last executing test programs: 9.187540735s ago: executing program 2 (id=971): r0 = socket(0x840000000002, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x2c8, 0x3, 0x398, 0x208, 0x229, 0x240, 0x0, 0x4c000000, 0x300, 0x328, 0x328, 0x300, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x100000007, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "41e9"}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xbc53e1e78fccedc0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x9, 0x851, 0xc0, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x9}, 0xfffffffffffffd87) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff5b0600000800000018230000f55d12897ea6c6f0d5b32fbc1de7e3478f7eb06f528c98a3af1c8795a7325d1e3adcca41ec302ac8b54a334064f1451e71ddb4a0e0ae3880299a1fe1be91111b192870d7197158d507a60d6a9704ba46f0243cc43e2d675203345843dc2ffd0c0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000600), 0x12) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x1e, &(0x7f0000000580)=ANY=[@ANYRES64=r3, @ANYRES64=r11, @ANYRES32, @ANYRES64=r4, @ANYRES32=r6], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0b954cd063ec38928f3666f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYRESOCT=r13, @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=0x0, @ANYBLOB="04008e00080057001b0a000004016bffe200190107000000080026006c0900005603330080b0c000ffffffffffff8636ccb235dc9b85e0ba0c21db2f714da5f17004d70a9d3d2878ab93f06880b91939a0aebc637a790ec20cc7d9803a7f8422a53927379b756655d21e2d13c8b7f2b8cd30f90f468c205cad7451504ae4103ef0b8a5f8fe34e4ab57df31f7207e09c6c54a1f4b899c6936d387165a10cb15ff05a5fa051307777eff"], 0x398}}, 0x0) (async) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES16=r5, @ANYRESOCT=r11, @ANYRES16=r2], &(0x7f0000000840)='GPL\x00', 0x400, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c11}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r15}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 8.979827682s ago: executing program 2 (id=973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x94, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0xa}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xfe, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 8.701225011s ago: executing program 2 (id=981): syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x1000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r1 = socket(0x9, 0x803, 0xfffffffc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="58fcffff", @ANYRES16=r3, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff0000060066008e8800002200330008030000080211000001080211000000ffffffffff"], 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x20}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f00000000c0)={0x0, r5}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, r6}) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000000)={0x2880008, r5}) 8.520595469s ago: executing program 2 (id=987): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x600}) 8.383861147s ago: executing program 2 (id=992): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800150018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 8.227734192s ago: executing program 2 (id=996): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="07620b00ae52a163a9ee000000000822e534081f7a8775e0f766a57201194ee281c1e6d6aba37b5abd", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x783e95ffbd71d3d2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x4) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xaa, 0xaa, 0x3, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x6, 0x4}, {0xc, 0x3}, {0x7, 0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x7}, {0xa}]}, @fwd={0xc}, @datasec={0x8, 0x5, 0x0, 0xf, 0x2, [{0x5, 0x4, 0xffff}, {0x1, 0x2, 0x10001}, {0x1, 0x7, 0x2}, {0x5, 0x3ff, 0xe}, {0x5, 0x0, 0x4}], "259f"}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x5f]}}, &(0x7f00000002c0)=""/160, 0xc7, 0xa0, 0x0, 0xc28}, 0x20) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000180)=0x7, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) getpid() r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r8, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x128, 0x1403, 0x200, 0x70bd2b, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x4000) writev(r6, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) getsockopt$inet_int(r4, 0x10d, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2.543288187s ago: executing program 3 (id=1074): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x7e, 0x600, 0x6, 0x9}) 2.380495448s ago: executing program 3 (id=1078): pipe(&(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000020000000000a01040000000000000000050000000900dfff72797a310000000014000000020a0101000000000000000000000000240000000c0a0102000000000000000003000000040003800900010073797a3000000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) 2.271929751s ago: executing program 0 (id=1079): accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x100000530) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xc00}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 2.256931185s ago: executing program 3 (id=1080): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x1f000000, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.148017995s ago: executing program 0 (id=1083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x3f3}, 0x10}, 0x1, 0xfffffff0}, 0x0) 2.027265147s ago: executing program 0 (id=1084): r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0xa, 0x3, 0x87) sendmmsg$unix(r2, &(0x7f0000004380)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)='4', 0x1}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c010000160001000000000004000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe88000000ffffffff000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0005000000000000000000050000000500000015bf36e312e098c59b2d473f3028001a00fe8000000000ba2fab095899937ab7a993687a00000000ff010000ebff00000000000000000001000000000c0015405b0735000000000068589c030a03e81617c084ebbf9d33d60f0a919972ef9a116b72dcc6283b2e0000000000000000001fc6ab2d2eac7ef92271b2c2f622bfb9b6b320968f8f88c34bfd43054ee940acc67f695c41e28580c88c00105b17ccc0cf54e52e47e920ed3f85bea0196630b70574a0047d1f59f8a139904d51c45abfd436b44e9ee0de7350cb4d671684b443df855dd061dcb796dcf4f60c1c11343cf304bfc38cc1021fbcf618575980673fab8ac2734f057ca878069247cb27e91215390822d43ae6148765cd97721ac6a603685756000000000000000000000000000000000000000000b21199576ea06c84fb47f3b871c638dec54fafd65d8cd01db957719f1aba2ce551ea72f10cfc557940ce5b91dce4852cabfe40bab9a794424c0e01d736e7cb550aff1a4a4a8ba22afa51a2d04f98d2fe59329f231db5e33aae60b94541c8f2b34a85af78fe24dc783d68020ce5bd9ef11e59b4034831c6179b9e1bfa59152a5b4267e75d65a34c9dae65ea09b9f0e92c17c0a8c418484437e4309c0b7b230d4ce3fee186a3a23b2a3ae543fc840220c883be26f0a33a8901023b26167233bc47341f9dd765caec9c7241f9a69016e441805515ee2544006e3e19d6f16fc941370c63f58a8a995e4a048c09d1dc6291b2ef38d3640ac83aab6e583c2bb07bce7bc6"], 0x12c}}, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000000c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r4, &(0x7f0000001140)={&(0x7f0000000000)=@isdn, 0x80, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400010000000000000000000000000000000001"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_getvlan={0x18}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@dellinkprop={0x5c, 0x6d, 0x0, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "66ddd6643d32481d12125e8c13fbb798"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e154513008b356953e498cc4e4223bfd"}]}]}, 0x5c}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r6, &(0x7f00000000c0)="3f043c00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000001"], 0x30}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r9, &(0x7f0000000000)={0x2, 0x20, @local}, 0x10) 1.280775539s ago: executing program 0 (id=1090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) accept4(r1, 0x0, &(0x7f0000000440), 0x0) (fail_nth: 1) 1.250536773s ago: executing program 3 (id=1091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x34db, @loopback}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000307f3be00"/20], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xffe0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{}, [@TCA_NETEM_RATE={0x14}, @TCA_NETEM_RATE64={0xc}]}}}]}, 0x6c}}, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000002440)=ANY=[@ANYBLOB="000000004c9002000000ebff03000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000b430e042ab17ef2e513f37d4588a22f2000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffff00000000000000000000000000ffffffffffffffff00"/192]) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x8, 0xc, 0x5, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) socket(0x2a, 0x1, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001f0001000000000000000000000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000c00150000000000000000005d63850853b4eb9f3a9bc45fa260499e73674bda0b142e0821236e813b7324179a83a65e19e01c966db8db"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1f, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7c, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff00000000000786dd60ff040000462f00fc000000000000000000000000000000fe8000000000000000000000000000aa0420810000000000000000000800000086dd"], 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) 1.172066588s ago: executing program 4 (id=1092): pipe(&(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000020000000000a01040000000000000000050000000900dfff72797a310000000014000000020a0101000000000000000000000000240000000c0a0102000000000000000003000000040003800900010073797a3000000000140000001100010000000000000000000000000a"], 0xa0}}, 0x0) 1.156084324s ago: executing program 3 (id=1093): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e80)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000ec0)={0x1d, r1}, 0x10) recvmsg$can_raw(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.126225166s ago: executing program 1 (id=1094): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002500), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x38, r2, 0x1, 0x0, 0x2000000, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x38}}, 0x0) 872.055519ms ago: executing program 1 (id=1095): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x4c, 0x30, 0x0, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000130001f0ffffffffffffff0007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c000280080001"], 0x34}}, 0x0) 840.750282ms ago: executing program 4 (id=1096): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="ff00000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 818.447058ms ago: executing program 0 (id=1097): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000000140)={0x1198, 0xd, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1164, 0x3, 0x0, 0x1, [{0x1160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0x1048, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x18, 0x1, "b8a9d183385b57ab455d8b5b71b434c3d597c40a"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xf, 0x1, "8ce99f36576922dded9bf1"}]}, @NFTA_SET_ELEM_USERDATA={0xc4, 0x6, 0x1, 0x0, "767439cd1cc61c1424d654f7ce26e185791bd806e08214f0493dc31a239118b485019af5412666af1cba5ac9cb5ac5c2b720a56ecf077d02862e3c57b71b708535fddb2b260f2b27cff14ebe8c5d4d2a0fb1d2b537707590ddc7bd5475425dcf85c985c3da53239c8760f8b1b65433068a94fbeec76dc4e6fde44b1665ef3cbf2c514c05752a0b1dc061e0b56f4cbecb2c2b9939ade6e7e29b55dc2411b78c0c2a79b519d4633b22dd8a8d51ed2c54cd1598b9dc1ed771095de357a8b2177c79"}, @NFTA_SET_ELEM_KEY={0x3c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x776162a}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}]}]}, 0x1198}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000013c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001400)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001440)={@rand_addr, 0x0}, &(0x7f0000001480)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000014c0)=0x0, &(0x7f0000001500)=0x4) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000016c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x104, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe649}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x48800) syz_80211_inject_frame(&(0x7f0000001700)=@broadcast, &(0x7f0000001740)=@ctrl_frame=@cts={{}, {0xff}}, 0xa) syz_80211_inject_frame(&(0x7f0000001780)=@broadcast, 0xfffffffffffffffd, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r5 = accept4(r0, &(0x7f00000017c0)=@alg, &(0x7f0000001840)=0x80, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x48, r6, 0x30, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x44044) socket$nl_netfilter(0x10, 0x3, 0xc) readv(r5, &(0x7f0000005d00)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/180, 0xb4}, {&(0x7f0000002ac0)=""/48, 0x30}, {&(0x7f0000002b00)=""/242, 0xf2}, {&(0x7f0000002c00)=""/87, 0x57}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000005c80)=""/102, 0x66}], 0x9) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000005dc0)) r7 = socket(0x25, 0x1, 0x7) epoll_create(0x68) sendto$inet(r5, &(0x7f0000005e00)="0449e9f62e3f60486cb2e2b20cdafe98c3467965813e5d935860001975a3c1ffdb5fe1cca1b3a6cab331b3a047bb6414f92a8d61925d15446b5cebdb8116a50e391491e39ea7ab01789ab4fa364e7ec901e83218864a4adaae407d3cbfcc", 0x5e, 0x4000000, &(0x7f0000005e80)={0x2, 0x4e24, @local}, 0x10) accept$packet(r7, &(0x7f0000005ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005f00)=0x14) syz_80211_inject_frame(&(0x7f0000005f40), &(0x7f0000005f80)=@mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xe}, @device_a, @device_a, @from_mac=@device_b, {0x9, 0x9}}, 0x8080, 0x8, @broadcast, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x9b, "e527431968286e3e188294859ed0e92f8a9deda4703afccff254a0994511e30f68babee623725a55e9a619aa6bf2ba109e2253ab604e3a2b003f948a2d62c8d51b60b4978301b5e635d9603e7980256daff7842ba2003c5ba74abcdc1b328a3a85e5a81d4df7024f1651f6bcea6641b820a9fc2c41c5368b4ecd7096909c99f63cdbb9b8f697bdb59ff8e0d0ee524b93cae8e86a71fdd2e8a6ac65"}, {0xdd, 0xa8, "ab22b3eda1aae4c109c05ed260983f88b314640bd4f29d2ac05e540c806d76bb3c70908b4109489b39dd9f98960b61044d809377ff2bbea1e9f97dc2220251dac99eae68e93846d93e1c56d11917114b83bbe2f3595e038f743d81bbd20a1eb9b54a8ccec9e4bc6101f5617b3943f76026bb6873e3e9139402784d27f85b54a01a540b5b62e990f9dcee7a5e4f72d27d0b0ba1e70edf5faf491dddee9167d55e3e26d252fb2cdb5c"}, {0xdd, 0xed, "1796ae31eececb2d17bbda6cbc68a40c9528fe394635de1e6e63a545e45a01ee602b006fd28148618ee812dc6086b713fe19eb884446ce31c730102c015eeb252a2b74df7993c8369c23256ad94ac98f9d91a31768b7cdd1287c41cb7117488b68ac4122b8ba4cd65ab754dc9862517bc2e659c2cde946717950404e88064174fa1bb981079fdb173b8cb9a3fd966f2b1d6198f4931dd3cbdd52ae6b3bdea9c6cfbb3dd94023a1b431176bdfafd7db23b5ce7ad54bd8409dd030299f676cdac4cfeb4f5ff7123ff0f8fb608e22792c118d4414b5aa24ea8bdda2ae7aaaf6519d304c6e2b6c18ddd5ef6376f10f"}, {0xdd, 0xcb, "6bc2ba77eda46cb6cd0ba9b74744c53d386d5b0e499736844afd2ee8d17976fd81f5fc37b99cb4f271312403dafb8027a11bc6ce2275c07c0c13d4e041b44d568ff9711152e1e90320740c8437b6705e2ca885dd4355e4f08572905f672d5e2abab559d6a84fae28ea33a7261fbf7fa3f0db0a243cd566c556541e4107cdbe934844c773adf340317e77054bdfe778a2727fd1c004850af06ea691058514540ee490ac561bfedbb6d0f4835061b235680ced50ea4027e8bcb448c3ab3e2384552c91922c8563d78f55dcfc"}, {0xdd, 0x8f, "36ae834e0e02895f3c4c72c2cd545fc5c0e7443d610b9c67a2cb320144fcc7ff18c5a799a619022bb7618a09604f64a47413c0329d49f40bc746bf27aa50302c30075d82d406faa9865f102b0f392b85c68010438c14c39323044e2fba8fe9c7dbf136c4ed5c5d740527d65b44b9055349a820fc6f66e976811bdef6a4cdbc302eaba502ccee1d5e83d01200d4bbcd"}, {0xdd, 0x54, "ef947de31c692737ecb24eec3f945475c168e748a5747dc6e4c5a0638fc4cb15cbee1451591af4d529fc9a039c08bb1fbf49b39af4f654cf1a905366d297fb76bc5d081606d2b7d2207fd2926370397f39597026"}, {0xdd, 