last executing test programs: 1m30.189658357s ago: executing program 1 (id=1373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)=':', 0x1, 0x40800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="4e05f97edb0c5df4935438dfccdcc5964feb323eadf2b8cc406a2f413ae58932f21c0edfcd2838a68430c293957d8b59bbbf5e25d338bec07e61f58d15d0e0f0326550deb6c5d1e03b942602bf2b3c4429603329d607273f", 0x58}, {&(0x7f0000000200)="b23c3ef8e6609866a0797a1d00b77f2dfef6e6cfca3f7e2eceb7ddf28e7cc8078eef072574b18487b55f35a8dba6411e1deed80f584ec23ef505e61c924288d8a59c42fb89c0d565cc62a1752b9bc742749389c96cbd43", 0x57}, {&(0x7f00000002c0)="48dcdf539abcad671700fe30ef19cf872fb461f9bc5721ef43f7b42e08c306c769cb4d2d0d436bffba7b7c96157a8a8bf68ebfa78983b2d5208d2a6c266754fe6dec587bb383bb3aba8dd8b7dad8ace1cfbb84390f88a762c65cfe2a6bf2fe4415517247639dd5c34a82fb6233f33563b3be8f1eaa3dc56aa86d0f8b8df9e5794ad3e9ee3661e0ed179a143a0800a5c89b7a68652f46ea", 0x97}], 0x3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000029c0), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x14, r4, 0x3}, 0x14}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000009c0)={r7}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r7, 0x6}, 0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x5}, &(0x7f0000000040)=0x90) 1m28.515068059s ago: executing program 3 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005000000000008000600000000000800050000000000080006003700000008000500000000000800050000000000080005000000000008000500946fa53208000500000000002c000780080005000000000008000600000000000800060000000000080006005e000000080005000000000044000780080006000000000008000600000000000800060000000000080006000000000008000500000000000800060000000000080006000000000008000500000000003400078008000600000000000800050000000000080005000000000008000500000000000800060000000000080005000000000014"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x42, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20004000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030b0000000000eaffff12"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x94, &(0x7f0000000400)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x80000000, @local, 0xe}, @in6={0xa, 0x4e20, 0xff, @local, 0x400}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000500)=0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4c119}, 0x0) 1m15.786552617s ago: executing program 1 (id=1373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)=':', 0x1, 0x40800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="4e05f97edb0c5df4935438dfccdcc5964feb323eadf2b8cc406a2f413ae58932f21c0edfcd2838a68430c293957d8b59bbbf5e25d338bec07e61f58d15d0e0f0326550deb6c5d1e03b942602bf2b3c4429603329d607273f", 0x58}, {&(0x7f0000000200)="b23c3ef8e6609866a0797a1d00b77f2dfef6e6cfca3f7e2eceb7ddf28e7cc8078eef072574b18487b55f35a8dba6411e1deed80f584ec23ef505e61c924288d8a59c42fb89c0d565cc62a1752b9bc742749389c96cbd43", 0x57}, {&(0x7f00000002c0)="48dcdf539abcad671700fe30ef19cf872fb461f9bc5721ef43f7b42e08c306c769cb4d2d0d436bffba7b7c96157a8a8bf68ebfa78983b2d5208d2a6c266754fe6dec587bb383bb3aba8dd8b7dad8ace1cfbb84390f88a762c65cfe2a6bf2fe4415517247639dd5c34a82fb6233f33563b3be8f1eaa3dc56aa86d0f8b8df9e5794ad3e9ee3661e0ed179a143a0800a5c89b7a68652f46ea", 0x97}], 0x3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000029c0), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x14, r4, 0x3}, 0x14}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000009c0)={r7}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r7, 0x6}, 0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x5}, &(0x7f0000000040)=0x90) 1m13.041753622s ago: executing program 3 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005000000000008000600000000000800050000000000080006003700000008000500000000000800050000000000080005000000000008000500946fa53208000500000000002c000780080005000000000008000600000000000800060000000000080006005e000000080005000000000044000780080006000000000008000600000000000800060000000000080006000000000008000500000000000800060000000000080006000000000008000500000000003400078008000600000000000800050000000000080005000000000008000500000000000800060000000000080005000000000014"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x42, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20004000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030b0000000000eaffff12"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x94, &(0x7f0000000400)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x80000000, @local, 0xe}, @in6={0xa, 0x4e20, 0xff, @local, 0x400}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000500)=0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4c119}, 0x0) 1m1.317452949s ago: executing program 1 (id=1373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)=':', 0x1, 0x40800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="4e05f97edb0c5df4935438dfccdcc5964feb323eadf2b8cc406a2f413ae58932f21c0edfcd2838a68430c293957d8b59bbbf5e25d338bec07e61f58d15d0e0f0326550deb6c5d1e03b942602bf2b3c4429603329d607273f", 0x58}, {&(0x7f0000000200)="b23c3ef8e6609866a0797a1d00b77f2dfef6e6cfca3f7e2eceb7ddf28e7cc8078eef072574b18487b55f35a8dba6411e1deed80f584ec23ef505e61c924288d8a59c42fb89c0d565cc62a1752b9bc742749389c96cbd43", 0x57}, {&(0x7f00000002c0)="48dcdf539abcad671700fe30ef19cf872fb461f9bc5721ef43f7b42e08c306c769cb4d2d0d436bffba7b7c96157a8a8bf68ebfa78983b2d5208d2a6c266754fe6dec587bb383bb3aba8dd8b7dad8ace1cfbb84390f88a762c65cfe2a6bf2fe4415517247639dd5c34a82fb6233f33563b3be8f1eaa3dc56aa86d0f8b8df9e5794ad3e9ee3661e0ed179a143a0800a5c89b7a68652f46ea", 0x97}], 0x3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000029c0), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x14, r4, 0x3}, 0x14}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000009c0)={r7}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r7, 0x6}, 0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x5}, &(0x7f0000000040)=0x90) 58.927269875s ago: executing program 3 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005000000000008000600000000000800050000000000080006003700000008000500000000000800050000000000080005000000000008000500946fa53208000500000000002c000780080005000000000008000600000000000800060000000000080006005e000000080005000000000044000780080006000000000008000600000000000800060000000000080006000000000008000500000000000800060000000000080006000000000008000500000000003400078008000600000000000800050000000000080005000000000008000500000000000800060000000000080005000000000014"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x42, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20004000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030b0000000000eaffff12"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x94, &(0x7f0000000400)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x80000000, @local, 0xe}, @in6={0xa, 0x4e20, 0xff, @local, 0x400}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000500)=0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4c119}, 0x0) 45.504724657s ago: executing program 1 (id=1373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)=':', 0x1, 0x40800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="4e05f97edb0c5df4935438dfccdcc5964feb323eadf2b8cc406a2f413ae58932f21c0edfcd2838a68430c293957d8b59bbbf5e25d338bec07e61f58d15d0e0f0326550deb6c5d1e03b942602bf2b3c4429603329d607273f", 0x58}, {&(0x7f0000000200)="b23c3ef8e6609866a0797a1d00b77f2dfef6e6cfca3f7e2eceb7ddf28e7cc8078eef072574b18487b55f35a8dba6411e1deed80f584ec23ef505e61c924288d8a59c42fb89c0d565cc62a1752b9bc742749389c96cbd43", 0x57}, {&(0x7f00000002c0)="48dcdf539abcad671700fe30ef19cf872fb461f9bc5721ef43f7b42e08c306c769cb4d2d0d436bffba7b7c96157a8a8bf68ebfa78983b2d5208d2a6c266754fe6dec587bb383bb3aba8dd8b7dad8ace1cfbb84390f88a762c65cfe2a6bf2fe4415517247639dd5c34a82fb6233f33563b3be8f1eaa3dc56aa86d0f8b8df9e5794ad3e9ee3661e0ed179a143a0800a5c89b7a68652f46ea", 0x97}], 0x3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000029c0), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x14, r4, 0x3}, 0x14}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000009c0)={r7}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r7, 0x6}, 0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x5}, &(0x7f0000000040)=0x90) 44.187906651s ago: executing program 3 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005000000000008000600000000000800050000000000080006003700000008000500000000000800050000000000080005000000000008000500946fa53208000500000000002c000780080005000000000008000600000000000800060000000000080006005e000000080005000000000044000780080006000000000008000600000000000800060000000000080006000000000008000500000000000800060000000000080006000000000008000500000000003400078008000600000000000800050000000000080005000000000008000500000000000800060000000000080005000000000014"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x42, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20004000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030b0000000000eaffff12"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x94, &(0x7f0000000400)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x80000000, @local, 0xe}, @in6={0xa, 0x4e20, 0xff, @local, 0x400}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000500)=0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4c119}, 0x0) 30.254748413s ago: executing program 1 (id=1373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)=':', 0x1, 0x40800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="4e05f97edb0c5df4935438dfccdcc5964feb323eadf2b8cc406a2f413ae58932f21c0edfcd2838a68430c293957d8b59bbbf5e25d338bec07e61f58d15d0e0f0326550deb6c5d1e03b942602bf2b3c4429603329d607273f", 0x58}, {&(0x7f0000000200)="b23c3ef8e6609866a0797a1d00b77f2dfef6e6cfca3f7e2eceb7ddf28e7cc8078eef072574b18487b55f35a8dba6411e1deed80f584ec23ef505e61c924288d8a59c42fb89c0d565cc62a1752b9bc742749389c96cbd43", 0x57}, {&(0x7f00000002c0)="48dcdf539abcad671700fe30ef19cf872fb461f9bc5721ef43f7b42e08c306c769cb4d2d0d436bffba7b7c96157a8a8bf68ebfa78983b2d5208d2a6c266754fe6dec587bb383bb3aba8dd8b7dad8ace1cfbb84390f88a762c65cfe2a6bf2fe4415517247639dd5c34a82fb6233f33563b3be8f1eaa3dc56aa86d0f8b8df9e5794ad3e9ee3661e0ed179a143a0800a5c89b7a68652f46ea", 0x97}], 0x3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000029c0), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x14, r4, 0x3}, 0x14}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000009c0)={r7}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r7, 0x6}, 0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x5}, &(0x7f0000000040)=0x90) 29.157124394s ago: executing program 3 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005000000000008000600000000000800050000000000080006003700000008000500000000000800050000000000080005000000000008000500946fa53208000500000000002c000780080005000000000008000600000000000800060000000000080006005e000000080005000000000044000780080006000000000008000600000000000800060000000000080006000000000008000500000000000800060000000000080006000000000008000500000000003400078008000600000000000800050000000000080005000000000008000500000000000800060000000000080005000000000014"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x42, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20004000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030b0000000000eaffff12"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x94, &(0x7f0000000400)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x80000000, @local, 0xe}, @in6={0xa, 0x4e20, 0xff, @local, 0x400}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000500)=0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4c119}, 0x0) 13.032002095s ago: executing program 1 (id=1373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80000001}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)=':', 0x1, 0x40800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x800000}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="4e05f97edb0c5df4935438dfccdcc5964feb323eadf2b8cc406a2f413ae58932f21c0edfcd2838a68430c293957d8b59bbbf5e25d338bec07e61f58d15d0e0f0326550deb6c5d1e03b942602bf2b3c4429603329d607273f", 0x58}, {&(0x7f0000000200)="b23c3ef8e6609866a0797a1d00b77f2dfef6e6cfca3f7e2eceb7ddf28e7cc8078eef072574b18487b55f35a8dba6411e1deed80f584ec23ef505e61c924288d8a59c42fb89c0d565cc62a1752b9bc742749389c96cbd43", 0x57}, {&(0x7f00000002c0)="48dcdf539abcad671700fe30ef19cf872fb461f9bc5721ef43f7b42e08c306c769cb4d2d0d436bffba7b7c96157a8a8bf68ebfa78983b2d5208d2a6c266754fe6dec587bb383bb3aba8dd8b7dad8ace1cfbb84390f88a762c65cfe2a6bf2fe4415517247639dd5c34a82fb6233f33563b3be8f1eaa3dc56aa86d0f8b8df9e5794ad3e9ee3661e0ed179a143a0800a5c89b7a68652f46ea", 0x97}], 0x3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000029c0), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a00)={0x14, r4, 0x3}, 0x14}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000009c0)={r7}, 0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000380)={r7, 0x6}, 0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x5}, &(0x7f0000000040)=0x90) 11.815857976s ago: executing program 3 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000003c01088054000780080006006e000000080005000000000008000600000000000800050000000000080006003700000008000500000000000800050000000000080005000000000008000500946fa53208000500000000002c000780080005000000000008000600000000000800060000000000080006005e000000080005000000000044000780080006000000000008000600000000000800060000000000080006000000000008000500000000000800060000000000080006000000000008000500000000003400078008000600000000000800050000000000080005000000000008000500000000000800060000000000080005000000000014"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x42, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x702}, @IFA_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}}, 0x20004000) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030b0000000000eaffff12"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x800}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000340)={r9, 0x94, &(0x7f0000000400)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x80000000, @local, 0xe}, @in6={0xa, 0x4e20, 0xff, @local, 0x400}, @in6={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000500)=0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r4], 0x28}, 0x1, 0x0, 0x0, 0x4c119}, 0x0) 3.35242924s ago: executing program 0 (id=1991): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000100000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000f3ee0eeb00000000c33b38a7", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$FIOCLEX(r6, 0x5451) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f00000002c0)={'veth0_to_bridge', 0x32, 0x34}, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) 2.997881871s ago: executing program 0 (id=1996): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex, 0xffffffffffffffff, 0x22, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "00001c050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200fff500000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r0 = socket(0x10, 0x3, 0x0) socketpair(0x2, 0x80003, 0xff, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711214000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500170000000000080004"], 0x44}}, 0x8000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003f80)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000a80)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x20}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000000280)={0x77359400}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000000300070000000014000100000000000000000000ff"], 0x30}}, 0x0) r5 = socket(0x25, 0x800, 0x8) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="01002cbd7000000000000c00000020000580080001007564700014000280080004000d8000000800030080"], 0x34}}, 0x0) 2.717278825s ago: executing program 0 (id=1999): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2.688172348s ago: executing program 2 (id=2000): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000000000000001300fab511e063000000000000000000"], 0x26}}, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x10000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5203}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x10000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5203}]}, 0x38}}, 0x0) 2.450707892s ago: executing program 2 (id=2001): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) syz_emit_ethernet(0x31f, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) close(r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_eeprom={0xa}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500020000002020207b1af8ff00000000bfa100000000000007010000f8fff7ffb702000008000000b70300000000000085000000d00000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="24611fddebf1b5c8c7b9b9ac5365300c3c027deae245037c46ba2558bbb8d97eaffbd9618110be6569aea5294d642b2a240264d8622d8bd8765cd175e8d6ec2aa5d24662275581714062c75b544deb59fc5c87a006dc421d9e6bd3f770298f2712387690fc0285b8a58a8d064ca4d141b3915fd13515a25ff521212723a5b5164b8df4b2", 0x84}], 0x1, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x18}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x85, 0x45}}) 1.259891397s ago: executing program 0 (id=2002): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000080)=""/187, &(0x7f0000000000)=0xbb) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f00000000c0)=0x107fff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000240)=ANY=[@ANYRES64=r5], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0", @ANYRESOCT=r5, @ANYRES16=r5], 0x0) setsockopt$inet6_buf(r5, 0x29, 