last executing test programs: 1m4.302612829s ago: executing program 1 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) r1 = socket(0x40000000015, 0x6, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10) pipe(0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x24) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet(r1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48) connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4) 53.710344033s ago: executing program 1 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) r1 = socket(0x40000000015, 0x6, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10) pipe(0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x24) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet(r1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48) connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4) 41.841638248s ago: executing program 1 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) r1 = socket(0x40000000015, 0x6, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10) pipe(0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x24) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet(r1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48) connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4) 27.887828841s ago: executing program 1 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) r1 = socket(0x40000000015, 0x6, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10) pipe(0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x24) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet(r1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48) connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4) 15.423596786s ago: executing program 1 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) r1 = socket(0x40000000015, 0x6, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10) pipe(0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x24) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet(r1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48) connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4) 6.859450049s ago: executing program 2 (id=2288): syz_emit_ethernet(0x1106, &(0x7f0000002580)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10d0, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@srh={0x3b, 0x4, 0x4, 0x2, 0x1, 0x8, 0xe, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @routing={0x1d, 0x4, 0x1, 0x8, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x5e, 0x0, 0x2, 0x80}, @routing={0x88, 0x8, 0x0, 0xe, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}, @fragment={0x29, 0x0, 0xf1, 0x1, 0x0, 0x6, 0x67}, @fragment={0x5c, 0x0, 0x5, 0x1, 0x0, 0x0, 0x66}, @fragment={0x89, 0x0, 0x6, 0x0, 0x0, 0x11, 0x64}, @dstopts={0x33, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x400, "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"}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0xe8, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffff00, 0x10, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="2a158333a072", {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x9, 0xff00, 0xe, 0xba, 0x101, 'batadv_slave_0\x00', 'bridge0\x00', {}, {}, 0x0, 0x2}, 0xc0, 0x100, 0x0, {0x0, 0x1e03}}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2c3bb27d9d5b379b853c7744b526e29755ec721db80fdb00f95f8a608b8d"}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x404, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48845) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18490000fbffffff0000000000000000184b004ce686e25b5fdf490000000000950000000000000036323ffc2345f4b7568cdd194e67f26f21b4e9dcf5fd4c948db6d316aa8723acfe3462f1dd3ab8b78333b6b21676b8b549443519e188f759bd51d2aeee81a16090bdc26a3c713dd5e5394cfac2b1bf5df8d45c2b1f99c4f51ed612f0c87905b9f3099e8399c65bbfa506c165f2c4ce5d34ccebae489c1eca54c8a168c6496207f3a07837661c1748c824c8fb96103a3b7fe6e2f2f79a527add7e558b22977d000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree_skb\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd60e0ffff04128700631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r6], 0x398}}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a80)=@base={0x20, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000096c0), r13) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)={0x3c, r10, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048834}, 0x8040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000000000001da00000000000009500002000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg0\x00'}) 6.814423334s ago: executing program 1 (id=1135): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160005", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x1, 0x0, @loopback, 0xfffffffd}, 0x18) r1 = socket(0x40000000015, 0x6, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x7, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000015c0)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x1}, 