0 [ 209.524888][T10542] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 209.524908][T10542] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 209.524947][T10542] ? rcu_preempt_deferred_qs_irqrestore+0x8c6/0xcb0 [ 209.525007][T10542] ? rcu_read_unlock_special+0x49b/0x570 [ 209.525030][T10542] ? skb_clone+0x240/0x390 [ 209.525052][T10542] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 209.525084][T10542] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.525117][T10542] ? __rcu_read_unlock+0xa1/0x110 [ 209.525141][T10542] netlink_unicast+0x7f8/0x9a0 [ 209.525177][T10542] ? __pfx_netlink_unicast+0x10/0x10 [ 209.525213][T10542] ? skb_put+0x114/0x1f0 [ 209.525238][T10542] netlink_sendmsg+0x8c3/0xcd0 [ 209.525288][T10542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.525323][T10542] ? aa_sock_msg_perm+0x91/0x160 [ 209.525359][T10542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.525386][T10542] __sock_sendmsg+0x221/0x270 [ 209.525418][T10542] ____sys_sendmsg+0x523/0x860 [ 209.525450][T10542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.525470][T10542] ? __fget_files+0x2a/0x420 [ 209.525493][T10542] ? __fget_files+0x2a/0x420 [ 209.525523][T10542] __sys_sendmsg+0x271/0x360 [ 209.525551][T10542] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.525629][T10542] ? do_syscall_64+0xb6/0x230 [ 209.525658][T10542] do_syscall_64+0xf3/0x230 [ 209.525684][T10542] ? clear_bhb_loop+0x45/0xa0 [ 209.525709][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.525729][T10542] RIP: 0033:0x7fb2bd38d169 [ 209.525748][T10542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.525765][T10542] RSP: 002b:00007fb2be169038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.525788][T10542] RAX: ffffffffffffffda RBX: 00007fb2bd5a5fa0 RCX: 00007fb2bd38d169 [ 209.525804][T10542] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 209.525817][T10542] RBP: 00007fb2be169090 R08: 0000000000000000 R09: 0000000000000000 [ 209.525830][T10542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.525842][T10542] R13: 0000000000000000 R14: 00007fb2bd5a5fa0 R15: 00007ffd7d372258 [ 209.525875][T10542] [ 210.025264][T10551] xfrm1: entered promiscuous mode [ 210.030563][T10551] xfrm1: entered allmulticast mode [ 210.060031][T10551] syz.3.1763 (10551) used greatest stack depth: 19064 bytes left [ 210.174565][T10558] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1764'. [ 210.207941][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 210.256862][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 210.871198][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1769'. [ 210.926087][T10579] team0: entered promiscuous mode [ 210.965821][T10579] team_slave_0: entered promiscuous mode [ 210.971828][T10579] team_slave_1: entered promiscuous mode [ 210.991023][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'. [ 211.002395][T10579] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 211.047253][T10579] team0: left promiscuous mode [ 211.065808][T10579] team_slave_0: left promiscuous mode [ 211.071488][T10579] team_slave_1: left promiscuous mode [ 211.377586][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'. [ 211.427494][T10607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1778'. [ 211.462239][T10606] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1778'. [ 211.490347][T10606] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 211.938204][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 211.939498][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 211.944447][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 212.120336][T10647] FAULT_INJECTION: forcing a failure. [ 212.120336][T10647] name failslab, interval 1, probability 0, space 0, times 0 [ 212.134161][T10647] CPU: 1 UID: 0 PID: 10647 Comm: syz.0.1794 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 212.134193][T10647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.134215][T10647] Call Trace: [ 212.134222][T10647] [ 212.134231][T10647] dump_stack_lvl+0x241/0x360 [ 212.134269][T10647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.134313][T10647] ? __pfx__printk+0x10/0x10 [ 212.134349][T10647] ? ref_tracker_alloc+0x316/0x4c0 [ 212.134376][T10647] should_fail_ex+0x424/0x570 [ 212.134404][T10647] should_failslab+0xac/0x100 [ 212.134436][T10647] kmem_cache_alloc_noprof+0x78/0x390 [ 212.134464][T10647] ? skb_clone+0x20c/0x390 [ 212.134493][T10647] skb_clone+0x20c/0x390 [ 212.134520][T10647] __netlink_deliver_tap+0x3c4/0x7f0 [ 212.134565][T10647] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.134593][T10647] netlink_deliver_tap+0x19d/0x1b0 [ 212.134624][T10647] __netlink_sendskb+0x60/0xd0 [ 212.134653][T10647] netlink_dump+0xa7f/0xeb0 [ 212.134699][T10647] ? __pfx_netlink_dump+0x10/0x10 [ 212.134725][T10647] ? __netlink_lookup+0x894/0x980 [ 212.134795][T10647] ? netlink_lookup+0x31/0x200 [ 212.134833][T10647] __netlink_dump_start+0x5a2/0x790 [ 212.134874][T10647] rtnetlink_rcv_msg+0xbba/0xd70 [ 212.134911][T10647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.134941][T10647] ? __pfx_rtnl_dumpit+0x10/0x10 [ 212.134969][T10647] ? __pfx_mctp_dump_addrinfo+0x10/0x10 [ 212.135003][T10647] ? ref_tracker_free+0x63e/0x7e0 [ 212.135035][T10647] netlink_rcv_skb+0x208/0x480 [ 212.135065][T10647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.135097][T10647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.135147][T10647] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.135180][T10647] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.135223][T10647] netlink_unicast+0x7f8/0x9a0 [ 212.135261][T10647] ? __pfx_netlink_unicast+0x10/0x10 [ 212.135290][T10647] ? skb_put+0x114/0x1f0 [ 212.135316][T10647] netlink_sendmsg+0x8c3/0xcd0 [ 212.135361][T10647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.135396][T10647] ? aa_sock_msg_perm+0x91/0x160 [ 212.135433][T10647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.135460][T10647] __sock_sendmsg+0x221/0x270 [ 212.135493][T10647] ____sys_sendmsg+0x523/0x860 [ 212.135526][T10647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.135545][T10647] ? __fget_files+0x2a/0x420 [ 212.135569][T10647] ? __fget_files+0x2a/0x420 [ 212.135598][T10647] __sys_sendmmsg+0x3a0/0x7b0 [ 212.135632][T10647] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.135694][T10647] ? rcu_read_lock_any_held+0xbb/0x160 [ 212.135723][T10647] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 212.135754][T10647] ? vfs_write+0xb29/0xd10 [ 212.135790][T10647] ? ksys_write+0x24e/0x2d0 [ 212.135817][T10647] ? __mutex_unlock_slowpath+0x229/0x800 [ 212.135878][T10647] ? ksys_write+0x275/0x2d0 [ 212.135915][T10647] __x64_sys_sendmmsg+0xa0/0xb0 [ 212.135940][T10647] do_syscall_64+0xf3/0x230 [ 212.135967][T10647] ? clear_bhb_loop+0x45/0xa0 [ 212.135992][T10647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.136012][T10647] RIP: 0033:0x7fb2bd38d169 [ 212.136031][T10647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.136048][T10647] RSP: 002b:00007fb2be169038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.136069][T10647] RAX: ffffffffffffffda RBX: 00007fb2bd5a5fa0 RCX: 00007fb2bd38d169 [ 212.136083][T10647] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 212.136097][T10647] RBP: 00007fb2be169090 R08: 0000000000000000 R09: 0000000000000000 [ 212.136109][T10647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.136121][T10647] R13: 0000000000000000 R14: 00007fb2bd5a5fa0 R15: 00007ffd7d372258 [ 212.136151][T10647] [ 212.808376][T10661] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 212.832431][T10661] smc: net device wg1 applied user defined pnetid S [ 213.010662][T10666] team0: entered promiscuous mode [ 213.016948][T10666] team_slave_0: entered promiscuous mode [ 213.027113][T10666] team_slave_1: entered promiscuous mode [ 213.037992][T10666] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.051112][T10666] team0: left promiscuous mode [ 213.056459][T10666] team_slave_0: left promiscuous mode [ 213.062337][T10666] team_slave_1: left promiscuous mode [ 213.389573][T10681] __nla_validate_parse: 5 callbacks suppressed [ 213.389595][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1808'. [ 213.723164][T10694] Cannot find del_set index 2 as target [ 214.052709][T10706] netlink: 'syz.1.1816': attribute type 4 has an invalid length. [ 214.103541][T10710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1817'. [ 214.138491][T10710] team0: entered promiscuous mode [ 214.143829][T10710] team_slave_0: entered promiscuous mode [ 214.154213][T10710] team_slave_1: entered promiscuous mode [ 214.164559][T10710] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.174098][T10710] team0: left promiscuous mode [ 214.183488][T10714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1820'. [ 214.188901][T10710] team_slave_0: left promiscuous mode [ 214.199400][T10710] team_slave_1: left promiscuous mode [ 214.555086][T10735] FAULT_INJECTION: forcing a failure. [ 214.555086][T10735] name failslab, interval 1, probability 0, space 0, times 0 [ 214.588458][T10735] CPU: 1 UID: 0 PID: 10735 Comm: syz.4.1826 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 214.588491][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.588504][T10735] Call Trace: [ 214.588512][T10735] [ 214.588520][T10735] dump_stack_lvl+0x241/0x360 [ 214.588559][T10735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.588589][T10735] ? __pfx__printk+0x10/0x10 [ 214.588621][T10735] ? __pfx___might_resched+0x10/0x10 [ 214.588652][T10735] should_fail_ex+0x424/0x570 [ 214.588679][T10735] should_failslab+0xac/0x100 [ 214.588710][T10735] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 214.588741][T10735] ? __alloc_skb+0x1c2/0x480 [ 214.588765][T10735] __alloc_skb+0x1c2/0x480 [ 214.588791][T10735] ? __pfx___alloc_skb+0x10/0x10 [ 214.588813][T10735] ? netlink_autobind+0xd6/0x2f0 [ 214.588842][T10735] ? netlink_autobind+0x2b0/0x2f0 [ 214.588877][T10735] netlink_sendmsg+0x638/0xcd0 [ 214.588921][T10735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.588956][T10735] ? aa_sock_msg_perm+0x91/0x160 [ 214.588999][T10735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.589028][T10735] __sock_sendmsg+0x221/0x270 [ 214.589059][T10735] ____sys_sendmsg+0x523/0x860 [ 214.589089][T10735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.589108][T10735] ? __fget_files+0x2a/0x420 [ 214.589131][T10735] ? __fget_files+0x2a/0x420 [ 214.589159][T10735] __sys_sendmsg+0x271/0x360 [ 214.589187][T10735] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.589264][T10735] ? do_syscall_64+0xb6/0x230 [ 214.589295][T10735] do_syscall_64+0xf3/0x230 [ 214.589321][T10735] ? clear_bhb_loop+0x45/0xa0 [ 214.589346][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.589366][T10735] RIP: 0033:0x7f846578d169 [ 214.589385][T10735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.589402][T10735] RSP: 002b:00007f8466613038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.589425][T10735] RAX: ffffffffffffffda RBX: 00007f84659a5fa0 RCX: 00007f846578d169 [ 214.589440][T10735] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 214.589454][T10735] RBP: 00007f8466613090 R08: 0000000000000000 R09: 0000000000000000 [ 214.589467][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.589479][T10735] R13: 0000000000000000 R14: 00007f84659a5fa0 R15: 00007ffd7280f088 [ 214.589512][T10735] [ 215.002449][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1832'. [ 215.164125][T10759] siw: device registration error -23 [ 215.350312][T10767] netlink: 'syz.1.1839': attribute type 1 has an invalid length. [ 215.402493][T10767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.434922][T10767] tipc: Enabling of bearer rejected, failed to enable media [ 215.515198][ T3551] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.564975][T10767] bond2: (slave gretap1): making interface the new active one [ 215.581971][T10767] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 215.667418][ T3551] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.740345][T10773] FAULT_INJECTION: forcing a failure. [ 215.740345][T10773] name failslab, interval 1, probability 0, space 0, times 0 [ 215.753246][T10773] CPU: 1 UID: 0 PID: 10773 Comm: syz.1.1841 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 215.753276][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.753290][T10773] Call