0x1b, &(0x7f0000000140)="b32a1c12fe6b0d4861cc0e1fad54f036c7c8595aa31fd94343190e3bbd78ef7fd7d9199778cd045930eee9e6d56c3190f7066a3773", 0x35) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0103800000000000000002000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x17a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040090}, 0x2000800) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0xc, 0x6, 0x0, 0x4, 0x0, 0x9, [{0x0, 0x4, 0x7}, {0x1, 0x0, 0x7f}, {0xd, 0x5, 0xffffffff}, {0x2, 0x4, 0x1964}, {0x0, 0x5, 0x5}, {0x2, 0x0, 0x1}]}, @fwd={0x1}, @struct={0xf, 0x3, 0x0, 0x4, 0x0, 0x0, [{0xa, 0x1}, {0x10, 0x5, 0x1}, {0x6, 0x0, 0x7f}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0xc, 0x4}, {0x3c5}, {0x2, 0x3}, {0x5, 0x2}, {0x7}]}, @fwd={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfff}}, @const={0x8}]}, {0x0, [0x61]}}, &(0x7f0000000500)=""/16, 0x143, 0x10, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0700000008000000020000000700000000000000", @ANYRES32=r6, @ANYBLOB="0400"/20, @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="030500000383a3c60e000000010000001000000000000000000000ba82ccf72b6c60f9d18385adb2c2e27ed861c117717888cf47368e2fe252c5326882d95ba8aff25b82b5b3d2cf275377bb65655998acfafe4eb017084d8a55f8877db39f264371e452b60e000000cd074d21cf92bef2ec6b5db956a9c64c1afe63442b7048befe"], 0x48) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r11}, 0x8) openat$cgroup_ro(r11, &(0x7f00000001c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000f00)={0x9, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) 1.248206027s ago: executing program 2 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0xff75, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0xffffffffffffff7e, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname$qrtr(r3, &(0x7f0000000280), &(0x7f00000002c0)=0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4001091}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, 0x140f, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x28050}, 0x44044011) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd27, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 1.022394725s ago: executing program 0 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000180)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a010088a8ffff0200258f", 0x12}], 0x2}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000500)='GPL\x00', 0x0, 0xfffffffffffffeba, 0x0, 0x40f00, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', 0x0}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000180)=0x4, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @local}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a010088a8ffff0200258f", 0x12}], 0x2}, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000500)='GPL\x00', 0x0, 0xfffffffffffffeba, 0x0, 0x40f00, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 841.863406ms ago: executing program 4 (id=2006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="10", @ANYRES16=r2, @ANYRES64=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000400)=""/115, 0x73}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x0, 0x0) 777.981243ms ago: executing program 0 (id=2007): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={r1}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005600000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005600000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000040)=""/102, 0x66}, {&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000001500)=""/194, 0xc2}], 0x5, &(0x7f0000001680)=""/122, 0x7a}, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="23ef5be864d9e80482b6a5f825d8518d878fa77df7558519275fbb8de989843a30b614cd8c8ff0e683cc103b9596685be090f0d2986a95d315369678b10c29bb8f089873c0cd42a80fd13000a35ba25e1cb067f8c5117d85fadc34d82861bb824d3dcc742b6f205b044ece3e413540c91077138acab9c05d0a2b4a", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf2512000000080008000900000008000800000020002c0001800800030004000000080003000100000008000300010000000800030006000000080003000200000008000800080000000800080004000000080006000800000008000700ac030000080008000d0000000800060009000000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="23ef5be864d9e80482b6a5f825d8518d878fa77df7558519275fbb8de989843a30b614cd8c8ff0e683cc103b9596685be090f0d2986a95d315369678b10c29bb8f089873c0cd42a80fd13000a35ba25e1cb067f8c5117d85fadc34d82861bb824d3dcc742b6f205b044ece3e413540c91077138acab9c05d0a2b4a", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf2512000000080008000900000008000800000020002c0001800800030004000000080003000100000008000300010000000800030006000000080003000200000008000800080000000800080004000000080006000800000008000700ac030000080008000d0000000800060009000000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 670.39393ms ago: executing program 2 (id=2008): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400f03c6029ba42ac5f06430e00000000000a0000fd00002822cb0e05"], 0x24}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/180, 0xffb0}], 0x1}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001400)=""/94, 0x5e}], 0x1}}], 0x2, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000100)="315d933b02221a8956def8cdfe8dcfd41cfaf3dfc04889af606e1ecfab1bffa8fd01882483f8ebac47ffe971a9b5705ec608db0e6bcea187bfa36d66e501e93edcfba1330031a87eefec541d47159d1c3a231555fa5b0ad03f14036d022505160aabb0b9609a9d6dc4128b62491b7a46d5b23d310e720bffcb08f626656657759acbe3c3690adf0d06", 0x89, 0xc080, 0x0, 0x0) sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128)\x00'}, 0x6e) r4 = socket$packet(0x11, 0x2, 0x300) unshare(0x20000400) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x20000400) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) write(r7, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x7d, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 669.245885ms ago: executing program 4 (id=2009): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}, @generic={0x0, 0x2}]}}}}}}}}, 0x0) 592.282793ms ago: executing program 4 (id=2010): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r4, &(0x7f0000001480), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 578.243251ms ago: executing program 2 (id=2011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1, 0x0, 0x0, 0x12, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$sock(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="4904", 0x2}, {0x0}], 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @typedef={0x1, 0x0, 0x0, 0x12, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) sendmsg$sock(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="4904", 0x2}, {0x0}], 0x2}, 0x0) (async) 312.51397ms ago: executing program 4 (id=2012): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x50, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000010}, 0xc008844) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00004b6b15330e7b000000001600000000100281db950998eed0990e2cf903f6e612feab4fe0d635dc59774fcebd7f599fbe8643fb3af163e798706a66b70929084614e8c64ff4c519aecf0909905505e356582e3c755be71db40a78aa7af1b3a21e740cbd5ce53d26dc94078851ad55bbdfe5b7dd04efe45839b64105ce1aaf753fe46aec7cbbde7a94e6a16be0b0829e7bd2aa30a62b980b7bb822adbc20e174f4f8cdc2cd3c7894c8fd8f40b9979552080110de6974833e5649c054f6e32dd97dfc257a6297"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x17, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FITHAW(r4, 0xc0045878) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x69}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 138.325922ms ago: executing program 4 (id=2013): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1a, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}, 0xd8e}], 0x1, 0x20, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r4, 0x4, r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1a, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r6}, 0x20) (async) recvmmsg(r6, &(0x7f0000005940)=[{{0x0, 0x0, 0x0}, 0xd8e}], 0x1, 0x20, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r4, 0x4, r2}, 0x10) (async) 121.572706ms ago: executing program 2 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000001937181100a95ae7dd6f060fe589539cb56422f3467a217103000000000000009214d0b2effc16c24935e6d9516dd029eafa54f68eac4aefe47a6437af6431e4dcca344e6be4fb984a055139373558879ca2c72ff93ca85b606aad1abaa359722ce8bd95e7baf476d4971593395cd83f6b720d1b"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '-'}]}], {0x14}}, 0x6c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x20, 0x6, 0x0, 0x0, {[@window={0xb, 0x3}, @timestamp={0x5, 0xa, 0xfffe}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='1-'], 0x23) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5, 0x8, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014", 0x1d, 0x0, 0x0, 0x0) unshare(0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000004000000040000009200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000002b69426f890e8e9c8ce11efbeaf582284459e237e11013cc9e3ea6e3b066e67e2b37d767aa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$inet6(0xa, 0x1, 0x8010800000000084) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f00000000c0)=ANY=[], 0xfffffecc) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r11, 0x0, 0x1, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, 0x0}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="19c3201a44879e202a561f59d1ed4c4f0c0377e1e64a02c116136b5f5f209775e7bd5843ea90cf71eae5895666b61e14b43a074803bdcf99193a94db77492922015c7d5d8a1cec1f48f6d8d869350aa1657a1f5d071c4c8895ead7be19438d4fc846088a44b98eb58c9777528d1afb2b2f", 0x71}], 0x1}}], 0x2, 0x4008040) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe000001000000"], 0xa0}}, 0x0) clock_gettime(0x7, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000300009000000000000000000020000000c0001"], 0x28}}, 0x0) 0s ago: executing program 4 (id=2015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) unshare(0x8040480) r2 = socket$pptp(0x18, 0x1, 0x2) sendto(r2, &(0x7f0000000000)="ef0602e62e808ae9724ec87c", 0xc, 0x40, &(0x7f0000000240)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = epoll_create1(0x0) r4 = socket(0x1a, 0x80802, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001340)={0x11, @remote, 0xffff, 0x0, 'wrr\x00'}, 0x2c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) unshare(0x80) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) sendmsg$NFC_CMD_GET_TARGET(r6, 0x0, 0x856) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x14000, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a00001000000000008002000d8000000140012b5b50d8c0069706f696200000004000280"], 0x3c}}, 0x0) shutdown(r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x0) kernel console output (not intermixed with test programs): _1 [ 545.199766][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.212317][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.223435][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.233750][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.244612][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.255597][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.266411][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.276585][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.288729][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.299702][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.310248][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.320424][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.331464][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.343224][T12189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.383231][T12189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.403377][T12189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.425155][T12189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.434715][T12189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.444385][ T5234] Bluetooth: hci8: command tx timeout [ 545.467113][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.474249][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.522263][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.529461][ T6804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.558606][T12368] netlink: 'syz.2.1736': attribute type 5 has an invalid length. [ 545.619411][T12370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'. [ 545.741832][ T6790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.754953][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 545.765644][ T6790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.790677][T12374] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1738'. [ 545.933836][T11075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.956973][T11075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.161820][T12390] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1739'. [ 546.226535][T12217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.282064][T12217] veth0_vlan: entered promiscuous mode [ 546.332960][T12217] veth1_vlan: entered promiscuous mode [ 546.393345][T12217] veth0_macvtap: entered promiscuous mode [ 546.406507][T12217] veth1_macvtap: entered promiscuous mode [ 546.440279][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.451383][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.466931][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.479216][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.490612][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.501215][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.511185][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.523027][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.532918][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.543491][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.554555][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.565808][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.575843][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.586612][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.596708][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.607290][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.621373][T12217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.645540][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.657774][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.668102][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.678902][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.689153][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.699962][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.710027][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.723996][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.734402][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.747725][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.758295][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.770365][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.780398][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.790892][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.800852][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 546.808671][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.819157][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.832292][T12217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.848167][T12217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.857172][T12217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.867104][T12217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.881900][T12217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.092367][ T6790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.150073][ T6782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.166979][ T6782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.279918][ T6790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.297777][ T6782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.306647][ T6782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.667760][ T6790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.766204][ T6790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.845016][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 547.884645][ T6790] bridge_slave_1: left allmulticast mode [ 547.891830][ T6790] bridge_slave_1: left promiscuous mode [ 547.897975][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.908891][ T6790] bridge_slave_0: left allmulticast mode [ 547.914567][ T6790] bridge_slave_0: left promiscuous mode [ 547.921346][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.511257][ T5247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 548.526388][ T5247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 548.534308][ T5247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 548.553514][ T5247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 548.565925][ T5247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 548.583538][ T5247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 548.698874][ T6790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.711487][ T6790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.724316][ T6790] bond0 (unregistering): Released all slaves [ 548.743891][T12405] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.759439][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 548.771187][T12411] netlink: 'syz.4.1745': attribute type 4 has an invalid length. [ 548.785759][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1745'. [ 548.820217][T12415] bridge0: port 3(vlan3) entered blocking state [ 548.828178][T12415] bridge0: port 3(vlan3) entered disabled state [ 548.841091][T12415] vlan3: entered allmulticast mode [ 548.860831][T12415] vlan3: left allmulticast mode [ 548.874999][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 548.942228][T12405] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.065207][T12405] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.178450][T12405] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.283669][ T6790] hsr_slave_0: left promiscuous mode [ 549.314722][ T6790] hsr_slave_1: left promiscuous mode [ 549.329531][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.366325][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.386014][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.393432][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.465864][ T6790] veth1_macvtap: left promiscuous mode [ 549.475206][ T6790] veth0_macvtap: left promiscuous mode [ 549.480858][ T6790] veth1_vlan: left promiscuous mode [ 549.526419][ T6790] veth0_vlan: left promiscuous mode [ 549.924920][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 550.135735][ T6790] team0 (unregistering): Port device team_slave_1 removed [ 550.184764][ T6790] team0 (unregistering): Port device team_slave_0 removed [ 550.648673][ T5247] Bluetooth: hci5: command tx timeout [ 550.704502][T12437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1749'. [ 550.786930][T12405] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.803479][T12405] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.835719][T12405] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.852648][T12405] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.966036][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 551.067986][T12448] x_tables: duplicate underflow at hook 1 [ 551.111208][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 551.154097][T12455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1751'. [ 551.183684][T12420] chnl_net:caif_netlink_parms(): no params data found [ 551.495158][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 551.504608][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 551.513571][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 551.536099][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 551.544525][ T5234] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 551.556429][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 551.863039][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 551.921701][ T6790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.960801][T12420] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.969344][T12420] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.976940][T12420] bridge_slave_0: entered allmulticast mode [ 551.984704][T12420] bridge_slave_0: entered promiscuous mode [ 551.994959][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 552.089042][T12420] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.100107][T12420] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.108214][T12420] bridge_slave_1: entered allmulticast mode [ 552.115298][T12420] bridge_slave_1: entered promiscuous mode [ 552.149605][T11076] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 552.174013][ T6790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.247586][T12420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.355192][ T6790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.381977][T12420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.461681][T12484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1756'. [ 552.471934][T12420] team0: Port device team_slave_0 added [ 552.483153][T12420] team0: Port device team_slave_1 added [ 552.520545][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1756'. [ 552.540717][T12484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1756'. [ 552.572072][ T6790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.585295][T12484] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1756'. [ 552.676657][T12420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.703009][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.729609][ T5247] Bluetooth: hci5: command tx timeout [ 552.766690][T12420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.796797][T12420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.803741][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.881067][T12420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.034941][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 553.196132][T12420] hsr_slave_0: entered promiscuous mode [ 553.225604][T12420] hsr_slave_1: entered promiscuous mode [ 553.291645][T12469] chnl_net:caif_netlink_parms(): no params data found [ 553.462670][T12500] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.596551][T12500] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.607125][ T5247] Bluetooth: hci8: command tx timeout [ 553.734977][ T6790] bridge_slave_1: left allmulticast mode [ 553.740652][ T6790] bridge_slave_1: left promiscuous mode [ 553.755500][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.796114][ T6790] bridge_slave_0: left allmulticast mode [ 553.801783][ T6790] bridge_slave_0: left promiscuous mode [ 553.825412][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.864465][T12510] IPVS: set_ctl: invalid protocol: 46 172.20.20.48:20000 [ 554.074948][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 554.284091][T12520] syz.2.1768[12520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.284326][T12520] syz.2.1768[12520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.461227][ T6790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.485539][ T6790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.495464][T12526] __nla_validate_parse: 2 callbacks suppressed [ 554.495481][T12526] netlink: 6204 bytes leftover after parsing attributes in process `syz.2.1769'. [ 554.516025][ T6790] bond0 (unregistering): Released all slaves [ 554.528880][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'. [ 554.538122][T12526] netlink: 6204 bytes leftover after parsing attributes in process `syz.2.1769'. [ 554.553575][T12500] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.710725][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 554.772748][T12469] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.780384][T12469] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.788577][T12469] bridge_slave_0: entered allmulticast mode [ 554.796471][ T5247] Bluetooth: hci5: command tx timeout [ 554.804006][T12469] bridge_slave_0: entered promiscuous mode [ 554.824645][T12500] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.936555][T12469] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.966572][T12469] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.005118][T12469] bridge_slave_1: entered allmulticast mode [ 555.017889][T12469] bridge_slave_1: entered promiscuous mode [ 555.114916][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 555.163209][T12469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.188911][T12469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.266008][ T6790] hsr_slave_0: left promiscuous mode [ 555.285105][ T6790] hsr_slave_1: left promiscuous mode [ 555.292322][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.314883][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.335362][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.342769][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.386506][ T6790] veth1_macvtap: left promiscuous mode [ 555.392066][ T6790] veth0_macvtap: left promiscuous mode [ 555.397749][ T6790] veth1_vlan: left promiscuous mode [ 555.403027][ T6790] veth0_vlan: left promiscuous mode [ 555.675171][ T5247] Bluetooth: hci8: command tx timeout [ 555.854145][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1776'. [ 555.865869][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1776'. [ 556.111487][ T6790] team0 (unregistering): Port device team_slave_1 removed [ 556.163591][ T6790] team0 (unregistering): Port device team_slave_0 removed [ 556.164892][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 556.670400][T12469] team0: Port device team_slave_0 added [ 556.774919][T12554] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1776'. [ 556.801223][T12469] team0: Port device team_slave_1 added [ 556.875992][ T5247] Bluetooth: hci5: command tx timeout [ 556.932640][T12469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.954242][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.983893][T12564] xt_l2tp: v2 doesn't support IP mode [ 557.003473][T12469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.085844][T12469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.092087][T12572] dccp_invalid_packet: P.Data Offset(172) too large [ 557.096255][T12469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.146421][T12469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.188063][T12500] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.204926][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 557.249199][T12500] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.283203][T12500] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.372144][T12576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1782'. [ 557.397868][T12576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1782'. [ 557.413428][T12500] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.473024][T12469] hsr_slave_0: entered promiscuous mode [ 557.486230][T12469] hsr_slave_1: entered promiscuous mode [ 557.503180][T12469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.517162][T12469] Cannot create hsr debugfs directory [ 557.712756][T12420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.751506][T12420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.763924][ T5247] Bluetooth: hci8: command tx timeout [ 557.793262][T12420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.805502][T12587] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1786'. [ 557.822241][T12420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 558.234882][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 558.358813][T12420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.421606][T12420] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.441462][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.448692][T11072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.501370][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.508540][T11070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.609170][T12617] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.622546][T12618] tipc: Enabling of bearer rejected, failed to enable media [ 558.672580][T12617] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.698125][T12469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 558.717271][T12469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 558.748014][T12617] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.783199][T12469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 558.823499][T12617] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.848968][T12469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 558.885879][T12420] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 559.001389][T12617] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.059739][T12617] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.097950][T12617] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.146653][T12617] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.198877][T12626] netlink: 'syz.2.1796': attribute type 10 has an invalid length. [ 559.275436][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 559.288207][T12626] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 559.398942][T12420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.440777][T12469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.500280][T12469] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.554066][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.561267][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.627267][T12420] veth0_vlan: entered promiscuous mode [ 559.656086][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.663259][T11070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.713699][T12420] veth1_vlan: entered promiscuous mode [ 559.832413][T12420] veth0_macvtap: entered promiscuous mode [ 559.839324][ T5247] Bluetooth: hci8: command tx timeout [ 559.896107][T12420] veth1_macvtap: entered promiscuous mode [ 559.949519][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.985895][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.005776][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.032842][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.060855][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.086557][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.111521][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.135071][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.161234][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.183178][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.203639][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.216285][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.226436][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.238472][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.270929][T12420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.314928][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 560.351242][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.381146][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.404977][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.425460][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.447364][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.465020][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.485326][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.505367][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.526922][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.547906][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.568871][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.598341][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.624864][T12420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.646468][T12420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.666666][T12420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.731363][T12420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.759440][T12420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.778823][T12420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.796022][T12420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.851518][T12469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.025822][ T6804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.033679][ T6804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.105802][T12469] veth0_vlan: entered promiscuous mode [ 561.133194][T11070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.141509][T11070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.142195][T12469] veth1_vlan: entered promiscuous mode [ 561.231852][T12469] veth0_macvtap: entered promiscuous mode [ 561.255584][T12469] veth1_macvtap: entered promiscuous mode [ 561.321543][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.335591][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.347259][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.365291][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 561.369961][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.382503][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.393480][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.411051][T12661] __nla_validate_parse: 4 callbacks suppressed [ 561.411066][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 561.426620][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.438225][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.448652][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.459887][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.474409][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.485460][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.496950][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.507785][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.519280][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.530556][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.570026][T12469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.595152][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1804'. [ 561.618012][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.624238][T12661] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1804'. [ 561.629956][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.659463][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.695027][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.715140][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.737946][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.759838][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.783614][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.803871][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.820841][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.838664][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.850637][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.861295][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.872189][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.884659][T12469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.896113][T12469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.908256][T12469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.923096][T12469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.932414][T12469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.942179][T12469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.951105][T12469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.128700][T11070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.145309][T11070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.226009][ T6790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.234623][ T6790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.377479][T12676] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.405699][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 562.465438][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'. [ 562.568373][T12676] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.668016][T12676] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.756738][T12676] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.925842][ T6804] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.434892][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 563.506248][ T6804] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.671455][ T6804] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.824375][ T6804] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.028231][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1810'. [ 564.058600][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1810'. [ 564.093292][ T6804] bridge_slave_1: left allmulticast mode [ 564.105186][ T6804] bridge_slave_1: left promiscuous mode [ 564.110952][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.186977][ T6804] bridge_slave_0: left allmulticast mode [ 564.192650][ T6804] bridge_slave_0: left promiscuous mode [ 564.230423][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.474909][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 564.512131][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.525530][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.533492][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.544720][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.556657][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 564.564050][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.089481][ T6804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.102941][ T6804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.114056][ T6804] bond0 (unregistering): Released all slaves [ 565.174475][T12676] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.238064][T12676] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.257840][T12676] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.309725][T12676] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.478442][ T6804] hsr_slave_0: left promiscuous mode [ 565.484346][ T6804] hsr_slave_1: left promiscuous mode [ 565.495202][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.502604][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.513220][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.520767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 565.528588][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.551363][ T6804] veth1_macvtap: left promiscuous mode [ 565.557043][ T6804] veth0_macvtap: left promiscuous mode [ 565.563347][ T6804] veth1_vlan: left promiscuous mode [ 565.568860][ T6804] veth0_vlan: left promiscuous mode [ 566.083020][T12712] Bluetooth: hci3: unsupported parameter 64512 [ 566.105284][T12712] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 566.203254][ T5247] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 566.213470][ T5247] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 566.241410][ T5247] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 566.251169][ T5247] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 566.266532][ T5247] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 566.274010][ T5247] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 566.345409][ T6804] team0 (unregistering): Port device team_slave_1 removed [ 566.396143][ T6804] team0 (unregistering): Port device team_slave_0 removed [ 566.555202][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 566.636350][ T5247] Bluetooth: hci5: command tx timeout [ 566.900013][T12694] chnl_net:caif_netlink_parms(): no params data found [ 566.940204][T12713] pim6reg: entered allmulticast mode [ 567.075485][T12718] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1814'. [ 567.286174][T12732] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1818'. [ 567.362235][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.386301][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.395745][T12694] bridge_slave_0: entered allmulticast mode [ 567.406859][T12694] bridge_slave_0: entered promiscuous mode [ 567.415728][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.423007][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.431139][T12694] bridge_slave_1: entered allmulticast mode [ 567.439756][T12694] bridge_slave_1: entered promiscuous mode [ 567.545650][T12745] Cannot find del_set index 0 as target [ 567.588318][T12694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.598378][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 567.658104][T12694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.717356][T12748] syz_tun: entered promiscuous mode [ 567.772823][T12748] syz_tun: left promiscuous mode [ 567.937923][T12694] team0: Port device team_slave_0 added [ 567.950028][T12694] team0: Port device team_slave_1 added [ 568.117391][T12694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.145016][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.195577][T12694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.237246][T12694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.246355][T12778] FAULT_INJECTION: forcing a failure. [ 568.246355][T12778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.246708][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 568.286391][T12694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.320216][ T5234] Bluetooth: hci8: command tx timeout [ 568.327492][T12778] CPU: 0 UID: 0 PID: 12778 Comm: syz.0.1829 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 568.337922][T12778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 568.347969][T12778] Call Trace: [ 568.351238][T12778] [ 568.354159][T12778] dump_stack_lvl+0x241/0x360 [ 568.358841][T12778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 568.364034][T12778] ? __pfx__printk+0x10/0x10 [ 568.368620][T12778] ? __pfx_lock_release+0x10/0x10 [ 568.373641][T12778] ? aa_label_sk_perm+0x4f0/0x6d0 [ 568.378658][T12778] should_fail_ex+0x3b0/0x4e0 [ 568.383337][T12778] _copy_from_user+0x2f/0xe0 [ 568.387922][T12778] sk_getsockopt+0x1d2/0x3890 [ 568.392595][T12778] ? __pfx_sk_getsockopt+0x10/0x10 [ 568.397712][T12778] ? __pfx___might_resched+0x10/0x10 [ 568.403005][T12778] ? __might_fault+0xaa/0x120 [ 568.407718][T12778] ? __pfx_lock_release+0x10/0x10 [ 568.412744][T12778] ? __might_fault+0xc6/0x120 [ 568.417419][T12778] do_sock_getsockopt+0x2d5/0x7e0 [ 568.422440][T12778] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 568.427983][T12778] ? __fget_files+0x3f6/0x470 [ 568.432662][T12778] __sys_getsockopt+0x271/0x330 [ 568.437509][T12778] ? __pfx___sys_getsockopt+0x10/0x10 [ 568.442872][T12778] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 568.449196][T12778] ? do_syscall_64+0x100/0x230 [ 568.453960][T12778] __x64_sys_getsockopt+0xb5/0xd0 [ 568.458977][T12778] do_syscall_64+0xf3/0x230 [ 568.463480][T12778] ? clear_bhb_loop+0x35/0x90 [ 568.468152][T12778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.474035][T12778] RIP: 0033:0x7f02c997def9 [ 568.478440][T12778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.498037][T12778] RSP: 002b:00007f02ca809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 568.506446][T12778] RAX: ffffffffffffffda RBX: 00007f02c9b35f80 RCX: 00007f02c997def9 [ 568.514411][T12778] RDX: 000000000000000e RSI: 0000000000000001 RDI: 0000000000000003 [ 568.522370][T12778] RBP: 00007f02ca809090 R08: 0000000020000380 R09: 0000000000000000 [ 568.530330][T12778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.538296][T12778] R13: 0000000000000000 R14: 00007f02c9b35f80 R15: 00007ffd2b252ba8 [ 568.546270][T12778] [ 568.606253][ T6804] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.644880][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 568.669112][T12714] chnl_net:caif_netlink_parms(): no params data found [ 568.718857][ T5234] Bluetooth: hci5: command tx timeout [ 568.727748][ T6804] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.791398][T12694] hsr_slave_0: entered promiscuous mode [ 568.803706][T12694] hsr_slave_1: entered promiscuous mode [ 568.868019][ T6804] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.967555][ T6804] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.982662][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 569.013542][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1834'. [ 569.032533][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 569.170806][T12714] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.179106][T12714] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.186835][T12714] bridge_slave_0: entered allmulticast mode [ 569.194976][T12714] bridge_slave_0: entered promiscuous mode [ 569.239099][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.249174][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.256610][T12714] bridge_slave_1: entered allmulticast mode [ 569.263371][T12714] bridge_slave_1: entered promiscuous mode [ 569.287703][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'. [ 569.298254][T12802] netlink: 'syz.0.1835': attribute type 15 has an invalid length. [ 569.316435][T12802] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.324638][T12802] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.333409][T12802] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.341814][T12802] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 569.351582][T12802] vxlan0: entered promiscuous mode [ 569.420488][T12714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.455598][ T6804] bridge_slave_1: left allmulticast mode [ 569.468419][ T6804] bridge_slave_1: left promiscuous mode [ 569.480111][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.496265][ T6804] bridge_slave_0: left allmulticast mode [ 569.503896][ T6804] bridge_slave_0: left promiscuous mode [ 569.512905][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.676911][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 570.047946][T12816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.062495][T12816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.205350][ T6804] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.221027][ T6804] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.233598][ T6804] bond0 (unregistering): Released all slaves [ 570.247161][T12714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.317694][ T5234] Bluetooth: hci6: command 0x0406 tx timeout [ 570.358152][T12811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.405606][ T5247] Bluetooth: hci8: command tx timeout [ 570.537261][T12714] team0: Port device team_slave_0 added [ 570.551731][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1842'. [ 570.581284][T12825] macvlan2: entered promiscuous mode [ 570.587390][T12825] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 570.603060][T12825] team0: Port device macvlan2 added [ 570.618043][T12714] team0: Port device team_slave_1 added [ 570.715009][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 570.746262][T12714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.753401][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.779714][T12714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.794430][T12714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.803717][ T5247] Bluetooth: hci5: command tx timeout [ 570.810197][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.836704][T12714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.879237][ T6804] hsr_slave_0: left promiscuous mode [ 570.893556][ T6804] hsr_slave_1: left promiscuous mode [ 570.906646][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.917974][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.936103][ T6804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.943519][ T6804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.980912][ T6804] veth1_macvtap: left promiscuous mode [ 570.986787][ T6804] veth0_macvtap: left promiscuous mode [ 570.993639][ T6804] veth1_vlan: left promiscuous mode [ 570.999197][ T6804] veth0_vlan: left promiscuous mode [ 571.560053][ T6804] team0 (unregistering): Port device team_slave_1 removed [ 571.612484][ T6804] team0 (unregistering): Port device team_slave_0 removed [ 571.755087][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 572.286271][T12839] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1848'. [ 572.347581][T12714] hsr_slave_0: entered promiscuous mode [ 572.365381][T12714] hsr_slave_1: entered promiscuous mode [ 572.373789][T12714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.382324][T12714] Cannot create hsr debugfs directory [ 572.390277][T12694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 572.485362][ T5247] Bluetooth: hci8: command tx timeout [ 572.487992][T12839] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 572.546204][T12694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 572.627853][T12694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 572.684014][T12694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 572.794887][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 572.875184][ T5247] Bluetooth: hci5: command tx timeout [ 573.205238][T12694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.273683][T12694] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.303577][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.310739][T11072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.339051][T12879] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 573.358909][T12879] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 573.375425][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 573.415377][T12877] gretap0: entered promiscuous mode [ 573.421222][T12877] macvtap1: entered promiscuous mode [ 573.430656][T12877] macvtap1: entered allmulticast mode [ 573.438613][T12877] gretap0: entered allmulticast mode [ 573.457348][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.464535][ T6782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.628780][T12714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 573.659921][T12714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 573.689352][T12714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 573.727771][T12714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 573.780184][T12887] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1861'. [ 573.844912][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.093862][T12714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.183744][T12714] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.201408][T12694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.240588][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.247771][T11072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.309017][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.316225][ T6782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.332724][T12908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1863'. [ 574.464242][T12694] veth0_vlan: entered promiscuous mode [ 574.492876][T12694] veth1_vlan: entered promiscuous mode [ 574.555224][ T5247] Bluetooth: hci8: command tx timeout [ 574.587878][T12694] veth0_macvtap: entered promiscuous mode [ 574.612326][T12694] veth1_macvtap: entered promiscuous mode [ 574.678605][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.701289][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.711698][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.725164][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.736398][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.747557][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.758400][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.769269][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.780478][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.791396][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.802143][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.815775][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.826026][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.837087][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.851200][T12694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.874988][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.887847][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.910556][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.931885][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.945822][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.960699][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.973717][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.999611][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.023607][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.061262][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.071785][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.086398][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.105183][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.128932][T12694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.146028][T12694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.158403][T12694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.394568][T12694] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.409295][T12694] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.421245][T12694] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.430112][T12694] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.513092][T12714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.673875][T11070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.683887][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 