0x1, 0x9, 0x7, 0x401, 0xc, 'syz0\x00', "d754e14a27f0e1250c21e059a0fff1866c050127ff60f0b7ddfdb850db68e19d", "22d6be71170be5c7b27f4ef512c1d8181f98a75e379bc72ac53198a89e9ea7b3", [{0x8e, 0x9, {0x1, 0x4}}, {0xf0, 0x10, {0x0, 0x3}}, {0x8, 0x2, {0x1, 0x3}}, {0xa, 0xfff7, {0x1, 0x5}}, {0x3, 0x8000, {0xe3c9e7f91ce89a2b}}, {0x10, 0x1, {0x3, 0xfffffffb}}, {0x78a0, 0xf800, {0x3, 0x5}}, {0x5, 0xf, {0x3, 0x8}}, {0x0, 0x450, {0x3, 0x101}}, {0xcc35, 0x0, {0x3, 0x6}}, {0x9, 0x5, {0x1, 0x4}}, {0x7f, 0x3, {0x0, 0xffffffff}}, {0x4, 0x6b, {0x2, 0xfffffff5}}, {0x3, 0x8001, {0x0, 0x2}}, {0x9, 0xfff8, {0x0, 0xc}}, {0x8, 0x1, {0x3, 0x6}}, {0x2, 0x5, {0x3, 0x2}}, {0xffff, 0xff, {0x3, 0x7}}, {0x1, 0x1000, {0x3, 0x8000}}, {0x98b, 0x3, {0x0, 0x4}}, {0x0, 0x7ff, {0x1}}, {0x7, 0xfff, {0x1, 0xc}}, {0xa43, 0x3, {0x1, 0xfffffff5}}, {0x286, 0x8, {0x0, 0x3}}, {0x7, 0xb2b, {0x0, 0xfff}}, {0xd, 0xfffd, {0x2, 0x9}}, {0x101, 0x6, {0x3, 0x3}}, {0x0, 0x5, {0x1, 0x93}}, {0x4f8, 0x1, {0x2}}, {0x8, 0x7, {0x2, 0x2}}, {0x2, 0x401, {0x3, 0x7}}, {0x6, 0xd7, {0x2, 0x200}}, {0x6, 0x1, {0x1, 0x4}}, {0xe, 0x3, {0x1, 0xffffffff}}, {0x1, 0x7, {0x3, 0x8}}, {0x6, 0x3, {0x2, 0x2}}, {0x6, 0x9, {0x2, 0xc5}}, {0x80, 0x6, {0x3, 0x2}}, {0x3, 0x8, {0x3, 0x8000}}, {0x3, 0x4c5, {0x3, 0xff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x10) pipe(0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x24) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet(r1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @null, @bcast, @rose, @null, @rose]}, &(0x7f0000000140)=0x48) connect$netrom(r6, &(0x7f0000000400)={{0x3, @bcast}, [@null, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x220, 0x98, 0x0, 0x130, 0x98, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f00000001c0), {[{{@ip={@local, @loopback, 0xffffffff, 0x0, 'team_slave_1\x00', 'team_slave_0\x00', {0xff}, {}, 0x5c, 0x2, 0x60}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'wlan0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x16, 0x3, 0x4}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xf8}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 'syzkaller1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x0, 0xd10cbbeaa814fe04}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x52, 0x421, 0x0, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0xd, 0x3}}}, {{@uncond, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x1]}}, @common=@ttl={{0x28}, {0x0, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5a1, 0xffffffff, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@can={0xc, {{0x2, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "c2d8513b27599400"}}}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)='%ps \x00'}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)="67d8902400aa303e97380e90231bdb0300000000000000cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26dade9f49e5e7c9538277f1067ed4baeb25b18153561d64b50276bb68e6b524cdc052ee7ab1e1e5637ee49b3520642b014928834b11999652011a349cfa49e4e399941f8aa24511bc5685dbdc5c4364a2c3f477ec5f3fea9b375c9f9441eeeb6e6813c50fffd33f88c75b2e21eb479f5612861179fd82e9d61546b1893c58e", 0xd8}, {&(0x7f0000000900)="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", 0x31d}, {&(0x7f0000000680)="a12f50812c89df0cdffa97f637075748c8325c3c5e70e8662d93b18fc8fc92b91cf310793dc10b5ed503ac860eb8ba910d2ef52781657bb6c20f32eb8f7231565a349316f4c38892cd0af115261eb1899b819a2e918952a50de9bae8d5fb116b050422de0bc7aa22107166f2a6d5f33e7519df4b43581cb31bbf02ecac9f2c1277c1b2ecd5118ce4f61bc7a9", 0x8c}], 0x3, 0x0, 0x0, 0x80}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000002c0), 0x4) 5.194321553s ago: executing program 2 (id=2289): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000300)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"8c3ef01be86258108b331b07f91efab2", r0, r0, {0x6, 0x9044}, {0x1, 0x1}, 0x7fff, [0x3, 0x5, 0x9, 0x9, 0x20000000000007, 0x5, 0x10, 0xe5, 0x1, 0xfffffffffffffffe, 0x8008, 0xfffffffffffffffc, 0x2, 0x4, 0x2, 0x5]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000180)={@private1}, 0x14) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000ffdbdf250d00000008000600", @ANYRES32=0x0, @ANYBLOB="050033000000000005002d0000000000050035000600000005002e0001000000050035000900000008000300", @ANYRES32=r8, @ANYBLOB="06002800010069d2afe7d7a169000008003a000800000066cc98010b00cc5d356fc116a71309f209d9f7fe472806f625"], 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB="010120"], 0xc) 4.537649239s ago: executing program 2 (id=2295): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xa7, 0xe8}, {0x28}}}}, 0xfc54) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000440)={0x3, &(0x7f0000000000)=[{0x1d, 0x0, 0x1}, {}, {0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="24000300000000"], 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x124, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004841}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="680000002d000100000002000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000480012800e00010069"], 