Trace: [ 215.753299][T10773] [ 215.753308][T10773] dump_stack_lvl+0x241/0x360 [ 215.753349][T10773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.753380][T10773] ? __pfx__printk+0x10/0x10 [ 215.753411][T10773] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.753439][T10773] ? __local_bh_enable_ip+0x168/0x200 [ 215.753466][T10773] should_fail_ex+0x424/0x570 [ 215.753494][T10773] should_failslab+0xac/0x100 [ 215.753526][T10773] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 215.753557][T10773] ? __alloc_skb+0x1c2/0x480 [ 215.753582][T10773] __alloc_skb+0x1c2/0x480 [ 215.753602][T10773] ? __lock_acquire+0xad5/0xd80 [ 215.753628][T10773] ? __pfx___alloc_skb+0x10/0x10 [ 215.753660][T10773] ip_frag_next+0xdc/0xb30 [ 215.753682][T10773] ? ip_skb_dst_mtu+0x147/0xbc0 [ 215.753709][T10773] ? ip_skb_dst_mtu+0x8b5/0xbc0 [ 215.753734][T10773] ip_do_fragment+0x8d7/0x1b40 [ 215.753771][T10773] ? __pfx_ip_finish_output2+0x10/0x10 [ 215.753797][T10773] ? __pfx_ip_do_fragment+0x10/0x10 [ 215.753820][T10773] ? ip_skb_dst_mtu+0x147/0xbc0 [ 215.753846][T10773] ? ip_skb_dst_mtu+0x8b5/0xbc0 [ 215.753865][T10773] ? ip_skb_dst_mtu+0x147/0xbc0 [ 215.753889][T10773] ? __ip_finish_output+0x200/0x400 [ 215.753909][T10773] ? ip_fragment+0x9d/0x220 [ 215.753940][T10773] iptunnel_xmit+0x560/0x9c0 [ 215.753984][T10773] ip_tunnel_xmit+0x1dcd/0x2560 [ 215.754041][T10773] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 215.754061][T10773] ? gre_build_header+0x384/0xbb0 [ 215.754092][T10773] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.754125][T10773] ? __pfx_gre_build_header+0x10/0x10 [ 215.754157][T10773] ? iptunnel_handle_offloads+0x31e/0x650 [ 215.754194][T10773] ipgre_xmit+0x991/0xd40 [ 215.754225][T10773] ? __pfx_ipgre_xmit+0x10/0x10 [ 215.754257][T10773] dev_hard_start_xmit+0x2d9/0x830 [ 215.754296][T10773] __dev_queue_xmit+0x1b80/0x3f60 [ 215.754340][T10773] ? __dev_queue_xmit+0x2f9/0x3f60 [ 215.754369][T10773] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.754397][T10773] ? rcu_is_watching+0x15/0xb0 [ 215.754427][T10773] ? skb_release_data+0x2b5/0x8b0 [ 215.754463][T10773] ? pskb_expand_head+0xd23/0x1510 [ 215.754520][T10773] ? __bpf_redirect+0x54c/0xe10 [ 215.754555][T10773] __bpf_tx_skb+0x18f/0x260 [ 215.754580][T10773] bpf_clone_redirect+0x271/0x3d0 [ 215.754618][T10773] bpf_prog_208b094576c80b22+0x5f/0x64 [ 215.754639][T10773] ? unwind_get_return_address+0x4d/0x90 [ 215.754682][T10773] ? ktime_get+0x3e/0x200 [ 215.754710][T10773] ? seqcount_lockdep_reader_access+0x159/0x230 [ 215.754739][T10773] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.754770][T10773] ? seqcount_lockdep_reader_access+0x1d9/0x230 [ 215.754800][T10773] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 215.754836][T10773] ? bpf_test_run+0x36f/0xa90 [ 215.754864][T10773] ? __pfx___cant_migrate+0x10/0x10 [ 215.754895][T10773] ? read_tsc+0x9/0x20 [ 215.754922][T10773] bpf_test_run+0x4ea/0xa90 [ 215.754964][T10773] ? bpf_test_run+0x36f/0xa90 [ 215.755006][T10773] ? __pfx_bpf_test_run+0x10/0x10 [ 215.755064][T10773] ? __pfx_eth_type_trans+0x10/0x10 [ 215.755090][T10773] ? convert___skb_to_skb+0x41/0x630 [ 215.755123][T10773] bpf_prog_test_run_skb+0xcc3/0x1850 [ 215.755179][T10773] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 215.755205][T10773] ? __fget_files+0x2a/0x420 [ 215.755230][T10773] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 215.755260][T10773] bpf_prog_test_run+0x2e4/0x360 [ 215.755289][T10773] __sys_bpf+0x4ee/0x8b0 [ 215.755314][T10773] ? __pfx___sys_bpf+0x10/0x10 [ 215.755351][T10773] ? ksys_write+0x275/0x2d0 [ 215.755391][T10773] __x64_sys_bpf+0x7c/0x90 [ 215.755424][T10773] do_syscall_64+0xf3/0x230 [ 215.755451][T10773] ? clear_bhb_loop+0x45/0xa0 [ 215.755476][T10773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.755496][T10773] RIP: 0033:0x7fdc4a38d169 [ 215.755515][T10773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.755532][T10773] RSP: 002b:00007fdc4b198038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 215.755554][T10773] RAX: ffffffffffffffda RBX: 00007fdc4a5a5fa0 RCX: 00007fdc4a38d169 [ 215.755570][T10773] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 215.755588][T10773] RBP: 00007fdc4b198090 R08: 0000000000000000 R09: 0000000000000000 [ 215.755600][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.755612][T10773] R13: 0000000000000000 R14: 00007fdc4a5a5fa0 R15: 00007ffefc7b85a8 [ 215.755643][T10773] [ 216.511116][ T3551] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.536285][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.545281][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.554158][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.565076][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.573615][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.651841][ T3551] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.724900][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1845'. [ 216.912366][ T3551] bridge_slave_1: left allmulticast mode [ 216.932259][ T3551] bridge_slave_1: left promiscuous mode [ 216.953043][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.009204][ T3551] bridge_slave_0: left allmulticast mode [ 217.015210][ T3551] bridge_slave_0: left promiscuous mode [ 217.021585][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.370588][T10800] xt_CT: No such helper "syz0" [ 217.479467][ T3551] dvmrp1 (unregistering): left allmulticast mode [ 217.627645][ T3551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.640581][ T3551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.651827][ T3551] bond0 (unregistering): Released all slaves [ 217.788948][T10811] FAULT_INJECTION: forcing a failure. [ 217.788948][T10811] name failslab, interval 1, probability 0, space 0, times 0 [ 217.823322][T10811] CPU: 0 UID: 0 PID: 10811 Comm: syz.1.1853 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 217.823356][T10811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.823369][T10811] Call Trace: [ 217.823377][T10811] [ 217.823386][T10811] dump_stack_lvl+0x241/0x360 [ 217.823424][T10811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.823455][T10811] ? __pfx__printk+0x10/0x10 [ 217.823489][T10811] ? __pfx___might_resched+0x10/0x10 [ 217.823520][T10811] should_fail_ex+0x424/0x570 [ 217.823547][T10811] should_failslab+0xac/0x100 [ 217.823581][T10811] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 217.823611][T10811] ? __alloc_skb+0x1c2/0x480 [ 217.823636][T10811] __alloc_skb+0x1c2/0x480 [ 217.823662][T10811] ? __pfx___alloc_skb+0x10/0x10 [ 217.823684][T10811] ? netlink_autobind+0xd6/0x2f0 [ 217.823713][T10811] ? netlink_autobind+0x2b0/0x2f0 [ 217.823756][T10811] netlink_sendmsg+0x638/0xcd0 [ 217.823801][T10811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.823836][T10811] ? aa_sock_msg_perm+0x91/0x160 [ 217.823873][T10811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.823900][T10811] __sock_sendmsg+0x221/0x270 [ 217.823933][T10811] ____sys_sendmsg+0x523/0x860 [ 217.823965][T10811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.823985][T10811] ? __fget_files+0x2a/0x420 [ 217.824009][T10811] ? __fget_files+0x2a/0x420 [ 217.824039][T10811] __sys_sendmsg+0x271/0x360 [ 217.824068][T10811] ? __pfx___sys_sendmsg+0x10/0x10 [ 217.824151][T10811] ? do_syscall_64+0xb6/0x230 [ 217.824181][T10811] do_syscall_64+0xf3/0x230 [ 217.824208][T10811] ? clear_bhb_loop+0x45/0xa0 [ 217.824233][T10811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.824253][T10811] RIP: 0033:0x7fdc4a38d169 [ 217.824273][T10811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.824291][T10811] RSP: 002b:00007fdc4b198038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.824318][T10811] RAX: ffffffffffffffda RBX: 00007fdc4a5a5fa0 RCX: 00007fdc4a38d169 [ 217.824334][T10811] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 217.824348][T10811] RBP: 00007fdc4b198090 R08: 0000000000000000 R09: 0000000000000000 [ 217.824361][T10811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.824373][T10811] R13: 0000000000000000 R14: 00007fdc4a5a5fa0 R15: 00007ffefc7b85a8 [ 217.824407][T10811] [ 218.316897][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 218.463301][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1861'. [ 218.646849][T10780] chnl_net:caif_netlink_parms(): no params data found [ 218.663610][ T5849] Bluetooth: hci2: command tx timeout [ 218.731978][ T918] IPVS: starting estimator thread 0... [ 218.825755][T10847] IPVS: using max 28 ests per chain, 67200 per kthread [ 219.069380][ T3551] hsr_slave_0: left promiscuous mode [ 219.078858][ T3551] hsr_slave_1: left promiscuous mode [ 219.089049][ T3551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.101036][ T3551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.147114][ T3551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.154720][ T3551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.184795][ T3551] veth1_macvtap: left promiscuous mode [ 219.191159][ T3551] veth0_macvtap: left promiscuous mode [ 219.197162][ T3551] veth1_vlan: left promiscuous mode [ 219.204276][ T3551] veth0_vlan: left promiscuous mode [ 219.330830][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1873'. [ 219.770279][ T3551] team0 (unregistering): Port device team_slave_1 removed [ 219.808929][ T3551] team0 (unregistering): Port device team_slave_0 removed [ 220.426245][T10780] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.433459][T10780] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.457981][T10780] bridge_slave_0: entered allmulticast mode [ 220.480413][T10780] bridge_slave_0: entered promiscuous mode [ 220.492359][T10882] siw: device registration error -23 [ 220.494464][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1876'. [ 220.509409][T10780] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.542796][T10780] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.572375][T10780] bridge_slave_1: entered allmulticast mode [ 220.584996][T10780] bridge_slave_1: entered promiscuous mode [ 220.620819][T10879] team0: entered promiscuous mode [ 220.637544][T10879] team_slave_0: entered promiscuous mode [ 220.643565][T10879] team_slave_1: entered promiscuous mode [ 220.679057][T10879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.698992][T10879] team0: left promiscuous mode [ 220.712750][T10879] team_slave_0: left promiscuous mode [ 220.732694][T10879] team_slave_1: left promiscuous mode [ 220.746680][ T5849] Bluetooth: hci2: command tx timeout [ 221.037791][T10780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.054686][T10780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.171349][T10900] netlink: 'syz.1.1883': attribute type 5 has an invalid length. [ 221.210882][T10780] team0: Port device team_slave_0 added [ 221.229381][T10780] team0: Port device team_slave_1 added [ 221.308958][T10780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.329518][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.358105][T10780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.372081][T10780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.380374][T10780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.407782][T10780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.509301][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1887'. [ 221.592094][T10913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1889'. [ 221.604492][T10780] hsr_slave_0: entered promiscuous mode [ 221.619107][T10780] hsr_slave_1: entered promiscuous mode [ 221.627600][T10780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.636080][T10780] Cannot create hsr debugfs directory [ 221.752076][T10920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1891'. [ 221.802677][T10920] gretap0: entered promiscuous mode [ 221.939210][T10922] FAULT_INJECTION: forcing a failure. [ 221.939210][T10922] name failslab, interval 1, probability 0, space 0, times 0 [ 221.974325][T10922] CPU: 0 UID: 0 PID: 10922 Comm: syz.2.1894 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 221.974357][T10922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.974371][T10922] Call Trace: [ 221.974381][T10922] [ 221.974388][T10922] dump_stack_lvl+0x241/0x360 [ 221.974418][T10922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.974449][T10922] ? __pfx__printk+0x10/0x10 [ 