0xf6, "77daf55f5c9a2b42d2f9b005b9a20ef91038f51335c386afec026db44ae7d1393146aab9948f3aebf894dd10dbecd0d1b69cb211565aa13abb02febe69aa787fde57eba44192362b36273f8d3a36d5f695b339759b2d0d6a43cefe0cde6d96bff95d2a0759270b4fe6d5d75820df3b47569039ca76a50549966b5fa2842603841c00aebddc0916d868364b7997814800e2ca85d5eeb057f079f48f27dc7ec74c707f55e7b4a7f2749a6e5f79ba928a1450dcbcb71cff9392cccc4aa2c67a52ee72351a9a2065b591d56bbd9fa0e45966eef709c87a5f0fec6c3091bd37c7199701e8fddcdbb7e95e4b19305b057bdef9754326148b1c"}, {0xdd, 0xb3, "1f413b4b6bebc33c45b0de39bfc29af33493301875970c1eab811c7f1b1ace32ad04d4418f08d3506557371b028219f831cae0613e2803b8a84cf5997b07dd5d78669d1561f6c03f5c2eb8966aaeb01e4bae54da68852e4fd3da3b06f4c79e3724772acd611e92aadd77e5b3bfb26396d5612b9141442514d65a57f1c85dbad334e4d9e1801c88ba185d8e2a3b66ec8ed3cd6b3fecc9ceb61d45aa84db22db8001dc647cc238aa8beb2ad43993246ab0ab92d8"}, {0xdd, 0x4c, "0d0b9829a517e0d7f9d11c4365746318ea257bebf6e3a1c613a30f595f665a9e573ca1efaa84e841a7c89a581afd15e9813d493bc3cecda8b80d69a0f7a6ad483575f78ccb990ce695034de5"}]}, 0x60f) bind$can_j1939(r5, &(0x7f00000065c0)={0x1d, r4, 0x1, {0x0, 0xff, 0x2}, 0x1}, 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000006640), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000006700)={&(0x7f0000006600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x40, r9, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2090}, 0x48000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000006740), r8) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000006840)={&(0x7f0000006780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000006800)={&(0x7f00000067c0)={0x34, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000068c0)={0x4, &(0x7f0000006880)=[{0x2, 0x4, 0x0, 0x6}, {0x1b96, 0x0, 0x0, 0x5}, {0xa, 0x0, 0x9, 0x7}, {0x6, 0x81, 0x2, 0x7}]}, 0x10) close(r0) 747.516989ms ago: executing program 1 (id=1098): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x8, 0x0, r4, 0x3, '\x00', r9, r4, 0x4, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x38, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x9a, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0xf5, &(0x7f0000000b00)=""/245, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf5d}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x15, 0x13, &(0x7f0000001a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@generic={0x40, 0x4, 0x1, 0x6, 0xae11}, @generic={0x0, 0x8, 0x4, 0x89}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b00)='GPL\x00', 0x10000, 0x1000, &(0x7f0000001b40)=""/4096, 0x40f00, 0x49, '\x00', r8, 0x3, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002b40)={0x3, 0x7, 0xfffffffe, 0x9}, 0x10, r11, r4, 0x1, &(0x7f0000002b80)=[r4], &(0x7f0000002bc0)=[{0x2, 0x1, 0x9, 0x1}], 0x10, 0x40}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0xebe3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x40}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20811}, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0xa, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@dellink={0x20, 0x11, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x1, 0x4}}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1925, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xffffffff, 0xa8, &(0x7f0000000840)=""/168, 0x40f00, 0x0, '\x00', r9, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x7, 0x2, 0x3}, 0x10, r11, r3, 0x2, 0x0, &(0x7f0000000580)=[{0x3, 0x5, 0x6, 0x1}, {0x1, 0x4, 0x10, 0xc}], 0x10, 0xe85}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r12}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x10, 0x0, r2, 0x2, '\x00', r9, r12, 0x4, 0x5, 0x3}, 0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r13, @ANYBLOB="ff00000000000000140012800b000100626174616476"], 0x34}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006e657464657673696d3000000000000008000a00", @ANYRES32=r15], 0x3c}}, 0x0) 504.809866ms ago: executing program 4 (id=1099): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) socketpair(0x1e, 0x0, 0x8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffe87}, 0x1, 0x0, 0x0, 0x400c884}, 0x8050) (async) preadv(r1, &(0x7f0000000100), 0x2b, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000940)=[{{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000640)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000440)=""/144, 0x90}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000500)=""/14, 0xe}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000540)=""/239, 0xef}], 0x6}, 0x400}, {{&(0x7f00000006c0)=@alg, 0x80, &(0x7f0000000900)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000000740)=""/159, 0x9f}, {&(0x7f0000000800)=""/41, 0x29}, {&(0x7f0000000840)=""/139, 0x8b}], 0x4}, 0x10000}], 0x2, 0x12040, &(0x7f0000000a00)={r6, r7+10000000}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010c000000000000000007000000", @ANYRES32=r8, @ANYBLOB="8000a2000a000200aaaaaaaaaabb000008000f"], 0x30}}, 0x0) r10 = openat$cgroup_ro(r1, &(0x7f0000000380)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r10, 0x0) recvmmsg(r3, &(0x7f00000076c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/131, 0x83}}], 0x1, 0x0, 0x0) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_virt_wifi\x00'}) (async) ioctl$AUTOFS_IOC_CATATONIC(r11, 0x800443d3, 0x20000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x2a, &(0x7f0000000100), 0x4) 407.991725ms ago: executing program 4 (id=1100): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r0, &(0x7f00000005c0), 0x0}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011140000000000000000837d4d000008990ce07db7863c5f004a0000000000"], 0x20}}, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @empty}, &(0x7f00000003c0)=0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x22, 0x4, 0x6, 0x204, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2000, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000bead050000001800a6bde6aee80073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x0, 0x1, 0x200000}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f104e207bdf9d4a9b27ec9429e758972d4c6c758513726143af6a6ef4dee1c4c54826571cd619cd27cbcbfd187c935bfa30424d7f8c7d4e91c01876280b1c8aba9501994ed"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080043007f00000008000500"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000440), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) 303.981045ms ago: executing program 1 (id=1101): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000003340)={0x2c, r2, 0x1, 0x0, 0x0, {0xf, 0x0, 0x700}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}}, 0x0) 247.034432ms ago: executing program 3 (id=1102): socket$inet6(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7730d3feffffffff18320000020000000000000000000000041400000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000086000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xfffe, 0x0, @private1, 0xffffffff}, 0xf) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, '.'}, {0x20, '\\'}, {0x20, '^-)%'}, {0x20, '\x00'}, {}, {0x20, '\x00'}, {0x20, '.^\xe1\xcd\xd1\xba._\xdaU\x1e\x06\x83\xf8\xff\x12\xc4\x0f\xed\xcb\x02y@?\xe30\xd0%u\xb0\xf5\xcd|\xb9<\xab\xe4\xeb\xfe\xdd\x1d\v\xed\xb0\xc2\x8f@\xc7M\x8d\xcf\x11\xee\xc0~\x14BUE\xb3\x06\x05r\xf1\xd9:D\v&\x85z\x80\xef\xd8\xfa]+\xf9\xc1\xcf\xaf\x12\\\\\xbcxj\xe1\xc7\xfeu\xd2\x83\xb9i\x15\xa1\xd7\xdc\xa6\xc2\x86\xa1E\x8e\xe1\xe7\xd8\xdc\n\xb7U\xdd{\xa3=O\xa0\x9e\xe6\xc0\xf0d\xaf\x1f\xde}?\xccU\xce\xe6|6\x14\x1d$dJ\xf2)e\xe7\r\xa3\x87\x10\xd8r\xfb\xa3\xf3&\n\xe3\xb2\xf0\x97+\xc2\x8d%\xd8\x01\xa7I9[w'}], 0xa, "11b2e4a2b4d8acda1690bef7b87d08685a30f9b205ed3e164ad8ae7566c83968f6f8b9f1a464fa1f08f0c3e827c5d07c541664ba573112a0ec6d882429d168feb714f25bef461e6c75e95f96bf11f5c2b119bad6f3fb86bf4f33e2e0322621d0"}, 0x123) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg$inet(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000580)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)="2b233f328144f9afab8820cea685136b3ff1ddc6e1fba96493318dfec310a2d7392ceafd001b23b2d778d80c37d90599e83ff034bdf5bceb6e7cfc0c8bef0ca496851e7f792d8408b1aa51df946a5c281447ddabbbd54131618ece774b182547a1b7a955e8", 0x65}, {&(0x7f00000038c0)="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", 0x107c}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000000640)="bdeebfc3121791709c4b2ec86cb2aaed757e3259cc02b683cc408f1413316feb11c22deababc03b372e67e7b2f9bb1e6e829f7c66617d2995568913640c5c1a3a8dd4eab55b6f90cc1ad9ef1b526a840f7f79c555633039ae39a2598b928ed0155c7087a0edd6b62cc1a75bd1205", 0x6e}, {&(0x7f00000008c0)="5f165665411fe84ab824929cc6ce9deb761b1c7ded874416f917c4076a9a291a9556a1923ed7c9a209c9cf6debe171268abb2e5f386ebd4b8700000000", 0x3d}, {&(0x7f0000000740)="4ded4e4ac756ad762ea2874376f45d5dcb73b746dbb5e8878a", 0x19}, {&(0x7f0000000780)="48ef39a2b50b1b4c30873d81ce6ae88cb9135867b8d39ddaada0b3b9af6308df899b5c1d618a0bb8cc0dac602da302b1d6bbc4", 0x33}], 0x7}}], 0x2, 0x20005000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000474000614000600626f6e6430000000000000000000000014000300ff02000000000000000000000000000114000200fe8000000000000000000000000000bb"], 0x50}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, r7, 0x1}, 0x14}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="495e0e4e86440000001022aa0001040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d00000000000500090001000000"], 0x44}}, 0x0) r11 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_int(r11, 0x0, 0x22, &(0x7f0000001880), 0x4) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f00000003c0)={0x4, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @local}}}, 0x108) 242.47938ms ago: executing program 4 (id=1103): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0d0300000000fdffffff04"], 0x14}}, 0x0) 180.042532ms ago: executing program 1 (id=1104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}]}, 0x34}}, 0x0) 127.820687ms ago: executing program 1 (id=1105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000e80)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x600}}, [@migrate={0x9c, 0x11, [{@in6=@empty, @in=@local, @in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, @in6=@rand_addr=' \x01\x00', @in=@dev, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xec}}, 0x0) 108.160142ms ago: executing program 4 (id=1106): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4a) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$sock(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000680)="490454cc5bb6fff252cba0a2cb8d8779458274ba739d86b71e76849c92d7deb9f4afe04705b0e0ae29c2706048d6a26aedd58a0746daa3544be619bb33393c7f98b4efe93fecdf136b0d385f0b6bb5f2cc1650ea270495317b7002bd6741a071c17aa96e1324d48e84f2101e4dbace9a69af2555bd1934f12003ca9a1c7b65acda4bd19183ab05b711ab26b5dfe219e3be13c576d709bc005c98414e70dd916f9ca99e9e7b7900210e75eb587b5e", 0xffffff94}, {&(0x7f00000003c0)="61376c4626295aaea4f4266b00c80f2d2491208378e493fb82e112e2ee9344", 0x1f}, {&(0x7f0000000940)="507f627fbc5712cf60b360c6717116a83d37404e607789318b99f639dac995f1fbc2105701764213daef1ec7d8aaec594c664b559e72e7bb723d8658315546ec55664e6fbba8a63111a12fe789dd7e2ebb8921271c3a337bac3cc57a817401cb3a76d9c017a607e8c395d54055651b57f88bfab581734b8f5ef22f38c80be7832cde247e2de662d6d47744598e50944ff59ebe3326d7091a9e6c17aac71cf910f5889ad42c6a8cd4af26108866001d8408b2f384bbdf7cddeab42e0db5067d16305851d28341af9479750b8036f331cab26b64ff4162f09cf4fde716178d6c915ca349572ca38b6ff6cee1e1f8c9f73e", 0xf0}], 0x4}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) r7 = socket(0xa, 0x0, 0xffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0), 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r7, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)={0x148, r9, 0x600, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x134, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x7, 0xd}}, @perr={0x84, 0x89, {0x8, 0x9, [{{}, @device_b, 0x1ff, @void, 0x16}, {{}, @device_a, 0xb4, @void, 0x23}, {{}, @device_b, 0x8, @void, 0x29}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x7}, {{}, @device_b, 0xce, @void, 0x1d}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x28}, {{0x0, 0x1}, @device_b, 0xe4, @value=@broadcast, 0x1}, {{}, @device_a, 0x4, @void, 0x1b}, {{}, @device_a, 0xffffffff, @void, 0x1}]}}, @supported_rates={0x1, 0x7, [{0x36}, {0x36}, {0x4}, {0x3}, {0xb, 0x1}, {0xb, 0x1}, {0x60}]}, @measure_req={0x26, 0x95, {0x8, 0x1, 0x5, "1b66ab8c241c3e8946871a80c4265e17379fc1d9be019e44c6089df94947be354cd7b118cf2b24e6a8baf7287d5e866c16c37b06166d6b534b87ffeabc4d71eabfba5556e875970cca0f12c5d7474abcdc023346637c9d2b44cc7100e95553e72ca68657c278daac038f712439ffa288cdfb21b506f6a38f96ea402aa4498904f53538f9ffb2ed1f70e8a5ff7384206eec89"}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x10}, 0x20008840) recvmmsg(r3, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000004780)=""/31, 0x46}], 0x1, 0x0, 0xffffffffffffff92}}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r11, 0x1, 0x0, 0x0, {{}, {}, {0xd, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}}, 0x0) sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 0s ago: executing program 0 (id=1107): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001500)=[{{&(0x7f0000000300)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0xa00}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d6", 0x1}], 0x1}}], 0x2, 0x2400c040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. [ 51.156276][ T5085] cgroup: Unknown subsys name 'net' [ 51.321421][ T5085] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.713629][ T5085] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.166922][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.177512][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.185838][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.189205][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.193955][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.208165][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.211472][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.219427][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.223297][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.230579][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.238344][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.245520][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.250885][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.257411][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.265401][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.274474][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.279841][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.286277][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.293108][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.308966][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.309251][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.325079][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.325183][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.339731][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.347933][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.348067][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.364090][ T5113] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.364200][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.379021][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.383704][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.910328][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 57.008564][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 57.020132][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 57.058820][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 57.128481][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 57.160758][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.170304][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.178095][ T5094] bridge_slave_0: entered allmulticast mode [ 57.186261][ T5094] bridge_slave_0: entered promiscuous mode [ 57.200426][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.207728][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.215165][ T5094] bridge_slave_1: entered allmulticast mode [ 57.222462][ T5094] bridge_slave_1: entered promiscuous mode [ 57.272269][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.279684][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.287014][ T5097] bridge_slave_0: entered allmulticast mode [ 57.294005][ T5097] bridge_slave_0: entered promiscuous mode [ 57.329289][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.336666][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.343874][ T5097] bridge_slave_1: entered allmulticast mode [ 57.350568][ T5097] bridge_slave_1: entered promiscuous mode [ 57.370579][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.410533][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.482327][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.489816][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.498034][ T5096] bridge_slave_0: entered allmulticast mode [ 57.505802][ T5096] bridge_slave_0: entered promiscuous mode [ 57.513201][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.520686][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.528304][ T5096] bridge_slave_1: entered allmulticast mode [ 57.535849][ T5096] bridge_slave_1: entered promiscuous mode [ 57.560328][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.574295][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.586828][ T5094] team0: Port device team_slave_0 added [ 57.635672][ T5094] team0: Port device team_slave_1 added [ 57.662187][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.672930][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.680075][ T5104] bridge_slave_0: entered allmulticast mode [ 57.687834][ T5104] bridge_slave_0: entered promiscuous mode [ 57.695816][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.702881][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.710881][ T5104] bridge_slave_1: entered allmulticast mode [ 57.718619][ T5104] bridge_slave_1: entered promiscuous mode [ 57.747490][ T5097] team0: Port device team_slave_0 added [ 57.757193][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.790294][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.798007][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.805451][ T5095] bridge_slave_0: entered allmulticast mode [ 57.812348][ T5095] bridge_slave_0: entered promiscuous mode [ 57.820018][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.827216][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.834957][ T5095] bridge_slave_1: entered allmulticast mode [ 57.842168][ T5095] bridge_slave_1: entered promiscuous mode [ 57.860741][ T5097] team0: Port device team_slave_1 added [ 57.881174][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.892688][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.906740][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.940466][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.950373][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.977345][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.029053][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.041351][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.051723][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.058713][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.085292][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.102704][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.109775][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.135737][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.161423][ T5096] team0: Port device team_slave_0 added [ 58.181961][ T5104] team0: Port device team_slave_0 added [ 58.214977][ T5095] team0: Port device team_slave_0 added [ 58.221395][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.228987][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.255152][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.274709][ T5096] team0: Port device team_slave_1 added [ 58.282063][ T5104] team0: Port device team_slave_1 added [ 58.315748][ T5095] team0: Port device team_slave_1 added [ 58.322353][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.330326][ T5116] Bluetooth: hci2: command tx timeout [ 58.333821][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.362271][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.375328][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.382277][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.408920][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.419673][ T5116] Bluetooth: hci1: command tx timeout [ 58.484169][ T5105] Bluetooth: hci3: command tx timeout [ 58.484226][ T5113] Bluetooth: hci4: command tx timeout [ 58.495401][ T5116] Bluetooth: hci0: command tx timeout [ 58.508118][ T5094] hsr_slave_0: entered promiscuous mode [ 58.515878][ T5094] hsr_slave_1: entered promiscuous mode [ 58.547100][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.554146][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.580472][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.593424][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.600740][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.626674][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.638639][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.645678][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.671693][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.688759][ T5097] hsr_slave_0: entered promiscuous mode [ 58.695197][ T5097] hsr_slave_1: entered promiscuous mode [ 58.701339][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.709360][ T5097] Cannot create hsr debugfs directory [ 58.741937][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.749031][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.775220][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.826062][ T5104] hsr_slave_0: entered promiscuous mode [ 58.832247][ T5104] hsr_slave_1: entered promiscuous mode [ 58.839393][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.847441][ T5104] Cannot create hsr debugfs directory [ 58.881609][ T5095] hsr_slave_0: entered promiscuous mode [ 58.888223][ T5095] hsr_slave_1: entered promiscuous mode [ 58.894756][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.902319][ T5095] Cannot create hsr debugfs directory [ 58.981250][ T5096] hsr_slave_0: entered promiscuous mode [ 58.987785][ T5096] hsr_slave_1: entered promiscuous mode [ 58.994734][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.002694][ T5096] Cannot create hsr debugfs directory [ 59.443210][ T5097] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.456320][ T5097] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.468143][ T5097] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.478220][ T5097] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.536127][ T5094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.548257][ T5094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.560974][ T5094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.574462][ T5094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.650262][ T5095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.674674][ T5095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.685513][ T5095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.698157][ T5095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.784075][ T5104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.813287][ T5104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.836833][ T5104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.846889][ T5104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.923987][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.945207][ T5096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.957285][ T5096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.968125][ T5096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.978889][ T5096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.009097][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.019456][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.061274][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.068638][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.112072][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.119182][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.145710][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.209866][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.219603][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.226759][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.265589][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.272691][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.318798][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.376937][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.384062][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.404183][ T5113] Bluetooth: hci2: command tx timeout [ 60.445538][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.472137][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.479641][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.495332][ T5113] Bluetooth: hci1: command tx timeout [ 60.531784][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.568134][ T5113] Bluetooth: hci4: command tx timeout [ 60.573699][ T5113] Bluetooth: hci3: command tx timeout [ 60.575681][ T5116] Bluetooth: hci0: command tx timeout [ 60.598445][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.605650][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.650623][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.668581][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.675764][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.761415][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.796660][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.819750][ T5104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.832051][ T5104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.851333][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.858470][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.868347][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.875498][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.932438][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.122017][ T5097] veth0_vlan: entered promiscuous mode [ 61.163083][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.202379][ T5097] veth1_vlan: entered promiscuous mode [ 61.227290][ T5094] veth0_vlan: entered promiscuous mode [ 61.251693][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.307408][ T5097] veth0_macvtap: entered promiscuous mode [ 61.318917][ T5094] veth1_vlan: entered promiscuous mode [ 61.338543][ T5097] veth1_macvtap: entered promiscuous mode [ 61.349299][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.418126][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.481139][ T5094] veth0_macvtap: entered promiscuous mode [ 61.494686][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.521311][ T5095] veth0_vlan: entered promiscuous mode [ 61.545005][ T5094] veth1_macvtap: entered promiscuous mode [ 61.554307][ T5097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.563199][ T5097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.578658][ T5097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.588878][ T5097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.612277][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.668472][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.686492][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.702628][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.713457][ T5095] veth1_vlan: entered promiscuous mode [ 61.733362][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.744263][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.756431][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.817645][ T5094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.835980][ T5094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.845189][ T5094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.855035][ T5094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.932659][ T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.948953][ T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.961253][ T5096] veth0_vlan: entered promiscuous mode [ 61.990985][ T5104] veth0_vlan: entered promiscuous mode [ 62.026282][ T5095] veth0_macvtap: entered promiscuous mode [ 62.042916][ T5095] veth1_macvtap: entered promiscuous mode [ 62.052812][ T5096] veth1_vlan: entered promiscuous mode [ 62.078003][ T962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.097173][ T5104] veth1_vlan: entered promiscuous mode [ 62.105584][ T962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.145788][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.159287][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.180427][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.190976][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.206315][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.260304][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.278636][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.289871][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.303864][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.321371][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.363945][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.371811][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.424366][ T5095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.433141][ T5095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.443847][ T5095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.452792][ T5095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.477335][ T5104] veth0_macvtap: entered promiscuous mode [ 62.484369][ T5116] Bluetooth: hci2: command tx timeout [ 62.525611][ T5096] veth0_macvtap: entered promiscuous mode [ 62.536407][ T5096] veth1_macvtap: entered promiscuous mode [ 62.551274][ T5104] veth1_macvtap: entered promiscuous mode [ 62.564208][ T5116] Bluetooth: hci1: command tx timeout [ 62.603373][ T5185] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 62.612700][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.644227][ T5116] Bluetooth: hci0: command tx timeout [ 62.654521][ T5116] Bluetooth: hci3: command tx timeout [ 62.659962][ T5116] Bluetooth: hci4: command tx timeout [ 62.661168][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.721151][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.747080][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.757910][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.769761][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.779868][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.790578][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.802220][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.820844][ T5189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 