0x68}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000300), &(0x7f0000000340)='%-5lx \x00'}, 0x20) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r10, 0x89f9, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @empty, 0x16, 0x1d}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, r11, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048041}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x2e, 0x61, 0x1e]}}, 0x0, 0x29, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) 3.88767132s ago: executing program 2 (id=2302): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$alg(0x26, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x12, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x80000000}]}}]}, 0x40}}, 0x44000) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) unshare(0x2040400) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ppoll(&(0x7f0000000480)=[{r2, 0x4000}, {r0}, {r7}], 0x3, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_USERDATA={0x0, 0xc, "592055a32b528d509fdb5804ba0c68a51770931b6152a4895658e31dd959419013b644beae8ca1abc3784faed49351bd985b829fadc007773c3d53558d44558b3bea58f51385"}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x20000040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r10, &(0x7f0000000a40)=[{&(0x7f00000007c0)='T', 0x1}], 0x1) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.942528982s ago: executing program 2 (id=2311): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000001a80)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000017c0)=""/4093, 0xffd}], 0x1}, 0xd619}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0x2b, 0x3, 0x0, 0x0, "95b7beb13cae82ef69e445027ca8bd5f4cd47728b39235471b088d2d97c79abb0bc91566a2a7f97891c160a7a59e2ca403faf37e61a7668fab0f40fa48c0f0fd"}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x40080) 1.799854145s ago: executing program 4 (id=2316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000400002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c410280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1.799485597s ago: executing program 2 (id=2317): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x4, 0x4, 0x0, 0x8a}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x2a1}], 0x1}}], 0x1, 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x8, 0x6, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x40, 0x8000}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="240000001bf0565c19fa97a5740000000a37380070607700b3386d45af8ab594f10aa19846c342bc3adcb4c16c829a286931b21ae808d5280ec0f3a5ea4d867e58d6e40e35180c32a2c58e0c973a1bb189ee9b630df37f15e19f1a0d0ab71523cd1626471b77389b366085e06736a9fdaf38cb5c2a", @ANYRES32=0x0, @ANYBLOB="030000000800020004000000"], 0x24}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="e9eb247ffbe5be6caf9ac8c119e8a2b2b6a2cbe0b6f9a2a3f3850eb24418daee017a1086eb0b7553199b253ae79aa36ac30dbc126ddb345c6b65cbec71d34f04632c682947d945fafdf5d8b38059a7be185717160cba5a040f2c88373520befa19a9f4929cb704c1122ec8219de568c279a666c5c0bbbbfbb1e642f6c39c4dbbc1c2bdfc8790f5fed4bf20c3d96256600f", @ANYBLOB="67ededb97deea49c97ae0a5b6e613665bd80cd3ce0d690a0cef109ed09fc51ab1ea5f72e92d027810badec52d84453de1846786b70ccbeb043748b3b45065919a057818d18a01f7d4c7c3a7874733fe06f781e90858b5ba7dd640d7e0d743f3024030b3e123373bc8c40f619645b4b40e8683e9cd614d2d60a86ce34c5680b387f99e692c2d52664c89699721ab23e38ed26f437e67a6a82abf9c546c97dc7e29c2d5abca5f7688d44c7960515e3627ef6748a6d6cacf9d4c551452f7d78b1f38f7125111eebdcc08d26f62833d1eeec09c1059f6a02926cc3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r2, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0xfffffffffffffc62) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000004000000000000000000000000000000fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000700181100004b76785aefa34f7612e005e8c39ac1cf33efb3ff785ae7ccb751119a2d2f7fb2c45d089d4b910537fa5d855204c12a74e3513e6d6a21b6b9eb8e497e854b2284b0450548a46f4669ebf0463ea0ebe64055679db8f908f1bb469db8ed93da382c1de75706f0fcfd", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001208000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r8, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 1.797258372s ago: executing program 0 (id=2318): writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000140)="f4339bc23dab73e5dbab037672b419271fda3770b06ecedd11", 0x19}, {&(0x7f00000002c0)="628a31b6d7ba4817f9e7171f59f6ba02d142ac1df6b7ee697448e1d1df8e6f1bad0f1ef1889722dfbe78cc1a58a59f2d3881", 0x32}, {&(0x7f0000000400)="e66517c292238b5473", 0x9}, {&(0x7f0000000640)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f44f65623f08281f6e880f1349f8926e11f238e91ce034152d363e018fa2d2176994818c3c7e6e78cab5bbba1f2", 0x53}], 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="700000001400010000000000fbdbdf25e00000010000000000000000000000000000000000000000000000000000000100000000000700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00080004000800000000000c0015"], 