last executing test programs: 3m3.715501561s ago: executing program 2 (id=383): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x34}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) (async, rerun: 64) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) (rerun: 64) 3m3.434609792s ago: executing program 2 (id=385): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newtaction={0x1d4, 0x30, 0x1, 0x0, 0x0, {}, [{0x1c0, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x140, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9b, 0x9, 0x1, 0x6d6e, 0x1}, 0x1}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xb}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xef5b}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xf4}]}, @TCA_IFE_DMAC={0xa}]}, {0xc7, 0x6, "7f7f3d5111b19d4e5c581339fe2c4d41aae66592946bf34995df4ff3eb4673161d459e68dcec5652070c4e508cf498f5915382767e27f3a770d049c42f66141e28dea3b161e956db38b9ec748b7749f4c53f199b771596b889a1ddf97bbafa1ac7ea2a3f79130a69718aed99b09a6c12cfa08581d9b166cd172dcab7f9d9069a55940af908440c66fabf1468424f9cc08eb1ba54330ed2e77880219a1b920f5a6cd8960f24b6fef279f76d83a07db840f6ae2f1ae3b148af57579b73031edeaa4cb876"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x1d4}}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00ff000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}}, 0x18) (async) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r1, 0x0, {0x1, 0x0, 0x4}}, 0x18) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}}, 0x40) (async) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}}, 0x40) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) socket$alg(0x26, 0x5, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="f38d2c66d1439b441af01ffe05cc99c5e9", 0x11}], 0x1}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000003240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="7eceb613cd868959cf7ccd88bb7078593d", 0x11}], 0x1}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) 3m1.570567054s ago: executing program 2 (id=408): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @loopback, 0x1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="6af181fc91ba042f021a7ab4ea0500000022ded63f0f149695a3ab30", 0x1c}, {&(0x7f0000000140)="c3", 0x1}], 0x2}}], 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) sendto$packet(r0, &(0x7f00000001c0)='\b', 0x1, 0xc0181, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m1.350717766s ago: executing program 2 (id=409): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@remote, @remote, @null, @null, @rose, @null, @bcast, @default]}, &(0x7f0000000140)=0x48, 0x1000) connect$ax25(r1, &(0x7f0000000280)={{0x3, @default, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="24002d80080002000300000005000100000000000500040009000000080003"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@dellinkprop={0x28, 0x6d, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 3m1.198719095s ago: executing program 2 (id=414): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x54}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 3m1.018808972s ago: executing program 2 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x5, 0x2, 0x5c9a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m45.914124074s ago: executing program 32 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x5, 0x2, 0x5c9a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m30.914663347s ago: executing program 3 (id=870): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2bc, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x2a8, 0x1, [@m_skbmod={0x10c, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xdd, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885dad6ce7ecace"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x198, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x169, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2bc}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/156, 0x9c}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x6}, 0x1}], 0x2, 0x0, 0x0) 2m30.69875239s ago: executing program 3 (id=874): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000040)=[{r1, 0x8482}], 0x1, &(0x7f0000000080), 0x0, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 2m30.542664807s ago: executing program 3 (id=878): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'xfrm0\x00', &(0x7f0000000180)=@ethtool_wolinfo={0x5, 0x0, 0x0, "0bbc84a2a4a0"}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100), &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r1, 0xffffe000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0100001a"], 0x14c}}, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000140)={0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r7}, 0x10) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x0, 0x1, "dc"}], 0x18}, 0xfc00) 2m30.502311688s ago: executing program 3 (id=879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)={0x20, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 2m30.316047186s ago: executing program 3 (id=882): socket$netlink(0x10, 0x3, 0xf) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0xa4, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x86, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0xd, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x0, @random, 0xc16a, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x0, 0x0, 0x7}}, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x1, 0x28, 0x8}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x9, 0x8, 0x5, 0xc}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x7f, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x401, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0xc, 0x41}}, @val={0x76, 0x6, {0x3d, 0x5, 0x3a, 0xc}}}}]}, 0xa4}}, 0x20040000) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'pim6reg0\x00', {0x2, 0x0, @empty}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002980), 0xffffffffffffffff) shutdown(r0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x40, r5, 0xa11, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$netlink(0x10, 0x3, 0xf) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0xa4, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x86, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0xd, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x0, @random, 0xc16a, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0x0, 0x0, 0x0, 0x7}}, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x1, 0x28, 0x8}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x9, 0x8, 0x5, 0xc}}, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x7f, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x401, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0xc, 0x41}}, @val={0x76, 0x6, {0x3d, 0x5, 0x3a, 0xc}}}}]}, 0xa4}}, 0x20040000) (async) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'pim6reg0\x00', {0x2, 0x0, @empty}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000002980), 0xffffffffffffffff) (async) shutdown(r0, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x40, r5, 0xa11, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 2m30.090573195s ago: executing program 3 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/997, @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="a290e25449227bae2e424dd59dec72798b4bab81a9c9bacbfbe447da281cb6d38778185f53ca70d1e8f3fb97ec589f20d205580ffe80bbb95966ca309ecf432a2ebc9e05a66f7bb5371a", @ANYBLOB="96aad1fb5adf1d7d89c00f103f3274a67c6c7cc31ee529b1981ec2be0fb10e97ed5a2ab74da09af0af47e3663e15fe5323b55e4bb77d9384d80cd3"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe, 0x0, &(0x7f0000000040)="fdfffd0700"/14, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r0, 0x0, 0x2, &(0x7f0000000080)='^\x00'}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'ip_vti0\x00', {0x2}, 0xffff}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000001780)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1, 0xff, 0xb, 0x2, 0x9}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 2m28.215985555s ago: executing program 0 (id=916): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x40, r1}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x5342b08f686cee9d, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0x6c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040}, 0x4004) (async) ioctl(r3, 0x8936, &(0x7f0000000000)) 2m28.007712318s ago: executing program 0 (id=919): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0), 0x0) 2m27.881417406s ago: executing program 0 (id=922): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x83, &(0x7f0000000180)={r1, 0x7, 0x20}, &(0x7f0000000200)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) 2m27.669793111s ago: executing program 0 (id=925): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@null, @remote, @netrom, @netrom, @default, @remote, @null, @bcast]}, &(0x7f0000000380)=0x48, 0x80000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000003c0)={0x0, 'veth1\x00', {0x1}, 0x2}) r1 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_emit_ethernet(0x11f, &(0x7f0000000c40)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe9, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', [{0x5, 0x1a, "b378b4ab7e6dec5a1bae2cabd9103dd505a4386e8716ff04a2f49e69485a91d1ff1a1fb0e3f2e0a68f507561d6a3f31d51ad78b4b8b0e81ef6ea021f561712d79e77c6b552fbaa4835d8b7ab763f33a96e5f8af87c5b64d51ea7bb6a01fb8d0f33f70755673c52b570661399f764fc770c5d88ecb6e516acacda6e3c75ec17351059b22af4887d6659c0e2daec240c6656dcd17718814a0808766225500115c2f274e13c40b5005b76dfa6583c9d0b682bf1e028287faea12c2b4c6be79c950510ccda59d6da46ff2b084d7ee085ee"}]}}}}}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000ac0)='memory.pressure\x00', 0x2, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000000000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32=r4], 0x3c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x80, 0x0, 0x3, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast2, @private=0xa010100, {[@timestamp={0x44, 0x14, 0x62, 0x0, 0x1, [0x9, 0x4, 0x100, 0x1]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r7, 0x2, 0x8001, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20000895) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000480)={0x7, 0x28, '\x00', 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x40}}, 0x0) 2m27.51832919s ago: executing program 0 (id=927): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0xb, 0x6, 0x701, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1806000000000000000000000200000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000dd580c950a7ec5a063c6029cb79844cf1b1a47eb8e7fc6d7f89269b10493896742622bc6b517f455fc9612b89806c5f927ff8ed89f666a19dc9fd7803c01d63cd90087eb9daf32a43e643928d0f0440fe3476b5f3fa6e1c65dc712601d7f"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)}, {&(0x7f0000000180)="2abce30f9a7ed894fe7c62dda26be01e210458c64fdc129edc40ce6a288fade5ef27c2396949b0", 0x27}], 0x2, 0x0, 0x0, 0x2840}], 0x1, 0x4044090) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1}, 0x9}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xfffff717, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB], 0x398}}, 0x0) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x16}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) 2m27.364952504s ago: executing program 0 (id=930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0006040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fff5000008000140000000000900010073797a30"], 0xd8}}, 0x80) 2m27.054972497s ago: executing program 33 (id=930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0006040900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fff5000008000140000000000900010073797a30"], 0xd8}}, 0x80) 2m14.898743304s ago: executing program 34 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/997, @ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="a290e25449227bae2e424dd59dec72798b4bab81a9c9bacbfbe447da281cb6d38778185f53ca70d1e8f3fb97ec589f20d205580ffe80bbb95966ca309ecf432a2ebc9e05a66f7bb5371a", @ANYBLOB="96aad1fb5adf1d7d89c00f103f3274a67c6c7cc31ee529b1981ec2be0fb10e97ed5a2ab74da09af0af47e3663e15fe5323b55e4bb77d9384d80cd3"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe, 0x0, &(0x7f0000000040)="fdfffd0700"/14, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r0, 0x0, 0x2, &(0x7f0000000080)='^\x00'}, 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'ip_vti0\x00', {0x2}, 0xffff}) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000001780)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1, 0xff, 0xb, 0x2, 0x9}, 0x20) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 1m17.936675779s ago: executing program 4 (id=1880): r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x207, 0x7, 0x6c, 0x3, 0x0, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'macvlan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000140)="d0b4163e96457321d877d01ac288", 0xe, 0x40000, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x70, 0x6, @local}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000080), &(0x7f0000000100)=""/29, &(0x7f0000000140)="5ebb1cc66c660d99ec932aa819366002000810614e05f9cc5fa3b2f8fa1068e76fe4bdbd3762abdd20bccafb", &(0x7f0000000180)="8ec4c1e75738c7affe82d4fa32e6d9462a2113fbbebf5f8b739e4d5b8eb576c62b980abd288a3929e5ebdc806f9fd4692edcd8def908a60f4679de6e4ef384e176fd0686edd0c685f6e1855e1170019d8dc3b321e4180d3d784abfbfbeb4691810d8d99fc4cf02da6147a62d57d9bb89d6a6990f490c6ca6bcf8801837ace6c24759667d1e2a88defc0efef1f50c7e3cf85dc581ed2ae0184f1792c2328ccf7137a3ff3f15a6032f12d9104b6c50572d44a98ace62d67e5e5a1a25d36cd57b3187b5d27343850110e30431ea65f21f", 0xf12, r4}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 1m17.65344446s ago: executing program 4 (id=1884): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)={0x44, r1, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 1m17.518463389s ago: executing program 4 (id=1885): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x7}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000340)={0xa, 0x4e24, 0x1000000080000, @loopback}, 0xffffffffffffffc7, 0x0, 0x0, &(0x7f00000001c0)=[@hopopts_2292={{0x0, 0x29, 0x36, {0x2, 0x0, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x18}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, "72041470fad27c2565095496720367d9875673b2936ba8091f77bc5f06dacda2", 0x4, 0x8, 0x4, 0x8000}, 0x3c) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) r3 = socket$nl_generic(0x10, 0x3, 0x10) getuid() (async) getuid() r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@empty, @private}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}]}, 0x40}}, 0x0) getpid() (async) r10 = getpid() sendmsg$unix(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) (async) sendmsg$unix(r4, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xf4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x8, 0x3, 0x0, 0x0, @pid=r10}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="2288d4df"]}]}, 0x34}}, 0xc880) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xf4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @typed={0x8, 0x3, 0x0, 0x0, @pid=r10}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="2288d4df"]}]}, 0x34}}, 0xc880) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x20, 0x0}, @local}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000200)=0x41c16f48c89e823e, 0x4) 1m17.074708864s ago: executing program 4 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25060000001800018014000200766c616e3100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)={0x4, 0x4, 0x5, 0x0, 0x0, [{{r2}}, {{r0}, 0xe}, {{r2}, 0x8a8}, {{r4}, 0x6}, {{r2}, 0x5}]}) 1m16.530360073s ago: executing program 4 (id=1898): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x8c4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000016c0)={@remote, 0x0, 0x0, 0x2, 0x0, 0x9, 0xa}, &(0x7f0000001700)=0x20) 1m16.370502775s ago: executing program 4 (id=1900): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) socket$inet6(0xa, 0x5, 0x80000000) r2 = socket(0x25, 0x1, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000080)) recvfrom$inet(r2, 0x0, 0x0, 0x400000a3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000480)=0x8, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r10, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xb, 0xbd, [0x8, 0x1, 0x2358, 0x99ce]}]}, 0x34}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24200400}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x164, 0x40, 0x400, 0x70bd27, 0x25dfdbfd, {0x12}, [@generic="8023b65e6c0cff983259cc89a1948fc8316d85c42431efdc13ed66ae762cd78a5ea506e7e591436f9f246f21fabdd805db1c6572c4d037500117227e5a9d90034bda49fd6e65dd6b48ea1d664a321fefc073b558df7cd116290799897bb37f13431ee08d848a972c1a", @generic="21e81847e694efbffc6fee7aa181e0bb4863c6969fd69eaad41781ea4be325c926775527afe15b5cd205e9d07138b4b86fd6d087d1693eb6febbc16900281c6ce7277d87f7c9015682b5d003d164ec39b2f02a6796211c84a5a0054757eb2ba4727e24faec342258dee7fe5b2c6ee1af5f4fcf37740fc07b52dd340365606480b6999417f578eb99b0a00bbb104f9887722b5830a80d48d849435b7230ebd64ba8a98483aa7d696b8e01c548238dfc2d8a875171f51490a5d31e191926edd0f12eb060537aac63ea13e480d604a902aa377b44a50b1db4e02c8ed691e8428a0b091cc628"]}, 0x164}, 0x1, 0x0, 0x0, 0x40090}, 0x200008c0) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0x3) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="c0214717", 0x4}], 0x1, 0x0, 0x0) 1m13.175709862s ago: executing program 5 (id=1814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="00000000000000003c0012800b00010069703667726500002c00028008000c00cc0800000800040000040000060018000900000006000f0008000000060011004e200000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000fe80000000000000000000000000001b00000001000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000200100000000000000000000000000010000000000000000000000000000000008000000000000380400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000800000000456c0b0600000028bd7000000000000a000000000000000000000007000000000000003534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000040), 0x4) 1m12.082311924s ago: executing program 5 (id=1814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="00000000000000003c0012800b00010069703667726500002c00028008000c00cc0800000800040000040000060018000900000006000f0008000000060011004e200000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000fe80000000000000000000000000001b00000001000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000200100000000000000000000000000010000000000000000000000000000000008000000000000380400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000800000000456c0b0600000028bd7000000000000a000000000000000000000007000000000000003534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000040), 0x4) 1m1.358089562s ago: executing program 35 (id=1900): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) socket$inet6(0xa, 0x5, 0x80000000) r2 = socket(0x25, 0x1, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000080)) recvfrom$inet(r2, 0x0, 0x0, 0x400000a3, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r6, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd1, &(0x7f0000000480)=0x8, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, r10, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xb, 0xbd, [0x8, 0x1, 0x2358, 0x99ce]}]}, 0x34}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24200400}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x164, 0x40, 0x400, 0x70bd27, 