62.850040][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.861801][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.872812][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.885344][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.895554][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.906278][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.916280][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.931718][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.945727][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.957266][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.970155][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.985932][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.001863][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.012339][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.023888][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.034941][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.056186][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.067852][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.078774][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.089423][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.099609][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.110371][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.120474][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.131599][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.142811][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.172086][ T5104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.184532][ T5104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.198407][ T5104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.214710][ T5104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.238595][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.253583][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.260919][ T5096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.260977][ T5096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.261004][ T5096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.261031][ T5096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.521257][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.537524][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.658544][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.669053][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.840092][ T962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.858523][ T962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.936052][ T5222] netlink: 277 bytes leftover after parsing attributes in process `syz.3.16'. [ 64.014992][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.035024][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.093455][ T962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.131711][ T962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.564410][ T5116] Bluetooth: hci2: command tx timeout [ 64.644494][ T5116] Bluetooth: hci1: command tx timeout [ 64.655363][ T5252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 64.691069][ T5255] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.724742][ T5105] Bluetooth: hci3: command tx timeout [ 64.725016][ T5113] Bluetooth: hci0: command tx timeout [ 64.730238][ T5116] Bluetooth: hci4: command tx timeout [ 64.795874][ T5258] Zero length message leads to an empty skb [ 65.036679][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 65.221291][ T5281] netlink: 224 bytes leftover after parsing attributes in process `syz.1.35'. [ 65.422198][ T5287] sctp: [Deprecated]: syz.3.38 (pid 5287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 65.422198][ T5287] Use struct sctp_sack_info instead [ 65.448799][ T5289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.39'. [ 65.468469][ T5289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'. [ 65.564904][ T5294] netlink: 144 bytes leftover after parsing attributes in process `syz.0.41'. [ 65.824321][ T5305] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.877286][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 65.933650][ T5305] bridge_slave_1: left allmulticast mode [ 65.939342][ T5305] bridge_slave_1: left promiscuous mode [ 65.995312][ T5305] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.083400][ T5305] bridge_slave_0: left allmulticast mode [ 66.102309][ T5305] bridge_slave_0: left promiscuous mode [ 66.112641][ T5305] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.271828][ T5325] vlan2: entered allmulticast mode [ 66.279810][ T5325] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 66.494614][ T5339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.576045][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 67.497338][ T5396] pim6reg: entered allmulticast mode [ 67.535305][ T5395] pim6reg: left allmulticast mode [ 68.043646][ T5424] __nla_validate_parse: 6 callbacks suppressed [ 68.043666][ T5424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 68.194884][ T5438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 68.426389][ T5444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 68.709847][ T5450] syz.4.99 uses obsolete (PF_INET,SOCK_PACKET) [ 68.982231][ T5466] netlink: 'syz.4.106': attribute type 10 has an invalid length. [ 69.059652][ T5466] hsr0: entered promiscuous mode [ 69.096340][ T5466] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 69.140979][ T5466] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 69.167838][ T5466] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 69.206650][ T5466] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 69.248091][ T5479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'. [ 69.332575][ T5487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'. [ 69.570892][ T5500] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.119'. [ 69.590752][ T5500] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 69.644911][ T5500] xt_connbytes: Forcing CT accounting to be enabled [ 69.670469][ T5500] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 69.707213][ T5500] xt_bpf: check failed: parse error [ 69.837758][ T5516] openvswitch: netlink: Key type 89 is out of range max 32 [ 69.892263][ T5515] netlink: 340 bytes leftover after parsing attributes in process `syz.3.124'. [ 69.973354][ T5522] netlink: 104 bytes leftover after parsing attributes in process `syz.3.127'. [ 70.131194][ T5527] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.129'. [ 70.955219][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'. [ 70.966423][ T5518] netem: incorrect gi model size [ 70.971642][ T5518] netem: change failed [ 71.704432][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.711026][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.030988][ T5588] netlink: 'syz.4.152': attribute type 5 has an invalid length. [ 72.066662][ T5592] netlink: 'syz.1.154': attribute type 1 has an invalid length. [ 72.741100][ T5619] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 73.258897][ T5636] __nla_validate_parse: 8 callbacks suppressed [ 73.258917][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'. [ 73.558205][ T5657] Bluetooth: MGMT ver 1.22 [ 73.600146][ T5657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.180'. [ 73.742168][ T5667] netlink: 'syz.1.184': attribute type 10 has an invalid length. [ 73.775338][ T5669] sctp: [Deprecated]: syz.0.181 (pid 5669) Use of int in maxseg socket option. [ 73.775338][ T5669] Use struct sctp_assoc_value instead [ 74.042294][ T5676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 74.050064][ T5673] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 74.092030][ T5677] netlink: 'syz.1.186': attribute type 17 has an invalid length. [ 74.110212][ T5677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.186'. [ 74.609882][ T5701] warning: `syz.2.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.952321][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 75.075413][ T5724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 75.085386][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.119664][ T5724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.203'. [ 75.277229][ T5731] delete_channel: no stack [ 75.296590][ T5726] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 75.756595][ T5746] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 75.790278][ T5746] macvlan2: entered allmulticast mode [ 75.813702][ T5746] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 75.869154][ T5746] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 76.208008][ T5773] netlink: 104 bytes leftover after parsing attributes in process `syz.1.226'. [ 76.294025][ T5780] IPv6: NLM_F_REPLACE set, but no existing node found! [ 76.438560][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 76.463025][ T5785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.229'. [ 76.686470][ T5801] batadv0: entered promiscuous mode [ 76.828686][ T928] cfg80211: failed to load regulatory.db [ 77.442836][ T5843] sit1: entered promiscuous mode [ 77.591913][ T5851] FAULT_INJECTION: forcing a failure. [ 77.591913][ T5851] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.644068][ T5851] CPU: 0 PID: 5851 Comm: syz.0.256 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 77.654100][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 77.664188][ T5851] Call Trace: [ 77.667484][ T5851] [ 77.670423][ T5851] dump_stack_lvl+0x241/0x360 [ 77.675146][ T5851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.680363][ T5851] ? __pfx__printk+0x10/0x10 [ 77.684989][ T5851] should_fail_ex+0x3b0/0x4e0 [ 77.689693][ T5851] _copy_from_user+0x2f/0xe0 [ 77.694307][ T5851] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 77.699534][ T5851] map_delete_elem+0x214/0x5e0 [ 77.704322][ T5851] ? bpf_lsm_bpf+0x9/0x10 [ 77.708667][ T5851] ? security_bpf+0x87/0xb0 [ 77.713202][ T5851] __sys_bpf+0x598/0x810 [ 77.717472][ T5851] ? __pfx___sys_bpf+0x10/0x10 [ 77.722276][ T5851] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.728275][ T5851] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.734621][ T5851] ? do_syscall_64+0x100/0x230 [ 77.739411][ T5851] __x64_sys_bpf+0x7c/0x90 [ 77.743855][ T5851] do_syscall_64+0xf3/0x230 [ 77.748377][ T5851] ? clear_bhb_loop+0x35/0x90 [ 77.753074][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.758992][ T5851] RIP: 0033:0x7f141bd75bd9 [ 77.763426][ T5851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.783039][ T5851] RSP: 002b:00007f141cc12048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.791450][ T5851] RAX: ffffffffffffffda RBX: 00007f141bf03f60 RCX: 00007f141bd75bd9 [ 77.799419][ T5851] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000003 [ 77.807386][ T5851] RBP: 00007f141cc120a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.815352][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.823315][ T5851] R13: 000000000000000b R14: 00007f141bf03f60 R15: 00007ffd93ec5e78 [ 77.831291][ T5851] [ 78.599496][ T5900] netlink: 'syz.2.277': attribute type 21 has an invalid length. [ 78.643091][ T5900] __nla_validate_parse: 1 callbacks suppressed [ 78.643108][ T5900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.277'. [ 78.767210][ T5915] FAULT_INJECTION: forcing a failure. [ 78.767210][ T5915] name failslab, interval 1, probability 0, space 0, times 1 [ 78.779917][ T5915] CPU: 0 PID: 5915 Comm: syz.1.282 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 78.789918][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 78.799989][ T5915] Call Trace: [ 78.803285][ T5915] [ 78.806231][ T5915] dump_stack_lvl+0x241/0x360 [ 78.810931][ T5915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.816146][ T5915] ? __pfx__printk+0x10/0x10 [ 78.820757][ T5915] ? __lock_acquire+0x1346/0x1fd0 [ 78.825811][ T5915] should_fail_ex+0x3b0/0x4e0 [ 78.830517][ T5915] ? skb_clone+0x20c/0x390 [ 78.834955][ T5915] should_failslab+0x9/0x20 [ 78.839476][ T5915] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 78.844873][ T5915] skb_clone+0x20c/0x390 [ 78.849139][ T5915] bpf_clone_redirect+0xab/0x3d0 [ 78.854103][ T5915] bpf_prog_81ed5507648eb997+0x5e/0x63 [ 78.859666][ T5915] ? debug_mutex_wake_waiter+0xb0/0x320 [ 78.865325][ T5915] ? timekeeping_get_ns+0x5c/0x420 [ 78.870466][ T5915] ? seqcount_lockdep_reader_access+0x157/0x220 [ 78.876729][ T5915] ? lockdep_hardirqs_on+0x99/0x150 [ 78.881951][ T5915] ? bpf_test_run+0x370/0xa90 [ 78.886643][ T5915] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 78.892387][ T5915] ? ktime_get+0x3c/0xb0 [ 78.896653][ T5915] ? lockdep_hardirqs_on+0x99/0x150 [ 78.901879][ T5915] ? bpf_test_run+0x370/0xa90 [ 78.906569][ T5915] ? __pfx___cant_migrate+0x10/0x10 [ 78.911791][ T5915] ? ktime_get+0x9b/0xb0 [ 78.916057][ T5915] bpf_test_run+0x4f0/0xa90 [ 78.920578][ T5915] ? do_syscall_64+0xf3/0x230 [ 78.925273][ T5915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.931366][ T5915] ? bpf_test_run+0x370/0xa90 [ 78.936075][ T5915] ? __pfx_bpf_test_run+0x10/0x10 [ 78.941124][ T5915] ? eth_type_trans+0x3d1/0x7a0 [ 78.946006][ T5915] ? __pfx_eth_type_trans+0x10/0x10 [ 78.951228][ T5915] ? convert___skb_to_skb+0x41/0x620 [ 78.956535][ T5915] bpf_prog_test_run_skb+0xafa/0x13b0 [ 78.961922][ T5915] ? __pfx_lock_release+0x10/0x10 [ 78.966981][ T5915] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 78.972808][ T5915] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 78.978631][ T5915] bpf_prog_test_run+0x33a/0x3b0 [ 78.983591][ T5915] __sys_bpf+0x48d/0x810 [ 78.987857][ T5915] ? __pfx___sys_bpf+0x10/0x10 [ 78.992656][ T5915] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.998653][ T5915] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.004997][ T5915] ? do_syscall_64+0x100/0x230 [ 79.009770][ T5915] __x64_sys_bpf+0x7c/0x90 [ 79.014183][ T5915] do_syscall_64+0xf3/0x230 [ 79.018676][ T5915] ? clear_bhb_loop+0x35/0x90 [ 79.023355][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.029236][ T5915] RIP: 0033:0x7f174a375bd9 [ 79.033643][ T5915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.053237][ T5915] RSP: 002b:00007f174b0c9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.061651][ T5915] RAX: ffffffffffffffda RBX: 00007f174a503f60 RCX: 00007f174a375bd9 [ 79.069641][ T5915] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 79.077629][ T5915] RBP: 00007f174b0c90a0 R08: 0000000000000000 R09: 0000000000000000 [ 79.085617][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.088841][ T5927] can: request_module (can-proto-0) failed. [ 79.093587][ T5915] R13: 000000000000000b R14: 00007f174a503f60 R15: 00007ffd2822c9e8 [ 79.093631][ T5915] [ 79.181915][ T5924] vlan1: entered promiscuous mode [ 79.306325][ T5926] vlan1 (unregistering): left promiscuous mode [ 79.948030][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 80.415202][ T6007] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 80.454144][ T6007] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 80.493422][ T6007] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 80.549858][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 80.602888][ T6014] bond1: entered promiscuous mode [ 80.685286][ T6014] ip6gretap1: entered promiscuous mode [ 80.694732][ T6014] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 80.732551][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 80.744919][ T6018] bond1: left promiscuous mode [ 80.749724][ T6018] ip6gretap1: left promiscuous mode [ 80.777541][ T6022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 80.867904][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 80.901680][ T6028] netlink: 40 bytes leftover after parsing attributes in process `syz.2.315'. [ 81.332498][ T6048] hsr0: entered promiscuous mode [ 81.342287][ T6048] macsec1: entered promiscuous mode [ 81.353940][ T6048] macsec1: entered allmulticast mode [ 81.362362][ T6048] hsr0: entered allmulticast mode [ 81.385367][ T6048] hsr_slave_0: entered allmulticast mode [ 81.410403][ T6054] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.327'. [ 81.417931][ T6048] hsr_slave_1: entered allmulticast mode [ 81.449341][ T6048] hsr0: left allmulticast mode [ 81.453197][ T6054] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 81.462598][ T6048] hsr_slave_0: left allmulticast mode [ 81.489103][ T6048] hsr_slave_1: left allmulticast mode [ 81.564570][ T6063] ipvlan1: entered promiscuous mode [ 81.573127][ T6063] ipvlan1: entered allmulticast mode [ 81.589646][ T6063] veth0_vlan: entered allmulticast mode [ 81.602420][ T6066] ipvlan1: left promiscuous mode [ 81.623653][ T6066] ipvlan1: left allmulticast mode [ 81.624605][ T6068] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 81.628740][ T6066] veth0_vlan: left allmulticast mode [ 81.796781][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'. [ 82.071521][ T6091] geneve2: entered promiscuous mode [ 82.104119][ T6091] geneve2: entered allmulticast mode [ 82.215560][ T6100] bridge0: entered promiscuous mode [ 82.242843][ T6100] bridge0: left promiscuous mode [ 82.313420][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 82.434502][ T6110] netlink: 'syz.4.345': attribute type 29 has an invalid length. [ 82.628070][ T6124] FAULT_INJECTION: forcing a failure. [ 82.628070][ T6124] name failslab, interval 1, probability 0, space 0, times 0 [ 82.655116][ T6124] CPU: 1 PID: 6124 Comm: syz.4.349 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 82.665138][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.675297][ T6124] Call Trace: [ 82.678594][ T6124] [ 82.681535][ T6124] dump_stack_lvl+0x241/0x360 [ 82.686237][ T6124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.691455][ T6124] ? __pfx__printk+0x10/0x10 [ 82.696067][ T6124] ? __pfx___might_resched+0x10/0x10 [ 82.701377][ T6124] should_fail_ex+0x3b0/0x4e0 [ 82.706077][ T6124] should_failslab+0x9/0x20 [ 82.710602][ T6124] kmalloc_node_trace_noprof+0x74/0x300 [ 82.716165][ T6124] ? page_pool_create_percpu+0x77/0x7c0 [ 82.721740][ T6124] page_pool_create_percpu+0x77/0x7c0 [ 82.727132][ T6124] bpf_test_run_xdp_live+0x2cd/0x2110 [ 82.732523][ T6124] ? arch_stack_walk+0x16d/0x1b0 [ 82.737498][ T6124] ? __lock_acquire+0x1346/0x1fd0 [ 82.742549][ T6124] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 82.748390][ T6124] ? mark_lock+0x9a/0x350 [ 82.752758][ T6124] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 82.758661][ T6124] ? __might_fault+0xaa/0x120 [ 82.763356][ T6124] ? __might_fault+0xc6/0x120 [ 82.768053][ T6124] ? _copy_from_user+0xa6/0xe0 [ 82.772833][ T6124] ? bpf_test_init+0x15a/0x180 [ 82.777611][ T6124] ? xdp_convert_md_to_buff+0x5b/0x330 [ 82.781952][ T6130] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 82.783069][ T6124] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 82.783103][ T6124] ? __pfx_lock_release+0x10/0x10 [ 82.801720][ T6124] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.807545][ T6124] ? __fget_files+0x29/0x470 [ 82.812171][ T6124] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 82.818001][ T6124] bpf_prog_test_run+0x33a/0x3b0 [ 82.822959][ T6124] __sys_bpf+0x48d/0x810 [ 82.827234][ T6124] ? __pfx___sys_bpf+0x10/0x10 [ 82.832027][ T6124] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.838019][ T6124] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.844361][ T6124] ? do_syscall_64+0x100/0x230 [ 82.849145][ T6124] __x64_sys_bpf+0x7c/0x90 [ 82.853579][ T6124] do_syscall_64+0xf3/0x230 [ 82.858182][ T6124] ? clear_bhb_loop+0x35/0x90 [ 82.862867][ T6124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.868749][ T6124] RIP: 0033:0x7f785ad75bd9 [ 82.873176][ T6124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.892859][ T6124] RSP: 002b:00007f785bb1d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.901256][ T6124] RAX: ffffffffffffffda RBX: 00007f785af03f60 RCX: 00007f785ad75bd9 [ 82.909220][ T6124] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 82.917210][ T6124] RBP: 00007f785bb1d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.925186][ T6124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.933156][ T6124] R13: 000000000000000b R14: 00007f785af03f60 R15: 00007ffc4b4b3f68 [ 82.941157][ T6124] [ 82.966373][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.029734][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 83.567749][ T6174] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.705469][ T6179] __nla_validate_parse: 1 callbacks suppressed [ 83.705488][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.369'. [ 83.767456][ T6179] team0: entered promiscuous mode [ 83.769312][ T6194] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 83.786044][ T6179] team_slave_0: entered promiscuous mode [ 83.792000][ T6179] team_slave_1: entered promiscuous mode [ 83.831040][ T6177] team0: left promiscuous mode [ 83.853815][ T6177] team_slave_0: left promiscuous mode [ 83.873853][ T6177] team_slave_1: left promiscuous mode [ 83.885694][ T6200] xt_TCPMSS: Only works on TCP SYN packets [ 83.903004][ T6200] netlink: 'syz.2.377': attribute type 1 has an invalid length. [ 84.458270][ T6232] netlink: 'syz.3.392': attribute type 2 has an invalid length. [ 84.564677][ T6240] Bluetooth: MGMT ver 1.22 [ 84.708049][ T6254] netlink: 48 bytes leftover after parsing attributes in process `syz.1.398'. [ 84.872566][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.401'. [ 85.065003][ T6276] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 85.364792][ T6286] bond0: entered promiscuous mode [ 85.388246][ T6286] bond_slave_0: entered promiscuous mode [ 85.408127][ T6286] bond_slave_1: entered promiscuous mode [ 85.432289][ T6289] xt_ecn: cannot match TCP bits for non-tcp packets [ 85.758390][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.770846][ T6310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.990779][ T6330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.007307][ T6335] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 86.025215][ T6335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 86.382599][ T6363] netlink: 4104 bytes leftover after parsing attributes in process `syz.2.440'. [ 86.392312][ T6363] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 86.516793][ T6368] netlink: 'syz.2.441': attribute type 2 has an invalid length. [ 86.528647][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.441'. [ 86.543330][ T6368] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 86.798969][ T6386] openvswitch: netlink: Missing key (keys=40, expected=100) [ 87.039846][ T6402] tipc: Started in network mode [ 87.054837][ T6402] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 87.076763][ T6402] tipc: Enabled bearer , priority 0 [ 87.264025][ T6420] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 87.445017][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 87.495240][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 87.524514][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 87.586917][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.463'. [ 87.610551][ T6439] FAULT_INJECTION: forcing a failure. [ 87.610551][ T6439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.643663][ T6439] CPU: 1 PID: 6439 Comm: syz.3.468 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 87.653704][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 87.663777][ T6439] Call Trace: [ 87.667049][ T6439] [ 87.669967][ T6439] dump_stack_lvl+0x241/0x360 [ 87.674638][ T6439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.679828][ T6439] ? __pfx__printk+0x10/0x10 [ 87.684412][ T6439] ? __pfx_lock_release+0x10/0x10 [ 87.689430][ T6439] should_fail_ex+0x3b0/0x4e0 [ 87.694103][ T6439] _copy_from_iter+0x1f6/0x1960 [ 87.698939][ T6439] ? __virt_addr_valid+0x183/0x520 [ 87.704062][ T6439] ? __pfx_lock_release+0x10/0x10 [ 87.709105][ T6439] ? __alloc_skb+0x28f/0x440 [ 87.713690][ T6439] ? __pfx__copy_from_iter+0x10/0x10 [ 87.718973][ T6439] ? __virt_addr_valid+0x183/0x520 [ 87.724085][ T6439] ? __virt_addr_valid+0x183/0x520 [ 87.729194][ T6439] ? __virt_addr_valid+0x44e/0x520 [ 87.734303][ T6439] ? __check_object_size+0x49c/0x900 [ 87.739590][ T6439] netlink_sendmsg+0x73d/0xcb0 [ 87.744358][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.749636][ T6439] ? __import_iovec+0x536/0x820 [ 87.754477][ T6439] ? aa_sock_msg_perm+0x91/0x160 [ 87.759412][ T6439] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 87.764685][ T6439] ? security_socket_sendmsg+0x87/0xb0 [ 87.770141][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.775413][ T6439] __sock_sendmsg+0x221/0x270 [ 87.780083][ T6439] ____sys_sendmsg+0x525/0x7d0 [ 87.784848][ T6439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.790136][ T6439] __sys_sendmsg+0x2b0/0x3a0 [ 87.794721][ T6439] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.799834][ T6439] ? vfs_write+0x7c4/0xc90 [ 87.804281][ T6439] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.810598][ T6439] ? do_syscall_64+0x100/0x230 [ 87.815353][ T6439] ? do_syscall_64+0xb6/0x230 [ 87.820021][ T6439] do_syscall_64+0xf3/0x230 [ 87.824514][ T6439] ? clear_bhb_loop+0x35/0x90 [ 87.829182][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.835065][ T6439] RIP: 0033:0x7fd670175bd9 [ 87.839469][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.859068][ T6439] RSP: 002b:00007fd670e69048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.867473][ T6439] RAX: ffffffffffffffda RBX: 00007fd670303f60 RCX: 00007fd670175bd9 [ 87.875435][ T6439] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 87.883564][ T6439] RBP: 00007fd670e690a0 R08: 0000000000000000 R09: 0000000000000000 [ 87.891520][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.899476][ T6439] R13: 000000000000000b R14: 00007fd670303f60 R15: 00007ffd9f45d5d8 [ 87.907453][ T6439] [ 88.083450][ T6455] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 88.129298][ T6457] netlink: 'syz.1.475': attribute type 3 has an invalid length. [ 88.151940][ T5098] IPVS: starting estimator thread 0... [ 88.184994][ T5149] tipc: Node number set to 8432298 [ 88.254095][ T6462] IPVS: using max 19 ests per chain, 45600 per kthread [ 89.383409][ T6541] vcan1: entered promiscuous mode [ 89.399985][ T6541] vcan1: entered allmulticast mode [ 89.645142][ T45] IPVS: starting estimator thread 0... [ 89.743862][ T6556] IPVS: using max 19 ests per chain, 45600 per kthread [ 89.774081][ T6562] __nla_validate_parse: 65 callbacks suppressed [ 89.774100][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 89.796290][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.806306][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.818638][ T6562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.828450][ T6562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.850588][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.1.516'. [ 89.891635][ T6570] netlink: 'syz.1.516': attribute type 5 has an invalid length. [ 89.927749][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.515'. [ 89.945011][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 89.980590][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 90.087939][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.523'. [ 90.151702][ T6585] netlink: 'syz.0.522': attribute type 12 has an invalid length. [ 90.318024][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 90.381002][ T6609] netlink: 256 bytes leftover after parsing attributes in process `syz.0.530'. [ 90.522827][ T6618] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 90.610756][ T6625] xfrm0: entered promiscuous mode [ 90.626300][ T6625] xfrm0: entered allmulticast mode [ 90.799026][ T6634] netlink: 'syz.0.543': attribute type 3 has an invalid length. [ 90.820080][ T6634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.543'. [ 91.112801][ T6666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.234487][ T6675] netlink: 'syz.1.559': attribute type 11 has an invalid length. [ 91.240645][ T6671] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 91.251372][ T6675] netlink: 203156 bytes leftover after parsing attributes in process `syz.1.559'. [ 91.304015][ T6679] netlink: 'syz.3.561': attribute type 1 has an invalid length. [ 91.696728][ T6704] x_tables: unsorted underflow at hook 2 [ 91.880481][ T6717] FAULT_INJECTION: forcing a failure. [ 91.880481][ T6717] name failslab, interval 1, probability 0, space 0, times 0 [ 91.893426][ T6717] CPU: 0 PID: 6717 Comm: syz.4.578 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 91.903423][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 91.913492][ T6717] Call Trace: [ 91.916785][ T6717] [ 91.919725][ T6717] dump_stack_lvl+0x241/0x360 [ 91.924425][ T6717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.929644][ T6717] ? __pfx__printk+0x10/0x10 [ 91.934266][ T6717] should_fail_ex+0x3b0/0x4e0 [ 91.938961][ T6717] ? skb_clone+0x20c/0x390 [ 91.943379][ T6717] should_failslab+0x9/0x20 [ 91.947883][ T6717] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 91.953254][ T6717] skb_clone+0x20c/0x390 [ 91.957495][ T6717] ? dev_queue_xmit_nit+0x220/0xc10 [ 91.962687][ T6717] dev_queue_xmit_nit+0x419/0xc10 [ 91.967704][ T6717] ? dev_queue_xmit_nit+0x2b/0xc10 [ 91.972817][ T6717] ? validate_xmit_skb+0x9f9/0x1120 [ 91.978022][ T6717] dev_hard_start_xmit+0x15f/0x7e0 [ 91.983141][ T6717] ? __pfx_validate_xmit_skb+0x10/0x10 [ 91.988620][ T6717] __dev_queue_xmit+0x1b63/0x3e90 [ 91.993643][ T6717] ? kasan_save_track+0x51/0x80 [ 91.998580][ T6717] ? do_syscall_64+0xf3/0x230 [ 92.003250][ T6717] ? __dev_queue_xmit+0x2da/0x3e90 [ 92.008366][ T6717] ? __pfx___dev_queue_xmit+0x10/0x10 [ 92.013837][ T6717] ? __copy_skb_header+0x437/0x5b0 [ 92.018958][ T6717] ? __asan_memcpy+0x40/0x70 [ 92.023550][ T6717] ? __copy_skb_header+0x437/0x5b0 [ 92.028663][ T6717] ? __skb_clone+0x454/0x6c0 [ 92.033257][ T6717] ? skb_clone+0x240/0x390 [ 92.037680][ T6717] __netlink_deliver_tap+0x54d/0x7c0 [ 92.042967][ T6717] ? netlink_deliver_tap+0x2e/0x1b0 [ 92.048158][ T6717] netlink_deliver_tap+0x19d/0x1b0 [ 92.053260][ T6717] netlink_unicast+0x7be/0x990 [ 92.058025][ T6717] ? __pfx_netlink_unicast+0x10/0x10 [ 92.063318][ T6717] ? __virt_addr_valid+0x183/0x520 [ 92.068425][ T6717] ? __check_object_size+0x49c/0x900 [ 92.073708][ T6717] ? bpf_lsm_netlink_send+0x9/0x10 [ 92.078818][ T6717] netlink_sendmsg+0x8e4/0xcb0 [ 92.083592][ T6717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.088891][ T6717] ? __import_iovec+0x536/0x820 [ 92.093731][ T6717] ? aa_sock_msg_perm+0x91/0x160 [ 92.098663][ T6717] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 92.103937][ T6717] ? security_socket_sendmsg+0x87/0xb0 [ 92.109388][ T6717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.114662][ T6717] __sock_sendmsg+0x221/0x270 [ 92.119333][ T6717] ____sys_sendmsg+0x525/0x7d0 [ 92.124096][ T6717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 92.129447][ T6717] __sys_sendmsg+0x2b0/0x3a0 [ 92.134038][ T6717] ? __pfx___sys_sendmsg+0x10/0x10 [ 92.139161][ T6717] ? vfs_write+0x7c4/0xc90 [ 92.143610][ T6717] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.149928][ T6717] ? do_syscall_64+0x100/0x230 [ 92.154686][ T6717] ? do_syscall_64+0xb6/0x230 [ 92.159352][ T6717] do_syscall_64+0xf3/0x230 [ 92.163850][ T6717] ? clear_bhb_loop+0x35/0x90 [ 92.168532][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.174426][ T6717] RIP: 0033:0x7f785ad75bd9 [ 92.178833][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.198427][ T6717] RSP: 002b:00007f785bb1d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.206837][ T6717] RAX: ffffffffffffffda RBX: 00007f785af03f60 RCX: 00007f785ad75bd9 [ 92.214798][ T6717] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 92.222757][ T6717] RBP: 00007f785bb1d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.230718][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.238679][ T6717] R13: 000000000000000b R14: 00007f785af03f60 R15: 00007ffc4b4b3f68 [ 92.246657][ T6717] [ 92.851054][ T6763] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 92.970548][ T6767] team_slave_0: entered promiscuous mode [ 92.976648][ T6767] team_slave_1: entered promiscuous mode [ 92.991396][ T6767] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 93.069197][ T6767] team_slave_0: left promiscuous mode [ 93.074744][ T6767] team_slave_1: left promiscuous mode [ 93.595143][ T6773] team_slave_0: entered allmulticast mode [ 93.955821][ T6809] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 94.304667][ T6833] netlink: 'syz.3.618': attribute type 1 has an invalid length. [ 94.415865][ T6848] netlink: 'syz.0.621': attribute type 33 has an invalid