575.693157][T11070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.723861][T12714] veth0_vlan: entered promiscuous mode [ 575.739395][T12921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.753754][T12921] bond0: (slave bond2): Enslaving as an active interface with an up link [ 575.782024][T12921] 8021q: adding VLAN 0 to HW filter on device bond2 [ 575.790744][T12921] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 575.801928][T12921] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 575.825243][T12714] veth1_vlan: entered promiscuous mode [ 575.843422][T11076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.854749][T11076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.873344][T12714] veth0_macvtap: entered promiscuous mode [ 575.913389][T12714] veth1_macvtap: entered promiscuous mode [ 575.925235][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 575.948872][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.962653][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.974195][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.986930][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.003956][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.017236][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.027602][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.039185][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.049703][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.060322][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.070252][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.080976][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.090855][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.102722][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.114326][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.125012][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.138628][T12714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.254076][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.276796][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.295943][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.324837][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.334664][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.345686][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.355946][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.366685][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.376892][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.387988][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.400503][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.411412][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.422780][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.433423][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.443794][T12714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.454445][T12714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.467076][T12714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.486725][T12714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.502098][T12714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.525921][T12714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.534899][T12714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.589398][T12931] IPv6: addrconf: prefix option has invalid lifetime [ 576.596195][T12931] IPv6: addrconf: prefix option has invalid lifetime [ 576.640854][T12931] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1871'. [ 576.711371][T11070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.720777][T11070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.766786][ T6790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.771254][T12933] netlink: 1180 bytes leftover after parsing attributes in process `syz.4.1872'. [ 576.774608][ T6790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.955045][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 577.994988][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 578.132607][T11072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.178386][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 578.200719][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 579.034924][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 579.055075][T11072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.214747][T11072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.327668][T11072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.350621][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 579.360835][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.369794][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.379037][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.389319][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 579.399878][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 579.466633][T11072] bridge_slave_1: left allmulticast mode [ 579.472294][T11072] bridge_slave_1: left promiscuous mode [ 579.478296][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.490955][T11072] bridge_slave_0: left allmulticast mode [ 579.498381][T11072] bridge_slave_0: left promiscuous mode [ 579.504033][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.909515][T11072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.922351][T11072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.939542][T11072] bond0 (unregistering): Released all slaves [ 580.081264][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 580.140878][T12957] chnl_net:caif_netlink_parms(): no params data found [ 580.250478][T11072] hsr_slave_0: left promiscuous mode [ 580.261704][T11072] hsr_slave_1: left promiscuous mode [ 580.269335][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.276919][T11072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.284657][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.292937][T11072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.319378][T11072] veth1_macvtap: left promiscuous mode [ 580.325086][T11072] veth0_macvtap: left promiscuous mode [ 580.330729][T11072] veth1_vlan: left promiscuous mode [ 580.336157][T11072] veth0_vlan: left promiscuous mode [ 580.825292][T12978] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 580.863493][T12978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1883'. [ 581.087625][ T5247] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 581.099448][ T5247] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 581.109216][ T5247] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 581.118167][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 581.145661][ T5247] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 581.153526][ T5247] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 581.161360][ T5247] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 581.313694][T11072] team0 (unregistering): Port device team_slave_1 removed [ 581.373912][T11072] team0 (unregistering): Port device team_slave_0 removed [ 581.442117][ T5234] Bluetooth: hci5: command tx timeout [ 581.946536][T12957] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.953708][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.996049][T12957] bridge_slave_0: entered allmulticast mode [ 582.003269][T12957] bridge_slave_0: entered promiscuous mode [ 582.031262][T12957] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.045622][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.065101][T12957] bridge_slave_1: entered allmulticast mode [ 582.073324][T12957] bridge_slave_1: entered promiscuous mode [ 582.154986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 582.211836][T12957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.234075][T12957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.365878][T12957] team0: Port device team_slave_0 added [ 582.391751][T12957] team0: Port device team_slave_1 added [ 582.462520][T12957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.473280][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.501486][T12957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.536682][T12957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.553062][T12957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.599386][T12957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.843563][T11072] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.931166][T12957] hsr_slave_0: entered promiscuous mode [ 582.965463][T12957] hsr_slave_1: entered promiscuous mode [ 583.058121][T11072] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.099945][T13004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1889'. [ 583.123147][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'. [ 583.141121][T13008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1889'. [ 583.173878][ T6795] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.201637][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 583.209281][ T5234] Bluetooth: hci8: command tx timeout [ 583.219677][T11072] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.239851][T12984] chnl_net:caif_netlink_parms(): no params data found [ 583.289672][T11072] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.303585][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 583.401001][T13016] netlink: 'syz.2.1891': attribute type 14 has an invalid length. [ 583.515099][ T5234] Bluetooth: hci5: command tx timeout [ 583.589317][T12984] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.598740][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.606030][T12984] bridge_slave_0: entered allmulticast mode [ 583.613445][T12984] bridge_slave_0: entered promiscuous mode [ 583.626649][T12984] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.635216][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.642427][T12984] bridge_slave_1: entered allmulticast mode [ 583.649289][T12984] bridge_slave_1: entered promiscuous mode [ 583.774604][T12984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.790766][T12984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.845950][T11072] bridge_slave_1: left allmulticast mode [ 583.851689][T11072] bridge_slave_1: left promiscuous mode [ 583.857746][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.868616][T11072] bridge_slave_0: left allmulticast mode [ 583.874255][T11072] bridge_slave_0: left promiscuous mode [ 583.881591][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.244996][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 584.388685][T11072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.420343][T11072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.443187][T11072] bond0 (unregistering): Released all slaves [ 584.621594][T12984] team0: Port device team_slave_0 added [ 584.695731][ T5247] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 584.707434][ T5247] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 584.721733][ T5247] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 584.755787][ T5247] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 584.769176][ T5247] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 584.782275][ T5247] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 584.833409][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1900'. [ 584.847258][T12984] team0: Port device team_slave_1 added [ 584.961652][T12984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.979386][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.009401][T12984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.101092][T12984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.115514][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.170023][T12984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.244695][T13058] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1905'. [ 585.263465][T13058] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1905'. [ 585.276859][T11072] hsr_slave_0: left promiscuous mode [ 585.283007][T11072] hsr_slave_1: left promiscuous mode [ 585.288429][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 585.296538][ T5234] Bluetooth: hci8: command tx timeout [ 585.303295][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.310823][T11072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.319017][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.327458][T11072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.353152][T11072] veth1_macvtap: left promiscuous mode [ 585.359404][T11072] veth0_macvtap: left promiscuous mode [ 585.365163][T11072] veth1_vlan: left promiscuous mode [ 585.370462][T11072] veth0_vlan: left promiscuous mode [ 585.605334][ T5234] Bluetooth: hci5: command tx timeout [ 585.984486][T11072] team0 (unregistering): Port device team_slave_1 removed [ 586.033319][T11072] team0 (unregistering): Port device team_slave_0 removed [ 586.324925][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 586.695472][T12984] hsr_slave_0: entered promiscuous mode [ 586.734421][T12984] hsr_slave_1: entered promiscuous mode [ 586.757478][T12984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 586.774739][T12984] Cannot create hsr debugfs directory [ 586.875328][ T5234] Bluetooth: hci10: command tx timeout [ 587.084026][T12957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 587.116833][T12957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 587.131270][T12957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 587.170749][T12957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 587.298801][T13091] sctp: [Deprecated]: syz.4.1913 (pid 13091) Use of int in maxseg socket option. [ 587.298801][T13091] Use struct sctp_assoc_value instead [ 587.354976][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 587.362062][ T5234] Bluetooth: hci8: command tx timeout [ 587.674990][ T5234] Bluetooth: hci5: command tx timeout [ 587.744944][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 587.808424][T13040] chnl_net:caif_netlink_parms(): no params data found [ 588.397235][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 588.955247][ T5234] Bluetooth: hci10: command tx timeout [ 589.441347][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 589.448541][ T5234] Bluetooth: hci8: command tx timeout [ 590.219218][T12957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.240607][T13101] ɶƣ0GCTw: entered promiscuous mode [ 590.253812][T13104] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1915'. [ 590.255018][T13040] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.291085][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1915'. [ 590.295007][T13040] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.307341][T13040] bridge_slave_0: entered allmulticast mode [ 590.314008][T13040] bridge_slave_0: entered promiscuous mode [ 590.322597][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 590.346264][T13105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 590.355915][T13040] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.363253][T13040] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.370815][T13040] bridge_slave_1: entered allmulticast mode [ 590.378321][T13040] bridge_slave_1: entered promiscuous mode [ 590.399807][T13103] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1916'. [ 590.474913][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 590.488149][T13040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.514626][T12984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 590.541266][T13040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.552619][T12984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 590.629245][T12984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.655343][T12984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 590.678767][T13040] team0: Port device team_slave_0 added [ 590.687823][T13040] team0: Port device team_slave_1 added [ 590.713395][T12957] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.742050][T13040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.749286][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.777132][T13040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.806535][T11076] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.813627][T11076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.822580][T13040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.830507][T13040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.858271][T13040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.891210][T11072] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.898309][T11072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.977277][T13040] hsr_slave_0: entered promiscuous mode [ 590.983788][T13040] hsr_slave_1: entered promiscuous mode [ 590.991347][T13040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.005376][T13040] Cannot create hsr debugfs directory [ 591.035653][ T5234] Bluetooth: hci10: command tx timeout [ 591.139399][T13113] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1919'. [ 591.240368][T12957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 