0x25dfdbfd, {0x12}, [@generic="8023b65e6c0cff983259cc89a1948fc8316d85c42431efdc13ed66ae762cd78a5ea506e7e591436f9f246f21fabdd805db1c6572c4d037500117227e5a9d90034bda49fd6e65dd6b48ea1d664a321fefc073b558df7cd116290799897bb37f13431ee08d848a972c1a", @generic="21e81847e694efbffc6fee7aa181e0bb4863c6969fd69eaad41781ea4be325c926775527afe15b5cd205e9d07138b4b86fd6d087d1693eb6febbc16900281c6ce7277d87f7c9015682b5d003d164ec39b2f02a6796211c84a5a0054757eb2ba4727e24faec342258dee7fe5b2c6ee1af5f4fcf37740fc07b52dd340365606480b6999417f578eb99b0a00bbb104f9887722b5830a80d48d849435b7230ebd64ba8a98483aa7d696b8e01c548238dfc2d8a875171f51490a5d31e191926edd0f12eb060537aac63ea13e480d604a902aa377b44a50b1db4e02c8ed691e8428a0b091cc628"]}, 0x164}, 0x1, 0x0, 0x0, 0x40090}, 0x200008c0) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000007c0)='t', 0x1}], 0x1) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0x3) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="c0214717", 0x4}], 0x1, 0x0, 0x0) 1m1.292435704s ago: executing program 5 (id=1814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="00000000000000003c0012800b00010069703667726500002c00028008000c00cc0800000800040000040000060018000900000006000f0008000000060011004e200000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000fe80000000000000000000000000001b00000001000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000200100000000000000000000000000010000000000000000000000000000000008000000000000380400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000800000000456c0b0600000028bd7000000000000a000000000000000000000007000000000000003534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000040), 0x4) 57.366559969s ago: executing program 7 (id=2069): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcb, 0x0, 0x76e6) preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000140)={r3}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x7f, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r5, r8, 0x33, 0x2034, 0x0, @void, @void, @value=r9}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 57.148757995s ago: executing program 7 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socketpair(0x2b, 0x3, 0x6, &(0x7f0000000080)) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000840)={r7, 0x0, 0x0}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback=r5, r7, 0x0, 0x0, 0x0, @void, @value=r5}, 0x20) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="c9902ffa", @ANYRES16=r1, @ANYBLOB="000200000000000000000500000004000180"], 0x18}}, 0x0) 55.69374079s ago: executing program 7 (id=2074): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x44, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x44}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x20, r6, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x24000810) 45.58482219s ago: executing program 5 (id=1814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="00000000000000003c0012800b00010069703667726500002c00028008000c00cc0800000800040000040000060018000900000006000f0008000000060011004e200000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000fe80000000000000000000000000001b00000001000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000200100000000000000000000000000010000000000000000000000000000000008000000000000380400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000800000000456c0b0600000028bd7000000000000a000000000000000000000007000000000000003534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000040), 0x4) 45.109215704s ago: executing program 7 (id=2074): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x44, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x44}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x20, r6, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x24000810) 38.834743773s ago: executing program 6 (id=2187): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00430000000061116000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 38.734969653s ago: executing program 6 (id=2188): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x3, 0x4, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="02"], 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xfffff717, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 38.282529221s ago: executing program 6 (id=2192): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = accept4(0xffffffffffffffff, &(0x7f0000000400)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000480)=0x80, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x1, 0x10, 0xfffffff7, 0x81, {{0x14, 0x4, 0x2, 0x4, 0x50, 0x64, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast2, {[@ssrr={0x89, 0x17, 0xbd, [@rand_addr=0x64010102, @broadcast, @loopback, @empty, @multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x3f, [@remote, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x33}, @broadcast, @multicast1]}]}}}}}) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newchain={0x2c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x1, 0xa}, {0xe, 0x4}, {0xf, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040801) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="a864664b28e10b26e880fd9bb88d5fc4818169c7c7247889e00f93147796acbfdbfe06239f80161a48be7fc841ced38cbdf21c727294", 0x36}, {&(0x7f0000000080)="7bbf5ac60e506acf03d4f4a3fc84adc138a46532a2318b0296d6049fa6e86d18f64922f1a2ed13d6ef3073a74ff0c6a390a6860fb3fdc31373ccfe1aa62e88ad2a33b04b5b21", 0x46}, {&(0x7f0000000200)="e7a3743c725d11a06b049f474ae04725d1ec245245b5c84bedeba5d0c7bf7099e49514b6eb4c7f31f06b112a005ffd26be1d32a68b53b423958de22bcc969a38cb900866413313c71dad90478bde8c1fcb0256439daac65ab00baa4718e32b53626ab2f04b5f394351af53019e0b3134d2eeff07d99a07f5fcbbe0e855155419116b36a118e604e954fa7395c14633eabcaf9ca0cc020b73a03c2e7c1e823f8259988874504cbd02d00cda19730d847c82b95cddf4850a8825da28a38791ae131ea0379c9481bb568d7aae45175b41dcccbbf7596724a3ca70729342d03032c3867189023c94f608e4ea377045a4b4e0b896d5", 0xf3}], 0x3) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14, 0x80800) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000003c0)={0x2, 0x6}, 0x4) 38.010644049s ago: executing program 6 (id=2195): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [], 0x0, 0x0, 0x8d564dafc0ab7374}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x483) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c000100000000000000000014000300fe"], 0x114}], 0x1}, 0x0) 28.936696396s ago: executing program 7 (id=2074): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x44, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x44}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x20, r6, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x24000810) 28.636336201s ago: executing program 5 (id=1814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="00000000000000003c0012800b00010069703667726500002c00028008000c00cc0800000800040000040000060018000900000006000f0008000000060011004e200000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000fe80000000000000000000000000001b00000001000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000200100000000000000000000000000010000000000000000000000000000000008000000000000380400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000800000000456c0b0600000028bd7000000000000a000000000000000000000007000000000000003534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000040), 0x4) 24.151425101s ago: executing program 6 (id=2195): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [], 0x0, 0x0, 0x8d564dafc0ab7374}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x483) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c000100000000000000000014000300fe"], 0x114}], 0x1}, 0x0) 17.626268266s ago: executing program 1 (id=2292): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000001340), 0x0, 0x0) 17.472424533s ago: executing program 1 (id=2294): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200), 0xe) (async) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x800, 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) (async) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), 0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="faff08000000000000009500000000000000000000000200"], &(0x7f0000000100)='GPL\x00', 0x9, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.290592977s ago: executing program 1 (id=2296): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x6, 0x6, 0x3, 0x7ff}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200"], 0x10) socket$inet6(0xa, 0x1, 0x100) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&\x00l\t'], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd00014c4a009c1100fc010000000000020000000000000000ff02000000000000000000000000000100000e22009c90780100000001000000bc223eb4c48149be34c533f677415bfb021bfb2b0d586c3f283c994230024389360d8a5f63d45084b3fc32bfe632e84f2dab7e62f718d75bb193ddcc0e5b5bb488898168fecf0f785e09e7af982c95597469bd2cb1656808a604d27268a97c42e2157da24945f0db6e167bbb8f7cacd1460a68af591dccd5c67db8741b220948eebbc72a48bb1d0000000000"], 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="5ade71491406a899044f3aad08e222bec835dc8feced1df48eaf4e5829d546ec676da52394f989194de6f37b1f22d204f36758b0591dca47f1dbc761644fdb5ddde8f81c14735470b66cb70a574c3949289dbb295489a49d2d3296831576c546b1cff95cac9be1177380209e6413b8d2d26ab10c66f7a2db948790e0a586685f0f9a7efdf6b792c2e32acc0f0fa8deb7735e3bd75a27d2", 0x97}, {&(0x7f0000000040)="76570b998d38f17db5a41920be1d954f8fe414536c3b74d5ae6be41e92d13b4728960235c969c439a9822d6290722dedef611fcafcfd15fd5f05cc8df48a32cdc9a6c997fb1c112c4562fb6fc294d71d667d1d3855980859d8126b6297b251e662f8", 0x62}, {&(0x7f0000000340)="295bdf0b52b19fc98ad12353bee88e5368aff2e30ed1df5603b3d6bbcb7b21d517ba6c39711101b9baaf54e58592f846bb38d4d973da6a1967889957a73f2cd383cda660ed76d2", 0x47}], 0x3) 16.927115194s ago: executing program 1 (id=2298): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008b000000bf090000000000005509010000000000950000010200000085000000c9000000bf91000000000000b70205000000000085000000c5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15.4641604s ago: executing program 1 (id=2300): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, 0x13, 0x507, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) bind$can_j1939(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="01040000f70000000000000000000010912a91282b9d629500ff"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) 8.546486667s ago: executing program 8 (id=2312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x814}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40100) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x0, 0x3, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r7, 0x400448c9, &(0x7f0000000040)="b4c003990000000008") r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0xd6, 0x9, 0x6, 0xa048}, {0x0, 0x0, 0x4, 0x40000}, {0xabea, 0x80, 0x71, 0x8}, {0x8, 0xf6, 0x3, 0xf1}, {0x1, 0x9, 0x0, 0x7}]}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x2c, r9, 0x1, 0x0, 0x0, {0xe}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x40890) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x9ccef61ebd097951}, 0x20004000) sendmmsg$inet(r4, &(0x7f0000005d40)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="34000000000000000000000007000000442420f9"], 0x38}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0x80}}, 0x0) 8.421036413s ago: executing program 8 (id=2313): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, 0xb, 0x6, 0x701, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1806000000000000000000000200000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000dd580c950a7ec5a063c6029cb79844cf1b1a47eb8e7fc6d7f89269b10493896742622bc6b517f455fc9612b89806c5f927ff8ed89f666a19dc9fd7803c01d63cd90087eb9daf32a43e643928d0f0440fe3476b5f3fa6e1c65dc712601d7f"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)}, {&(0x7f0000000180)="2abce30f9a7ed894fe7c62dda26be01e210458c64fdc129edc40ce6a288fade5ef27c2396949b0", 0x27}], 0x2, 0x0, 0x0, 0x2840}], 0x1, 0x4044090) recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000340)=""/106, 0x6a}], 0x1}, 0x9}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xfffff717, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 7.431433711s ago: executing program 8 (id=2314): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x89e}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}]]}, 0x64}}, 0x20000884) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x54}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8844) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x1) (async, rerun: 32) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000380)=0x5, 0x4) (async, rerun: 32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) write$ppp(r3, &(0x7f0000000400)="444d607c4bbebab15cd8f42b5d609c65458562ae1ff12ef357437d255290c4700829", 0x22) bind$netlink(r1, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1c8, r0, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IE={0x36, 0x2a, [@measure_req={0x26, 0x30, {0x0, 0x5, 0xd, "90721841a7b519a9833fdfecd7988c987ae57c1e53becc9137225906a21b108d704f9b0fa9780379566a8561a8"}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xe}, @NL80211_ATTR_IE={0x140, 0x2a, [@random={0x6, 0x42, "e86c81800755c7a1e02a6c968194d6cdb69ce8040fab018df321c0035796bd11c4f5b6adf9498e290ae971f5c57dc1a213116a1bb5726cc1025093c9d79bf05d4d25"}, @peer_mgmt={0x75, 0x18, {0x0, 0xe5c9, @val=0x14, @val=0x42, @val="c2400aaabd90c012610edeaaabcd1f37"}}, @prep={0x83, 0x1f, {{}, 0x1, 0x6, @broadcast, 0xa, @void, 0x2, 0x5, @device_b, 0x9}}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x36, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x80, 0x7, 0x5248, @device_a, 0x8001, @value=@broadcast, 0x80, 0x1ff, 0x2, [{{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0x8f2b}]}}, @dsss={0x3, 0x1, 0x2c}, @random={0xe, 0x68, "e5dfe122621f1134610aa9e88dcf614ba9587aa3db002d5779609decd31763647e5b53b0b9d2af3f4b17d329376ec758b46d4e1dce2e3cebbb7d4e449cea345d95656541e6108c4e814ed2961c39fe60c13bcd3ee1538d1746285d1aedf73a4beff0c873bab1aa1a"}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x11}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x400c801}, 0x4004040) r5 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x800) recvfrom$phonet(r5, &(0x7f00000007c0)=""/88, 0x58, 0x2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, r6, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20061800) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f0000000a80)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xc, 0xcc95, 0x355c, 0xfffffffe, 0x28b40, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x80000000, 0x2, 0x2, 0x0, @value=r5, @void, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d40)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x3, 0x7f, {{0x19, 0x4, 0x3, 0x3f, 0x64, 0x68, 0x0, 0xf4, 0x2f, 0x0, @remote, @multicast2, {[@noop, @timestamp_addr={0x44, 0x1c, 0xba, 0x1, 0xb, [{@rand_addr=0x64010102, 0xfffffffd}, {@empty, 0x3}, {@multicast2, 0x2}]}, @lsrr={0x83, 0xf, 0x6e, [@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x7b, 0x3, 0x2, [{@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x101}, {@multicast2, 0x4}, {@loopback, 0xfc1}]}]}}}}}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x4, [@enum64={0xf, 0x4, 0x0, 0x13, 0x0, 0x0, [{0xc, 0x6, 0x4}, {0xd, 0x8, 0x509}, {0x7, 0xc2, 0x200000}, {0xe, 0x2}]}, @var={0xc, 0x0, 0x0, 0xe, 0x1}, @const={0xf, 0x0, 0x0, 0xa, 0x1}, @struct={0x9, 0x3, 0x0, 0x4, 0x0, 0xf, [{0x7, 0x3, 0x5}, {0x2, 0x3, 0x4d102041}, {0x10, 0x0, 0x7}]}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x8, 0xfac}, {0x6, 0xef5}, {0x1, 0x1}]}, @enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xc, 0x0, 0xd67}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x49, 0x1}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000000f40)=""/177, 0xf0, 0xb1, 0x1, 0xa, 0x10000, @value}, 0x28) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001080)={0x9, 0x0}, 0x8) (async, rerun: 64) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000010c0)={0xffffffffffffffff}, 0x4) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x8, 0xb, &(0x7f0000000b80)=@raw=[@func, @alu={0x7, 0x1, 0x7, 0x2, 0x0, 0x6, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], &(0x7f0000000c00)='GPL\x00', 0x1000, 0xdc, &(0x7f0000000c40)=""/220, 0x40f00, 0x48, '\x00', r9, @fallback=0x5, r10, 0x8, &(0x7f0000001040)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r11, r12, 0x3, 0x0, &(0x7f0000001100)=[{0x3, 0x1, 0x4}, {0x2, 0x2, 0x6, 0x7}, {0x1, 0x1, 0xd}], 0x10, 0x3, @void, @value}, 0x94) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r10, 0x8030942b, &(0x7f0000001200)={0x2, {0x0, 0x6, 0x6, 0x8000, 0xc}}) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x1) (async) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_CHANNEL(r13, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x2c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x891}, 0x20008010) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r13, 0x84, 0x23, &(0x7f0000001500)={0x0, 0x9}, 0x8) 7.266692213s ago: executing program 8 (id=2315): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x29, 0x2, 0x0) 7.12430467s ago: executing program 8 (id=2316): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}}, 0x0) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r2 = epoll_create1(0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) epoll_pwait(r2, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) (async, rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000011c0)={0x9}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) (async) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) (async) splice(r4, 0x0, r6, 0x0, 0x4ffe0, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) write(r8, &(0x7f0000000000)="0a000000010000", 0x7) (rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r9, 0x29, 0x4d, 0x0, 0x8) (async) epoll_pwait(r2, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x0, 0x3, &(0x7f0000000200)={[0x6]}, 0x19) syz_emit_ethernet(0x1b5, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "703fd8", 0x17f, 0x2f, 0x1, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x10]}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x2, {{0x1, 0x1, 0x9, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x1, {0x9c9e}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x7, 0x3, 0x1, 0x0, 0x0, 0xc}, 0x2, {0x9, 0x0, 0x2, 0x1b, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 6.885316451s ago: executing program 8 (id=2317): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xfffffeff, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000840)={[{0x2d, 'rdma'}, {0x6480ec50967f336e, 'memory'}, {0x2d, 'perf_event'}, {0x2b, 'freezer'}, {0x2d, 'freezer'}, {0x0, 'net_prio'}, {0x2d, 'cpuset'}, {0x2d, 'io'}, {0x2d, 'net'}, {0x2b, 'cpuset'}]}, 0x4f) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@struct={0xf, 0x4, 0x0, 0x4, 0x1, 0x7, [{0xd, 0x0, 0x7}, {0xb, 0x2, 0x6}, {0x10, 0x5, 0x6e7}, {0x10, 0x5, 0x4}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000500)=""/137, 0x58, 0x89, 0x0, 0x0, 0x10000, @value=r1}, 0x28) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'vlan1\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x10}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000640)={0xfff, 0xd3e, 0x3, 0x8, 0x3, [0x8bae, 0xb, 0x9, 0x7ff]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x8, 0x7f02ae, 0x348, 0x200, 0x418, 0x2e8, 0x2e8, 0x418, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r6}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'bridge_slave_0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x564) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x33}, @call={0x85, 0x0, 0x0, 0x62}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, &(0x7f00000001c0), 0x40f00, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x5, 0x9, 0x4}, 0x10, r3, r6, 0x0, &(0x7f00000003c0), &(0x7f0000000400), 