221.974474][T10922] ? __pfx___might_resched+0x10/0x10 [ 221.974497][T10922] should_fail_ex+0x424/0x570 [ 221.974517][T10922] should_failslab+0xac/0x100 [ 221.974540][T10922] __kmalloc_noprof+0xdf/0x4d0 [ 221.974560][T10922] ? tomoyo_encode+0x26f/0x540 [ 221.974587][T10922] tomoyo_encode+0x26f/0x540 [ 221.974614][T10922] tomoyo_realpath_from_path+0x59e/0x5e0 [ 221.974646][T10922] tomoyo_path_number_perm+0x245/0x790 [ 221.974669][T10922] ? tomoyo_path_number_perm+0x215/0x790 [ 221.974690][T10922] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.974715][T10922] ? ksys_write+0x24e/0x2d0 [ 221.974738][T10922] ? __lock_acquire+0xad5/0xd80 [ 221.974773][T10922] ? __fget_files+0x2a/0x420 [ 221.974786][T10922] ? __fget_files+0x2a/0x420 [ 221.974802][T10922] ? __fget_files+0x2a/0x420 [ 221.974820][T10922] security_file_ioctl+0xc6/0x2a0 [ 221.974840][T10922] __se_sys_ioctl+0x46/0x160 [ 221.974860][T10922] do_syscall_64+0xf3/0x230 [ 221.974879][T10922] ? clear_bhb_loop+0x45/0xa0 [ 221.974898][T10922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.974913][T10922] RIP: 0033:0x7f885418d169 [ 221.974927][T10922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.974940][T10922] RSP: 002b:00007f8851ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.974958][T10922] RAX: ffffffffffffffda RBX: 00007f88543a5fa0 RCX: 00007f885418d169 [ 221.974969][T10922] RDX: 0000200000000680 RSI: 00000000c008744c RDI: 0000000000000003 [ 221.974979][T10922] RBP: 00007f8851ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.974988][T10922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.974998][T10922] R13: 0000000000000000 R14: 00007f88543a5fa0 R15: 00007ffeb2fad4f8 [ 221.975021][T10922] [ 221.975042][T10922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 222.066332][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 222.224681][T10931] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.233708][T10931] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.242572][T10931] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.251312][T10931] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.263751][T10931] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.272891][T10931] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.282144][T10931] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.291096][T10931] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.694459][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 222.716460][T10945] netlink: 'syz.4.1901': attribute type 12 has an invalid length. [ 222.731181][T10945] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1901'. [ 222.743141][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'. [ 222.816127][ T5849] Bluetooth: hci2: command tx timeout [ 222.890827][T10954] gretap0: entered promiscuous mode [ 223.140620][T10780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.259495][T10780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.291474][T10780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.324905][T10780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.484869][T10973] xt_TCPMSS: Only works on TCP SYN packets [ 223.640435][T10983] __nla_validate_parse: 1 callbacks suppressed [ 223.640457][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1916'. [ 223.669123][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 223.679315][T10983] netlink: 'syz.1.1916': attribute type 11 has an invalid length. [ 223.749421][T10780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.794074][T10780] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.851843][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.859219][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.874484][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1918'. [ 223.887495][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.894831][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.052949][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1920'. [ 224.349702][T10780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.451958][T10780] veth0_vlan: entered promiscuous mode [ 224.495509][T10780] veth1_vlan: entered promiscuous mode [ 224.598945][T10780] veth0_macvtap: entered promiscuous mode [ 224.622930][T10780] veth1_macvtap: entered promiscuous mode [ 224.648637][T11016] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 224.708246][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.734453][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.746039][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.757535][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.797638][T10780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.910453][ T5849] Bluetooth: hci2: command tx timeout [ 224.910990][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.938910][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.944042][T11027] FAULT_INJECTION: forcing a failure. [ 224.944042][T11027] name failslab, interval 1, probability 0, space 0, times 0 [ 224.963646][T11027] CPU: 1 UID: 0 PID: 11027 Comm: syz.3.1931 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 224.963679][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 224.963693][T11027] Call Trace: [ 224.963701][T11027] [ 224.963709][T11027] dump_stack_lvl+0x241/0x360 [ 224.963748][T11027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.963779][T11027] ? __pfx__printk+0x10/0x10 [ 224.963814][T11027] ? __pfx___might_resched+0x10/0x10 [ 224.963845][T11027] should_fail_ex+0x424/0x570 [ 224.963872][T11027] should_failslab+0xac/0x100 [ 224.963904][T11027] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 224.963935][T11027] ? __alloc_skb+0x1c2/0x480 [ 224.963959][T11027] __alloc_skb+0x1c2/0x480 [ 224.963984][T11027] ? __pfx___alloc_skb+0x10/0x10 [ 224.964006][T11027] ? netlink_autobind+0xd6/0x2f0 [ 224.964036][T11027] ? netlink_autobind+0x2b0/0x2f0 [ 224.964072][T11027] netlink_sendmsg+0x638/0xcd0 [ 224.964124][T11027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.964159][T11027] ? aa_sock_msg_perm+0x91/0x160 [ 224.964195][T11027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.964222][T11027] __sock_sendmsg+0x221/0x270 [ 224.964255][T11027] ____sys_sendmsg+0x523/0x860 [ 224.964288][T11027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.964308][T11027] ? __fget_files+0x2a/0x420 [ 224.964331][T11027] ? __fget_files+0x2a/0x420 [ 224.964361][T11027] __sys_sendmsg+0x271/0x360 [ 224.964390][T11027] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.964470][T11027] ? do_syscall_64+0xb6/0x230 [ 224.964501][T11027] do_syscall_64+0xf3/0x230 [ 224.964527][T11027] ? clear_bhb_loop+0x45/0xa0 [ 224.964553][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.964574][T11027] RIP: 0033:0x7f1f0518d169 [ 224.964592][T11027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.964611][T11027] RSP: 002b:00007f1f05f08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.964635][T11027] RAX: ffffffffffffffda RBX: 00007f1f053a5fa0 RCX: 00007f1f0518d169 [ 224.964651][T11027] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 224.964664][T11027] RBP: 00007f1f05f08090 R08: 0000000000000000 R09: 0000000000000000 [ 224.964678][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.964690][T11027] R13: 0000000000000000 R14: 00007f1f053a5fa0 R15: 00007fff3c0194f8 [ 224.964723][T11027] [ 224.978362][T10780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.248328][T10780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.261430][T10780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.291039][T10780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.309557][T10780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.317808][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'. [ 225.318466][T10780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.336600][T10780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.366138][T11038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1933'. [ 225.435228][T11038] gretap0: entered promiscuous mode [ 225.550799][T11044] netem: incorrect ge model size [ 225.572016][T11044] netem: change failed [ 225.666630][T11047] FAULT_INJECTION: forcing a failure. [ 225.666630][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 225.691808][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.703040][T11047] CPU: 1 UID: 0 PID: 11047 Comm: syz.1.1938 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 225.703082][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.703096][T11047] Call Trace: [ 225.703104][T11047] [ 225.703113][T11047] dump_stack_lvl+0x241/0x360 [ 225.703151][T11047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.703181][T11047] ? __pfx__printk+0x10/0x10 [ 225.703214][T11047] ? __pfx___might_resched+0x10/0x10 [ 225.703246][T11047] should_fail_ex+0x424/0x570 [ 225.703274][T11047] should_failslab+0xac/0x100 [ 225.703305][T11047] kmem_cache_alloc_noprof+0x78/0x390 [ 225.703334][T11047] ? skb_clone+0x20c/0x390 [ 225.703363][T11047] skb_clone+0x20c/0x390 [ 225.703390][T11047] nfnetlink_rcv+0x52b/0x28f0 [ 225.703417][T11047] ? __dev_queue_xmit+0x2f9/0x3f60 [ 225.703448][T11047] ? __dev_queue_xmit+0x2f9/0x3f60 [ 225.703471][T11047] ? __dev_queue_xmit+0x2f9/0x3f60 [ 225.703497][T11047] ? __dev_queue_xmit+0x1780/0x3f60 [ 225.703518][T11047] ? kasan_save_track+0x3f/0x80 [ 225.703540][T11047] ? __kasan_slab_alloc+0x66/0x80 [ 225.703571][T11047] ? do_syscall_64+0xf3/0x230 [ 225.703602][T11047] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 225.703652][T11047] ? ref_tracker_free+0x63e/0x7e0 [ 225.703677][T11047] ? __asan_memcpy+0x40/0x70 [ 225.703698][T11047] ? __pfx_ref_tracker_free+0x10/0x10 [ 225.703718][T11047] ? __skb_clone+0x5c/0x6d0 [ 225.703759][T11047] ? skb_clone+0x240/0x390 [ 225.703795][T11047] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.703828][T11047] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.703860][T11047] netlink_unicast+0x7f8/0x9a0 [ 225.703898][T11047] ? __pfx_netlink_unicast+0x10/0x10 [ 225.703927][T11047] ? skb_put+0x114/0x1f0 [ 225.703953][T11047] netlink_sendmsg+0x8c3/0xcd0 [ 225.703996][T11047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.704032][T11047] ? aa_sock_msg_perm+0x91/0x160 [ 225.704077][T11047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.704105][T11047] __sock_sendmsg+0x221/0x270 [ 225.704136][T11047] ____sys_sendmsg+0x523/0x860 [ 225.704168][T11047] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.704188][T11047] ? __fget_files+0x2a/0x420 [ 225.704212][T11047] ? __fget_files+0x2a/0x420 [ 225.704242][T11047] __sys_sendmsg+0x271/0x360 [ 225.704271][T11047] ? __pfx___sys_sendmsg+0x10/0x10 [ 225.704353][T11047] ? do_syscall_64+0xb6/0x230 [ 225.704383][T11047] do_syscall_64+0xf3/0x230 [ 225.704409][T11047] ? clear_bhb_loop+0x45/0xa0 [ 225.704434][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.704455][T11047] RIP: 0033:0x7fdc4a38d169 [ 225.704474][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.704491][T11047] RSP: 002b:00007fdc4b198038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.704514][T11047] RAX: ffffffffffffffda RBX: 00007fdc4a5a5fa0 RCX: 00007fdc4a38d169 [ 225.704530][T11047] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 225.704543][T11047] RBP: 00007fdc4b198090 R08: 0000000000000000 R09: 0000000000000000 [ 225.704557][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.704569][T11047] R13: 0000000000000000 R14: 00007fdc4a5a5fa0 R15: 00007ffefc7b85a8 [ 225.704603][T11047] [ 225.705966][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.819286][T11053] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1940'. [ 226.180536][T11060] bond1: entered promiscuous mode [ 226.189792][T11060] bond1: entered allmulticast mode [ 226.204481][T11064] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 226.219683][T11060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.236605][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'. [ 226.258859][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.312620][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.760594][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'. [ 226.861854][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1953'. [ 226.917953][T11089] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.311089][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 227.551006][T11116] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 