591.265210][T12957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.403936][T13040] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.435835][T13040] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.478542][T12984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.524964][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 591.539042][T12984] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.582662][T13040] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.593676][T13040] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.651531][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.658702][T11070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.685834][T13040] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.696320][T13040] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.712736][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 591.725379][T13124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1922'. [ 591.743187][T13124] bridge2: entered promiscuous mode [ 591.748626][T13124] bridge2: entered allmulticast mode [ 591.802464][T13040] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.824302][T13040] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.854379][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.861560][T11070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.899792][T12957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.908978][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 592.051494][T12984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.208363][T12957] veth0_vlan: entered promiscuous mode [ 592.252935][T13040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 592.272359][T13144] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1926'. [ 592.294148][T13040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 592.328553][T13040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 592.342157][T13040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 592.364757][T12957] veth1_vlan: entered promiscuous mode [ 592.398872][T12984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.480729][T12957] veth0_macvtap: entered promiscuous mode [ 592.546653][T12957] veth1_macvtap: entered promiscuous mode [ 592.555224][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 592.636561][T12984] veth0_vlan: entered promiscuous mode [ 592.671886][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.684250][T13157] FAULT_INJECTION: forcing a failure. [ 592.684250][T13157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.695306][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.698605][T13157] CPU: 1 UID: 0 PID: 13157 Comm: syz.4.1929 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 592.718216][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 592.720590][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.728259][T13157] Call Trace: [ 592.728271][T13157] [ 592.728280][T13157] dump_stack_lvl+0x241/0x360 [ 592.728315][T13157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.738886][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.741968][T13157] ? __pfx__printk+0x10/0x10 [ 592.741999][T13157] ? __pfx_lock_release+0x10/0x10 [ 592.744996][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.749561][T13157] should_fail_ex+0x3b0/0x4e0 [ 592.749595][T13157] _copy_from_user+0x2f/0xe0 [ 592.793733][T13157] copy_msghdr_from_user+0xae/0x680 [ 592.798940][T13157] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 592.804765][T13157] __sys_sendmsg+0x23d/0x3a0 [ 592.809358][T13157] ? __pfx___sys_sendmsg+0x10/0x10 [ 592.814458][T13157] ? vfs_write+0x7c4/0xc90 [ 592.818896][T13157] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 592.825218][T13157] ? do_syscall_64+0x100/0x230 [ 592.829999][T13157] ? do_syscall_64+0xb6/0x230 [ 592.834673][T13157] do_syscall_64+0xf3/0x230 [ 592.839170][T13157] ? clear_bhb_loop+0x35/0x90 [ 592.843840][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.849725][T13157] RIP: 0033:0x7f9342f7def9 [ 592.854130][T13157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.873726][T13157] RSP: 002b:00007f9343c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.882133][T13157] RAX: ffffffffffffffda RBX: 00007f9343135f80 RCX: 00007f9342f7def9 [ 592.890095][T13157] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 592.898053][T13157] RBP: 00007f9343c8f090 R08: 0000000000000000 R09: 0000000000000000 [ 592.906016][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.913980][T13157] R13: 0000000000000000 R14: 00007f9343135f80 R15: 00007ffc30cc38d8 [ 592.921951][T13157] [ 592.928522][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.944864][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 592.975416][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 592.994471][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.006377][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.016227][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.026728][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.039245][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.052139][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.064283][T12957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 593.103015][T12984] veth1_vlan: entered promiscuous mode [ 593.115217][ T5234] Bluetooth: hci10: command tx timeout [ 593.125535][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.147508][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.163277][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.174116][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.193676][T13166] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 593.217875][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.228935][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.239134][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.249767][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.270872][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.282098][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.292533][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.292537][ T5311] IPVS: starting estimator thread 0... [ 593.292552][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.321163][T12957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 593.334193][T12957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.345958][T12957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 593.391524][T13169] tipc: Started in network mode [ 593.397332][T13169] tipc: Node identity ac1414aa, cluster identity 4711 [ 593.405506][T13169] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.414272][T13169] tipc: Enabled bearer , priority 10 [ 593.424366][T12957] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.426183][T13170] IPVS: using max 19 ests per chain, 45600 per kthread [ 593.433385][T12957] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.464850][T12957] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.484719][T12957] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.536122][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.592524][T13040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.604925][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 593.655766][T12984] veth0_macvtap: entered promiscuous mode [ 593.667459][T12984] veth1_macvtap: entered promiscuous mode [ 593.675084][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.773462][T13040] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.814896][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.869329][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.876485][T11070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.954939][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.968511][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.979652][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.995450][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.016517][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.026779][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.038249][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.050217][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.060802][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.071199][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.082073][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.092117][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.094952][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 594.102709][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.119535][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.131392][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.141277][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.151800][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.181335][T12984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.212847][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.220013][ T6795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.230050][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.235222][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 594.258033][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.282525][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.293590][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.304280][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.315066][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.327671][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.339382][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.349273][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.365560][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.375012][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 594.388118][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.410870][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.429406][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.451689][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.469059][T12984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.495001][T12984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.515378][ T46] tipc: Node number set to 2886997162 [ 594.516181][T12984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.541750][T11075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.576623][T11075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.666261][T12984] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.681214][T13194] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 594.685948][T12984] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.717942][T12984] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.732446][T13195] x_tables: duplicate underflow at hook 1 [ 594.736465][T12984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.767071][T11075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.785039][T11075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.054635][ T6795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.069052][ T6795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.142986][T11076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.159836][T11076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.348879][T11070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.493729][T13040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.557604][T13040] veth0_vlan: entered promiscuous mode [ 595.577456][T13040] veth1_vlan: entered promiscuous mode [ 595.634488][T13040] veth0_macvtap: entered promiscuous mode [ 595.655057][T13040] veth1_macvtap: entered promiscuous mode [ 595.677967][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.688847][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.699149][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.709712][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.719530][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.730183][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.740049][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.752467][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.763176][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.776196][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.786904][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.797395][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.807264][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.818376][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.828450][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.839826][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.849764][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.863229][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.877843][T13040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.892318][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.902969][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.921145][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.931816][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.942061][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.952614][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.962603][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.977064][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.986973][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.997688][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.007897][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.018612][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.028525][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.039376][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.049217][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.059858][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.069757][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.083573][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.097337][T13040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.133389][T11070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.152878][T13040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.163334][T13040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.172225][T13040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.185647][T13040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.341567][T11070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.421342][ T6795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.448120][ T6795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.489315][T11070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.595210][T11072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.606887][T11072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.630009][T13203] __nla_validate_parse: 5 callbacks suppressed [ 596.630023][T13203] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1939'. [ 596.775306][T11070] bridge_slave_1: left allmulticast mode [ 596.780993][T11070] bridge_slave_1: left promiscuous mode [ 596.815508][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.837199][T11070] bridge_slave_0: left allmulticast mode [ 596.842873][T11070] bridge_slave_0: left promiscuous mode [ 596.860867][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.941656][ T5247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 596.954289][ T5247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 596.966339][ T5247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 596.982079][ T5247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 597.001553][ T5247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 597.010091][ T5247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 597.729376][T11070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.743521][T11070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.754396][T11070] bond0 (unregistering): Released all slaves [ 597.760489][ C0] net_ratelimit: 8 callbacks suppressed [ 597.760506][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 597.783624][T13205] netlink: 'syz.2.1939': attribute type 32 has an invalid length. [ 597.791650][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 597.802261][T13205] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17) [ 598.029049][T13215] FAULT_INJECTION: forcing a failure. [ 598.029049][T13215] name failslab, interval 1, probability 0, space 0, times 0 [ 598.060213][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.2.1941 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 598.070664][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 598.080731][T13215] Call Trace: [ 598.084024][T13215] [ 598.086973][T13215] dump_stack_lvl+0x241/0x360 [ 598.091687][T13215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.096913][T13215] ? __pfx__printk+0x10/0x10 [ 598.101531][T13215] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 598.107532][T13215] ? __pfx___might_resched+0x10/0x10 [ 598.112846][T13215] should_fail_ex+0x3b0/0x4e0 [ 598.117545][T13215] should_failslab+0xac/0x100 [ 598.122240][T13215] ? __alloc_skb+0x1c3/0x440 [ 598.126852][T13215] kmem_cache_alloc_node_noprof+0x71/0x320 [ 598.132680][T13215] __alloc_skb+0x1c3/0x440 [ 598.137121][T13215] ? __pfx___might_resched+0x10/0x10 [ 598.142424][T13215] ? __pfx___alloc_skb+0x10/0x10 [ 598.147387][T13215] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 598.153465][T13215] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 598.159728][T13215] netlink_sendmsg+0x638/0xcb0 [ 598.164523][T13215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.169834][T13215] ? __import_iovec+0x536/0x820 [ 598.174699][T13215] ? aa_sock_msg_perm+0x91/0x160 [ 598.179652][T13215] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 598.184953][T13215] ? security_socket_sendmsg+0x87/0xb0 [ 598.190433][T13215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.195735][T13215] __sock_sendmsg+0x221/0x270 [ 