0x10, 0xfffffff9, @void, @value}, 0x94) r7 = socket(0x11, 0x80a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='fsi_master_acf_poll_response_busy\x00', 0xffffffffffffffff, 0x0, 0xaf1b}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000680)={0x2, 'ip_vti0\x00', {0x1}, 0x4000}) sendmsg$netlink(r9, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="180100002d0001000000000000000000060100800c0002000200000000000100140001"], 0x118}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond0\x00'}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r8) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000002cc0)={0x32, 0x218, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x0, [0xb, 0x100, 0x7f8c, 0x3c6, 0x80, 0xbb30]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x48, {0x3, 0x10, 0x5, 0x3ff, [0x7fffffff, 0x10000, 0x3, 0x1, 0x7, 0x7f, 0x4, 0x0]}}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0xf, 0x7, [0x800, 0x13c00000000, 0xc2, 0x7]}}, @pad1, @pad1, @pad1, @generic={0x2, 0x1000, "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"}]}, 0x10d0) sendmsg$nl_route(r10, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r12, @ANYBLOB="40003a000a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x48000) 5.570854029s ago: executing program 7 (id=2074): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/16, &(0x7f0000000040)=0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x44, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x44}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x20, r6, 0x1, 0xffffffff, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x5396ebcfacd913b0}, 0x24000810) 4.882715565s ago: executing program 5 (id=1814): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) writev(r0, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="00000000000000003c0012800b00010069703667726500002c00028008000c00cc0800000800040000040000060018000900000006000f0008000000060011004e200000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000fe80000000000000000000000000001b00000001000000000a00008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000200100000000000000000000000000010000000000000000000000000000000008000000000000380400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000800000000456c0b0600000028bd7000000000000a000000000000000000000007000000000000003534332867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x4000010, r0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x3, &(0x7f0000000040), 0x4) 4.180242549s ago: executing program 6 (id=2195): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x330, 0x238, 0x238, 0x330, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [], 0x0, 0x0, 0x8d564dafc0ab7374}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x483) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001000000000000000000010100800c000100000000000000000014000300fe"], 0x114}], 0x1}, 0x0) 0s ago: executing program 1 (id=2300): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x50, 0x13, 0x507, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x50}}, 0x0) bind$can_j1939(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="01040000f70000000000000000000010912a91282b9d629500ff"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) kernel console output (not intermixed with test programs): VS: wrr: UDP 224.0.0.2:0 - no destination available [ 241.232141][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 241.265097][T12917] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2098'. [ 241.276142][T12918] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2098'. [ 241.302945][T12825] team0: Port device team_slave_0 added [ 241.330688][T12825] team0: Port device team_slave_1 added [ 241.424444][T12825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.452867][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.494507][T12825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.551841][T12825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.571870][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.599100][T12825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.687352][T12708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.772798][T12739] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.818223][T12739] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.881706][T12825] hsr_slave_0: entered promiscuous mode [ 241.896573][T12825] hsr_slave_1: entered promiscuous mode [ 241.903271][T12825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.912213][T12825] Cannot create hsr debugfs directory [ 241.913435][T12934] netlink: 'syz.1.2104': attribute type 4 has an invalid length. [ 241.925081][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2103'. [ 241.936892][T12739] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.998443][T12739] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 242.027597][ T5144] Bluetooth: hci7: command tx timeout [ 242.124946][T12940] netlink: 'syz.6.2105': attribute type 9 has an invalid length. [ 242.264966][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.272242][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.275558][T12708] veth0_vlan: entered promiscuous mode [ 242.345932][T12708] veth1_vlan: entered promiscuous mode [ 242.433789][T12825] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.526906][T12708] veth0_macvtap: entered promiscuous mode [ 242.607416][T12825] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.635495][T12708] veth1_macvtap: entered promiscuous mode [ 242.696709][T12739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.718314][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.737033][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.745187][ T5144] Bluetooth: hci6: command tx timeout [ 242.765017][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.780937][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.791325][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.802662][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.813202][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.824550][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.835048][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.846572][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.858194][T12708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.899341][T12825] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.923286][T12962] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2113'. [ 242.951338][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.974928][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.995598][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.018195][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.034915][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.055433][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.077917][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.101973][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.115475][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.128195][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.146852][T12708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.226467][T12739] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.304874][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 243.312060][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 243.330366][T12739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.353501][T12739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.392019][T12307] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.399230][T12307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.432294][T12307] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.439484][T12307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.502454][T12825] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.531795][T12708] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.541979][T12708] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.551722][T12708] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.561043][T12708] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.761539][T12975] FAULT_INJECTION: forcing a failure. [ 243.761539][T12975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.785270][T12975] CPU: 1 UID: 0 PID: 12975 Comm: syz.1.2117 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 243.796070][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.796086][T12975] Call Trace: [ 243.796094][T12975] [ 243.796103][T12975] dump_stack_lvl+0x241/0x360 [ 243.796138][T12975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.796166][T12975] ? __pfx__printk+0x10/0x10 [ 243.796194][T12975] ? __pfx_lock_release+0x10/0x10 [ 243.796225][T12975] should_fail_ex+0x3b0/0x4e0 [ 243.796262][T12975] _copy_from_iter+0x1e9/0x1c20 [ 243.796287][T12975] ? __virt_addr_valid+0x183/0x530 [ 243.796319][T12975] ? __alloc_skb+0x28f/0x440 [ 243.796341][T12975] ? __pfx__copy_from_iter+0x10/0x10 [ 243.796368][T12975] ? __virt_addr_valid+0x183/0x530 [ 243.796392][T12975] ? __virt_addr_valid+0x183/0x530 [ 243.796415][T12975] ? __virt_addr_valid+0x45f/0x530 [ 243.796440][T12975] ? __phys_addr_symbol+0x2f/0x70 [ 243.796465][T12975] ? __check_object_size+0x47a/0x730 [ 243.796495][T12975] netlink_sendmsg+0x73d/0xcb0 [ 243.796528][T12975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.796555][T12975] ? aa_sock_msg_perm+0x91/0x160 [ 243.796581][T12975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.796603][T12975] __sock_sendmsg+0x221/0x270 [ 243.796634][T12975] ____sys_sendmsg+0x52a/0x7e0 [ 243.796666][T12975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.796688][T12975] ? __fget_files+0x2a/0x410 [ 243.796718][T12975] ? __fget_files+0x2a/0x410 [ 243.857301][T12825] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.862123][T12975] __sys_sendmsg+0x269/0x350 [ 243.877144][T12312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.877334][T12975] ? __pfx_lock_release+0x10/0x10 [ 243.882707][T12312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.887390][T12975] ? __pfx___sys_sendmsg+0x10/0x10 [ 243.887430][T12975] ? __pfx_vfs_write+0x10/0x10 [ 243.887477][T12975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.887504][T12975] ? do_syscall_64+0x100/0x230 [ 243.887538][T12975] ? do_syscall_64+0xb6/0x230 [ 243.983870][T12975] do_syscall_64+0xf3/0x230 [ 243.988401][T12975] ? clear_bhb_loop+0x35/0x90 [ 243.993095][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.999028][T12975] RIP: 0033:0x7f231f585d29 [ 244.003444][T12975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.023064][T12975] RSP: 002b:00007f2320430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.031505][T12975] RAX: ffffffffffffffda RBX: 00007f231f775fa0 RCX: 00007f231f585d29 [ 244.039578][T12975] RDX: 00000000040008c4 RSI: 0000000020000a40 RDI: 0000000000000004 [ 244.047571][T12975] RBP: 00007f2320430090 R08: 0000000000000000 R09: 0000000000000000 [ 244.055556][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.063542][T12975] R13: 0000000000000000 R14: 00007f231f775fa0 R15: 00007ffc12120178 [ 244.071540][T12975] [ 244.079696][T12825] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 244.123372][T12309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.134459][T12825] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 244.142673][T12309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.160722][T12825] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 244.261924][T12979] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 244.295201][T12970] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 244.344911][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.352183][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.414050][T12739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.454298][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2119'. [ 244.477673][T12985] netlink: 'syz.6.2121': attribute type 12 has an invalid length. [ 244.513585][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2119'. [ 244.520906][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.750292][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.800234][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.807468][T12310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.825123][ T5144] Bluetooth: hci6: command tx timeout [ 244.895656][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.902813][T12309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.239052][T12739] veth0_vlan: entered promiscuous mode [ 245.264616][T13017] __nla_validate_parse: 1 callbacks suppressed [ 245.264637][T13017] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2127'. [ 245.299216][T12739] veth1_vlan: entered promiscuous mode [ 245.320137][T13013] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2127'. [ 245.353952][T13017] netlink: 'syz.1.2127': attribute type 11 has an invalid length. [ 245.385029][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 245.392355][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 245.457816][T12739] veth0_macvtap: entered promiscuous mode [ 245.467413][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.500371][T12739] veth1_macvtap: entered promiscuous mode [ 245.558179][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.584950][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.620072][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.664421][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.702520][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.735075][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.758104][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.782918][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.809551][T13032] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2131'. [ 245.815420][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.836442][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.856550][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.868429][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.880435][T12739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.926326][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.979027][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.009537][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.042691][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.058128][T13043] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 246.063886][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.085424][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.095948][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.107363][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.117889][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.128755][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.165457][T12739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.176604][T12739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.189514][T12739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.275952][T12739] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.314928][T12739] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.323681][T12739] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.355184][T12739] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.424909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 246.432082][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 246.475706][T13054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.495851][T13055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.514304][T12825] veth0_vlan: entered promiscuous mode [ 246.540237][T12825] veth1_vlan: entered promiscuous mode [ 246.614909][T12825] veth0_macvtap: entered promiscuous mode [ 246.623012][T13054] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2137'. [ 246.645237][T13054] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2137'. [ 246.663479][T13060] xt_bpf: check failed: parse error [ 246.665958][T12825] veth1_macvtap: entered promiscuous mode [ 246.747269][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.767278][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.796580][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.824766][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.834644][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.859967][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.871395][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.882526][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.893044][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.907095][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.907706][ T5144] Bluetooth: hci6: command tx timeout [ 246.920955][T13069] netlink: 'syz.8.2140': attribute type 12 has an invalid length. [ 246.931958][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.955564][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.983832][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.005225][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.036271][T12825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.046736][T12312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.060737][T12312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.106525][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.123419][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.135456][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.151196][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.161466][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.172344][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.182726][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.193447][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.205372][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.216278][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.226694][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.237759][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.248085][T12825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.258798][T12825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.271189][T12825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.304275][T12825] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.325485][T12825] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.340981][T12825] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.358749][T12825] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.464947][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 247.472265][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 247.537486][T13083] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 247.552366][T12309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.569442][T12309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.726449][T12310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.734416][T12310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.827717][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.835923][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.104184][T12311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.301501][T12311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.436587][T12311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.591281][T12311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.645983][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2152'. [ 248.786132][T13109] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2152'. [ 248.987518][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 248.998669][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.009461][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.025918][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.035255][ T5848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 249.042790][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.056525][T13114] lo speed is unknown, defaulting to 1000 [ 249.366352][T12311] bridge_slave_1: left allmulticast mode [ 249.372098][T12311] bridge_slave_1: left promiscuous mode [ 249.381504][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.411875][ T5144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 249.421333][ T5144] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 249.430951][ T5144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 249.456272][ T5144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 249.465666][ T5144] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 249.475964][ T5144] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 249.528418][T12311] bridge_slave_0: left allmulticast mode [ 249.534142][T12311] bridge_slave_0: left promiscuous mode [ 249.544888][ C0] net_ratelimit: 2 callbacks suppressed [ 249.544909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 249.554983][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.557890][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.331305][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2163'. [ 250.440758][T12311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.452739][T12311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.464506][T12311] bond0 (unregistering): Released all slaves [ 250.483197][T13110] lo speed is unknown, defaulting to 1000 [ 250.496714][T13149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.563206][T13150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.584862][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.592110][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 250.622187][T13150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.661079][T13150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.676405][T13150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.927223][T13126] lo speed is unknown, defaulting to 1000 [ 251.145037][ T5848] Bluetooth: hci6: command tx timeout [ 251.507021][T13179] netlink: 'syz.8.2171': attribute type 9 has an invalid length. [ 251.519024][T13110] chnl_net:caif_netlink_parms(): no params data found [ 251.545215][ T5848] Bluetooth: hci7: command tx timeout [ 251.624928][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 251.632122][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 252.159484][T13110] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.166905][T13110] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.174228][T13110] bridge_slave_0: entered allmulticast mode [ 252.203782][T13110] bridge_slave_0: entered promiscuous mode [ 252.216974][T13110] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.224104][T13110] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.255442][T13110] bridge_slave_1: entered allmulticast mode [ 252.266375][T13110] bridge_slave_1: entered promiscuous mode [ 252.309459][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2176'. [ 252.323437][T12311] hsr_slave_0: left promiscuous mode [ 252.330085][T12311] hsr_slave_1: left promiscuous mode [ 252.337345][T12311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.345010][T12311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.364106][T12311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.372236][T12311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.401897][T12311] veth1_macvtap: left promiscuous mode [ 252.407545][T12311] veth0_macvtap: left promiscuous mode [ 252.413124][T12311] veth1_vlan: left promiscuous mode [ 252.418637][T12311] veth0_vlan: left promiscuous mode [ 252.664866][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 252.672139][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 252.942849][T12311] team0 (unregistering): Port device team_slave_1 removed [ 252.997112][T12311] team0 (unregistering): Port device team_slave_0 removed [ 253.227033][ T5848] Bluetooth: hci6: command tx timeout [ 253.512869][T13110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.541812][T13110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.632798][ T5848] Bluetooth: hci7: command tx timeout [ 253.690779][T13110] team0: Port device team_slave_0 added [ 253.704868][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 253.717844][T13110] team0: Port device team_slave_1 added [ 253.727259][T13206] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.738701][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2178'. [ 253.870542][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.890287][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.918581][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.939341][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.983408][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.020980][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.059522][T13126] chnl_net:caif_netlink_parms(): no params data found [ 254.138968][T13110] hsr_slave_0: entered promiscuous mode [ 254.152321][T13110] hsr_slave_1: entered promiscuous mode [ 254.169971][T13110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.194983][T13110] Cannot create hsr debugfs directory [ 254.259375][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 254.309941][T13224] netlink: 'syz.1.2183': attribute type 3 has an invalid length. [ 254.409951][T13126] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.429748][T13126] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.445649][T13126] bridge_slave_0: entered allmulticast mode [ 254.462736][T13126] bridge_slave_0: entered promiscuous mode [ 254.525217][T13126] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.540724][T13126] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.564240][T13126] bridge_slave_1: entered allmulticast mode [ 254.575941][T13126] bridge_slave_1: entered promiscuous mode [ 254.691723][T12311] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.745264][ C0] net_ratelimit: 1 callbacks suppressed [ 254.745285][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 254.758239][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 254.783029][T13126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.798041][T13126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.858730][T12311] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.888397][T13245] netlink: 'syz.6.2188': attribute type 1 has an invalid length. [ 255.009968][T13245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 255.059288][T12311] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.097187][T13126] team0: Port device team_slave_0 added [ 255.107405][T13126] team0: Port device team_slave_1 added [ 255.132623][T13246] bond3: (slave gretap2): making interface the new active one [ 255.177054][T13246] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 255.296214][T13246] syz.6.2188 (13246) used greatest stack depth: 18352 bytes left [ 255.315866][ T5848] Bluetooth: hci6: command tx timeout [ 255.358497][T12311] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.414450][T13126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.423503][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2191'. [ 255.425684][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.469372][T13126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.519181][T13260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2194'. [ 255.528740][T13253] bridge_slave_1: left allmulticast mode [ 255.545797][T13253] bridge_slave_1: left promiscuous mode [ 255.551591][T13253] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.567369][T13253] bridge_slave_0: left allmulticast mode [ 255.573143][T13253] bridge_slave_0: left promiscuous mode [ 255.590902][T13253] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.715184][ T5848] Bluetooth: hci7: command tx timeout [ 255.764516][T13126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.772606][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.784884][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 255.799990][T13126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.805760][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.028445][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.084623][T13126] hsr_slave_0: entered promiscuous mode [ 256.096572][T13126] hsr_slave_1: entered promiscuous mode [ 256.155982][T13126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.163806][T13126] Cannot create hsr debugfs directory [ 256.208902][T13267] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2198'. [ 256.350262][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.365433][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.374634][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.388886][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.398703][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.412363][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.421149][T12311] bridge_slave_1: left allmulticast mode [ 256.429426][T12311] bridge_slave_1: left promiscuous mode [ 256.435387][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.465451][T12311] bridge_slave_0: left allmulticast mode [ 256.471225][T12311] bridge_slave_0: left promiscuous mode [ 256.478913][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.826027][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.833366][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 256.893141][T12311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.906968][T12311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.918379][T12311] bond0 (unregistering): Released all slaves [ 257.292932][T13269] lo speed is unknown, defaulting to 1000 [ 257.356188][T13110] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 257.385544][ T5848] Bluetooth: hci6: command tx timeout [ 257.457094][T13110] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 257.488272][T13110] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 257.586982][T13110] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.784958][ T5848] Bluetooth: hci7: command tx timeout [ 257.823998][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 257.864862][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.872125][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 258.061625][T13110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.111453][T12311] hsr_slave_0: left promiscuous mode [ 258.120529][T12311] hsr_slave_1: left promiscuous mode [ 258.135448][T12311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.143061][T12311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.151294][T12311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.159638][T12311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.188020][T12311] veth1_macvtap: left promiscuous mode [ 258.193575][T12311] veth0_macvtap: left promiscuous mode [ 258.199360][T12311] veth1_vlan: left promiscuous mode [ 258.204647][T12311] veth0_vlan: left promiscuous mode [ 258.515530][ T5848] Bluetooth: hci3: command tx timeout [ 258.829344][T12311] team0 (unregistering): Port device team_slave_1 removed [ 258.890929][T12311] team0 (unregistering): Port device team_slave_0 removed [ 258.908979][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 258.916292][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.533692][T13311] x_tables: duplicate entry at hook 1 [ 259.624681][T13110] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.633940][T13311] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2210'. [ 259.667270][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.674491][T12309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.738176][T13126] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 259.793663][T13316] nbd: must specify a size in bytes for the device [ 259.809665][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.816878][T12309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.840285][T13269] chnl_net:caif_netlink_parms(): no params data found [ 259.858796][T13126] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 259.941986][T13126] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 259.948903][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 259.949125][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.020202][T13126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 260.131446][T13110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.258990][T13269] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.273351][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.283044][T13269] bridge_slave_0: entered allmulticast mode [ 260.291391][T13269] bridge_slave_0: entered promiscuous mode [ 260.323735][T13269] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.331696][T13269] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.341729][T13269] bridge_slave_1: entered allmulticast mode [ 260.351248][T13269] bridge_slave_1: entered promiscuous mode [ 260.498091][T13269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.526092][T13350] FAULT_INJECTION: forcing a failure. [ 260.526092][T13350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.530765][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.541603][T13350] CPU: 0 UID: 0 PID: 13350 Comm: syz.8.2220 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 260.556664][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.566752][T13350] Call Trace: [ 260.570067][T13350] [ 260.573030][T13350] dump_stack_lvl+0x241/0x360 [ 260.574626][T13126] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.577821][T13350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.577857][T13350] ? __pfx__printk+0x10/0x10 [ 260.594268][T13350] ? __pfx_lock_release+0x10/0x10 [ 260.599376][T13350] should_fail_ex+0x3b0/0x4e0 [ 260.604106][T13350] _copy_from_iter+0x1e9/0x1c20 [ 260.609004][T13350] ? __virt_addr_valid+0x183/0x530 [ 260.612394][ T5848] Bluetooth: hci3: command tx timeout [ 260.614147][T13350] ? __alloc_skb+0x28f/0x440 [ 260.624148][T13350] ? __pfx__copy_from_iter+0x10/0x10 [ 260.629487][T13350] ? __virt_addr_valid+0x183/0x530 [ 260.634645][T13350] ? __virt_addr_valid+0x183/0x530 [ 260.639798][T13350] ? __virt_addr_valid+0x45f/0x530 [ 260.640924][T13126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.644932][T13350] ? __phys_addr_symbol+0x2f/0x70 [ 260.644964][T13350] ? __check_object_size+0x47a/0x730 [ 260.644998][T13350] netlink_sendmsg+0x73d/0xcb0 [ 260.645038][T13350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.645068][T13350] ? aa_sock_msg_perm+0x91/0x160 [ 260.645098][T13350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.645122][T13350] __sock_sendmsg+0x221/0x270 [ 260.645159][T13350] ____sys_sendmsg+0x52a/0x7e0 [ 260.645194][T13350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.645220][T13350] ? __fget_files+0x2a/0x410 [ 260.645254][T13350] ? __fget_files+0x2a/0x410 [ 260.645293][T13350] __sys_sendmsg+0x269/0x350 [ 260.645330][T13350] ? __pfx_lock_release+0x10/0x10 [ 260.645365][T13350] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.645401][T13350] ? __pfx_vfs_write+0x10/0x10 [ 260.645448][T13350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.645475][T13350] ? do_syscall_64+0x100/0x230 [ 260.645510][T13350] ? do_syscall_64+0xb6/0x230 [ 260.645544][T13350] do_syscall_64+0xf3/0x230 [ 260.645575][T13350] ? clear_bhb_loop+0x35/0x90 [ 260.645598][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.645630][T13350] RIP: 0033:0x7f4ea2985d29 [ 260.645651][T13350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.645670][T13350] RSP: 002b:00007f4ea375f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.645695][T13350] RAX: ffffffffffffffda RBX: 00007f4ea2b75fa0 RCX: 00007f4ea2985d29 [ 260.645712][T13350] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 260.645726][T13350] RBP: 00007f4ea375f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.645740][T13350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.645755][T13350] R13: 0000000000000000 R14: 00007f4ea2b75fa0 R15: 00007ffe49430c78 [ 260.645786][T13350] [ 260.841681][T13126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.866880][T13269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.917974][T13269] team0: Port device team_slave_0 added [ 260.928196][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.935481][T12309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.962093][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.969310][T12309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.984928][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 260.992191][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 261.019717][T13352] netlink: 'syz.1.2219': attribute type 29 has an invalid length. [ 261.033257][T13353] netlink: 'syz.1.2219': attribute type 29 has an invalid length. [ 261.062492][T13269] team0: Port device team_slave_1 added [ 261.109840][T13354] netlink: 'syz.1.2219': attribute type 29 has an invalid length. [ 261.207507][T13354] netlink: 'syz.1.2219': attribute type 29 has an invalid length. [ 261.225787][T13354] netlink: 'syz.1.2219': attribute type 29 has an invalid length. [ 261.238368][T13269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.246967][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.277845][T13269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.294154][T13354] netlink: 'syz.1.2219': attribute type 29 has an invalid length. [ 261.305828][T13269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.312814][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.340542][T13269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.366570][T13110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.395826][T13354] netlink: 'syz.1.2219': attribute type 29 has an invalid length. [ 261.530586][T13126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.615584][T13269] hsr_slave_0: entered promiscuous mode [ 261.649804][T13269] hsr_slave_1: entered promiscuous mode [ 261.659239][T13269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.667274][T13269] Cannot create hsr debugfs directory [ 262.024996][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.032318][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 262.114578][T13394] x_tables: duplicate underflow at hook 2 [ 262.118039][T13269] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.147745][T13396] FAULT_INJECTION: forcing a failure. [ 262.147745][T13396] name failslab, interval 1, probability 0, space 0, times 0 [ 262.169447][T13396] CPU: 0 UID: 0 PID: 13396 Comm: syz.1.2231 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 262.180277][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 262.190341][T13396] Call Trace: [ 262.193648][T13396] [ 262.196594][T13396] dump_stack_lvl+0x241/0x360 [ 262.201296][T13396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.206529][T13396] ? __pfx__printk+0x10/0x10 [ 262.211140][T13396] should_fail_ex+0x3b0/0x4e0 [ 262.215841][T13396] should_failslab+0xac/0x100 [ 262.220529][T13396] ? skb_clone+0x20c/0x390 [ 262.224970][T13396] kmem_cache_alloc_noprof+0x70/0x380 [ 262.230427][T13396] skb_clone+0x20c/0x390 [ 262.234729][T13396] __netlink_deliver_tap+0x3cc/0x7f0 [ 262.240067][T13396] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.245308][T13396] netlink_deliver_tap+0x19d/0x1b0 [ 262.250466][T13396] netlink_unicast+0x7c4/0x990 [ 262.255246][T13396] ? __pfx_netlink_unicast+0x10/0x10 [ 262.260546][T13396] ? __virt_addr_valid+0x45f/0x530 [ 262.265699][T13396] ? __phys_addr_symbol+0x2f/0x70 [ 262.270730][T13396] ? __check_object_size+0x47a/0x730 [ 262.276033][T13396] netlink_sendmsg+0x8e4/0xcb0 [ 262.280845][T13396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.286164][T13396] ? aa_sock_msg_perm+0x91/0x160 [ 262.291157][T13396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.296461][T13396] __sock_sendmsg+0x221/0x270 [ 262.301152][T13396] ____sys_sendmsg+0x52a/0x7e0 [ 262.305927][T13396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.311244][T13396] ? __fget_files+0x2a/0x410 [ 262.315853][T13396] ? __fget_files+0x2a/0x410 [ 262.320466][T13396] __sys_sendmsg+0x269/0x350 [ 262.325095][T13396] ? __pfx_lock_release+0x10/0x10 [ 262.330173][T13396] ? __pfx___sys_sendmsg+0x10/0x10 [ 262.335346][T13396] ? __pfx_vfs_write+0x10/0x10 [ 262.340196][T13396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.346581][T13396] ? do_syscall_64+0x100/0x230 [ 262.351392][T13396] ? do_syscall_64+0xb6/0x230 [ 262.356120][T13396] do_syscall_64+0xf3/0x230 [ 262.360688][T13396] ? clear_bhb_loop+0x35/0x90 [ 262.365407][T13396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.371350][T13396] RIP: 0033:0x7f231f585d29 [ 262.375805][T13396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.395452][T13396] RSP: 002b:00007f2320430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.403907][T13396] RAX: ffffffffffffffda RBX: 00007f231f775fa0 RCX: 00007f231f585d29 [ 262.411901][T13396] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 262.419893][T13396] RBP: 00007f2320430090 R08: 0000000000000000 R09: 0000000000000000 [ 262.427881][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.435867][T13396] R13: 0000000000000000 R14: 00007f231f775fa0 R15: 00007ffc12120178 [ 262.443866][T13396] [ 262.503278][T13126] veth0_vlan: entered promiscuous mode [ 262.514603][T13126] veth1_vlan: entered promiscuous mode [ 262.539264][T13126] veth0_macvtap: entered promiscuous mode [ 262.549006][T13126] veth1_macvtap: entered promiscuous mode [ 262.566036][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.576675][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.586827][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.597937][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.607891][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.618488][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.628916][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.639721][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.649601][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.660611][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.673132][T13126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.686573][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.697133][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.707048][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.718410][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.728389][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.739322][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.749889][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.760420][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.770314][T13126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.781471][T13126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.794643][T13126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.805499][T13126] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.814235][T13126] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.815041][ T5848] Bluetooth: hci3: command tx timeout [ 262.823010][T13126] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.838505][T13126] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.907190][T13269] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.979452][T13403] geneve3: entered promiscuous mode [ 262.991044][T13403] geneve3: entered allmulticast mode [ 263.025112][T13405] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 263.066093][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.073444][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.101193][T13110] veth0_vlan: entered promiscuous mode [ 263.130287][T13269] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.211843][T13269] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.244579][T13110] veth1_vlan: entered promiscuous mode [ 263.313787][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.343780][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.438793][T13110] veth0_macvtap: entered promiscuous mode [ 263.450422][T13110] veth1_macvtap: entered promiscuous mode [ 263.460544][T12312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.485865][T12312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.523021][T13269] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 263.543329][T13269] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 263.573788][T13269] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 263.596074][T13269] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 263.652757][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.664337][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.674467][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.685731][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.696028][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.706769][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.717324][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.728236][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.738510][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.750938][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.761819][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.772575][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.806921][T13110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.839288][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.850785][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.863983][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.878095][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.891067][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.901691][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.915152][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.932047][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.954843][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.972903][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.995459][T13110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.014886][T13110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.037461][T13110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.084594][T13110] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.093932][T13110] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.105012][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 264.117607][T13110] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.127043][T13110] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.139911][T13411] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2235'. [ 264.161895][T13415] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2235'. [ 264.262576][T13269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.316940][T13269] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.343263][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.350469][T12310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.364304][T12311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.384413][T12311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.441025][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.448214][T12308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.474253][T13420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2238'. [ 264.479916][T12310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.494485][T12310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.551086][T13420] x_tables: unsorted entry at hook 2 [ 264.776710][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.907373][ T5848] Bluetooth: hci3: command tx timeout [ 265.126143][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.144934][ C0] net_ratelimit: 2 callbacks suppressed [ 265.144954][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 265.157739][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 265.219286][T13269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.336510][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.546531][ T5144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 265.559275][ T5144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 265.567591][ T5144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 265.578982][ T5144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 265.583568][T13269] veth0_vlan: entered promiscuous mode [ 265.592271][ T5144] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 265.599011][T13269] veth1_vlan: entered promiscuous mode [ 265.607117][ T5144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 265.669428][T13436] lo speed is unknown, defaulting to 1000 [ 265.702754][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.771376][T13269] veth0_macvtap: entered promiscuous mode [ 265.829681][T13269] veth1_macvtap: entered promiscuous mode [ 265.862946][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.898456][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.925748][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.975439][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.005491][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.045694][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.074966][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.105580][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.136414][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.154909][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.181844][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.193168][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 266.193593][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 266.228770][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.246751][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.269800][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.285251][ T5144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 266.297674][T13269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.297953][ T5144] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 266.317125][ T5144] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 266.331500][ T5144] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 266.340366][ T5144] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 266.353573][ T5144] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 266.437758][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.457467][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.479743][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.504633][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.507759][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2243'. [ 266.515611][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.540618][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.551896][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.559927][T13461] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2243'. [ 266.562885][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.582033][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.592847][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.603021][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.614201][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.624315][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.637213][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.649807][T13269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.729909][T13458] lo speed is unknown, defaulting to 1000 [ 266.753837][T13269] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.769250][T13464] FAULT_INJECTION: forcing a failure. [ 266.769250][T13464] name failslab, interval 1, probability 0, space 0, times 0 [ 266.790951][T13269] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.804948][T13464] CPU: 0 UID: 0 PID: 13464 Comm: syz.1.2244 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 266.815766][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.825857][T13464] Call Trace: [ 266.829173][T13464] [ 266.832137][T13464] dump_stack_lvl+0x241/0x360 [ 266.836872][T13464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.842117][T13464] ? __pfx__printk+0x10/0x10 [ 266.844842][T13269] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.846721][T13464] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 266.855503][T13269] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.861339][T13464] ? __pfx___might_resched+0x10/0x10 [ 266.875332][T13464] should_fail_ex+0x3b0/0x4e0 [ 266.880050][T13464] should_failslab+0xac/0x100 [ 266.884760][T13464] kmem_cache_alloc_node_noprof+0x77/0x380 [ 266.890588][T13464] ? __alloc_skb+0x1c3/0x440 [ 266.895202][T13464] __alloc_skb+0x1c3/0x440 [ 266.899641][T13464] ? __pfx___alloc_skb+0x10/0x10 [ 266.904606][T13464] netlink_dump+0x239/0xe10 [ 266.909138][T13464] ? __mutex_lock+0x37f/0xee0 [ 266.913848][T13464] ? __pfx_netlink_dump+0x10/0x10 [ 266.918933][T13464] ? __pfx_lock_acquire+0x10/0x10 [ 266.923980][T13464] __netlink_dump_start+0x5a2/0x790 [ 266.929211][T13464] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 266.935221][T13464] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 266.940188][T13464] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.945661][T13464] ? __pfx_rtnl_dumpit+0x10/0x10 [ 266.950614][T13464] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 266.956613][T13464] ? ref_tracker_free+0x643/0x7e0 [ 266.961667][T13464] netlink_rcv_skb+0x1e3/0x430 [ 266.966447][T13464] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 266.971924][T13464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.977280][T13464] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.982505][T13464] netlink_unicast+0x7f6/0x990 [ 266.987301][T13464] ? __pfx_netlink_unicast+0x10/0x10 [ 266.992602][T13464] ? __virt_addr_valid+0x45f/0x530 [ 266.997726][T13464] ? __phys_addr_symbol+0x2f/0x70 [ 267.002759][T13464] ? __check_object_size+0x47a/0x730 [ 267.008062][T13464] netlink_sendmsg+0x8e4/0xcb0 [ 267.012842][T13464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.018163][T13464] ? aa_sock_msg_perm+0x91/0x160 [ 267.023123][T13464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.028424][T13464] __sock_sendmsg+0x221/0x270 [ 267.033122][T13464] ____sys_sendmsg+0x52a/0x7e0 [ 267.037910][T13464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.043200][T13464] ? __fget_files+0x2a/0x410 [ 267.047812][T13464] ? __fget_files+0x2a/0x410 [ 267.052424][T13464] __sys_sendmsg+0x269/0x350 [ 267.057021][T13464] ? __pfx_lock_release+0x10/0x10 [ 267.062055][T13464] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.067187][T13464] ? __pfx_vfs_write+0x10/0x10 [ 267.071977][T13464] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.078338][T13464] ? do_syscall_64+0x100/0x230 [ 267.083120][T13464] ? do_syscall_64+0xb6/0x230 [ 267.087857][T13464] do_syscall_64+0xf3/0x230 [ 267.092392][T13464] ? clear_bhb_loop+0x35/0x90 [ 267.097094][T13464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.103019][T13464] RIP: 0033:0x7f231f585d29 [ 267.107467][T13464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.127101][T13464] RSP: 002b:00007f2320430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.135545][T13464] RAX: ffffffffffffffda RBX: 00007f231f775fa0 RCX: 00007f231f585d29 [ 267.143532][T13464] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 267.151518][T13464] RBP: 00007f2320430090 R08: 0000000000000000 R09: 0000000000000000 [ 267.159500][T13464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.167503][T13464] R13: 0000000000000000 R14: 00007f231f775fa0 R15: 00007ffc12120178 [ 267.175501][T13464] [ 267.224984][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.232334][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.403461][ T11] bridge_slave_1: left allmulticast mode [ 267.433038][ T11] bridge_slave_1: left promiscuous mode [ 267.453945][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.500024][ T11] bridge_slave_0: left allmulticast mode [ 267.513951][ T11] bridge_slave_0: left promiscuous mode [ 267.519903][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.705012][ T5848] Bluetooth: hci6: command tx timeout [ 268.014670][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.031373][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.042690][ T11] bond0 (unregistering): Released all slaves [ 268.098268][T12309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.117036][T12309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.265011][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.272324][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 268.427056][ T5848] Bluetooth: hci7: command tx timeout [ 268.449481][T12308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.496209][T12308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.546876][T13487] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2249'. [ 268.575000][T13487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.610024][T13436] chnl_net:caif_netlink_parms(): no params data found [ 268.670253][T13492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2249'. [ 269.251506][ T11] hsr_slave_0: left promiscuous mode [ 269.298933][ T11] hsr_slave_1: left promiscuous mode [ 269.304910][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 269.348168][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.356972][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.366297][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.373911][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.407694][ T11] veth1_macvtap: left promiscuous mode [ 269.413276][ T11] veth0_macvtap: left promiscuous mode [ 269.419244][ T11] veth1_vlan: left promiscuous mode [ 269.424585][ T11] veth0_vlan: left promiscuous mode [ 269.785485][ T5848] Bluetooth: hci6: command tx timeout [ 269.875421][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2254'. [ 270.150054][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.160897][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.169323][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.196081][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.207140][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 270.216021][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.345175][ C0] net_ratelimit: 1 callbacks suppressed [ 270.345196][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.356263][T13521] FAULT_INJECTION: forcing a failure. [ 270.356263][T13521] name failslab, interval 1, probability 0, space 0, times 0 [ 270.358047][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 270.370991][T13521] CPU: 1 UID: 0 PID: 13521 Comm: syz.1.2256 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 270.388101][T13521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.398164][T13521] Call Trace: [ 270.401449][T13521] [ 270.404387][T13521] dump_stack_lvl+0x241/0x360 [ 270.409103][T13521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.414322][T13521] ? __pfx__printk+0x10/0x10 [ 270.418940][T13521] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 270.424951][T13521] ? __pfx___might_resched+0x10/0x10 [ 270.430268][T13521] should_fail_ex+0x3b0/0x4e0 [ 270.434994][T13521] should_failslab+0xac/0x100 [ 270.439704][T13521] kmem_cache_alloc_node_noprof+0x77/0x380 [ 270.445529][T13521] ? __alloc_skb+0x1c3/0x440 [ 270.450132][T13521] __alloc_skb+0x1c3/0x440 [ 270.454558][T13521] ? __pfx___alloc_skb+0x10/0x10 [ 270.459510][T13521] netlink_dump+0x239/0xe10 [ 270.464023][T13521] ? __mutex_lock+0x37f/0xee0 [ 270.468712][T13521] ? __pfx_netlink_dump+0x10/0x10 [ 270.473752][T13521] ? __pfx_lock_acquire+0x10/0x10 [ 270.478799][T13521] __netlink_dump_start+0x5a2/0x790 [ 270.484015][T13521] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 270.490012][T13521] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 270.494985][T13521] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.500473][T13521] ? __pfx_rtnl_dumpit+0x10/0x10 [ 270.505427][T13521] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 270.511429][T13521] ? ref_tracker_free+0x643/0x7e0 [ 270.516478][T13521] netlink_rcv_skb+0x1e3/0x430 [ 270.521258][T13521] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 270.526736][T13521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.532048][T13521] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.537271][T13521] netlink_unicast+0x7f6/0x990 [ 270.542074][T13521] ? __pfx_netlink_unicast+0x10/0x10 [ 270.547394][T13521] ? __virt_addr_valid+0x45f/0x530 [ 270.552535][T13521] ? __phys_addr_symbol+0x2f/0x70 [ 270.557575][T13521] ? __check_object_size+0x47a/0x730 [ 270.562885][T13521] netlink_sendmsg+0x8e4/0xcb0 [ 270.567669][T13521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.572972][T13521] ? aa_sock_msg_perm+0x91/0x160 [ 270.577925][T13521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.583231][T13521] __sock_sendmsg+0x221/0x270 [ 270.587967][T13521] ____sys_sendmsg+0x52a/0x7e0 [ 270.592750][T13521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.598044][T13521] ? __fget_files+0x2a/0x410 [ 270.602655][T13521] ? __fget_files+0x2a/0x410 [ 270.607272][T13521] __sys_sendmsg+0x269/0x350 [ 270.611883][T13521] ? __pfx_lock_release+0x10/0x10 [ 270.616928][T13521] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.622063][T13521] ? __pfx_vfs_write+0x10/0x10 [ 270.626865][T13521] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.633206][T13521] ? do_syscall_64+0x100/0x230 [ 270.637986][T13521] ? do_syscall_64+0xb6/0x230 [ 270.642677][T13521] do_syscall_64+0xf3/0x230 [ 270.647202][T13521] ? clear_bhb_loop+0x35/0x90 [ 270.651894][T13521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.657803][T13521] RIP: 0033:0x7f231f585d29 [ 270.662226][T13521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.681845][T13521] RSP: 002b:00007f2320430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.690280][T13521] RAX: ffffffffffffffda RBX: 00007f231f775fa0 RCX: 00007f231f585d29 [ 270.698265][T13521] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 270.706255][T13521] RBP: 00007f2320430090 R08: 0000000000000000 R09: 0000000000000000 [ 270.714232][T13521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.722212][T13521] R13: 0000000000000000 R14: 00007f231f775fa0 R15: 00007ffc12120178 [ 270.730222][T13521] [ 270.733988][ T5144] Bluetooth: hci7: command tx timeout [ 270.983944][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2258'. [ 270.999202][ T11] team0 (unregistering): Port device team_slave_1 removed [ 271.063350][ T11] team0 (unregistering): Port device team_slave_0 removed [ 271.396024][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 271.403249][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 271.865505][ T5144] Bluetooth: hci6: command tx timeout [ 271.889927][T13436] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.929091][T13436] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.936675][T13436] bridge_slave_0: entered allmulticast mode [ 271.943816][T13436] bridge_slave_0: entered promiscuous mode [ 271.968702][T13436] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.005595][T13436] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.012958][T13436] bridge_slave_1: entered allmulticast mode [ 272.055184][T13436] bridge_slave_1: entered promiscuous mode [ 272.129400][T13513] lo speed is unknown, defaulting to 1000 [ 272.195868][T13458] chnl_net:caif_netlink_parms(): no params data found [ 272.269966][ T5144] Bluetooth: hci3: command tx timeout [ 272.362950][T13539] xt_ipcomp: unknown flags B [ 272.415977][T13539] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2262'. [ 272.419675][T13436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.425241][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.437896][T13436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.441510][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 272.464984][T13539] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2262'. [ 272.672588][T13436] team0: Port device team_slave_0 added [ 272.681733][T13436] team0: Port device team_slave_1 added [ 272.745367][ T5144] Bluetooth: hci7: command tx timeout [ 272.845201][T13458] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.852500][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.881129][T13458] bridge_slave_0: entered allmulticast mode [ 272.889020][T13458] bridge_slave_0: entered promiscuous mode [ 272.898015][T13458] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.906999][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.914492][T13458] bridge_slave_1: entered allmulticast mode [ 272.924625][T13458] bridge_slave_1: entered promiscuous mode [ 272.961102][T13436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.975322][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.033458][T13436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.067644][T13436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.074656][T13436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.078840][T13559] netlink: 'syz.8.2265': attribute type 4 has an invalid length. [ 273.119849][T13436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.161213][T13458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.192106][T13557] netdevsim netdevsim8 : renamed from netdevsim0 (while UP) [ 273.278595][T13564] veth7: entered allmulticast mode [ 273.307595][T13458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.382605][T13436] hsr_slave_0: entered promiscuous mode [ 273.390982][T13436] hsr_slave_1: entered promiscuous mode [ 273.403527][T13436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.411924][T13436] Cannot create hsr debugfs directory [ 273.434655][T13458] team0: Port device team_slave_0 added [ 273.443156][T13458] team0: Port device team_slave_1 added [ 273.465047][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 273.472348][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 273.541173][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.721820][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.750205][T13458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.758537][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.814631][T13458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.853179][T13458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.868562][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.897378][T13458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.945561][ T5144] Bluetooth: hci6: command tx timeout [ 273.999587][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.086847][T13576] FAULT_INJECTION: forcing a failure. [ 274.086847][T13576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.115367][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.1.2272 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 274.126215][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.136316][T13576] Call Trace: [ 274.139654][T13576] [ 274.142636][T13576] dump_stack_lvl+0x241/0x360 [ 274.147373][T13576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.152627][T13576] ? __pfx__printk+0x10/0x10 [ 274.157263][T13576] ? snprintf+0xda/0x120 [ 274.161543][T13576] should_fail_ex+0x3b0/0x4e0 [ 274.166275][T13576] _copy_to_user+0x31/0xb0 [ 274.170741][T13576] simple_read_from_buffer+0xca/0x150 [ 274.176149][T13576] proc_fail_nth_read+0x1e9/0x250 [ 274.181209][T13576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.186876][T13576] ? rw_verify_area+0x55e/0x6f0 [ 274.191752][T13576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.197332][T13576] vfs_read+0x1fc/0xb70 [ 274.201515][T13576] ? __pfx___mutex_lock+0x10/0x10 [ 274.206556][T13576] ? __pfx_vfs_read+0x10/0x10 [ 274.211258][T13576] ? __fget_files+0x2a/0x410 [ 274.215886][T13576] ? __fget_files+0x395/0x410 [ 274.220581][T13576] ? __fget_files+0x2a/0x410 [ 274.225197][T13576] ksys_read+0x18f/0x2b0 [ 274.229537][T13576] ? __pfx_ksys_read+0x10/0x10 [ 274.234309][T13576] ? do_syscall_64+0x100/0x230 [ 274.239093][T13576] ? do_syscall_64+0xb6/0x230 [ 274.243792][T13576] do_syscall_64+0xf3/0x230 [ 274.248312][T13576] ? clear_bhb_loop+0x35/0x90 [ 274.253001][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.259577][T13576] RIP: 0033:0x7f231f58473c [ 274.264007][T13576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.283635][T13576] RSP: 002b:00007f2320430030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.292068][T13576] RAX: ffffffffffffffda RBX: 00007f231f775fa0 RCX: 00007f231f58473c [ 274.300051][T13576] RDX: 000000000000000f RSI: 00007f23204300a0 RDI: 0000000000000004 [ 274.308032][T13576] RBP: 00007f2320430090 R08: 0000000000000000 R09: 0000000000000000 [ 274.316018][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.323999][T13576] R13: 0000000000000000 R14: 00007f231f775fa0 R15: 00007ffc12120178 [ 274.331994][T13576] [ 274.344878][ T5144] Bluetooth: hci3: command tx timeout [ 274.367426][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.485620][T13585] netlink: 'syz.1.2274': attribute type 7 has an invalid length. [ 274.505018][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 274.512383][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 274.548403][T13458] hsr_slave_0: entered promiscuous mode [ 274.573953][T13458] hsr_slave_1: entered promiscuous mode [ 274.604363][T13458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.624837][T13458] Cannot create hsr debugfs directory [ 274.653963][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'. [ 274.686887][T13590] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2276'. [ 274.722543][T13590] netlink: 'syz.8.2276': attribute type 8 has an invalid length. [ 274.734938][T13590] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2276'. [ 274.825049][ T5144] Bluetooth: hci7: command tx timeout [ 274.845562][T13590] erspan0: entered promiscuous mode [ 274.852211][T13590] batadv_slave_1: entered promiscuous mode [ 274.878598][T13513] chnl_net:caif_netlink_parms(): no params data found [ 275.041823][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.062200][T13602] FAULT_INJECTION: forcing a failure. [ 275.062200][T13602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.115746][T13602] CPU: 0 UID: 0 PID: 13602 Comm: syz.8.2280 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 275.126580][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.136671][T13602] Call Trace: [ 275.139982][T13602] [ 275.142944][T13602] dump_stack_lvl+0x241/0x360 [ 275.147673][T13602] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.152913][T13602] ? __pfx__printk+0x10/0x10 [ 275.157540][T13602] ? __pfx_lock_release+0x10/0x10 [ 275.162610][T13602] should_fail_ex+0x3b0/0x4e0 [ 275.167331][T13602] _copy_from_user+0x2f/0xc0 [ 275.171933][T13602] copy_msghdr_from_user+0xae/0x680 [ 275.177259][T13602] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 275.183084][T13602] ? __fget_files+0x2a/0x410 [ 275.187685][T13602] ? __fget_files+0x2a/0x410 [ 275.192305][T13602] __sys_sendmsg+0x209/0x350 [ 275.196917][T13602] ? __pfx_lock_release+0x10/0x10 [ 275.201959][T13602] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.207080][T13602] ? __pfx_vfs_write+0x10/0x10 [ 275.211865][T13602] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.218211][T13602] ? do_syscall_64+0x100/0x230 [ 275.223060][T13602] ? do_syscall_64+0xb6/0x230 [ 275.227784][T13602] do_syscall_64+0xf3/0x230 [ 275.232352][T13602] ? clear_bhb_loop+0x35/0x90 [ 275.237065][T13602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.243002][T13602] RIP: 0033:0x7f4ea2985d29 [ 275.247453][T13602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.267095][T13602] RSP: 002b:00007f4ea375f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.275580][T13602] RAX: ffffffffffffffda RBX: 00007f4ea2b75fa0 RCX: 00007f4ea2985d29 [ 275.283588][T13602] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 275.291590][T13602] RBP: 00007f4ea375f090 R08: 0000000000000000 R09: 0000000000000000 [ 275.299586][T13602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.307587][T13602] R13: 0000000000000000 R14: 00007f4ea2b75fa0 R15: 00007ffe49430c78 [ 275.315611][T13602] [ 275.448299][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.544903][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.552078][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 275.650397][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.817571][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.858861][T13513] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.872751][T13513] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.880854][T13513] bridge_slave_0: entered allmulticast mode [ 275.889154][T13513] bridge_slave_0: entered promiscuous mode [ 275.900555][T13625] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 275.953872][T13513] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.972014][T13513] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.992425][T13513] bridge_slave_1: entered allmulticast mode [ 276.017551][T13513] bridge_slave_1: entered promiscuous mode [ 276.153453][T13513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.187701][T13513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.263392][T13641] FAULT_INJECTION: forcing a failure. [ 276.263392][T13641] name failslab, interval 1, probability 0, space 0, times 0 [ 276.277097][T13641] CPU: 1 UID: 0 PID: 13641 Comm: syz.8.2295 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 276.287909][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.297995][T13641] Call Trace: [ 276.301318][T13641] [ 276.304270][T13641] dump_stack_lvl+0x241/0x360 [ 276.308996][T13641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.314245][T13641] ? __pfx__printk+0x10/0x10 [ 276.318875][T13641] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 276.324876][T13641] ? __pfx___might_resched+0x10/0x10 [ 276.330174][T13641] should_fail_ex+0x3b0/0x4e0 [ 276.334890][T13641] should_failslab+0xac/0x100 [ 276.339592][T13641] kmem_cache_alloc_node_noprof+0x77/0x380 [ 276.345417][T13641] ? __alloc_skb+0x1c3/0x440 [ 276.350025][T13641] __alloc_skb+0x1c3/0x440 [ 276.354455][T13641] ? __pfx___alloc_skb+0x10/0x10 [ 276.359409][T13641] ? netlink_autobind+0xd6/0x2f0 [ 276.364369][T13641] ? netlink_autobind+0x2b0/0x2f0 [ 276.369416][T13641] netlink_sendmsg+0x638/0xcb0 [ 276.374202][T13641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.379529][T13641] ? aa_sock_msg_perm+0x91/0x160 [ 276.384522][T13641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.389812][T13641] __sock_sendmsg+0x221/0x270 [ 276.394507][T13641] ____sys_sendmsg+0x52a/0x7e0 [ 276.399287][T13641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.404611][T13641] ? __fget_files+0x2a/0x410 [ 276.409221][T13641] ? __fget_files+0x2a/0x410 [ 276.413832][T13641] __sys_sendmsg+0x269/0x350 [ 276.418438][T13641] ? __pfx_lock_release+0x10/0x10 [ 276.423481][T13641] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.428620][T13641] ? __pfx_vfs_write+0x10/0x10 [ 276.433415][T13641] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.439756][T13641] ? do_syscall_64+0x100/0x230 [ 276.444541][T13641] ? do_syscall_64+0xb6/0x230 [ 276.449251][T13641] do_syscall_64+0xf3/0x230 [ 276.453773][T13641] ? clear_bhb_loop+0x35/0x90 [ 276.458465][T13641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.464380][T13641] RIP: 0033:0x7f4ea2985d29 [ 276.468894][T13641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.488515][T13641] RSP: 002b:00007f4ea375f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.496951][T13641] RAX: ffffffffffffffda RBX: 00007f4ea2b75fa0 RCX: 00007f4ea2985d29 [ 276.504938][T13641] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 276.512941][T13641] RBP: 00007f4ea375f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.520943][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.528924][T13641] R13: 0000000000000000 R14: 00007f4ea2b75fa0 R15: 00007ffe49430c78 [ 276.536914][T13641] [ 276.544548][ T5144] Bluetooth: hci3: command tx timeout [ 276.584903][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 276.592117][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 276.658833][T13513] team0: Port device team_slave_0 added [ 276.672410][T13513] team0: Port device team_slave_1 added [ 276.787773][ T11] bridge_slave_1: left allmulticast mode [ 276.793487][ T11] bridge_slave_1: left promiscuous mode [ 276.800731][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.810799][ T11] bridge_slave_0: left allmulticast mode [ 276.816950][ T11] bridge_slave_0: left promiscuous mode [ 276.822734][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.838970][ T11] bridge_slave_1: left allmulticast mode [ 276.844658][ T11] bridge_slave_1: left promiscuous mode [ 276.850457][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.861575][ T11] bridge_slave_0: left allmulticast mode [ 276.868681][ T11] bridge_slave_0: left promiscuous mode [ 276.874383][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.549044][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.560999][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.573396][ T11] bond0 (unregistering): Released all slaves [ 277.628802][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 277.636170][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 277.761555][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.773743][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.796362][ T11] bond0 (unregistering): Released all slaves [ 277.850968][T13648] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.024457][T13648] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.049413][T13513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.063779][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.091474][T13513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.240399][T13648] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.256592][T13513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.263579][T13513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.290574][T13513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.383515][T13648] netdevsim netdevsim8  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.443599][T13513] hsr_slave_0: entered promiscuous mode [ 278.464352][T13513] hsr_slave_1: entered promiscuous mode [ 278.470934][T13513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.479033][T13513] Cannot create hsr debugfs directory [ 278.585264][ T5144] Bluetooth: hci3: command tx timeout [ 278.664938][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 278.672255][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 278.741095][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.753509][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.764646][T13648] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.767573][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.784394][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.790872][T13648] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.792873][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 278.809281][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.851220][T13648] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.880702][T13648] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.003666][T13436] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 