length. [ 94.598452][ T6867] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:27648 [ 94.682110][ T6871] netlink: 'syz.3.629': attribute type 10 has an invalid length. [ 94.705184][ T6871] bridge0: port 3(batadv0) entered blocking state [ 94.712994][ T6871] bridge0: port 3(batadv0) entered disabled state [ 94.743051][ T6871] batadv0: entered allmulticast mode [ 94.754267][ T6871] batadv0: entered promiscuous mode [ 94.760329][ T6871] bridge0: port 3(batadv0) entered blocking state [ 94.766962][ T6871] bridge0: port 3(batadv0) entered forwarding state [ 94.785375][ T6878] __nla_validate_parse: 14 callbacks suppressed [ 94.785393][ T6878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'. [ 94.824530][ T2483] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 94.834133][ T2483] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 95.104801][ T6903] netlink: 209816 bytes leftover after parsing attributes in process `syz.3.641'. [ 95.202921][ T6913] trusted_key: syz.0.637 sent an empty control message without MSG_MORE. [ 95.225498][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 95.238887][ T6908] tipc: Started in network mode [ 95.244712][ T6908] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 95.255183][ T6908] tipc: Enabling of bearer rejected, failed to enable media [ 95.274269][ T6905] netlink: 'syz.0.637': attribute type 17 has an invalid length. [ 95.282377][ T6905] netlink: 152 bytes leftover after parsing attributes in process `syz.0.637'. [ 95.300050][ T6905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.331985][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 95.371511][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 95.421235][ T6923] vlan2: entered promiscuous mode [ 95.436259][ T6923] vlan2: entered allmulticast mode [ 95.643289][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 95.724777][ T6938] netlink: 48 bytes leftover after parsing attributes in process `syz.1.654'. [ 95.754059][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.654'. [ 96.062141][ T6957] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 96.345960][ T6972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.662'. [ 96.383886][ T6970] pim6reg1: entered promiscuous mode [ 96.396094][ T6970] pim6reg1: entered allmulticast mode [ 96.644754][ T6991] unsupported nlmsg_type 40 [ 96.669546][ T6990] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 96.835456][ T7010] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.998107][ T7023] netlink: 'syz.3.682': attribute type 5 has an invalid length. [ 97.087234][ T7029] tipc: Failed to remove unknown binding: 66,1,1/0:298460798/298460800 [ 97.114130][ T7029] tipc: Failed to remove unknown binding: 66,1,1/0:298460798/298460800 [ 97.136378][ T7029] tipc: Failed to remove unknown binding: 66,1,1/0:298460798/298460800 [ 97.347614][ T7047] netlink: 'syz.1.690': attribute type 10 has an invalid length. [ 97.419613][ T7047] team0: Port device syz_tun added [ 97.443083][ T7049] netlink: 'syz.3.689': attribute type 10 has an invalid length. [ 97.480957][ T7049] team0: Port device syz_tun added [ 97.514675][ T7051] netlink: 'syz.2.688': attribute type 4 has an invalid length. [ 97.620782][ T7059] FAULT_INJECTION: forcing a failure. [ 97.620782][ T7059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.650603][ T7059] CPU: 0 PID: 7059 Comm: syz.3.692 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 97.660706][ T7059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.670800][ T7059] Call Trace: [ 97.674098][ T7059] [ 97.677038][ T7059] dump_stack_lvl+0x241/0x360 [ 97.681739][ T7059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.686962][ T7059] ? __pfx__printk+0x10/0x10 [ 97.691600][ T7059] should_fail_ex+0x3b0/0x4e0 [ 97.696304][ T7059] _copy_from_user+0x2f/0xe0 [ 97.700930][ T7059] move_addr_to_kernel+0x82/0x150 [ 97.706065][ T7059] __sys_sendto+0x2a3/0x4f0 [ 97.710593][ T7059] ? __pfx___sys_sendto+0x10/0x10 [ 97.715649][ T7059] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.721630][ T7059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.727963][ T7059] __x64_sys_sendto+0xde/0x100 [ 97.732735][ T7059] do_syscall_64+0xf3/0x230 [ 97.737412][ T7059] ? clear_bhb_loop+0x35/0x90 [ 97.742088][ T7059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.747974][ T7059] RIP: 0033:0x7fd670175bd9 [ 97.752387][ T7059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.771994][ T7059] RSP: 002b:00007fd66fbff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 97.780404][ T7059] RAX: ffffffffffffffda RBX: 00007fd670304038 RCX: 00007fd670175bd9 [ 97.788376][ T7059] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000003 [ 97.796339][ T7059] RBP: 00007fd66fbff0a0 R08: 0000000020000040 R09: 0000000000000010 [ 97.804315][ T7059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.812273][ T7059] R13: 000000000000006e R14: 00007fd670304038 R15: 00007ffd9f45d5d8 [ 97.820249][ T7059] [ 97.840898][ T7060] erspan0: entered promiscuous mode [ 97.874221][ T7060] erspan0: left promiscuous mode [ 97.918533][ T7068] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 97.987034][ T7070] tipc: Failed to remove unknown binding: 66,1,1/0:3317285970/3317285972 [ 98.014077][ T7070] tipc: Failed to remove unknown binding: 66,1,1/0:3317285970/3317285972 [ 98.040315][ T7070] tipc: Failed to remove unknown binding: 66,1,1/0:3317285970/3317285972 [ 98.083893][ T5113] Bluetooth: hci4: command tx timeout [ 98.459593][ T7115] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 98.508000][ T7119] netlink: 'syz.4.708': attribute type 6 has an invalid length. [ 98.816770][ T7142] ip6tnl1: entered promiscuous mode [ 98.822398][ T7142] ip6tnl1: entered allmulticast mode [ 99.241567][ T7107] delete_channel: no stack [ 99.511681][ T7182] validate_nla: 2 callbacks suppressed [ 99.511699][ T7182] netlink: 'syz.3.737': attribute type 15 has an invalid length. [ 99.579538][ T7182] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 99.588606][ T7182] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 99.597380][ T7182] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 99.606273][ T7182] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 99.638133][ T7182] vxlan0: entered promiscuous mode [ 99.864740][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.885081][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.894035][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.911260][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.921043][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.929915][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.955902][ T5094] team0: Port device syz_tun removed [ 100.148710][ T7207] tipc: Failed to remove unknown binding: 66,1,1/0:467240338/467240340 [ 100.216997][ T7207] tipc: Failed to remove unknown binding: 66,1,1/0:467240338/467240340 [ 100.232825][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.250020][ T7207] tipc: Failed to remove unknown binding: 66,1,1/0:467240338/467240340 [ 100.272400][ T7217] __nla_validate_parse: 13 callbacks suppressed [ 100.272419][ T7217] netlink: 88 bytes leftover after parsing attributes in process `syz.3.747'. [ 100.366258][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.465330][ T7229] FAULT_INJECTION: forcing a failure. [ 100.465330][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 100.501768][ T7229] CPU: 0 PID: 7229 Comm: syz.3.753 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 100.511796][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.521868][ T7229] Call Trace: [ 100.525166][ T7229] [ 100.528110][ T7229] dump_stack_lvl+0x241/0x360 [ 100.532808][ T7229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.538032][ T7229] ? __pfx__printk+0x10/0x10 [ 100.542653][ T7229] ? __pfx___might_resched+0x10/0x10 [ 100.547969][ T7229] should_fail_ex+0x3b0/0x4e0 [ 100.552673][ T7229] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 100.558934][ T7229] should_failslab+0x9/0x20 [ 100.563458][ T7229] __kmalloc_noprof+0xd8/0x400 [ 100.568252][ T7229] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 100.574361][ T7229] genl_rcv_msg+0x802/0xec0 [ 100.578879][ T7229] ? mark_lock+0x9a/0x350 [ 100.583214][ T7229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.588253][ T7229] ? __pfx_lock_acquire+0x10/0x10 [ 100.593271][ T7229] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 100.598643][ T7229] ? __pfx_nl80211_set_station+0x10/0x10 [ 100.604271][ T7229] ? __pfx_nl80211_post_doit+0x10/0x10 [ 100.609732][ T7229] ? __pfx___might_resched+0x10/0x10 [ 100.615021][ T7229] netlink_rcv_skb+0x1e3/0x430 [ 100.619811][ T7229] ? __pfx_genl_rcv_msg+0x10/0x10 [ 100.624837][ T7229] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.630126][ T7229] ? __netlink_deliver_tap+0x77e/0x7c0 [ 100.635592][ T7229] genl_rcv+0x28/0x40 [ 100.639574][ T7229] netlink_unicast+0x7f0/0x990 [ 100.644338][ T7229] ? __pfx_netlink_unicast+0x10/0x10 [ 100.649614][ T7229] ? __virt_addr_valid+0x183/0x520 [ 100.654724][ T7229] ? __check_object_size+0x49c/0x900 [ 100.660002][ T7229] ? bpf_lsm_netlink_send+0x9/0x10 [ 100.665114][ T7229] netlink_sendmsg+0x8e4/0xcb0 [ 100.669878][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.675158][ T7229] ? __import_iovec+0x536/0x820 [ 100.680000][ T7229] ? aa_sock_msg_perm+0x91/0x160 [ 100.684932][ T7229] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 100.690204][ T7229] ? security_socket_sendmsg+0x87/0xb0 [ 100.695655][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.700928][ T7229] __sock_sendmsg+0x221/0x270 [ 100.705599][ T7229] ____sys_sendmsg+0x525/0x7d0 [ 100.710363][ T7229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.715665][ T7229] __sys_sendmsg+0x2b0/0x3a0 [ 100.720277][ T7229] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.725394][ T7229] ? vfs_write+0x7c4/0xc90 [ 100.729844][ T7229] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.736177][ T7229] ? do_syscall_64+0x100/0x230 [ 100.740951][ T7229] ? do_syscall_64+0xb6/0x230 [ 100.745638][ T7229] do_syscall_64+0xf3/0x230 [ 100.750143][ T7229] ? clear_bhb_loop+0x35/0x90 [ 100.754833][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.760728][ T7229] RIP: 0033:0x7fd670175bd9 [ 100.765142][ T7229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.784743][ T7229] RSP: 002b:00007fd670e69048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.793152][ T7229] RAX: ffffffffffffffda RBX: 00007fd670303f60 RCX: 00007fd670175bd9 [ 100.801131][ T7229] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 100.809096][ T7229] RBP: 00007fd670e690a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.817083][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.825045][ T7229] R13: 000000000000000b R14: 00007fd670303f60 R15: 00007ffd9f45d5d8 [ 100.833018][ T7229] [ 100.867500][ T7235] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 100.871932][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.033876][ T7241] netlink: 96 bytes leftover after parsing attributes in process `syz.2.754'. [ 101.122596][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.326044][ T7251] netlink: 'syz.2.760': attribute type 4 has an invalid length. [ 101.347635][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 101.459374][ T7194] chnl_net:caif_netlink_parms(): no params data found [ 102.008528][ T5116] Bluetooth: hci5: command tx timeout [ 102.075937][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.095954][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.108555][ T35] bond0 (unregistering): Released all slaves [ 102.271565][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.285131][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.298404][ T7194] bridge_slave_0: entered allmulticast mode [ 102.308427][ T7194] bridge_slave_0: entered promiscuous mode [ 102.488759][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.509998][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.536421][ T7194] bridge_slave_1: entered allmulticast mode [ 102.556099][ T7194] bridge_slave_1: entered promiscuous mode [ 102.688144][ T7314] FAULT_INJECTION: forcing a failure. [ 102.688144][ T7314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.715723][ T7313] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.776'. [ 102.722722][ T7304] netlink: 'syz.0.773': attribute type 4 has an invalid length. [ 102.745326][ T7314] CPU: 1 PID: 7314 Comm: syz.2.774 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 102.755339][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.761632][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 102.765386][ T7314] Call Trace: [ 102.765398][ T7314] [ 102.765407][ T7314] dump_stack_lvl+0x241/0x360 [ 102.765435][ T7314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.790251][ T7314] ? __pfx__printk+0x10/0x10 [ 102.794872][ T7314] ? __pfx_lock_release+0x10/0x10 [ 102.799924][ T7314] should_fail_ex+0x3b0/0x4e0 [ 102.803771][ T7313] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 102.804608][ T7314] _copy_from_user+0x2f/0xe0 [ 102.816558][ T7314] copy_msghdr_from_user+0xae/0x680 [ 102.821781][ T7314] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.827619][ T7314] __sys_sendmsg+0x23d/0x3a0 [ 102.832235][ T7314] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.837363][ T7314] ? vfs_write+0x7c4/0xc90 [ 102.841830][ T7314] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.848176][ T7314] ? do_syscall_64+0x100/0x230 [ 102.852963][ T7314] ? do_syscall_64+0xb6/0x230 [ 102.857611][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.857644][ T7314] do_syscall_64+0xf3/0x230 [ 102.871157][ T7314] ? clear_bhb_loop+0x35/0x90 [ 102.875861][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.881766][ T7314] RIP: 0033:0x7f40a8575bd9 [ 102.884882][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.886177][ T7314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.886194][ T7314] RSP: 002b:00007f40a9347048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.886215][ T7314] RAX: ffffffffffffffda RBX: 00007f40a8704038 RCX: 00007f40a8575bd9 [ 102.886230][ T7314] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 102.886243][ T7314] RBP: 00007f40a93470a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.886254][ T7314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.886265][ T7314] R13: 000000000000006e R14: 00007f40a8704038 R15: 00007ffc59f3e958 [ 102.886295][ T7314] [ 103.001407][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.777'. [ 103.218050][ T7323] pimreg: entered allmulticast mode [ 103.355590][ T35] hsr_slave_0: left promiscuous mode [ 103.385746][ T35] hsr_slave_1: left promiscuous mode [ 103.465973][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.494151][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.504734][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.533628][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.595453][ T35] veth1_macvtap: left promiscuous mode [ 103.606274][ T35] veth0_macvtap: left promiscuous mode [ 103.619802][ T35] veth1_vlan: left promiscuous mode [ 103.637244][ T35] veth0_vlan: left promiscuous mode [ 103.742113][ T7357] Can't find ip_set type bitmap:ip,mac [ 104.085473][ T5116] Bluetooth: hci5: command tx timeout [ 104.256506][ T35] team0 (unregistering): Port device team_slave_1 removed [ 104.291035][ T35] team0 (unregistering): Port device team_slave_0 removed [ 104.587883][ T7194] team0: Port device team_slave_0 added [ 104.595712][ T7363] netlink: 59292 bytes leftover after parsing attributes in process `syz.2.788'. [ 104.632579][ T7194] team0: Port device team_slave_1 added [ 104.729665][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 104.753118][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.771209][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.808180][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.829730][ T7383] netlink: 'syz.0.790': attribute type 27 has an invalid length. [ 