0x70}}, 0x4004040) 1.649971694s ago: executing program 0 (id=2320): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000100001020000000000000000730115000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 1.470410273s ago: executing program 0 (id=2322): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x20}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x1, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1114a}}, 0x20}, 0x1, 0x0, 0x0, 0x7e63def3f98af9a3}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000500)="fc484e55021886bb", 0x8}], 0x1}}], 0x1, 0x0) 1.277215733s ago: executing program 0 (id=2323): syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) 1.199799024s ago: executing program 4 (id=2324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x158, 0x150, 0x150, 0x0, 0xf8010000, 0x270, 0x238, 0x238, 0x270, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0xb66, 0x0, 0x0, 0x9}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d43886e34ad04218b895e9936aa46525113c03de9cf73687ca94feda35eefade1197a320d00"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x0, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2000008}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000480)=')', 0x1}], 0x1}}], 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r7, 0x10005}, &(0x7f0000000100)=0x8) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000380)={0x4, 0xc, 0x6, 0xb, 0xfc, 0x6, 0x6, 0xff, 0x1, 0x4e, 0xf, 0x2, 0xd8, 0x6}, 0xe) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.146110414s ago: executing program 0 (id=2325): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="3b000000010001", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="aeaa000000000000711011000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02b", 0x425}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg$unix(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000100, 0x0) 1.119758751s ago: executing program 3 (id=2326): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0xca231000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84000000, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0xf0, 0x1c0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xc0000000, 0xfffffff2, 0x49, 0x7, 0xb, 0x2, 0xfffffff5, 0x3]}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x0, 0x1, 0x2, 0x4], 0x4, 0x5}, {0x2, [0x5, 0x2, 0x1, 0x1, 0x2], 0x23, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x2, 0x9, 0x6, 0x3, 0x7], 0x6, 0x7}, {0x2, [0x4, 0x2, 0x3, 0x0, 0x2, 0x1], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 960.525725ms ago: executing program 4 (id=2327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x14, r4, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000780)=0x3, 0x4) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="737d3ca3", @ANYRES16=r4, @ANYBLOB="080027bd7000fedbdf2503000000080001000300000008000200020000000800010002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) write$cgroup_int(r1, &(0x7f0000000200), 0x48400) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="f4339bc23dab73e5dbab037672b419271fda3770b06ecedd11", 0x19}, {&(0x7f00000002c0)="628a31b6d7ba4817f9e7171f59f6ba02d142ac1df6b7ee697448e1d1df8e6f1bad0f1ef1889722dfbe78cc1a58a59f2d3881ae40ded75e48ec1d1782df4cdfbf37cbc45995b26e7abb0cd849ea66e80fba985a82232c84", 0x57}, {&(0x7f0000000400)="e66517c292238b5473a56969563d87f550c05d72253a40a38d96e51d3de1226c1776c1e45c5dd2cfbcec83", 0x2b}, {&(0x7f0000000480)="57c761f654db5f3098ae64ce385ffcfed0ef110d93cbe7fa1f4f2327602a291192f5fe9863d527e303153f68b04c18db5a48756a583789e9895746c12b9d4e1224c9e17563edff39dd0b7d73fbb4b5a64e7b6db65b84b82f6c938205b2d8560f0da2f775e85175f74ed70033681e96d30fe8a7c2866c59e8f2e2d253ee55115be95aef4a8688989faa6f27db0ea71914ea8150aa35afc828c97af0ec5cc718ca2a58b335388cfebd804d367af99611817fed2c6b73", 0xb5}, {&(0x7f0000001680)="50eab642bf632c5cde2c2827b6b0f95a7e02e4c01968105ea31a5397f228b4aeb94841e6689f44f65623f08281f6e880f1349f8926e11f238e91ce034152d363e018fa2d2176994818c3c7e6e78cab5bbba1f26c80457ceacf706c54e5b1f431a8df03f7376096b86b8ac804d9dde5f9eca2dc99bf2cb9c6ebf5a6c9db3db0d4a2e15002854bcb86bb89ea0e5511db578021e8cd35ff5d1f46a24dd14e248fc171e0d094a27510d418a5b467230f11b0a224362e6e9b3331f22ad5c10fc6e21c2297d9a21ce00af6ea39b66254f66189929b12973020c175bafd2d", 0xdb}], 0x5) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000100)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018000280140003"], 0x50}}, 0x0) sendfile(r7, r0, 0x0, 0xfacf) 879.890296ms ago: executing program 3 (id=2328): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000062dced683b1fddab23042448bcdd077557518252f468782ebcb147f404eb97d976545510b732a4a3d6e5fb5e34e853f6b585597979a7cf467a57b8d49b92d5f288676c94bfe8acceaf903916faef1d02", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) unshare(0x24020400) r4 = socket(0x2c, 0x2, 