279.036705][T13436] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 279.071040][T13436] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 279.169106][T13436] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 279.221119][T13653] lo speed is unknown, defaulting to 1000 [ 279.324036][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2302'. [ 279.369691][T13458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.398026][T13458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.507041][T13458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.523454][T13458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.705484][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 279.712738][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 279.716110][T13458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.759129][T13458] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.779586][T13436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.816061][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.823326][T12309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.947822][T13436] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.962409][T12307] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.969616][T12307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.007374][T12307] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.014603][T12307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.116385][ T11] hsr_slave_0: left promiscuous mode [ 280.128741][ T11] hsr_slave_1: left promiscuous mode [ 280.147799][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.165438][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.173394][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.182128][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.195597][ T11] hsr_slave_0: left promiscuous mode [ 280.203159][ T11] hsr_slave_1: left promiscuous mode [ 280.210145][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.217972][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.226503][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.234025][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.301394][ T11] veth1_macvtap: left promiscuous mode [ 280.307159][ T11] veth0_macvtap: left promiscuous mode [ 280.312857][ T11] veth1_vlan: left promiscuous mode [ 280.319407][ T11] veth0_vlan: left promiscuous mode [ 280.328229][ T11] veth1_macvtap: left promiscuous mode [ 280.333820][ T11] veth0_macvtap: left promiscuous mode [ 280.340333][ T11] veth1_vlan: left promiscuous mode [ 280.346428][ T11] veth0_vlan: left promiscuous mode [ 280.745028][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 280.752240][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 280.908626][ T5144] Bluetooth: hci0: command tx timeout [ 281.013191][ T11] team0 (unregistering): Port device team_slave_1 removed [ 281.062760][ T11] team0 (unregistering): Port device team_slave_0 removed [ 281.788087][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 281.795346][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 281.933782][ T11] team0 (unregistering): Port device team_slave_1 removed [ 281.980724][ T11] team0 (unregistering): Port device team_slave_0 removed [ 282.681182][T12307] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.688469][T12307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.824901][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 282.832318][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 282.874524][T13513] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.958222][T13513] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.985579][ T5144] Bluetooth: hci0: command tx timeout [ 282.999976][T13513] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.027287][T13513] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.156141][T13653] chnl_net:caif_netlink_parms(): no params data found [ 283.508930][T13513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.528831][T13513] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.552705][T13436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.568712][T13653] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.577050][T13653] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.584342][T13653] bridge_slave_0: entered allmulticast mode [ 283.606196][T13653] bridge_slave_0: entered promiscuous mode [ 283.623092][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.630256][T12312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.667318][T13695] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2308'. [ 283.688208][T13653] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.699126][T13653] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.707085][T13695] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2308'. [ 283.708346][T13653] bridge_slave_1: entered allmulticast mode [ 283.723799][T13653] bridge_slave_1: entered promiscuous mode [ 283.733696][T13695] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2308'. [ 283.738174][T13458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.751831][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.754024][T13695] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2308'. [ 283.758980][T12311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.864929][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 283.872244][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 283.919207][T13653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.947609][T13653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.016245][T13703] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2309'. [ 284.122121][T13653] team0: Port device team_slave_0 added [ 284.151197][T13653] team0: Port device team_slave_1 added [ 284.458630][T13653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.485186][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.514376][T13653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.536684][T13653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.543678][T13653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.592634][T13653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.648610][T13436] veth0_vlan: entered promiscuous mode [ 284.755647][T13653] hsr_slave_0: entered promiscuous mode [ 284.771880][T13653] hsr_slave_1: entered promiscuous mode [ 284.778966][T13653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.787533][T13653] Cannot create hsr debugfs directory [ 284.805737][T13513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.813055][T13718] netlink: 'syz.8.2311': attribute type 5 has an invalid length. [ 284.856837][T13718] netlink: 'syz.8.2311': attribute type 1 has an invalid length. [ 284.864646][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2311'. [ 284.891829][T13436] veth1_vlan: entered promiscuous mode [ 284.904904][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 284.912156][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 285.043000][T13458] veth0_vlan: entered promiscuous mode [ 285.076280][ T5144] Bluetooth: hci0: command tx timeout [ 285.082911][T13436] veth0_macvtap: entered promiscuous mode [ 285.187069][T13436] veth1_macvtap: entered promiscuous mode [ 285.276433][T13653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.297172][T13458] veth1_vlan: entered promiscuous mode [ 285.384185][T13653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.412013][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2313'. [ 285.444511][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.457570][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.472576][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.483409][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.494025][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.507333][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.518051][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.529984][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.540059][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.551597][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.563410][T13436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.578581][T13458] veth0_macvtap: entered promiscuous mode [ 285.588351][T13458] veth1_macvtap: entered promiscuous mode [ 285.640546][T13653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.679023][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.691093][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.701521][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.714743][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.724671][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.737009][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.748252][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.759158][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.770435][T13436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.781756][T13436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.793217][T13436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.803438][T13513] veth0_vlan: entered promiscuous mode [ 285.842736][T13653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.866832][T13436] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.887832][T13436] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.903737][T13436] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.914732][T13436] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.944950][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 285.951281][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.952255][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 285.979718][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.996459][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.007341][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.017684][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.028464][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.038434][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.049484][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.059382][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.072874][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.084092][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.095940][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.109179][T13458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.172353][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.204744][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.224770][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.241758][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.255672][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.280429][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.304814][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.315972][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.326293][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.336957][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.347605][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.359417][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.371145][T13458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.457372][T13513] veth1_vlan: entered promiscuous mode [ 286.498059][T13458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.515292][T13458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.524122][T13458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.534294][T13458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.613843][T13653] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.647845][T13653] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.660441][T13653] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.707344][T13653] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.801197][T12313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.810912][T12313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.873585][T13513] veth0_macvtap: entered promiscuous mode [ 286.934651][T13513] veth1_macvtap: entered promiscuous mode [ 286.963163][T12310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.984863][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 286.992074][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 287.000057][T12310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.000878][T12312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.012949][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.028068][T12312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.030288][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.047471][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.057983][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.070984][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.082339][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.093119][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.104309][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.115580][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.128954][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.152834][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.156374][ T5144] Bluetooth: hci0: command tx timeout [ 287.176238][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.196098][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.220506][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.249702][T13513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.308171][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.334996][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.355548][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.374906][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.387421][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.398126][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.408204][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.419990][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.433538][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.455516][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.465392][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.468990][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.475550][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.495489][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.503284][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.514080][T13513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.525587][T13513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.536294][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.544246][ T5848] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 287.546664][T13513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.561999][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.615815][T13513] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.641468][T13513] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.650648][T13513] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.660207][T13513] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.679427][T12310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.716078][T12310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.789127][T13744] lo speed is unknown, defaulting to 1000 [ 287.852816][T13653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.876893][T12313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.883183][T13653] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.900040][T12313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.924544][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.931750][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.987382][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.994534][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.025063][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.032354][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 288.209164][T12307] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.280683][T12312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.314859][T12312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.438584][T12307] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.606525][T12307] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.787090][T12307] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.837261][T13653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.957529][T13653] veth0_vlan: entered promiscuous mode [ 289.042091][T13653] veth1_vlan: entered promiscuous mode [ 289.064886][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 289.072411][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 289.093996][T13744] chnl_net:caif_netlink_parms(): no params data found [ 289.215842][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.235302][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.249282][ T5144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.277416][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.288248][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.297023][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.337938][T13653] veth0_macvtap: entered promiscuous mode [ 289.357785][T12307] bridge_slave_1: left allmulticast mode [ 289.364426][T12307] bridge_slave_1: left promiscuous mode [ 289.376398][T12307] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.388338][T12307] bridge_slave_0: left allmulticast mode [ 289.394264][T12307] bridge_slave_0: left promiscuous mode [ 289.415840][T12307] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.628209][ T5144] Bluetooth: hci5: command tx timeout [ 289.758659][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.786675][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.796267][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.804072][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.838711][ T5848] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 289.847718][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.943310][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 289.963042][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 289.975343][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 289.984101][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 289.992263][ T5848] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 290.000222][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 290.105000][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 290.112145][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 290.225530][T12307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.241530][T12307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.252177][T12307] bond0 (unregistering): Released all slaves [ 290.278472][T13653] veth1_macvtap: entered promiscuous mode [ 290.388671][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.400486][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.411669][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.423401][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.436001][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.449685][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.459687][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.470563][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.480890][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.492402][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.502738][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.514899][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.525928][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.536711][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.546602][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.557667][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.569604][T13653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.582115][T13760] lo