104.838802][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.876001][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.903010][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.063599][ T7194] hsr_slave_0: entered promiscuous mode [ 105.070821][ T7194] hsr_slave_1: entered promiscuous mode [ 105.271520][ T35] IPVS: stop unused estimator thread 0... [ 105.494146][ T7417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.804'. [ 105.595277][ T7427] FAULT_INJECTION: forcing a failure. [ 105.595277][ T7427] name failslab, interval 1, probability 0, space 0, times 0 [ 105.630982][ T7427] CPU: 0 PID: 7427 Comm: syz.2.806 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 105.640996][ T7427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.651048][ T7427] Call Trace: [ 105.654327][ T7427] [ 105.657250][ T7427] dump_stack_lvl+0x241/0x360 [ 105.661927][ T7427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.667117][ T7427] ? __pfx__printk+0x10/0x10 [ 105.671703][ T7427] ? __local_bh_enable_ip+0x168/0x200 [ 105.677067][ T7427] ? dev_hard_start_xmit+0x773/0x7e0 [ 105.682346][ T7427] ? __dev_queue_xmit+0x2da/0x3e90 [ 105.687457][ T7427] should_fail_ex+0x3b0/0x4e0 [ 105.692135][ T7427] ? __alloc_skb+0x1c3/0x440 [ 105.696721][ T7427] should_failslab+0x9/0x20 [ 105.701251][ T7427] kmem_cache_alloc_node_noprof+0x71/0x320 [ 105.707059][ T7427] __alloc_skb+0x1c3/0x440 [ 105.711467][ T7427] ? do_syscall_64+0xf3/0x230 [ 105.716136][ T7427] ? __pfx___alloc_skb+0x10/0x10 [ 105.721067][ T7427] ? netlink_ack_tlv_len+0x6e/0x200 [ 105.726257][ T7427] netlink_ack+0x13f/0xa30 [ 105.730676][ T7427] netlink_rcv_skb+0x262/0x430 [ 105.735431][ T7427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 105.740884][ T7427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.746177][ T7427] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.751367][ T7427] netlink_unicast+0x7f0/0x990 [ 105.756152][ T7427] ? __pfx_netlink_unicast+0x10/0x10 [ 105.761426][ T7427] ? __virt_addr_valid+0x183/0x520 [ 105.766541][ T7427] ? __check_object_size+0x49c/0x900 [ 105.771820][ T7427] ? bpf_lsm_netlink_send+0x9/0x10 [ 105.776930][ T7427] netlink_sendmsg+0x8e4/0xcb0 [ 105.781694][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.786970][ T7427] ? __import_iovec+0x536/0x820 [ 105.791807][ T7427] ? aa_sock_msg_perm+0x91/0x160 [ 105.796740][ T7427] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 105.802017][ T7427] ? security_socket_sendmsg+0x87/0xb0 [ 105.807468][ T7427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.812744][ T7427] __sock_sendmsg+0x221/0x270 [ 105.817424][ T7427] ____sys_sendmsg+0x525/0x7d0 [ 105.822187][ T7427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.827478][ T7427] __sys_sendmsg+0x2b0/0x3a0 [ 105.832065][ T7427] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.837168][ T7427] ? vfs_write+0x7c4/0xc90 [ 105.841603][ T7427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.847923][ T7427] ? do_syscall_64+0x100/0x230 [ 105.852677][ T7427] ? do_syscall_64+0xb6/0x230 [ 105.857346][ T7427] do_syscall_64+0xf3/0x230 [ 105.861839][ T7427] ? clear_bhb_loop+0x35/0x90 [ 105.866518][ T7427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.872401][ T7427] RIP: 0033:0x7f40a8575bd9 [ 105.876806][ T7427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.896401][ T7427] RSP: 002b:00007f40a9368048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.904806][ T7427] RAX: ffffffffffffffda RBX: 00007f40a8703f60 RCX: 00007f40a8575bd9 [ 105.912765][ T7427] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 105.920723][ T7427] RBP: 00007f40a93680a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.928689][ T7427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.936649][ T7427] R13: 000000000000000b R14: 00007f40a8703f60 R15: 00007ffc59f3e958 [ 105.944620][ T7427] [ 106.168708][ T5116] Bluetooth: hci5: command tx timeout [ 106.281704][ T7194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.305259][ T7194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.334452][ T7194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.382624][ T7194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.559316][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.582539][ T7194] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.598487][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.605675][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.628350][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.635574][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.715612][ T7194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.977577][ T7468] netlink: 6 bytes leftover after parsing attributes in process `syz.4.819'. [ 106.994766][ T7468] netlink: 156260 bytes leftover after parsing attributes in process `syz.4.819'. [ 107.153024][ T7194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.301446][ T7480] syzkaller1: entered promiscuous mode [ 107.313579][ T7480] syzkaller1: entered allmulticast mode [ 107.388939][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 107.428023][ T7194] veth0_vlan: entered promiscuous mode [ 107.460678][ T7194] veth1_vlan: entered promiscuous mode [ 107.570467][ T7194] veth0_macvtap: entered promiscuous mode [ 107.591323][ T7496] FAULT_INJECTION: forcing a failure. [ 107.591323][ T7496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.619840][ T7194] veth1_macvtap: entered promiscuous mode [ 107.624269][ T7496] CPU: 1 PID: 7496 Comm: syz.2.829 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 107.635573][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.645643][ T7496] Call Trace: [ 107.648937][ T7496] [ 107.651886][ T7496] dump_stack_lvl+0x241/0x360 [ 107.656594][ T7496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.661894][ T7496] ? __pfx__printk+0x10/0x10 [ 107.666522][ T7496] should_fail_ex+0x3b0/0x4e0 [ 107.667606][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.671207][ T7496] _copy_from_user+0x2f/0xe0 [ 107.671234][ T7496] bpf_test_init+0x11f/0x180 [ 107.690804][ T7496] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 107.696196][ T7496] ? __pfx_lock_acquire+0x10/0x10 [ 107.701244][ T7496] ? __pfx_lock_release+0x10/0x10 [ 107.706298][ T7496] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 107.710965][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.712109][ T7496] ? __fget_files+0x29/0x470 [ 107.726503][ T7496] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 107.732336][ T7496] bpf_prog_test_run+0x33a/0x3b0 [ 107.737293][ T7496] __sys_bpf+0x48d/0x810 [ 107.741542][ T7496] ? __pfx___sys_bpf+0x10/0x10 [ 107.746313][ T7496] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.752290][ T7496] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.758613][ T7496] ? do_syscall_64+0x100/0x230 [ 107.763370][ T7496] __x64_sys_bpf+0x7c/0x90 [ 107.767782][ T7496] do_syscall_64+0xf3/0x230 [ 107.772276][ T7496] ? clear_bhb_loop+0x35/0x90 [ 107.776955][ T7496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.782842][ T7496] RIP: 0033:0x7f40a8575bd9 [ 107.787250][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.806850][ T7496] RSP: 002b:00007f40a9368048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.815255][ T7496] RAX: ffffffffffffffda RBX: 00007f40a8703f60 RCX: 00007f40a8575bd9 [ 107.823228][ T7496] RDX: 0000000000000050 RSI: 0000000020000640 RDI: 000000000000000a [ 107.831188][ T7496] RBP: 00007f40a93680a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.839146][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.847105][ T7496] R13: 000000000000000b R14: 00007f40a8703f60 R15: 00007ffc59f3e958 [ 107.855075][ T7496] [ 107.878599][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.889422][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.899364][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.910731][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.929200][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.940111][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.959103][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.969230][ T7194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.988260][ T7194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.001071][ T7194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.017935][ T7500] netlink: 'syz.3.831': attribute type 4 has an invalid length. [ 108.082615][ T7194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.102000][ T7194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.126694][ T7194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.140106][ T7194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.154018][ T7506] netlink: 'syz.3.831': attribute type 4 has an invalid length. [ 108.244113][ T5116] Bluetooth: hci5: command tx timeout [ 108.331387][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.339942][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.395122][ T7523] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 108.442339][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.464982][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.514247][ T7529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.842'. [ 108.541095][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 108.573809][ T7529] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 108.706484][ T7539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.842'. [ 108.754604][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.3.842'. [ 109.408994][ T7586] vlan2: entered promiscuous mode [ 109.480734][ T7589] bond0: entered promiscuous mode [ 109.488243][ T7589] bond_slave_0: entered promiscuous mode [ 109.494590][ T7589] bond_slave_1: entered promiscuous mode [ 109.540080][ T7593] bond_slave_0: entered promiscuous mode [ 109.545966][ T7593] bond_slave_1: entered promiscuous mode [ 109.574435][ T7593] macsec1: entered promiscuous mode [ 109.579684][ T7593] bond0: entered promiscuous mode [ 109.594757][ T7593] macsec1: entered allmulticast mode [ 109.601264][ T7593] bond0: entered allmulticast mode [ 109.621047][ T7593] bond_slave_0: entered allmulticast mode [ 109.622007][ T7597] netlink: 201400 bytes leftover after parsing attributes in process `syz.4.865'. [ 109.632760][ T7593] bond_slave_1: entered allmulticast mode [ 109.659467][ T7593] bond0: left allmulticast mode [ 109.672060][ T7593] bond_slave_0: left allmulticast mode [ 109.678610][ T7593] bond_slave_1: left allmulticast mode [ 109.690633][ T7593] bond0: left promiscuous mode [ 109.702959][ T7593] bond_slave_0: left promiscuous mode [ 109.708459][ T7593] bond_slave_1: left promiscuous mode [ 109.959179][ T7612] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 110.362311][ T7632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.573225][ T7639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'. [ 110.636301][ T7641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.878'. [ 110.666296][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 110.762437][ T7649] tipc: Enabled bearer , priority 10 [ 110.941425][ T7667] sch_fq: defrate 0 ignored. [ 110.962559][ T7668] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 111.309899][ T7697] tipc: Enabling of bearer rejected, already enabled [ 111.617892][ T7719] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 111.626151][ T7719] netlink: 5 bytes leftover after parsing attributes in process `syz.1.907'. [ 111.965642][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 112.125672][ T7742] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.914'. [ 112.659169][ T7776] netlink: 'syz.0.929': attribute type 2 has an invalid length. [ 112.708223][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 112.805178][ T7786] netlink: 18 bytes leftover after parsing attributes in process `syz.3.930'. [ 113.042297][ T7802] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 113.044651][ T7799] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.935'. [ 113.100668][ T7799] netlink: zone id is out of range [ 113.136288][ T7799] netlink: zone id is out of range [ 113.285836][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 113.349841][ T7819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.701686][ T7844] ip6t_REJECT: ECHOREPLY is not supported [ 113.780932][ T7851] sctp: [Deprecated]: syz.2.955 (pid 7851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.780932][ T7851] Use struct sctp_sack_info instead [ 113.864040][ T7853] netlink: 'syz.2.955': attribute type 12 has an invalid length. [ 113.896764][ T7853] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.905754][ T7853] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.914592][ T7853] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.923301][ T7853] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.955172][ T7853] vxlan0: entered promiscuous mode [ 114.505969][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.735858][ T7896] xt_ecn: cannot match TCP bits for non-tcp packets [ 115.099803][ T7918] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 115.431425][ T7945] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 115.481981][ T7945] Cannot find add_set index 0 as target [ 115.763758][ T5113] Bluetooth: hci5: command 0x0405 tx timeout [ 116.201310][ T7999] __nla_validate_parse: 6 callbacks suppressed [ 116.201331][ T7999] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1005'. [ 116.235672][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1004'. [ 116.246149][ T8001] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1010'. [ 116.582336][ T8020] FAULT_INJECTION: forcing a failure. [ 116.582336][ T8020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.630357][ T8020] CPU: 0 PID: 8020 Comm: syz.4.1017 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 116.640478][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 116.650552][ T8020] Call Trace: [ 116.653845][ T8020] [ 116.656789][ T8020] dump_stack_lvl+0x241/0x360 [ 116.661488][ T8020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.666709][ T8020] ? __pfx__printk+0x10/0x10 [ 116.671333][ T8020] should_fail_ex+0x3b0/0x4e0 [ 116.676037][ T8020] _copy_from_user+0x2f/0xe0 [ 116.680631][ T8020] move_addr_to_kernel+0x82/0x150 [ 116.685653][ T8020] __sys_sendto+0x2a3/0x4f0 [ 116.690154][ T8020] ? __pfx___sys_sendto+0x10/0x10 [ 116.695190][ T8020] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 116.701167][ T8020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.707491][ T8020] __x64_sys_sendto+0xde/0x100 [ 116.712258][ T8020] do_syscall_64+0xf3/0x230 [ 116.716757][ T8020] ? clear_bhb_loop+0x35/0x90 [ 116.721432][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.727318][ T8020] RIP: 0033:0x7f785ad75bd9 [ 116.731722][ T8020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.751320][ T8020] RSP: 002b:00007f785bb1d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 116.759729][ T8020] RAX: ffffffffffffffda RBX: 00007f785af03f60 RCX: 00007f785ad75bd9 [ 116.767691][ T8020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 116.775656][ T8020] RBP: 00007f785bb1d0a0 R08: 0000000020000000 R09: 000000000000001c [ 116.783624][ T8020] R10: 000000000000ff97 R11: 0000000000000246 R12: 0000000000000001 [ 116.791582][ T8020] R13: 000000000000000b R14: 00007f785af03f60 R15: 00007ffc4b4b3f68 [ 116.799558][ T8020] [ 116.871372][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1019'. [ 117.325364][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 118.875603][ T8028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1022'. [ 119.321581][ T8062] syz.4.1035[8062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.321732][ T8062] syz.4.1035[8062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.326125][ T8065] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 119.360918][ T8065] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1036'. [ 119.519972][ T8072] netlink: 'syz.3.1037': attribute type 4 has