598.200437][T13215] ____sys_sendmsg+0x525/0x7d0 [ 598.205225][T13215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.210539][T13215] __sys_sendmsg+0x2b0/0x3a0 [ 598.215147][T13215] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.220273][T13215] ? vfs_write+0x7c4/0xc90 [ 598.224750][T13215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 598.231098][T13215] ? do_syscall_64+0x100/0x230 [ 598.235893][T13215] ? do_syscall_64+0xb6/0x230 [ 598.240593][T13215] do_syscall_64+0xf3/0x230 [ 598.245122][T13215] ? clear_bhb_loop+0x35/0x90 [ 598.249818][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.255723][T13215] RIP: 0033:0x7f37e217def9 [ 598.260154][T13215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.271998][ T5234] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 598.279755][T13215] RSP: 002b:00007f37e3032038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.279783][T13215] RAX: ffffffffffffffda RBX: 00007f37e2335f80 RCX: 00007f37e217def9 [ 598.279798][T13215] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 598.279811][T13215] RBP: 00007f37e3032090 R08: 0000000000000000 R09: 0000000000000000 [ 598.279823][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.279836][T13215] R13: 0000000000000000 R14: 00007f37e2335f80 R15: 00007fffa6b3f078 [ 598.279866][T13215] [ 598.353210][ T5234] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 598.366294][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 598.398077][ T5234] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 598.407449][ T5234] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 598.415490][ T5234] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 598.554869][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 598.716012][T13238] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 598.794933][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 598.824949][T11070] hsr_slave_0: left promiscuous mode [ 598.855174][T11070] hsr_slave_1: left promiscuous mode [ 598.864528][T11070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.886283][T11070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.895713][T11070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.903118][T11070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.980219][T11070] veth1_macvtap: left promiscuous mode [ 598.995970][T11070] veth0_macvtap: left promiscuous mode [ 599.001652][T11070] veth1_vlan: left promiscuous mode [ 599.010571][T11070] veth0_vlan: left promiscuous mode [ 599.115830][ T5234] Bluetooth: hci5: command tx timeout [ 599.595136][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 599.624712][T11070] team0 (unregistering): Port device team_slave_1 removed [ 599.680674][T11070] team0 (unregistering): Port device team_slave_0 removed [ 599.844892][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 600.251917][T13255] pimreg: entered allmulticast mode [ 600.263340][T13256] pimreg: left allmulticast mode [ 600.299864][T13264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1951'. [ 600.309135][T13265] netlink: 'syz.2.1951': attribute type 10 has an invalid length. [ 600.506072][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1953'. [ 600.555532][ T5234] Bluetooth: hci8: command tx timeout [ 600.634994][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 600.788978][T13288] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 600.818396][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1958'. [ 600.876182][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 600.893986][T13207] chnl_net:caif_netlink_parms(): no params data found [ 601.036314][T13223] chnl_net:caif_netlink_parms(): no params data found [ 601.196566][ T5234] Bluetooth: hci5: command tx timeout [ 601.219302][T13300] netlink: 'syz.0.1960': attribute type 3 has an invalid length. [ 601.230005][T13297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.244010][T13300] netlink: 105012 bytes leftover after parsing attributes in process `syz.0.1960'. [ 601.272750][T13306] Bluetooth: MGMT ver 1.23 [ 601.315587][T13304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1962'. [ 601.384648][T13207] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.401890][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.409493][T13207] bridge_slave_0: entered allmulticast mode [ 601.417175][T13207] bridge_slave_0: entered promiscuous mode [ 601.507630][T13297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.559114][T13207] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.566727][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.574031][T13207] bridge_slave_1: entered allmulticast mode [ 601.585053][T13207] bridge_slave_1: entered promiscuous mode [ 601.674941][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 601.719042][T13297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.755977][T13223] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.763192][T13223] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.795027][T13223] bridge_slave_0: entered allmulticast mode [ 601.803858][T13223] bridge_slave_0: entered promiscuous mode [ 601.882458][T13207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.914890][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 601.924634][T13207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.939065][T13330] FAULT_INJECTION: forcing a failure. [ 601.939065][T13330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.963195][T13330] CPU: 0 UID: 0 PID: 13330 Comm: syz.2.1967 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 601.973633][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 601.983701][T13330] Call Trace: [ 601.986993][T13330] [ 601.989949][T13330] dump_stack_lvl+0x241/0x360 [ 601.994666][T13330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.999894][T13330] ? __pfx__printk+0x10/0x10 [ 602.004506][T13330] ? __pfx_lock_release+0x10/0x10 [ 602.009559][T13330] should_fail_ex+0x3b0/0x4e0 [ 602.014254][T13330] _copy_from_iter+0x1f6/0x1960 [ 602.019127][T13330] ? __virt_addr_valid+0x183/0x530 [ 602.024252][T13330] ? __pfx_lock_release+0x10/0x10 [ 602.029300][T13330] ? __alloc_skb+0x28f/0x440 [ 602.033914][T13330] ? __pfx__copy_from_iter+0x10/0x10 [ 602.039221][T13330] ? __virt_addr_valid+0x183/0x530 [ 602.044342][T13330] ? __virt_addr_valid+0x183/0x530 [ 602.049464][T13330] ? __virt_addr_valid+0x45f/0x530 [ 602.054592][T13330] ? __check_object_size+0x49c/0x900 [ 602.059900][T13330] netlink_sendmsg+0x73d/0xcb0 [ 602.064697][T13330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.070009][T13330] ? __import_iovec+0x536/0x820 [ 602.074876][T13330] ? aa_sock_msg_perm+0x91/0x160 [ 602.079837][T13330] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 602.085139][T13330] ? security_socket_sendmsg+0x87/0xb0 [ 602.090618][T13330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.095923][T13330] __sock_sendmsg+0x221/0x270 [ 602.100624][T13330] ____sys_sendmsg+0x525/0x7d0 [ 602.105414][T13330] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.110729][T13330] __sys_sendmsg+0x2b0/0x3a0 [ 602.115336][T13330] ? __pfx___sys_sendmsg+0x10/0x10 [ 602.120461][T13330] ? vfs_write+0x7c4/0xc90 [ 602.124936][T13330] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 602.131284][T13330] ? do_syscall_64+0x100/0x230 [ 602.136073][T13330] ? do_syscall_64+0xb6/0x230 [ 602.140772][T13330] do_syscall_64+0xf3/0x230 [ 602.145302][T13330] ? clear_bhb_loop+0x35/0x90 [ 602.149998][T13330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.155905][T13330] RIP: 0033:0x7f37e217def9 [ 602.160332][T13330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.179955][T13330] RSP: 002b:00007f37e3032038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.188388][T13330] RAX: ffffffffffffffda RBX: 00007f37e2335f80 RCX: 00007f37e217def9 [ 602.196372][T13330] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 602.204355][T13330] RBP: 00007f37e3032090 R08: 0000000000000000 R09: 0000000000000000 [ 602.212341][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.220327][T13330] R13: 0000000000000000 R14: 00007f37e2335f80 R15: 00007fffa6b3f078 [ 602.228329][T13330] [ 602.276038][T13297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.295918][T13223] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.310077][T13223] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.317713][T13223] bridge_slave_1: entered allmulticast mode [ 602.328083][T13223] bridge_slave_1: entered promiscuous mode [ 602.459558][T13207] team0: Port device team_slave_0 added [ 602.472041][T13207] team0: Port device team_slave_1 added [ 602.532049][T13223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.562546][T13207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.572339][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.599525][T13207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.636857][ T5234] Bluetooth: hci8: command tx timeout [ 602.710029][T13338] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 602.710997][T11070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.720479][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 602.817522][T13223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.909646][T13207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.925317][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.955122][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 602.988207][T13207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.028794][T11070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.059660][T13297] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.078259][T13223] team0: Port device team_slave_0 added [ 603.098304][T13354] IPv6: sit1: Disabled Multicast RS [ 603.110489][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 603.134001][T13297] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.152002][T13223] team0: Port device team_slave_1 added [ 603.186768][T11070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.224863][T13297] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.276367][ T5234] Bluetooth: hci5: command tx timeout [ 603.286310][T13223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.313638][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.343068][T13223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.379107][T13297] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.437818][T11070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.454985][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'. [ 603.475518][T13223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.495140][T13223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.521690][T13223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.547703][T13207] hsr_slave_0: entered promiscuous mode [ 603.557736][T13207] hsr_slave_1: entered promiscuous mode [ 603.564137][T13365] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1978'. [ 603.711148][T13223] hsr_slave_0: entered promiscuous mode [ 603.747329][T13223] hsr_slave_1: entered promiscuous mode [ 603.754848][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 603.773081][T13223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.789686][T13223] Cannot create hsr debugfs directory [ 603.789744][T13376] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1982'. [ 603.837308][T13378] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1982'. [ 603.837474][T13380] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 603.994897][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.137540][T13393] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 604.146466][T13393] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 604.168094][T11070] bridge_slave_1: left allmulticast mode [ 604.174058][T11070] bridge_slave_1: left promiscuous mode [ 604.183367][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.212103][T11070] bridge_slave_0: left allmulticast mode [ 604.224302][T11070] bridge_slave_0: left promiscuous mode [ 604.236837][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.719649][ T5234] Bluetooth: hci8: command tx timeout [ 604.753398][T11070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.767569][T11070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.778493][T11070] bond0 (unregistering): Released all slaves [ 604.795031][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 604.830233][T13399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.038101][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 605.100469][T13409] bridge1: entered promiscuous mode [ 605.112875][T13409] bridge1: entered allmulticast mode [ 605.130403][T13409] team0: Port device bridge1 added [ 605.136659][T13412] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 605.179845][T13413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1992'. [ 605.357954][ T5247] Bluetooth: hci5: command tx timeout [ 605.462959][T13427] IPv6: Can't replace route, no match found [ 605.515528][T11070] hsr_slave_0: left promiscuous mode [ 605.563830][T11070] hsr_slave_1: left promiscuous mode [ 605.575707][T11070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.596811][T11070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.617152][T11070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.628087][T11070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.659485][T11070] veth1_macvtap: left promiscuous mode [ 605.665383][T11070] veth0_macvtap: left promiscuous mode [ 605.670944][T11070] veth1_vlan: left promiscuous mode [ 605.677335][T11070] veth0_vlan: left promiscuous mode [ 605.834848][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 606.076764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 606.342276][T11070] team0 (unregistering): Port device team_slave_1 removed [ 606.396719][T11070] team0 (unregistering): Port device team_slave_0 removed [ 606.799988][ T5247] Bluetooth: hci8: command tx timeout [ 606.874973][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 607.107219][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2004'. [ 607.117370][T13457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2003'. [ 607.126471][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 607.149152][T13457] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2003'. [ 607.287072][T13457] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 607.633292][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2008'. [ 607.739941][T13478] netlink: 'syz.2.2011': attribute type 5 has an invalid length. [ 607.841402][T13223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 607.871125][T13223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 607.924494][T13223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 607.949180][T13223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.032578][T13207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 608.060697][T13207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 608.092670][T13207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 608.116223][T13207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 608.154915][ C0] net_ratelimit: 1 callbacks suppressed [ 608.154932][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 608.326289][T13494] macsec1: entered promiscuous mode [ 608.354960][T13494] macsec1: entered allmulticast mode [ 608.955041][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 609.195765][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 609.995019][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 610.234907][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 611.035035][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 611.274958][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 612.074962][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 612.314891][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 613.114895][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 613.354925][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 614.154857][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 614.200795][T11075] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 614.394904][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 615.194888][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 615.434970][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 616.235117][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 616.474930][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 617.274866][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 617.514952][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 618.314850][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 618.554954][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 619.354902][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 619.594902][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 620.394848][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 620.634894][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 621.434870][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 621.684968][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 622.474851][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 622.724886][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 623.514861][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 623.754937][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.557840][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 624.804883][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 625.495199][T13494] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 625.502970][T13494] __nla_validate_parse: 4 callbacks suppressed [ 625.502984][T13494] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2014'. [ 625.594876][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 