speed is unknown, defaulting to 1000 [ 290.648917][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.656896][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.664192][T13744] bridge_slave_0: entered allmulticast mode [ 290.673725][T13744] bridge_slave_0: entered promiscuous mode [ 290.683223][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.692142][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.700904][T13744] bridge_slave_1: entered allmulticast mode [ 290.708450][T13744] bridge_slave_1: entered promiscuous mode [ 290.732088][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.743621][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.754466][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.765574][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.775757][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.786440][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.797780][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.808827][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.818776][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.830022][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.846765][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.857734][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.868040][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.879364][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.889658][T13653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.901808][T13653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.913590][T13653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.925058][T13653] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.933786][T13653] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.942706][T13653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.952503][T13653] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.026661][T13754] lo speed is unknown, defaulting to 1000 [ 291.030002][T13744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.144909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 291.152167][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 291.206323][T13744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.280381][T13762] lo speed is unknown, defaulting to 1000 [ 291.380312][T13744] team0: Port device team_slave_0 added [ 291.386985][ T5144] Bluetooth: hci3: command tx timeout [ 291.456109][T13744] team0: Port device team_slave_1 added [ 291.505706][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.524326][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.623807][T13744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.633097][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.660156][T13744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.705728][ T5144] Bluetooth: hci5: command tx timeout [ 291.737593][T13744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.744591][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.791449][T13744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.907044][T12313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.935214][T12313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.947076][ T5144] Bluetooth: hci6: command tx timeout [ 292.025074][ T5144] Bluetooth: hci7: command tx timeout [ 292.096450][T12307] hsr_slave_0: left promiscuous mode [ 292.102614][T12307] hsr_slave_1: left promiscuous mode [ 292.109494][T12307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.118052][T12307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.129145][T12307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.140728][T12307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.179845][T12307] veth1_macvtap: left promiscuous mode [ 292.185577][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 292.192664][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 292.203854][T12307] veth0_macvtap: left promiscuous mode [ 292.209547][T12307] veth1_vlan: left promiscuous mode [ 292.215081][T12307] veth0_vlan: left promiscuous mode [ 292.771044][T12307] team0 (unregistering): Port device team_slave_1 removed [ 292.814167][T12307] team0 (unregistering): Port device team_slave_0 removed [ 293.227483][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 293.234629][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 293.453154][T13744] hsr_slave_0: entered promiscuous mode [ 293.464989][ T5144] Bluetooth: hci3: command tx timeout [ 293.470633][T13744] hsr_slave_1: entered promiscuous mode [ 293.477833][T13744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.485810][T13744] Cannot create hsr debugfs directory [ 293.687721][T13760] chnl_net:caif_netlink_parms(): no params data found [ 293.785049][ T5144] Bluetooth: hci5: command tx timeout [ 293.791166][ T30] INFO: task syz.3.886:9031 blocked for more than 143 seconds. [ 293.803765][ T30] Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 293.830324][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 293.845506][ T30] task:syz.3.886 state:D stack:26224 pid:9031 tgid:9030 ppid:5834 flags:0x00004004 [ 293.863386][ T30] Call Trace: [ 293.916812][ T30] [ 293.919869][ T30] __schedule+0x1850/0x4c30 [ 293.924445][ T30] ? __pfx___schedule+0x10/0x10 [ 293.974802][ T30] ? __pfx_lock_release+0x10/0x10 [ 293.979931][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 294.005177][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 294.011604][ T30] ? schedule+0x90/0x320 [ 294.025496][ T5144] Bluetooth: hci6: command tx timeout [ 294.026128][ T30] schedule+0x14b/0x320 [ 294.044915][ T30] schedule_preempt_disabled+0x13/0x30 [ 294.050458][ T30] __mutex_lock+0x7e7/0xee0 [ 294.064734][ T30] ? __mutex_lock+0x5ef/0xee0 [ 294.085119][ T30] ? nfsd_nl_listener_get_doit+0x115/0x5e0 [ 294.091099][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 294.104822][ T5144] Bluetooth: hci7: command tx timeout [ 294.105224][ T30] ? __asan_memset+0x23/0x50 [ 294.134567][ T30] nfsd_nl_listener_get_doit+0x115/0x5e0 [ 294.155093][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 294.159871][ T30] ? genl_family_rcv_msg_attrs_parse+0x140/0x290 [ 294.172832][ T30] genl_rcv_msg+0xb14/0xec0 [ 294.189587][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.201586][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 294.207484][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 294.213698][ T30] ? __pfx___might_resched+0x10/0x10 [ 294.219440][ T30] netlink_rcv_skb+0x1e3/0x430 [ 294.220110][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.224233][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.237096][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.243901][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 294.250112][ T30] genl_rcv+0x28/0x40 [ 294.254150][ T30] netlink_unicast+0x7f6/0x990 [ 294.255120][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.259229][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 294.266160][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 294.266345][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 294.288423][ T30] ? __virt_addr_valid+0x45f/0x530 [ 294.293220][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.293573][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 294.306470][ T30] ? __check_object_size+0x47a/0x730 [ 294.311900][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 294.318148][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.319250][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.323464][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 294.336286][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.341708][ T30] __sock_sendmsg+0x221/0x270 [ 294.341928][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.347090][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 294.359379][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.359610][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.364850][ T30] ? __fget_files+0x2a/0x410 [ 294.364889][ T30] ? __fget_files+0x2a/0x410 [ 294.364926][ T30] __sys_sendmsg+0x269/0x350 [ 294.364957][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.365022][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.365049][ T30] ? do_syscall_64+0x100/0x230 [ 294.365108][ T30] ? do_syscall_64+0xb6/0x230 [ 294.365143][ T30] do_syscall_64+0xf3/0x230 [ 294.365175][ T30] ? clear_bhb_loop+0x35/0x90 [ 294.365199][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.427387][ T30] RIP: 0033:0x7ff53df85d29 [ 294.433442][ T30] RSP: 002b:00007ff53ece4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.442469][ T30] RAX: ffffffffffffffda RBX: 00007ff53e175fa0 RCX: 00007ff53df85d29 [ 294.451140][ T30] RDX: 0000000024000100 RSI: 0000000020001740 RDI: 0000000000000004 [ 294.466869][ T30] RBP: 00007ff53e001b08 R08: 0000000000000000 R09: 0000000000000000 [ 294.475700][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.485029][ T30] R13: 0000000000000000 R14: 00007ff53e175fa0 R15: 00007ffe71242a38 [ 294.493079][ T30] [ 294.496321][ T30] [ 294.496321][ T30] Showing all locks held in the system: [ 294.504055][ T30] 1 lock held by pool_workqueue_/3: [ 294.514379][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 294.525614][ T30] 1 lock held by khungtaskd/30: [ 294.530469][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 294.541054][ T30] 2 locks held by getty/5589: [ 294.545901][ T30] #0: ffff88803124d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 294.555990][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 294.566945][ T30] 2 locks held by syz.2.417/7520: [ 294.571987][ T30] #0: ffffffff8fd157f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 294.580312][ T30] #1: ffffffff8ec01de8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 294.592070][ T30] 2 locks held by syz.3.886/9031: [ 294.597888][ T30] #0: ffffffff8fd157f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 294.606323][ T30] #1: ffffffff8ec01de8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x115/0x5e0 [ 294.616574][ T30] 2 locks held by syz.4.1900/12232: [ 294.621771][ T30] #0: ffffffff8fd157f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 294.630730][ T30] #1: ffffffff8ec01de8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 294.641054][ T30] 4 locks held by kworker/u8:12/12307: [ 294.646705][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 294.658300][ T30] #1: ffffc9000ce77d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 294.669098][ T30] #2: ffffffff8fca6910 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 294.678758][ T30] #3: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 294.690817][ T30] 3 locks held by kworker/u8:13/12308: [ 294.696462][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 294.708368][ T30] #1: ffffc9000cdb7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 294.720090][ T30] #2: ffffffff8fcb2dc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 294.729289][ T30] 3 locks held by kworker/u8:15/12310: [ 294.734856][ T30] #0: ffff88814d897948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 294.747400][ T30] #1: ffffc9000cd67d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 294.760295][ T30] #2: ffffffff8fcb2dc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xd0/0x16f0 [ 294.770097][ T30] 2 locks held by kworker/u8:16/12311: [ 294.776209][ T30] 2 locks held by syz-executor/13744: [ 294.781607][ T30] #0: ffffffff8f432bc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 294.792301][ T30] #1: ffffffff8fcb2dc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 294.801522][ T30] 1 lock held by syz-executor/13754: [ 294.807620][ T30] #0: ffffffff8fcb2dc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 294.817186][ T30] 3 locks held by syz-executor/13760: [ 294.822579][ T30] #0: ffffffff8f45c460 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 294.832613][ T30] #1: ffffffff8fcb2dc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 294.842695][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 294.853784][ T30] 1 lock held by syz-executor/13762: [ 294.859172][ T30] #0: ffffffff8fcb2dc8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x48c/0x2400 [ 294.869328][ T30] 1 lock held by syz-executor/13771: [ 294.874635][ T30] #0: ffffffff8fcb2dc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 294.884236][ T30] [ 294.903147][ T30] ============================================= [ 294.903147][ T30] [ 294.945040][ T30] NMI backtrace for cpu 1 [ 294.949431][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 294.959939][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 294.970030][ T30] Call Trace: [ 294.973313][ T30] [ 294.976250][ T30] dump_stack_lvl+0x241/0x360 [ 294.980946][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.986168][ T30] ? __pfx__printk+0x10/0x10 [ 294.990796][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 294.995768][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 295.001254][ T30] ? _printk+0xd5/0x120 [ 295.005454][ T30] ? __pfx__printk+0x10/0x10 [ 295.010058][ T30] ? __wake_up_klogd+0xcc/0x110 [ 295.014922][ T30] ? __pfx__printk+0x10/0x10 [ 295.019536][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 295.024570][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 295.030570][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 295.036564][ T30] watchdog+0xff6/0x1040 [ 295.040831][ T30] ? watchdog+0x1ea/0x1040 [ 295.045267][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.049956][ T30] kthread+0x2f0/0x390 [ 295.054039][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.058744][ T30] ? __pfx_kthread+0x10/0x10 [ 295.063341][ T30] ret_from_fork+0x4b/0x80 [ 295.067799][ T30] ? __pfx_kthread+0x10/0x10 [ 295.072403][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.077188][ T30] [ 295.082112][ T30] Sending NMI from CPU 1 to CPUs 0: [ 295.087775][ C0] NMI backtrace for cpu 0 [ 295.087789][ C0] CPU: 0 UID: 0 PID: 12310 Comm: kworker/u8:15 Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 295.087811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.087823][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 295.087855][ C0] RIP: 0010:unwind_next_frame+0x15f3/0x22d0 [ 295.087878][ C0] Code: 45 58 00 00 00 00 4d 8d 75 36 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 d3 0a 00 00 41 c6 06 01 48 8b 44 24 70 0f b6 04 28 <84> c0 0f 85 6a 08 00 00 0f b6 04 2b 84 c0 0f 85 82 08 00 00 48 8b [ 295.087894][ C0] RSP: 0018:ffffc9000cd674b0 EFLAGS: 00000246 [ 295.087908][ C0] RAX: 0000000000000000 RBX: 1ffffffff224728a RCX: 0000000000000000 [ 295.087921][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000cd675e0 [ 295.087932][ C0] RBP: dffffc0000000000 R08: ffffc9000cd675df R09: 0000000000000000 [ 295.087945][ C0] R10: ffffc9000cd675d0 R11: fffff520019acebc R12: ffffc9000cd68000 [ 295.087959][ C0] R13: ffffc9000cd67580 R14: ffffffff898c7a53 R15: ffffc9000cd675d0 [ 295.087972][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 295.087987][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.088018][ C0] CR2: 00007feba1ff6d00 CR3: 000000000e736000 CR4: 00000000003526f0 [ 295.088035][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.088052][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.088064][ C0] Call Trace: [ 295.088071][ C0] [ 295.088078][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 295.088101][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 295.088124][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 295.088145][ C0] ? nmi_handle+0x2a/0x5a0 [ 295.088175][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 295.088192][ C0] ? nmi_handle+0x14f/0x5a0 [ 295.088213][ C0] ? nmi_handle+0x2a/0x5a0 [ 295.088235][ C0] ? unwind_next_frame+0x15f3/0x22d0 [ 295.088255][ C0] ? default_do_nmi+0x63/0x160 [ 295.088276][ C0] ? exc_nmi+0x123/0x1f0 [ 295.088296][ C0] ? end_repeat_nmi+0xf/0x53 [ 295.088313][ C0] ? __alloc_skb+0x1f3/0x440 [ 295.088336][ C0] ? unwind_next_frame+0x15f3/0x22d0 [ 295.088357][ C0] ? unwind_next_frame+0x15f3/0x22d0 [ 295.088379][ C0] ? unwind_next_frame+0x15f3/0x22d0 [ 295.088399][ C0] [ 295.088405][ C0] [ 295.088416][ C0] ? kmalloc_reserve+0x111/0x2a0 [ 295.088436][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.088456][ C0] arch_stack_walk+0x11c/0x150 [ 295.088482][ C0] ? __alloc_skb+0x1f3/0x440 [ 295.088502][ C0] stack_trace_save+0x118/0x1d0 [ 295.088520][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 295.088545][ C0] kasan_save_track+0x3f/0x80 [ 295.088564][ C0] ? kasan_save_track+0x3f/0x80 [ 295.088581][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 295.088600][ C0] ? __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 295.088625][ C0] ? kmalloc_reserve+0x111/0x2a0 [ 295.088670][ C0] __kasan_kmalloc+0x98/0xb0 [ 295.088690][ C0] __kmalloc_node_track_caller_noprof+0x28b/0x4c0 [ 295.088728][ C0] ? __alloc_skb+0x1f3/0x440 [ 295.088747][ C0] ? __alloc_skb+0x1f3/0x440 [ 295.088763][ C0] kmalloc_reserve+0x111/0x2a0 [ 295.088803][ C0] __alloc_skb+0x1f3/0x440 [ 295.088821][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 295.088842][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 295.088862][ C0] ? kmem_cache_free+0x195/0x410 [ 295.088885][ C0] ? nsim_dev_trap_report_work+0x7cc/0xb50 [ 295.088914][ C0] nsim_dev_trap_report_work+0x261/0xb50 [ 295.088949][ C0] ? process_scheduled_works+0x976/0x1840 [ 295.088968][ C0] process_scheduled_works+0xa66/0x1840 [ 295.089001][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.089025][ C0] ? assign_work+0x364/0x3d0 [ 295.089052][ C0] worker_thread+0x870/0xd30 [ 295.089078][ C0] ? __kthread_parkme+0x169/0x1d0 [ 295.089100][ C0] ? __pfx_worker_thread+0x10/0x10 [ 295.089118][ C0] kthread+0x2f0/0x390 [ 295.089138][ C0] ? __pfx_worker_thread+0x10/0x10 [ 295.089157][ C0] ? __pfx_kthread+0x10/0x10 [ 295.089179][ C0] ret_from_fork+0x4b/0x80 [ 295.089196][ C0] ? __pfx_kthread+0x10/0x10 [ 295.089218][ C0] ret_from_fork_asm+0x1a/0x30 [ 295.089243][ C0] [ 295.304944][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 295.403836][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 295.403858][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00127-g8c7a6efc017e #0 [ 295.403887][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.403902][ T30] Call Trace: [ 295.403911][ T30] [ 295.403923][ T30] dump_stack_lvl+0x241/0x360 [ 295.403964][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.403998][ T30] ? __pfx__printk+0x10/0x10 [ 295.404025][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.404062][ T30] ? vscnprintf+0x5d/0x90 [ 295.404094][ T30] panic+0x349/0x880 [ 295.404125][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 295.404157][ T30] ? __pfx_panic+0x10/0x10 [ 295.404184][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 295.404220][ T30] ? __irq_work_queue_local+0x137/0x410 [ 295.404249][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 295.404278][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 295.404306][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 295.404339][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 295.404372][ T30] watchdog+0x1035/0x1040 [ 295.404401][ T30] ? watchdog+0x1ea/0x1040 [ 295.404436][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.404463][ T30] kthread+0x2f0/0x390 [ 295.404492][ T30] ? __pfx_watchdog+0x10/0x10 [ 295.404518][ T30] ? __pfx_kthread+0x10/0x10 [ 295.404547][ T30] ret_from_fork+0x4b/0x80 [ 295.404573][ T30] ? __pfx_kthread+0x10/0x10 [ 295.404602][ T30] ret_from_fork_asm+0x1a/0x30 [ 295.404639][ T30] [ 295.405582][ T30] Kernel Offset: disabled