an invalid length. [ 119.552332][ T8071] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1038'. [ 119.885886][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 120.241185][ T8102] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1052'. [ 120.925820][ T8136] nlmon0: entered promiscuous mode [ 120.946137][ T8136] vlan2: entered promiscuous mode [ 120.958809][ T8136] vlan2: entered allmulticast mode [ 120.979322][ T8136] nlmon0: entered allmulticast mode [ 121.000017][ T8136] nlmon0: left allmulticast mode [ 121.014043][ T8136] nlmon0: left promiscuous mode [ 121.085687][ T8113] syz.4.1053 (8113) used greatest stack depth: 16784 bytes left [ 121.140575][ T8145] Cannot find set identified by id 0 to match [ 121.253355][ T8153] __nla_validate_parse: 1 callbacks suppressed [ 121.253384][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 121.834275][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1080'. [ 121.910716][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 121.917461][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 121.924014][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 121.930452][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 121.937011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.944873][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.952780][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.960644][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.962697][ T8181] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1084'. [ 121.968555][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.968587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.968671][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.968687][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.968769][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.968784][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.968868][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.032598][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.040567][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.048442][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.056405][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.064263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.072173][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.080039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.088010][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.095880][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.103828][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.111651][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.119597][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.127460][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.135404][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.143229][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.151176][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.159046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.167000][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.174865][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.182770][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.190639][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.198678][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.206545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.214587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.222415][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.230383][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.238249][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.246187][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.254054][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.261986][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.269849][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.278064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.285950][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.293914][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.301736][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.309680][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.317542][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.325491][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.333319][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.341263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.349134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.357090][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.364959][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.372882][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.380750][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.388714][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.396579][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.404534][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.412359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.420553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.428423][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.436496][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.444349][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.452257][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.460116][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.468096][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.475971][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.525640][ T8188] dvmrp0: entered allmulticast mode [ 122.675773][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.704240][ T8199] FAULT_INJECTION: forcing a failure. [ 122.704240][ T8199] name failslab, interval 1, probability 0, space 0, times 0 [ 122.724222][ T8199] CPU: 0 PID: 8199 Comm: syz.0.1090 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 122.734323][ T8199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 122.744393][ T8199] Call Trace: [ 122.747677][ T8199] [ 122.750612][ T8199] dump_stack_lvl+0x241/0x360 [ 122.755308][ T8199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.760528][ T8199] ? __pfx__printk+0x10/0x10 [ 122.765155][ T8199] should_fail_ex+0x3b0/0x4e0 [ 122.769855][ T8199] ? sock_alloc_inode+0x28/0xc0 [ 122.774722][ T8199] should_failslab+0x9/0x20 [ 122.779243][ T8199] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 122.784987][ T8199] sock_alloc_inode+0x28/0xc0 [ 122.789680][ T8199] ? __pfx_sock_alloc_inode+0x10/0x10 [ 122.795066][ T8199] new_inode_pseudo+0x69/0x1e0 [ 122.799854][ T8199] do_accept+0x16e/0x6c0 [ 122.804119][ T8199] ? __pfx_do_accept+0x10/0x10 [ 122.808917][ T8199] __sys_accept4+0x11e/0x1c0 [ 122.813527][ T8199] ? __pfx___sys_accept4+0x10/0x10 [ 122.818655][ T8199] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.825000][ T8199] ? do_syscall_64+0x100/0x230 [ 122.829791][ T8199] __x64_sys_accept4+0x9a/0xb0 [ 122.834580][ T8199] do_syscall_64+0xf3/0x230 [ 122.839101][ T8199] ? clear_bhb_loop+0x35/0x90 [ 122.843796][ T8199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.849702][ T8199] RIP: 0033:0x7f141bd75bd9 [ 122.854133][ T8199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.873771][ T8199] RSP: 002b:00007f141cc12048 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 122.882214][ T8199] RAX: ffffffffffffffda RBX: 00007f141bf03f60 RCX: 00007f141bd75bd9 [ 122.890205][ T8199] RDX: 0000000020000440 RSI: 0000000000000000 RDI: 0000000000000003 [ 122.898193][ T8199] RBP: 00007f141cc120a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.906177][ T8199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.914163][ T8199] R13: 000000000000000b R14: 00007f141bf03f60 R15: 00007ffd93ec5e78 [ 122.922164][ T8199] [ 123.080422][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'. [ 123.100372][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.141990][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.155693][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.178013][ T8221] batman_adv: batadv1: Adding interface: netdevsim0 [ 123.185537][ T8221] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.232453][ T8221] batman_adv: batadv1: Interface activated: netdevsim0 [ 123.265040][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1098'. [ 123.274120][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.317061][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 123.356408][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 123.372734][ T8227] batman_adv: batadv1: Adding interface: netdevsim0 [ 123.393228][ T8227] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.428405][ T8227] batman_adv: batadv1: Interface activated: netdevsim0 [ 123.817997][ T8237] [ 123.820365][ T8237] ====================================================== [ 123.827381][ T8237] WARNING: possible circular locking dependency detected [ 123.834396][ T8237] 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 Not tainted [ 123.841586][ T8237] ------------------------------------------------------ [ 123.848603][ T8237] syz.3.1102/8237 is trying to acquire lock: [ 123.854583][ T8237] ffffffff8f5e7f48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mc_drop_socket+0x81/0x280 [ 123.863477][ T8237] [ 123.863477][ T8237] but task is already holding lock: [ 123.870838][ T8237] ffff888021fe7850 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_clcsock_release+0x82/0xf0 [ 123.881221][ T8237] [ 123.881221][ T8237] which lock already depends on the new lock. [ 123.881221][ T8237] [ 123.891624][ T8237] [ 123.891624][ T8237] the existing dependency chain (in reverse order) is: [ 123.900726][ T8237] [ 123.900726][ T8237] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 123.909341][ T8237] lock_acquire+0x1ed/0x550 [ 123.914375][ T8237] __mutex_lock+0x136/0xd70 [ 123.919408][ T8237] smc_switch_to_fallback+0x35/0xd00 [ 123.925225][ T8237] smc_sendmsg+0x11f/0x530 [ 123.930152][ T8237] __sock_sendmsg+0x221/0x270 [ 123.935336][ T8237] __sys_sendto+0x3a4/0x4f0 [ 123.940344][ T8237] __x64_sys_sendto+0xde/0x100 [ 123.945614][ T8237] do_syscall_64+0xf3/0x230 [ 123.950621][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.957024][ T8237] [ 123.957024][ T8237] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 123.964652][ T8237] lock_acquire+0x1ed/0x550 [ 123.969663][ T8237] lock_sock_nested+0x48/0x100 [ 123.974932][ T8237] do_ip_setsockopt+0x1a2d/0x3cd0 [ 123.980464][ T8237] ip_setsockopt+0x63/0x100 [ 123.985477][ T8237] do_sock_setsockopt+0x3af/0x720 [ 123.991044][ T8237] __sys_setsockopt+0x1ae/0x250 [ 123.996402][ T8237] __x64_sys_setsockopt+0xb5/0xd0 [ 124.001935][ T8237] do_syscall_64+0xf3/0x230 [ 124.006948][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.013356][ T8237] [ 124.013356][ T8237] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 124.020557][ T8237] validate_chain+0x18e0/0x5900 [ 124.025925][ T8237] __lock_acquire+0x1346/0x1fd0 [ 124.031283][ T8237] lock_acquire+0x1ed/0x550 [ 124.036290][ T8237] __mutex_lock+0x136/0xd70 [ 124.041300][ T8237] ip_mc_drop_socket+0x81/0x280 [ 124.046655][ T8237] inet_release+0x96/0x200 [ 124.051580][ T8237] sock_release+0x82/0x150 [ 124.056499][ T8237] smc_clcsock_release+0xcc/0xf0 [ 124.061944][ T8237] __smc_release+0x683/0x800 [ 124.067037][ T8237] smc_release+0x2d9/0x530 [ 124.072045][ T8237] sock_close+0xbc/0x240 [ 124.076792][ T8237] __fput+0x24a/0x8a0 [ 124.081277][ T8237] task_work_run+0x24f/0x310 [ 124.086378][ T8237] syscall_exit_to_user_mode+0x168/0x360 [ 124.092515][ T8237] do_syscall_64+0x100/0x230 [ 124.097611][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.104009][ T8237] [ 124.104009][ T8237] other info that might help us debug this: [ 124.104009][ T8237] [ 124.114215][ T8237] Chain exists of: [ 124.114215][ T8237] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 124.114215][ T8237] [ 124.127849][ T8237] Possible unsafe locking scenario: [ 124.127849][ T8237] [ 124.135278][ T8237] CPU0 CPU1 [ 124.140621][ T8237] ---- ---- [ 124.145966][ T8237] lock(&smc->clcsock_release_lock); [ 124.151323][ T8237] lock(sk_lock-AF_INET); [ 124.158240][ T8237] lock(&smc->clcsock_release_lock); [ 124.166113][ T8237] lock(rtnl_mutex); [ 124.170078][ T8237] [ 124.170078][ T8237] *** DEADLOCK *** [ 124.170078][ T8237] [ 124.178208][ T8237] 2 locks held by syz.3.1102/8237: [ 124.183302][ T8237] #0: ffff88805264b210 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 124.193500][ T8237] #1: ffff888021fe7850 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_clcsock_release+0x82/0xf0 [ 124.204336][ T8237] [ 124.204336][ T8237] stack backtrace: [ 124.210204][ T8237] CPU: 1 PID: 8237 Comm: syz.3.1102 Not tainted 6.10.0-rc6-syzkaller-01258-g2f5e6395714d #0 [ 124.220247][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 124.230284][ T8237] Call Trace: [ 124.233547][ T8237] [ 124.236477][ T8237] dump_stack_lvl+0x241/0x360 [ 124.241143][ T8237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.246330][ T8237] ? print_circular_bug+0x130/0x1a0 [ 124.251516][ T8237] check_noncircular+0x36a/0x4a0 [ 124.256442][ T8237] ? __pfx_check_noncircular+0x10/0x10 [ 124.261889][ T8237] ? lockdep_lock+0x123/0x2b0 [ 124.266550][ T8237] ? _find_first_zero_bit+0xd3/0x100 [ 124.271829][ T8237] validate_chain+0x18e0/0x5900 [ 124.276680][ T8237] ? validate_chain+0x11e/0x5900 [ 124.281608][ T8237] ? __pfx_validate_chain+0x10/0x10 [ 124.286804][ T8237] ? __pfx_validate_chain+0x10/0x10 [ 124.292090][ T8237] ? validate_chain+0x11e/0x5900 [ 124.297018][ T8237] ? __pfx_validate_chain+0x10/0x10 [ 124.302208][ T8237] ? mark_lock+0x9a/0x350 [ 124.306522][ T8237] ? __pfx_validate_chain+0x10/0x10 [ 124.311705][ T8237] __lock_acquire+0x1346/0x1fd0 [ 124.316547][ T8237] lock_acquire+0x1ed/0x550 [ 124.321124][ T8237] ? ip_mc_drop_socket+0x81/0x280 [ 124.326156][ T8237] ? __pfx_lock_acquire+0x10/0x10 [ 124.331180][ T8237] ? __pfx___might_resched+0x10/0x10 [ 124.336468][ T8237] __mutex_lock+0x136/0xd70 [ 124.340971][ T8237] ? ip_mc_drop_socket+0x81/0x280 [ 124.345997][ T8237] ? rcu_is_watching+0x15/0xb0 [ 124.350750][ T8237] ? ip_mc_drop_socket+0x81/0x280 [ 124.355849][ T8237] ? __pfx___mutex_lock+0x10/0x10 [ 124.360874][ T8237] ? __mutex_lock+0x2ef/0xd70 [ 124.365629][ T8237] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.371940][ T8237] ? smc_clcsock_release+0x82/0xf0 [ 124.377040][ T8237] ip_mc_drop_socket+0x81/0x280 [ 124.381879][ T8237] inet_release+0x96/0x200 [ 124.386286][ T8237] sock_release+0x82/0x150 [ 124.390691][ T8237] smc_clcsock_release+0xcc/0xf0 [ 124.395622][ T8237] __smc_release+0x683/0x800 [ 124.400202][ T8237] smc_release+0x2d9/0x530 [ 124.404607][ T8237] sock_close+0xbc/0x240 [ 124.408833][ T8237] ? __pfx_sock_close+0x10/0x10 [ 124.413675][ T8237] __fput+0x24a/0x8a0 [ 124.417646][ T8237] task_work_run+0x24f/0x310 [ 124.422225][ T8237] ? __pfx_task_work_run+0x10/0x10 [ 124.427326][ T8237] ? syscall_exit_to_user_mode+0xa3/0x360 [ 124.433029][ T8237] syscall_exit_to_user_mode+0x168/0x360 [ 124.438646][ T8237] do_syscall_64+0x100/0x230 [ 124.443220][ T8237] ? clear_bhb_loop+0x35/0x90 [ 124.447887][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.453780][ T8237] RIP: 0033:0x7fd670175bd9 [ 124.458191][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.477791][ T8237] RSP: 002b:00007ffd9f45d6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 124.486195][ T8237] RAX: 0000000000000000 RBX: 00007fd670305a60 RCX: 00007fd670175bd9 [ 124.494156][ T8237] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 124.502111][ T8237] RBP: 00007fd670305a60 R08: 0000000000000006 R09: 0000001d9f45d9ef [ 124.510066][ T8237] R10: 00000000003ffbe4 R11: 0000000000000246 R12: 000000000001e61f [ 124.518022][ T8237] R13: 0000000000000032 R14: 00007fd670305a60 R15: 00007fd670304038 [ 124.525987][ T8237] [ 124.597923][ T8237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.125399][ T1251] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.131695][ T1251] ieee802154 phy1 wpan1: encryption failed: -22