625.834891][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 626.634859][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 626.670906][ T5234] Bluetooth: hci7: command 0x0406 tx timeout [ 626.874937][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 627.674883][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 627.914957][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 628.546074][T13494] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 628.553849][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 628.714889][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 628.964985][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 629.754866][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 629.994890][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 630.794868][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 631.034859][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 631.834872][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 632.084935][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 632.875182][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 633.114863][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 633.914943][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 634.165144][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 634.954991][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 635.204850][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 635.994882][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 636.234966][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 637.034921][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 637.275045][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 638.074883][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 638.314878][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 639.114853][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 639.364851][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.154863][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 640.404873][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.194958][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 641.444853][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 642.005190][ T5247] Bluetooth: hci4: command 0x0406 tx timeout [ 642.234858][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 642.475126][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 643.115682][ T30] INFO: task syz.2.1532:11478 blocked for more than 143 seconds. [ 643.123450][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 643.180905][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.254894][ T30] task:syz.2.1532 state:D stack:25184 pid:11478 tgid:11473 ppid:8672 flags:0x00000006 [ 643.274856][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 643.304864][ T30] Call Trace: [ 643.308183][ T30] [ 643.311132][ T30] __schedule+0x1800/0x4a60 [ 643.355058][ T30] ? __pfx___schedule+0x10/0x10 [ 643.359958][ T30] ? __pfx_lock_release+0x10/0x10 [ 643.394952][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 643.400466][ T30] ? schedule+0x90/0x320 [ 643.404738][ T30] schedule+0x14b/0x320 [ 643.439509][ T30] schedule_preempt_disabled+0x13/0x30 [ 643.474854][ T30] __mutex_lock+0x6a4/0xd70 [ 643.479400][ T30] ? __mutex_lock+0x527/0xd70 [ 643.484101][ T30] ? nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 643.514986][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 643.554871][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 643.559948][ T30] ? genlmsg_put+0x145/0x2e0 [ 643.564558][ T30] nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 643.614849][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 643.620967][ T30] ? __asan_memcpy+0x40/0x70 [ 643.674846][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 643.679571][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 643.724898][ T30] genl_rcv_msg+0xb14/0xec0 [ 643.729445][ T30] ? mark_lock+0x9a/0x350 [ 643.733802][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.785093][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 643.790154][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 643.834834][ T30] ? __pfx___might_resched+0x10/0x10 [ 643.840167][ T30] netlink_rcv_skb+0x1e3/0x430 [ 643.874825][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 643.879886][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 643.914866][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 643.920388][ T30] genl_rcv+0x28/0x40 [ 643.924386][ T30] netlink_unicast+0x7f6/0x990 [ 643.974852][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 643.980182][ T30] ? __virt_addr_valid+0x183/0x530 [ 644.014837][ T30] ? __check_object_size+0x49c/0x900 [ 644.020161][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 644.065286][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 644.070104][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.105811][ T30] ? __import_iovec+0x536/0x820 [ 644.110693][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 644.157898][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 644.163305][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 644.203552][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.235598][ T30] __sock_sendmsg+0x221/0x270 [ 644.240321][ T30] ____sys_sendmsg+0x525/0x7d0 [ 644.264854][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 644.270177][ T30] ? futex_wait+0x285/0x360 [ 644.274704][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 644.314865][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 644.325018][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 644.330207][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 644.374945][ T30] ? do_syscall_64+0x100/0x230 [ 644.379753][ T30] ? do_syscall_64+0xb6/0x230 [ 644.384452][ T30] do_syscall_64+0xf3/0x230 [ 644.464953][ T30] ? clear_bhb_loop+0x35/0x90 [ 644.469689][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.524987][ T30] RIP: 0033:0x7f4a0c37def9 [ 644.529445][ T30] RSP: 002b:00007f4a0bdde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.554896][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 644.604848][ T30] RAX: ffffffffffffffda RBX: 00007f4a0c536058 RCX: 00007f4a0c37def9 [ 644.655193][ T30] RDX: 0000000024000000 RSI: 0000000020000100 RDI: 000000000000000b [ 644.663203][ T30] RBP: 00007f4a0c3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 644.735016][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.743030][ T30] R13: 0000000000000000 R14: 00007f4a0c536058 R15: 00007ffed3754a98 [ 644.794859][ T30] [ 644.805380][ T30] [ 644.805380][ T30] Showing all locks held in the system: [ 644.813124][ T30] 1 lock held by khungtaskd/30: [ 644.860536][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 644.865795][T13223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.905918][ T30] 2 locks held by kworker/1:1/46: [ 644.928292][T13207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.934876][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 644.934996][ T30] #1: ffffc90000b67d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: bpf_trace_run4+0x244/0x590 [ 645.004088][T13207] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.015204][ T30] 2 locks held by getty/4982: SYZFAIL: failed to send rpc fd=3 want=808 sent=0 n=-1 (errno 32: Broken pipe) [ 645.019901][ T30] #0: ffff888034c0a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 645.050621][T13223] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.054839][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 645.068127][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.075289][T11070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.095665][ T30] 1 lock held by syz-executor/5214: [ 645.100884][ T30] 3 locks held by kworker/1:3/5245: [ 645.118137][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.125167][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 645.125292][T11070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.155790][ T30] #1: ffffc90003d2fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 645.214921][ T30] #2: ffff88807f1a0240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 645.228644][T11070] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 645.239440][ T30] 3 locks held by kworker/u8:17/6787: [ 645.277821][ T30] 2 locks held by syz.1.1096/9773: [ 645.282959][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 645.303394][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 645.316460][ T30] 2 locks held by syz.2.1532/11478: [ 645.321677][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 645.332427][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 645.343598][ T30] 1 lock held by syz-executor/11655: [ 645.349709][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 645.360721][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 645.368148][ T30] 2 locks held by syz.4.1608/11786: [ 645.373373][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 645.395447][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_version_get_doit+0x181/0x790 [ 645.414884][ T30] 1 lock held by syz-executor/11994: [ 645.420191][ T30] 2 locks held by syz.0.1863/12905: [ 645.442913][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 645.451645][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 645.462249][ T30] 1 lock held by syz-executor/13040: [ 645.467950][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 645.479066][ T30] [ 645.481507][ T30] ============================================= [ 645.481507][ T30] [ 645.492008][ T30] NMI backtrace for cpu 1 [ 645.496359][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 645.506527][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 645.516587][ T30] Call Trace: [ 645.519860][ T30] [ 645.522778][ T30] dump_stack_lvl+0x241/0x360 [ 645.527457][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.532651][ T30] ? __pfx__printk+0x10/0x10 [ 645.537234][ T30] ? vprintk_emit+0x667/0x7c0 [ 645.541905][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 645.546928][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 645.551863][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 645.557322][ T30] ? _printk+0xd5/0x120 [ 645.561480][ T30] ? __pfx__printk+0x10/0x10 [ 645.566066][ T30] ? __wake_up_klogd+0xcc/0x110 [ 645.570920][ T30] ? __pfx__printk+0x10/0x10 [ 645.575512][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 645.580538][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 645.586517][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 645.592488][ T30] watchdog+0xff4/0x1040 [ 645.594926][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.596717][ T30] ? watchdog+0x1ea/0x1040 [ 645.607956][ T30] ? __pfx_watchdog+0x10/0x10 [ 645.612624][ T30] kthread+0x2f0/0x390 [ 645.616687][ T30] ? __pfx_watchdog+0x10/0x10 [ 645.621355][ T30] ? __pfx_kthread+0x10/0x10 [ 645.625939][ T30] ret_from_fork+0x4b/0x80 [ 645.630346][ T30] ? __pfx_kthread+0x10/0x10 [ 645.634930][ T30] ret_from_fork_asm+0x1a/0x30 [ 645.639699][ T30] [ 645.644398][ T30] Sending NMI from CPU 1 to CPUs 0: [ 645.650210][ C0] NMI backtrace for cpu 0 [ 645.650222][ C0] CPU: 0 UID: 0 PID: 13040 Comm: syz-executor Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 645.650242][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 645.650252][ C0] RIP: 0010:unwind_next_frame+0x1e56/0x2a00 [ 645.650278][ C0] Code: 80 d4 03 00 48 39 03 4c 8b 7c 24 08 0f 84 42 01 00 00 e8 1d 47 52 00 e9 06 fd ff ff e8 13 47 52 00 eb 0c e8 0c 47 52 00 eb 05 05 47 52 00 bf 01 00 00 00 e8 7b bb 21 00 65 8b 1d cc 8e c2 7e [ 645.650291][ C0] RSP: 0018:ffffc90004107468 EFLAGS: 00000202 [ 645.650307][ C0] RAX: 0000000000000000 RBX: ffffc90004108000 RCX: ffff888027855a00 [ 645.650319][ C0] RDX: ffff888027855a00 RSI: ffffc90004107878 RDI: ffffc900041078f8 [ 645.650332][ C0] RBP: ffffc90004107540 R08: ffffffff81414545 R09: ffffffff814140bf [ 645.650344][ C0] R10: 0000000000000003 R11: ffff888027855a00 R12: ffffc900041078f8 [ 645.650356][ C0] R13: dffffc0000000000 R14: ffffc90004100000 R15: ffffc90004107900 [ 645.650368][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 645.650388][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 645.650400][ C0] CR2: 0000561b5ccc7058 CR3: 000000000e734000 CR4: 00000000003506f0 [ 645.650414][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 645.650425][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 645.650436][ C0] Call Trace: [ 645.650442][ C0] [ 645.650449][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 645.650467][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 645.650490][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 645.650507][ C0] ? nmi_handle+0x2a/0x5a0 [ 645.650532][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 645.650551][ C0] ? nmi_handle+0x14f/0x5a0 [ 645.650566][ C0] ? nmi_handle+0x2a/0x5a0 [ 645.650582][ C0] ? unwind_next_frame+0x1e56/0x2a00 [ 645.650603][ C0] ? default_do_nmi+0x63/0x160 [ 645.650621][ C0] ? exc_nmi+0x123/0x1f0 [ 645.650638][ C0] ? end_repeat_nmi+0xf/0x53 [ 645.650660][ C0] ? unwind_next_frame+0x196f/0x2a00 [ 645.650679][ C0] ? unwind_next_frame+0x1df5/0x2a00 [ 645.650701][ C0] ? unwind_next_frame+0x1e56/0x2a00 [ 645.650722][ C0] ? unwind_next_frame+0x1e56/0x2a00 [ 645.650743][ C0] ? unwind_next_frame+0x1e56/0x2a00 [ 645.650764][ C0] [ 645.650770][ C0] [ 645.650782][ C0] ? free_unref_page+0xd22/0xea0 [ 645.650803][ C0] ? free_unref_page+0xd22/0xea0 [ 645.650820][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 645.650840][ C0] arch_stack_walk+0x151/0x1b0 [ 645.650859][ C0] ? vfree+0x186/0x2e0 [ 645.650882][ C0] stack_trace_save+0x118/0x1d0 [ 645.650902][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 645.650927][ C0] save_stack+0xfb/0x1f0 [ 645.650948][ C0] ? __pfx_save_stack+0x10/0x10 [ 645.650965][ C0] ? free_unref_page+0xd22/0xea0 [ 645.650991][ C0] ? page_ext_get+0x20/0x2a0 [ 645.651012][ C0] __reset_page_owner+0x76/0x430 [ 645.651036][ C0] free_unref_page+0xd22/0xea0 [ 645.651060][ C0] vfree+0x186/0x2e0 [ 645.651083][ C0] kcov_close+0x2b/0x50 [ 645.651102][ C0] ? __pfx_kcov_close+0x10/0x10 [ 645.651120][ C0] __fput+0x24a/0x8a0 [ 645.651147][ C0] task_work_run+0x24f/0x310 [ 645.651166][ C0] ? __pfx_task_work_run+0x10/0x10 [ 645.651184][ C0] ? do_exit+0xa2a/0x27f0 [ 645.651198][ C0] ? kmem_cache_free+0x145/0x350 [ 645.651217][ C0] do_exit+0xa2f/0x27f0 [ 645.651237][ C0] ? __pfx_do_exit+0x10/0x10 [ 645.651252][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 645.651272][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 645.651293][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 645.651312][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 645.651334][ C0] do_group_exit+0x207/0x2c0 [ 645.651349][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 645.651367][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 645.651393][ C0] get_signal+0x16a1/0x1740 [ 645.651418][ C0] ? __pfx_vfs_read+0x10/0x10 [ 645.651433][ C0] ? __pfx_get_signal+0x10/0x10 [ 645.651457][ C0] arch_do_signal_or_restart+0x96/0x860 [ 645.651478][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 645.651497][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 645.651524][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 645.651546][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 645.651568][ C0] do_syscall_64+0x100/0x230 [ 645.651589][ C0] ? clear_bhb_loop+0x35/0x90 [ 645.651608][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.651625][ C0] RIP: 0033:0x7f8b0417c93c [ 645.651638][ C0] Code: Unable to access opcode bytes at 0x7f8b0417c912. [ 645.651646][ C0] RSP: 002b:00007ffe0f8ce970 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.651662][ C0] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f8b0417c93c [ 645.651674][ C0] RDX: 0000000000000028 RSI: 00007ffe0f8cea20 RDI: 00000000000000f9 [ 645.651685][ C0] RBP: 00007ffe0f8ce9cc R08: 0000000000000000 R09: 0079746972756365 [ 645.651697][ C0] R10: 00007f8b043087e0 R11: 0000000000000246 R12: 0000000000000064 [ 645.651708][ C0] R13: 000000000009d6bd R14: 000000000009450b R15: 00007ffe0f8cea20 [ 645.651729][ C0] [ 646.275397][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 646.282277][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 646.292443][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 646.302505][ T30] Call Trace: [ 646.305775][ T30] [ 646.308693][ T30] dump_stack_lvl+0x241/0x360 [ 646.313368][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.318557][ T30] ? __pfx__printk+0x10/0x10 [ 646.323140][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 646.329115][ T30] ? vscnprintf+0x5d/0x90 [ 646.333433][ T30] panic+0x349/0x860 [ 646.337325][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 646.343472][ T30] ? __pfx_panic+0x10/0x10 [ 646.347888][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 646.353257][ T30] ? __irq_work_queue_local+0x137/0x410 [ 646.358806][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 646.364169][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 646.370314][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 646.376459][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 646.382602][ T30] watchdog+0x1033/0x1040 [ 646.386926][ T30] ? watchdog+0x1ea/0x1040 [ 646.391341][ T30] ? __pfx_watchdog+0x10/0x10 [ 646.396011][ T30] kthread+0x2f0/0x390 [ 646.400078][ T30] ? __pfx_watchdog+0x10/0x10 [ 646.404746][ T30] ? __pfx_kthread+0x10/0x10 [ 646.409339][ T30] ret_from_fork+0x4b/0x80 [ 646.413745][ T30] ? __pfx_kthread+0x10/0x10 [ 646.418326][ T30] ret_from_fork_asm+0x1a/0x30 [ 646.423092][ T30] [ 646.426296][ T30] Kernel Offset: disabled [ 646.430611][ T30] Rebooting in 86400 seconds..