227.600198][T11117] netlink: 'syz.4.1957': attribute type 2 has an invalid length. [ 227.602110][T11116] batadv1: entered promiscuous mode [ 227.832700][T11127] FAULT_INJECTION: forcing a failure. [ 227.832700][T11127] name failslab, interval 1, probability 0, space 0, times 0 [ 227.847331][T11127] CPU: 0 UID: 0 PID: 11127 Comm: syz.3.1961 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 227.847365][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 227.847378][T11127] Call Trace: [ 227.847386][T11127] [ 227.847395][T11127] dump_stack_lvl+0x241/0x360 [ 227.847434][T11127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.847465][T11127] ? __pfx__printk+0x10/0x10 [ 227.847500][T11127] ? __pfx___might_resched+0x10/0x10 [ 227.847532][T11127] should_fail_ex+0x424/0x570 [ 227.847560][T11127] should_failslab+0xac/0x100 [ 227.847592][T11127] __kmalloc_node_noprof+0xe7/0x4d0 [ 227.847630][T11127] ? qdisc_alloc+0x9a/0xa80 [ 227.847664][T11127] qdisc_alloc+0x9a/0xa80 [ 227.847697][T11127] ? rcu_is_watching+0x15/0xb0 [ 227.847729][T11127] qdisc_create_dflt+0x62/0x4b0 [ 227.847763][T11127] taprio_init+0x424/0xcc0 [ 227.847790][T11127] ? ____sys_sendmsg+0x523/0x860 [ 227.847811][T11127] ? __sys_sendmsg+0x271/0x360 [ 227.847829][T11127] ? do_syscall_64+0xf3/0x230 [ 227.847873][T11127] ? __pfx_taprio_init+0x10/0x10 [ 227.847900][T11127] ? qdisc_alloc+0x7dd/0xa80 [ 227.847935][T11127] ? __pfx_taprio_init+0x10/0x10 [ 227.847964][T11127] qdisc_create+0x70b/0xdf0 [ 227.847998][T11127] tc_modify_qdisc+0x156d/0x2610 [ 227.848023][T11127] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 227.848062][T11127] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 227.848087][T11127] ? __mutex_lock+0xbe3/0x10c0 [ 227.848118][T11127] ? __mutex_lock+0x5f3/0x10c0 [ 227.848170][T11127] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 227.848198][T11127] rtnetlink_rcv_msg+0x7c2/0xd70 [ 227.848226][T11127] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 227.848260][T11127] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.848288][T11127] ? lockdep_hardirqs_on+0x9d/0x150 [ 227.848320][T11127] ? ref_tracker_free+0x63e/0x7e0 [ 227.848357][T11127] netlink_rcv_skb+0x208/0x480 [ 227.848388][T11127] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.848419][T11127] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.848469][T11127] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.848501][T11127] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.848534][T11127] netlink_unicast+0x7f8/0x9a0 [ 227.848571][T11127] ? __pfx_netlink_unicast+0x10/0x10 [ 227.848600][T11127] ? skb_put+0x114/0x1f0 [ 227.848631][T11127] netlink_sendmsg+0x8c3/0xcd0 [ 227.848675][T11127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.848711][T11127] ? aa_sock_msg_perm+0x91/0x160 [ 227.848747][T11127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.848775][T11127] __sock_sendmsg+0x221/0x270 [ 227.848806][T11127] ____sys_sendmsg+0x523/0x860 [ 227.848839][T11127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.848859][T11127] ? __fget_files+0x2a/0x420 [ 227.848883][T11127] ? __fget_files+0x2a/0x420 [ 227.848912][T11127] __sys_sendmsg+0x271/0x360 [ 227.848939][T11127] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.849023][T11127] ? do_syscall_64+0xb6/0x230 [ 227.849051][T11127] do_syscall_64+0xf3/0x230 [ 227.849077][T11127] ? clear_bhb_loop+0x45/0xa0 [ 227.849101][T11127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.849121][T11127] RIP: 0033:0x7f1f0518d169 [ 227.849140][T11127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.849157][T11127] RSP: 002b:00007f1f05f08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.849180][T11127] RAX: ffffffffffffffda RBX: 00007f1f053a5fa0 RCX: 00007f1f0518d169 [ 227.849196][T11127] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 227.849209][T11127] RBP: 00007f1f05f08090 R08: 0000000000000000 R09: 0000000000000000 [ 227.849222][T11127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.849235][T11127] R13: 0000000000000000 R14: 00007f1f053a5fa0 R15: 00007fff3c0194f8 [ 227.849269][T11127] [ 228.256201][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 228.858681][T11149] __nla_validate_parse: 2 callbacks suppressed [ 228.858703][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'. [ 228.882776][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.896638][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.914569][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.923854][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.932003][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.047347][T11155] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 229.080573][T11155] FAULT_INJECTION: forcing a failure. [ 229.080573][T11155] name failslab, interval 1, probability 0, space 0, times 0 [ 229.113234][T11155] CPU: 1 UID: 0 PID: 11155 Comm: syz.2.1969 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 229.113269][T11155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 229.113282][T11155] Call Trace: [ 229.113290][T11155] [ 229.113299][T11155] dump_stack_lvl+0x241/0x360 [ 229.113363][T11155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.113394][T11155] ? __pfx__printk+0x10/0x10 [ 229.113427][T11155] ? __pfx___might_resched+0x10/0x10 [ 229.113461][T11155] should_fail_ex+0x424/0x570 [ 229.113489][T11155] should_failslab+0xac/0x100 [ 229.113528][T11155] __kmalloc_cache_noprof+0x73/0x370 [ 229.113557][T11155] ? rtnl_newlink+0x144/0x1fe0 [ 229.113593][T11155] rtnl_newlink+0x144/0x1fe0 [ 229.113623][T11155] ? stack_depot_save_flags+0x44/0x940 [ 229.113656][T11155] ? kasan_save_track+0x51/0x80 [ 229.113678][T11155] ? kasan_save_track+0x3f/0x80 [ 229.113703][T11155] ? __pfx_rtnl_newlink+0x10/0x10 [ 229.113730][T11155] ? dev_hard_start_xmit+0x2d9/0x830 [ 229.113751][T11155] ? __dev_queue_xmit+0x1b80/0x3f60 [ 229.113774][T11155] ? __netlink_deliver_tap+0x561/0x7f0 [ 229.113803][T11155] ? netlink_deliver_tap+0x19d/0x1b0 [ 229.113830][T11155] ? netlink_unicast+0x7c6/0x9a0 [ 229.113853][T11155] ? netlink_sendmsg+0x8c3/0xcd0 [ 229.113880][T11155] ? __sock_sendmsg+0x221/0x270 [ 229.113905][T11155] ? ____sys_sendmsg+0x523/0x860 [ 229.113924][T11155] ? __sys_sendmsg+0x271/0x360 [ 229.113943][T11155] ? do_syscall_64+0xf3/0x230 [ 229.113967][T11155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.114028][T11155] ? kasan_quarantine_put+0xdc/0x230 [ 229.114050][T11155] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.114078][T11155] ? nlmon_xmit+0xaf/0x100 [ 229.114118][T11155] ? __local_bh_enable_ip+0x168/0x200 [ 229.114138][T11155] ? lockdep_hardirqs_on+0x9d/0x150 [ 229.114172][T11155] ? aa_get_newest_label+0x101/0x6f0 [ 229.114210][T11155] ? __lock_acquire+0xad5/0xd80 [ 229.114256][T11155] ? __pfx_rtnl_newlink+0x10/0x10 [ 229.114287][T11155] rtnetlink_rcv_msg+0x80f/0xd70 [ 229.114315][T11155] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 229.114349][T11155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.114387][T11155] ? ref_tracker_free+0x63e/0x7e0 [ 229.114418][T11155] netlink_rcv_skb+0x208/0x480 [ 229.114450][T11155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.114482][T11155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.114540][T11155] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.114573][T11155] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.114605][T11155] netlink_unicast+0x7f8/0x9a0 [ 229.114642][T11155] ? __pfx_netlink_unicast+0x10/0x10 [ 229.114670][T11155] ? skb_put+0x114/0x1f0 [ 229.114696][T11155] netlink_sendmsg+0x8c3/0xcd0 [ 229.114741][T11155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.114777][T11155] ? aa_sock_msg_perm+0x91/0x160 [ 229.114813][T11155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.114840][T11155] __sock_sendmsg+0x221/0x270 [ 229.114872][T11155] ____sys_sendmsg+0x523/0x860 [ 229.114904][T11155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.114925][T11155] ? __fget_files+0x2a/0x420 [ 229.114948][T11155] ? __fget_files+0x2a/0x420 [ 229.114977][T11155] __sys_sendmsg+0x271/0x360 [ 229.115006][T11155] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.115088][T11155] ? do_syscall_64+0xb6/0x230 [ 229.115118][T11155] do_syscall_64+0xf3/0x230 [ 229.115144][T11155] ? clear_bhb_loop+0x45/0xa0 [ 229.115170][T11155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.115190][T11155] RIP: 0033:0x7f885418d169 [ 229.115209][T11155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.115227][T11155] RSP: 002b:00007f8851ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.115251][T11155] RAX: ffffffffffffffda RBX: 00007f88543a5fa0 RCX: 00007f885418d169 [ 229.115267][T11155] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 229.115280][T11155] RBP: 00007f8851ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 229.115294][T11155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.115307][T11155] R13: 0000000000000000 R14: 00007f88543a5fa0 R15: 00007ffeb2fad4f8 [ 229.115340][T11155] [ 230.021565][T11171] wireguard: wg2: Could not create IPv4 socket [ 230.089679][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 230.369096][T11191] siw: device registration error -23 [ 230.447741][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 230.595461][T11150] chnl_net:caif_netlink_parms(): no params data found [ 230.769541][T11206] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 230.908256][T11206] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.976554][ T5853] Bluetooth: hci2: command tx timeout [ 231.126440][T11206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.147695][T11206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.233134][T11206] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.242945][T11206] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.252249][T11206] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.261195][T11206] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.318890][T11206] bond1: left promiscuous mode [ 231.333255][T11206] gretap0: left promiscuous mode [ 231.340713][T11150] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.355936][T11150] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.363257][T11150] bridge_slave_0: entered allmulticast mode [ 231.371945][T11150] bridge_slave_0: entered promiscuous mode [ 231.381169][T11150] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.389525][T11150] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.397259][T11150] bridge_slave_1: entered allmulticast mode [ 231.405151][T11150] bridge_slave_1: entered promiscuous mode [ 231.522777][T11150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.539123][T11150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.611473][T11150] team0: Port device team_slave_0 added [ 231.638883][T11150] team0: Port device team_slave_1 added [ 231.678117][T11225] siw: device registration error -23 [ 231.732610][T11150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.753788][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.791922][T11150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.805209][T11150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.824372][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.863189][T11230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1992'. [ 231.915408][T11235] FAULT_INJECTION: forcing a failure. [ 231.915408][T11235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.931652][T11150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.971602][T11235] CPU: 0 UID: 0 PID: 11235 Comm: syz.3.1994 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 231.971637][T11235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.971651][T11235] Call Trace: [ 231.971660][T11235] [ 231.971668][T11235] dump_stack_lvl+0x241/0x360 [ 231.971709][T11235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.971740][T11235] ? __pfx__printk+0x10/0x10 [ 231.971782][T11235] should_fail_ex+0x424/0x570 [ 231.971810][T11235] _copy_to_user+0x31/0xb0 [ 231.971860][T11235] simple_read_from_buffer+0xc4/0x170 [ 231.971894][T11235] proc_fail_nth_read+0x1ef/0x260 [ 231.971919][T11235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.971944][T11235] ? rw_verify_area+0x246/0x630 [ 231.971967][T11235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.971991][T11235] vfs_read+0x21f/0xb90 [ 231.972019][T11235] ? __pfx___mutex_lock+0x10/0x10 [ 231.972047][T11235] ? __pfx_vfs_read+0x10/0x10 [ 231.972076][T11235] ? __fget_files+0x2a/0x420 [ 231.972098][T11235] ? __fget_files+0x39d/0x420 [ 231.972116][T11235] ? __fget_files+0x2a/0x420 [ 231.972146][T11235] ksys_read+0x19d/0x2d0 [ 231.972171][T11235] ? __pfx_ksys_read+0x10/0x10 [ 231.972202][T11235] ? do_syscall_64+0xb6/0x230 [ 231.972232][T11235] do_syscall_64+0xf3/0x230 [ 231.972258][T11235] ? clear_bhb_loop+0x45/0xa0 [ 231.972282][T11235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.972302][T11235] RIP: 0033:0x7f1f0518bb7c [ 231.972321][T11235] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.972337][T11235] RSP: 002b:00007f1f05f08030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.972361][T11235] RAX: ffffffffffffffda RBX: 00007f1f053a5fa0 RCX: 00007f1f0518bb7c [ 231.972376][T11235] RDX: 000000000000000f RSI: 00007f1f05f080a0 RDI: 000000000000000a [ 231.972389][T11235] RBP: 00007f1f05f08090 R08: 0000000000000000 R09: 0000000000000000 [ 231.972402][T11235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.972414][T11235] R13: 0000000000000000 R14: 00007f1f053a5fa0 R15: 00007fff3c0194f8 [ 231.972446][T11235] [ 232.192892][T11239] FAULT_INJECTION: forcing a failure. [ 232.192892][T11239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.206798][T11239] CPU: 1 UID: 0 PID: 11239 Comm: syz.2.1995 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 232.206829][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.206843][T11239] Call Trace: [ 232.206851][T11239] [ 232.206860][T11239] dump_stack_lvl+0x241/0x360 [ 232.206898][T11239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.206926][T11239] ? __pfx__printk+0x10/0x10 [ 232.206967][T11239] should_fail_ex+0x424/0x570 [ 232.206994][T11239] _copy_from_user+0x2d/0xb0 [ 232.207025][T11239] do_sock_getsockopt+0x1d5/0x740 [ 232.207054][T11239] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 232.207073][T11239] ? __fget_files+0x2a/0x420 [ 232.207095][T11239] ? __fget_files+0x39d/0x420 [ 232.207112][T11239] ? __fget_files+0x2a/0x420 [ 232.207140][T11239] __x64_sys_getsockopt+0x2a3/0x370 [ 232.207171][T11239] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 232.207201][T11239] ? do_syscall_64+0xb6/0x230 [ 232.207239][T11239] do_syscall_64+0xf3/0x230 [ 232.207265][T11239] ? clear_bhb_loop+0x45/0xa0 [ 232.207291][T11239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.207312][T11239] RIP: 0033:0x7f885418d169 [ 232.207331][T11239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.207350][T11239] RSP: 002b:00007f8851ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 232.207373][T11239] RAX: ffffffffffffffda RBX: 00007f88543a5fa0 RCX: 00007f885418d169 [ 232.207389][T11239] RDX: 0000000000000004 RSI: 000000000000010c RDI: 0000000000000006 [ 232.207402][T11239] RBP: 00007f8851ff6090 R08: 0000200000000680 R09: 0000000000000000 [ 232.207417][T11239] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 232.207430][T11239] R13: 0000000000000000 R14: 00007f88543a5fa0 R15: 00007ffeb2fad4f8 [ 232.207463][T11239] [ 232.489849][T11150] hsr_slave_0: entered promiscuous mode [ 232.539397][T11150] hsr_slave_1: entered promiscuous mode [ 232.560191][T11150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.585702][T11150] Cannot create hsr debugfs directory [ 233.058771][ T5853] Bluetooth: hci2: command 0x041b tx timeout [ 233.549765][ T2999] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 234.663486][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2008'. [ 235.135766][ T5849] Bluetooth: hci2: command 0x041b tx timeout [ 237.000286][T11284] gretap0: entered promiscuous mode [ 237.139832][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2011'. [ 237.218504][ T5849] Bluetooth: hci2: command 0x041b tx timeout [ 237.229208][T11290] bond1: entered promiscuous mode [ 237.235070][T11290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.523266][T11288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.738547][T11294] bridge2: entered promiscuous mode [ 237.746367][T11294] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 237.966375][T11288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.083135][T11150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.111161][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2015'. [ 238.151659][T11288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.187356][T11304] team0: entered promiscuous mode [ 238.197706][T11304] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 238.229585][T11304] team0: left promiscuous mode [ 238.288776][T11288] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 238.298275][T11288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.331012][T11150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.410504][T11314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2018'. [ 238.491083][T11150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.549520][T11288] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.601236][T11288] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.650689][T11318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2020'. [ 238.665041][T11150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.693571][T11288] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.733587][T11288] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.817120][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2022'. [ 238.980610][T11150] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.009606][T11331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.031540][T11333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2026'. [ 239.063912][T11150] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.115928][T11150] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.164159][T11150] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.301376][ T5849] Bluetooth: hci2: command 0x041b tx timeout [ 239.349438][T11150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.398512][T11150] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.415314][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.422600][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.446559][T11346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2031'. [ 239.467111][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.474358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.300328][T11150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.362797][T11365] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2036'. [ 240.471106][T11150] veth0_vlan: entered promiscuous mode [ 240.516156][T11150] veth1_vlan: entered promiscuous mode [ 240.651170][T11375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2038'. [ 240.684836][T11150] veth0_macvtap: entered promiscuous mode [ 240.735232][T11150] veth1_macvtap: entered promiscuous mode [ 240.889317][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.923400][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.954929][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.982015][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.004306][T11150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.063549][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.080238][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.092778][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.109328][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.123387][T11150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.166417][T11391] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2044'. [ 241.187600][T11150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.202854][T11150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.213298][T11150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.230036][T11150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.412824][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2048'. [ 241.490532][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.519405][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.564912][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.580031][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.660620][T11408] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 242.024344][T11416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2053'. [ 242.187057][T11422] Cannot find del_set index 2 as target [ 242.523046][T11431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2058'. [ 242.921488][T11444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2061'. [ 243.053919][T11447] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 243.352739][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.364278][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.372740][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.384762][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.404241][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.439075][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2065'. [ 243.562296][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2066'. [ 243.968786][T11472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2070'. [ 244.552429][T11454] chnl_net:caif_netlink_parms(): no params data found [ 244.662781][T11493] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 244.794391][T11499] xt_hashlimit: max too large, truncated to 1048576 [ 245.040925][T11454] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.048889][T11454] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.056865][T11454] bridge_slave_0: entered allmulticast mode [ 245.072930][T11454] bridge_slave_0: entered promiscuous mode [ 245.088573][T11454] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.109373][T11454] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.123084][T11454] bridge_slave_1: entered allmulticast mode [ 245.174427][T11454] bridge_slave_1: entered promiscuous mode [ 245.331052][T11454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.374683][T11454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.439282][T11510] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.455975][ T5853] Bluetooth: hci2: command tx timeout [ 245.621500][T11454] team0: Port device team_slave_0 added [ 245.665159][T11454] team0: Port device team_slave_1 added [ 245.687731][T11510] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.733389][T11522] __nla_validate_parse: 1 callbacks suppressed [ 245.733411][T11522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2087'. [ 245.816678][T11510] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.914818][T11454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.932632][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.962694][T11454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.984386][T11454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.992088][T11454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.029433][T11454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.074124][T11510] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.242829][T11454] hsr_slave_0: entered promiscuous mode [ 246.250111][T11454] hsr_slave_1: entered promiscuous mode [ 246.261675][T11454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.275347][T11454] Cannot create hsr debugfs directory [ 246.404402][T11510] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.428731][T11510] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.486562][T11510] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.616812][T11510] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.874402][T11535] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 247.003489][T11454] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.207355][T11454] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.233457][T11545] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2094'. [ 247.271072][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2096'. [ 247.290007][T11549] bond0: entered promiscuous mode [ 247.295128][T11549] bond_slave_0: entered promiscuous mode [ 247.302364][T11549] bond_slave_1: entered promiscuous mode [ 247.314260][T11549] macvlan0: entered promiscuous mode [ 247.337583][T11549] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 247.347503][T11549] bond0: left promiscuous mode [ 247.369267][T11549] bond_slave_0: left promiscuous mode [ 247.380943][T11549] bond_slave_1: left promiscuous mode [ 247.392089][T11549] macvlan0: left promiscuous mode [ 247.414145][T11554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2097'. [ 247.427209][T11550] netem: change failed [ 247.457403][T11454] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.486384][T11552] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2095'. [ 247.535912][ T5853] Bluetooth: hci2: command tx timeout [ 247.546624][T11558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2098'. [ 247.561317][T11546] bridge0: port 1(ipvlan2) entered blocking state [ 247.568538][T11546] bridge0: port 1(ipvlan2) entered disabled state [ 247.575327][T11546] ipvlan2: entered allmulticast mode [ 247.580924][T11546] bridge0: entered allmulticast mode [ 247.589207][T11546] ipvlan2: left allmulticast mode [ 247.595416][T11546] bridge0: left allmulticast mode [ 247.743286][T11454] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.775544][T11566] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.800998][T11567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2101'. [ 247.904487][T11566] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.954367][T11566] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.044597][T11566] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.106375][T11454] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.115266][T11576] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 248.120953][T11454] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.147766][T11454] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.171620][T11579] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2106'. [ 248.208317][T11454] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.223623][T11579] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2106'. [ 248.359395][T11584] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2107'. [ 248.440882][T11566] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.462955][T11566] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.499321][T11566] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.522180][T11566] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.664848][T11454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.726695][T11454] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.748992][ T1315] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.756265][ T1315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.802661][ T1315] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.809924][ T1315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.913762][T11602] siw: device registration error -23 [ 249.096909][T11615] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 249.375035][T11625] bond0: entered promiscuous mode [ 249.383507][T11625] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 249.392308][T11625] bond0: left promiscuous mode [ 249.441061][T11454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.529297][T11454] veth0_vlan: entered promiscuous mode [ 249.563508][T11454] veth1_vlan: entered promiscuous mode [ 249.626748][ T5853] Bluetooth: hci2: command tx timeout [ 249.636795][T11454] veth0_macvtap: entered promiscuous mode [ 249.660410][T11454] veth1_macvtap: entered promiscuous mode [ 249.688421][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.703541][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.714445][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.725501][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.735550][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.762486][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.783306][T11454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.803076][T11633] bond0: entered promiscuous mode [ 249.808732][T11633] bond_slave_0: entered promiscuous mode [ 249.814719][T11633] bond_slave_1: entered promiscuous mode [ 249.820800][T11633] macvlan0: entered promiscuous mode [ 249.828713][T11633] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 249.840881][T11633] bond0: left promiscuous mode [ 249.847482][T11633] bond_slave_0: left promiscuous mode [ 249.853255][T11633] bond_slave_1: left promiscuous mode [ 249.862809][T11633] macvlan0: left promiscuous mode [ 249.890271][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.919458][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.929726][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.951928][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.962293][T11454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.973232][T11454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.988015][T11454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.057015][T11454] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.079551][T11454] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.099317][T11454] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.112146][T11454] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.366348][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.377697][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.500180][ T1315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.525195][ T1315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.746731][T11656] siw: device registration error -23 [ 250.972648][T11669] __nla_validate_parse: 6 callbacks suppressed [ 250.972671][T11669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2139'. [ 251.118210][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2140'. [ 251.663413][T11684] sctp: [Deprecated]: syz.4.2146 (pid 11684) Use of int in max_burst socket option. [ 251.663413][T11684] Use struct sctp_assoc_value instead [ 251.698694][T11691] siw: device registration error -23 [ 252.369974][T11699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2151'. [ 252.707519][T11712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2158'. [ 252.754188][T11712] team0: entered promiscuous mode [ 252.772534][T11712] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 252.824481][T11712] team0: left promiscuous mode [ 252.855266][T11719] siw: device registration error -23 [ 253.058395][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.069921][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.071154][T11726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2164'. [ 253.107059][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.118888][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.131933][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.294952][T11733] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.364772][T11733] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.481130][T11733] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.540738][T11733] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.681149][T11733] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.700998][T11733] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.723177][T11733] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.752138][T11733] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.973822][T11752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2175'. [ 254.459373][T11722] chnl_net:caif_netlink_parms(): no params data found [ 254.652803][T11722] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.676263][T11722] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.684528][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2178'. [ 254.693772][T11722] bridge_slave_0: entered allmulticast mode [ 254.698040][T11722] bridge_slave_0: entered promiscuous mode [ 254.715441][T11722] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.723133][T11722] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.738856][T11722] bridge_slave_1: entered allmulticast mode [ 254.747992][T11722] bridge_slave_1: entered promiscuous mode [ 254.808627][T11722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.839498][T11722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.952250][T11722] team0: Port device team_slave_0 added [ 254.982955][T11722] team0: Port device team_slave_1 added [ 255.122838][T11782] Bluetooth: MGMT ver 1.23 [ 255.139667][T11722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.150155][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.185393][T11722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.220548][ T5849] Bluetooth: hci2: command tx timeout [ 255.220705][T11783] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2183'. [ 255.236123][T11722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.236145][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.236174][T11722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.358305][T11722] hsr_slave_0: entered promiscuous mode [ 255.365158][T11722] hsr_slave_1: entered promiscuous mode [ 255.394056][T11722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.402211][T11722] Cannot create hsr debugfs directory [ 255.415824][T11782] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.420622][T11789] siw: device registration error -23 [ 255.435717][T11782] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.444933][T11782] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.467448][T11782] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.489094][T11782] geneve2: entered promiscuous mode [ 255.517711][T11783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2183'. [ 255.641486][T11797] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 255.718179][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2189'. [ 256.024044][T11722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.145172][T11722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.176771][T11818] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.245159][T11722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.349781][T11818] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.476248][T11722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.533008][T11818] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.554926][T11829] siw: device registration error -23 [ 256.626718][T11818] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.833419][T11818] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.917857][T11834] __nla_validate_parse: 1 callbacks suppressed [ 256.917877][T11834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2200'. [ 256.924175][T11818] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.996409][T11818] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.016327][T11722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.069309][T11818] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.098207][T11722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.150884][T11837] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 257.159718][T11722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.202782][T11722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 257.214434][T11840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2202'. [ 257.242560][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2202'. [ 257.284577][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2203'. [ 257.296765][ T5849] Bluetooth: hci2: command tx timeout [ 257.574673][T11722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.658347][T11722] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.677580][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.684826][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.742948][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.750228][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.779371][T11854] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.853389][T11858] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.885371][T11854] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.945497][T11858] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.977168][T11854] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.051354][T11858] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.189867][T11854] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.231304][T11858] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.354082][T11854] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.414434][T11854] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.445525][T11854] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.503155][T11854] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.570380][T11858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.593056][T11858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.622525][T11858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.683612][T11722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.744611][T11858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.852582][T11722] veth0_vlan: entered promiscuous mode [ 258.870116][T11722] veth1_vlan: entered promiscuous mode [ 258.954999][T11875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2213'. [ 258.991033][T11722] veth0_macvtap: entered promiscuous mode [ 259.014610][T11722] veth1_macvtap: entered promiscuous mode [ 259.041295][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2214'. [ 259.091919][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.108566][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2215'. [ 259.119997][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.131977][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.144612][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.154789][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.168317][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.201258][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.212814][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.230434][T11722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.254034][T11882] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 259.269877][T11885] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2217'. [ 259.281475][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 259.298568][T11879] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 259.360110][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.376525][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.377074][ T5849] Bluetooth: hci2: command tx timeout [ 259.387531][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.402709][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.413183][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.423938][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.440807][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.451751][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.465179][T11722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.580054][T11722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.610803][T11722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.628874][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 259.652808][T11722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.682740][T11722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.939226][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.957220][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.009930][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.028779][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.115245][T11914] bridge0: port 1(batadv1) entered blocking state [ 260.123806][T11914] bridge0: port 1(batadv1) entered disabled state [ 260.139679][T11914] batadv1: entered allmulticast mode [ 260.148505][T11914] batadv1: entered promiscuous mode [ 260.314565][T11921] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 260.617934][ T2999] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 260.627997][ T2999] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 261.062326][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.068888][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.574404][T11942] siw: device registration error -23 [ 261.821206][T11951] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 262.028072][T11957] __nla_validate_parse: 2 callbacks suppressed [ 262.028095][T11957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2240'. [ 262.352318][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2243'. [ 262.396439][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.406991][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.416049][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.417502][T11969] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 262.433625][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.444416][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.695100][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 262.725513][T11983] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2247'. [ 262.931231][T11988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2249'. [ 262.992891][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2250'. [ 263.002522][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2250'. [ 263.187803][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2252'. [ 263.247791][T11995] team0: entered promiscuous mode [ 263.264295][T11995] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 263.275453][T11995] team0: left promiscuous mode [ 263.327614][T12000] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 263.528489][T11991] siw: device registration error -23 [ 263.648683][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2255'. [ 263.785334][T12007] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 264.174637][T11970] chnl_net:caif_netlink_parms(): no params data found [ 264.185494][T12022] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2259'. [ 264.498421][ T5853] Bluetooth: hci2: command tx timeout [ 264.571731][T11970] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.579824][T11970] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.587657][T11970] bridge_slave_0: entered allmulticast mode [ 264.598517][T11970] bridge_slave_0: entered promiscuous mode [ 264.610941][T11970] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.619407][T11970] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.626864][T11970] bridge_slave_1: entered allmulticast mode [ 264.685849][T11970] bridge_slave_1: entered promiscuous mode [ 264.838729][T12041] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 264.849241][T11970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.874965][T11970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.024680][T11970] team0: Port device team_slave_0 added [ 265.046651][T11970] team0: Port device team_slave_1 added [ 265.076528][T12047] siw: device registration error -23 [ 265.238551][T11970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.264032][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.301770][T11970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.358524][T11970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.365535][T11970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.394694][T11970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.547511][ T3020] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 265.703809][T11970] hsr_slave_0: entered promiscuous mode [ 265.719261][T11970] hsr_slave_1: entered promiscuous mode [ 265.727739][T11970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.735507][T11970] Cannot create hsr debugfs directory [ 266.356757][T11970] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.523694][T11970] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.576187][ T5853] Bluetooth: hci2: command tx timeout [ 266.633585][T11970] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.868848][T11970] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.153238][T12095] __nla_validate_parse: 6 callbacks suppressed [ 267.153269][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2282'. [ 267.183894][T12096] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 267.220188][T12095] team0: entered promiscuous mode [ 267.225396][T12095] team_slave_0: entered promiscuous mode [ 267.232552][T12095] team_slave_1: entered promiscuous mode [ 267.241427][T12095] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 267.256522][T12095] team0: left promiscuous mode [ 267.261784][T12095] team_slave_0: left promiscuous mode [ 267.276545][T12095] team_slave_1: left promiscuous mode [ 267.447990][T12100] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2283'. [ 267.514445][T11970] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.605884][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2286'. [ 267.615027][T12102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2286'. [ 267.629240][T11970] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.662200][T11970] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.722255][T11970] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.014811][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 268.055230][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 268.075443][T11970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.151386][T11970] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.209651][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.216928][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.254027][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.261280][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.656629][ T5853] Bluetooth: hci2: command tx timeout [ 268.697555][T12140] netlink: 304 bytes leftover after parsing attributes in process `syz.3.2296'. [ 268.832616][T11970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.984954][T11970] veth0_vlan: entered promiscuous mode [ 269.140947][T11970] veth1_vlan: entered promiscuous mode [ 269.208453][T11970] veth0_macvtap: entered promiscuous mode [ 269.218931][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 269.378102][T11970] veth1_macvtap: entered promiscuous mode [ 269.428798][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.456045][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.475635][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.486914][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.497304][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2300'. [ 269.526006][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.545718][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.556126][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.575617][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.585482][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.615933][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.637360][T11970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.691692][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.716351][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.746009][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.756990][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.767675][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.780031][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.790244][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.805911][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.824794][T11970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.847339][T11970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.892841][T11970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.979037][T11970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.988072][T11970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.997598][T11970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.006566][T11970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.059511][T12162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2303'. [ 270.261486][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.276815][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.366750][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.379680][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.310871][T12200] dvmrp1: entered allmulticast mode [ 272.783609][T12220] __nla_validate_parse: 5 callbacks suppressed [ 272.783634][T12220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2323'. [ 272.811118][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 272.887350][T12216] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 272.994656][T12225] siw: device registration error -23 [ 273.233749][T12233] [ 273.236243][T12233] ====================================================== [ 273.243291][T12233] WARNING: possible circular locking dependency detected [ 273.250338][T12233] 6.14.0-syzkaller-13344-ga9843689e2de #0 Not tainted [ 273.257121][T12233] ------------------------------------------------------ [ 273.264247][T12233] syz.3.2326/12233 is trying to acquire lock: [ 273.270336][T12233] ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x161/0x11f0 [ 273.279715][T12233] [ 273.279715][T12233] but task is already holding lock: [ 273.287110][T12233] ffff88802753ad20 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 273.297254][T12233] [ 273.297254][T12233] which lock already depends on the new lock. [ 273.297254][T12233] [ 273.307683][T12233] [ 273.307683][T12233] the existing dependency chain (in reverse order) is: [ 273.310694][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 273.316703][T12233] [ 273.316703][T12233] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 273.316741][T12233] lock_acquire+0x116/0x2f0 [ 273.316767][T12233] __mutex_lock+0x1a5/0x10c0 [ 273.344324][T12233] smc_switch_to_fallback+0x35/0xda0 [ 273.350148][T12233] smc_sendmsg+0x11f/0x530 [ 273.355091][T12233] __sock_sendmsg+0x221/0x270 [ 273.360295][T12233] __sys_sendto+0x365/0x4c0 [ 273.365347][T12233] __x64_sys_sendto+0xde/0x100 [ 273.370635][T12233] do_syscall_64+0xf3/0x230 [ 273.375676][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.382114][T12233] [ 273.382114][T12233] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 273.389783][T12233] lock_acquire+0x116/0x2f0 [ 273.394822][T12233] lock_sock_nested+0x48/0x100 [ 273.400135][T12233] do_ip_setsockopt+0x17e9/0x39c0 [ 273.405697][T12233] ip_setsockopt+0x63/0x100 [ 273.410731][T12233] do_sock_setsockopt+0x3b1/0x710 [ 273.416284][T12233] __x64_sys_setsockopt+0x1ee/0x280 [ 273.422004][T12233] do_syscall_64+0xf3/0x230 [ 273.427041][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.433459][T12233] [ 273.433459][T12233] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 273.440683][T12233] validate_chain+0xa69/0x24e0 [ 273.445979][T12233] __lock_acquire+0xad5/0xd80 [ 273.451184][T12233] lock_acquire+0x116/0x2f0 [ 273.456210][T12233] __mutex_lock+0x1a5/0x10c0 [ 273.461330][T12233] ip_mroute_setsockopt+0x161/0x11f0 [ 273.467144][T12233] do_ip_setsockopt+0x1114/0x39c0 [ 273.472693][T12233] ip_setsockopt+0x63/0x100 [ 273.477725][T12233] smc_setsockopt+0x25c/0xd50 [ 273.482935][T12233] do_sock_setsockopt+0x3b1/0x710 [ 273.488480][T12233] __x64_sys_setsockopt+0x1ee/0x280 [ 273.494201][T12233] do_syscall_64+0xf3/0x230 [ 273.499236][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.505749][T12233] [ 273.505749][T12233] other info that might help us debug this: [ 273.505749][T12233] [ 273.515996][T12233] Chain exists of: [ 273.515996][T12233] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 273.515996][T12233] [ 273.529758][T12233] Possible unsafe locking scenario: [ 273.529758][T12233] [ 273.537212][T12233] CPU0 CPU1 [ 273.542579][T12233] ---- ---- [ 273.547947][T12233] lock(&smc->clcsock_release_lock); [ 273.553330][T12233] lock(sk_lock-AF_INET); [ 273.560273][T12233] lock(&smc->clcsock_release_lock); [ 273.568173][T12233] lock(rtnl_mutex); [ 273.572163][T12233] [ 273.572163][T12233] *** DEADLOCK *** [ 273.572163][T12233] [ 273.580305][T12233] 1 lock held by syz.3.2326/12233: [ 273.585418][T12233] #0: ffff88802753ad20 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 273.595967][T12233] [ 273.595967][T12233] stack backtrace: [ 273.601864][T12233] CPU: 1 UID: 0 PID: 12233 Comm: syz.3.2326 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 273.601888][T12233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.601912][T12233] Call Trace: [ 273.601919][T12233] [ 273.601928][T12233] dump_stack_lvl+0x241/0x360 [ 273.601957][T12233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.601982][T12233] ? __pfx__printk+0x10/0x10 [ 273.602008][T12233] ? print_lock+0x171/0x1a0 [ 273.602030][T12233] print_circular_bug+0x2e1/0x300 [ 273.602055][T12233] check_noncircular+0x142/0x160 [ 273.602080][T12233] validate_chain+0xa69/0x24e0 [ 273.602104][T12233] ? __lock_acquire+0xad5/0xd80 [ 273.602129][T12233] __lock_acquire+0xad5/0xd80 [ 273.602150][T12233] lock_acquire+0x116/0x2f0 [ 273.602166][T12233] ? ip_mroute_setsockopt+0x161/0x11f0 [ 273.602195][T12233] __mutex_lock+0x1a5/0x10c0 [ 273.602216][T12233] ? ip_mroute_setsockopt+0x161/0x11f0 [ 273.602243][T12233] ? preempt_schedule_common+0x84/0xd0 [ 273.602263][T12233] ? ip_mroute_setsockopt+0x161/0x11f0 [ 273.602287][T12233] ? __pfx___mutex_lock+0x10/0x10 [ 273.602316][T12233] ip_mroute_setsockopt+0x161/0x11f0 [ 273.602340][T12233] ? preempt_schedule+0xe4/0xf0 [ 273.602357][T12233] ? preempt_schedule_common+0x84/0xd0 [ 273.602378][T12233] ? register_lock_class+0x54/0x330 [ 273.602396][T12233] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 273.602426][T12233] ? __pfx___mutex_trylock_common+0x10/0x10 [ 273.602451][T12233] do_ip_setsockopt+0x1114/0x39c0 [ 273.602476][T12233] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 273.602499][T12233] ? smc_setsockopt+0x1b2/0xd50 [ 273.602518][T12233] ? __pfx___mutex_lock+0x10/0x10 [ 273.602539][T12233] ? futex_wake+0x525/0x5d0 [ 273.602561][T12233] ip_setsockopt+0x63/0x100 [ 273.602580][T12233] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 273.602606][T12233] smc_setsockopt+0x25c/0xd50 [ 273.602627][T12233] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.602649][T12233] ? __pfx_smc_setsockopt+0x10/0x10 [ 273.602669][T12233] ? aa_sock_opt_perm+0x79/0x120 [ 273.602695][T12233] ? __pfx_smc_setsockopt+0x10/0x10 [ 273.602714][T12233] do_sock_setsockopt+0x3b1/0x710 [ 273.602734][T12233] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 273.602755][T12233] ? __fget_files+0x2a/0x420 [ 273.602772][T12233] ? __fget_files+0x39d/0x420 [ 273.602786][T12233] ? __fget_files+0x2a/0x420 [ 273.602804][T12233] __x64_sys_setsockopt+0x1ee/0x280 [ 273.602824][T12233] do_syscall_64+0xf3/0x230 [ 273.602846][T12233] ? clear_bhb_loop+0x45/0xa0 [ 273.602865][T12233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.602882][T12233] RIP: 0033:0x7f1f0518d169 [ 273.602899][T12233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.602915][T12233] RSP: 002b:00007f1f05f08038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 273.602933][T12233] RAX: ffffffffffffffda RBX: 00007f1f053a5fa0 RCX: 00007f1f0518d169 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 273.602947][T12233] RDX: 00000000000000cb RSI: 0000000000000000 RDI: 000000000000000c [ 273.602958][T12233] RBP: 00007f1f0520e990 R08: 0000000000000010 R09: 0000000000000000 [ 273.602969][T12233] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.602980][T12233] R13: 0000000000000000 R14: 00007f1f053a5fa0 R15: 00007fff3c0194f8 [ 273.603002][T12233] [ 274.063571][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.071577][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.079229][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.090313][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.098816][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.662424][T12243] chnl_net:caif_netlink_parms(): no params data found [ 274.735257][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.743933][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.751424][T12243] bridge_slave_0: entered allmulticast mode [ 274.758580][T12243] bridge_slave_0: entered promiscuous mode [ 274.766794][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.773894][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.781515][T12243] bridge_slave_1: entered allmulticast mode [ 274.788607][T12243] bridge_slave_1: entered promiscuous mode [ 274.811976][T12243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.823751][T12243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.852382][T12243] team0: Port device team_slave_0 added [ 274.860315][T12243] team0: Port device team_slave_1 added [ 274.882524][T12243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.890470][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.917780][T12243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.929556][T12243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.937639][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.963759][T12243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.008922][T12243] hsr_slave_0: entered promiscuous mode [ 275.015806][T12243] hsr_slave_1: entered promiscuous mode [ 275.021896][T12243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.029991][T12243] Cannot create hsr debugfs directory [ 275.106665][T12243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.143732][T12243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.190401][T12243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.251527][T12243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.323082][T12243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.333478][T12243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.349598][T12243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.360046][T12243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.381795][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.388956][T12243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.396473][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.403577][T12243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.451444][T12243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.467416][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.475067][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.488762][T12243] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.500344][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.507498][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.520024][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.527220][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.555317][T12243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.568653][T12243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.673221][T12243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.709129][T12243] veth0_vlan: entered promiscuous mode [ 275.720100][T12243] veth1_vlan: entered promiscuous mode [ 275.743855][T12243] veth0_macvtap: entered promiscuous mode [ 275.754074][T12243] veth1_macvtap: entered promiscuous mode [ 275.768876][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.781323][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.791889][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.802622][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.812741][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.823235][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.833275][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.843970][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.855308][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.866874][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.876766][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.887261][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.899047][T12243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.912089][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.922747][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.933887][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.945404][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.956391][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.968667][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.979402][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.990408][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.000343][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.011101][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.022009][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.032808][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.043855][T12243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.054196][T12243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.066541][T12243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.075288][T12243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.084158][T12243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.117763][T12243] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 276.143100][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.145350][T12243] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 276.153811][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.183135][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.191102][ T5849] Bluetooth: hci2: command tx timeout [ 276.198173][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50