0x83) shutdown(r0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61129000000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc56357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9cc7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dcac2563e1c1e7624cc3b88b330ad416c4c1d8c60589b6045a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843a40000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000540)=ANY=[@ANYBLOB="059fc0619f0b0180c200000081003c00000c010000e008020000691073e9e324feb62b9c8ef7214ca375457daff488962227cbf5bc07ab4be680a30961be783991d89f0bb8ed9f6d68d70e04029035f92a4791d02bfe7db4b009a4b30fa0e9f143b3df67b0402471b74347a7fdcc4320c7f3b528ae3480c0c067c1a813e1c3f34c867a1eb6c0852c5f438b52cb"], &(0x7f0000000380)={0x0, 0x2, [0x106, 0xd2c, 0xd04, 0xbd2]}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022abdfedbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x880d8) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYRES8], &(0x7f0000000100)=0x29) accept(r6, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="e8fb0face9757beef5503c8b8900b6232781b893", @ANYRES32=r0, @ANYRES64=r4, @ANYRESDEC, @ANYRES64=r5, @ANYRES64=r3], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r11, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="2400000000000000000000000700000001071336ac1414aaac1414aaac1e080100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14141d"], 0x48}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000000c0)='syzkaller0\x00', 0x10) unshare(0x22020600) 665.055343ms ago: executing program 4 (id=2329): syz_emit_ethernet(0x1106, &(0x7f0000002580)={@random="5b37182347bc", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10d0, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@srh={0x3b, 0x4, 0x4, 0x2, 0x1, 0x8, 0xe, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00']}, @routing={0x1d, 0x4, 0x1, 0x8, 0x0, [@local, @private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x5e, 0x0, 0x2, 0x80}, @routing={0x88, 0x8, 0x0, 0xe, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2]}, @fragment={0x29, 0x0, 0xf1, 0x1, 0x0, 0x6, 0x67}, @fragment={0x5c, 0x0, 0x5, 0x1, 0x0, 0x0, 0x66}, @fragment={0x89, 0x0, 0x6, 0x0, 0x0, 0x11, 0x64}, @dstopts={0x33, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x400, "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"}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x145000, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c0, 0x0, 0xe8, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xffffff00, 0x10, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@random="2a158333a072", {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x9, 0xff00, 0xe, 0xba, 0x101, 'batadv_slave_0\x00', 'bridge0\x00', {}, {}, 0x0, 0x2}, 0xc0, 0x100, 0x0, {0x0, 0x1e03}}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2c3bb27d9d5b379b853c7744b526e29755ec721db80fdb00f95f8a608b8d"}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r2, 0x404, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48845) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18490000fbffffff0000000000000000184b004ce686e25b5fdf490000000000950000000000000036323ffc2345f4b7568cdd194e67f26f21b4e9dcf5fd4c948db6d316aa8723acfe3462f1dd3ab8b78333b6b21676b8b549443519e188f759bd51d2aeee81a16090bdc26a3c713dd5e5394cfac2b1bf5df8d45c2b1f99c4f51ed612f0c87905b9f3099e8399c65bbfa506c165f2c4ce5d34ccebae489c1eca54c8a168c6496207f3a07837661c1748c824c8fb96103a3b7fe6e2f2f79a527add7e558b22977d000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree_skb\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005e9a9ed347ce167c04cefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5282db0bdc0774c5b60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e91b4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e93f67d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd16aac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313acf5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ef57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633b4d987591ec3db582cef55c98a59a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee705caa751f9facc4af0b8282aa46f34fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000ade90000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656cc2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef062cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd6eac114482b619fc575aa0dd2777e881e29a854380e0f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eedffffa63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b55891f170849c8cd5e942c0652127e7f6baa0d3277f1c33d1a55953dda6b3ef332adb49e3537829be258ddee56c8ab709d7c3f9107ba11bf7f608bcfec730eb13c9104851e6e859cc0568ff072192c49b42f1a4156372d0ed5caad2be9cc1d7f47faaca0890f196025cfd3a2ecf86106bb069a75f5c730caf55c473039c46925bc82e0e578cc2a2ba6f8be4fea86a9bb18a5164ce8321f585d537cf10cdcc440dd2347b5e93be7686938fb8ba2446000000000000000000003002c069b0854d2db0a0c762b1f88c3f687e6aa5bacf086403f4cee2847ab61ad3d230e49fd7942e374217738ad4a6d94f2af2ba7486514a7131357369523e85ee52a6148c0f8fe1af9334567f2123445eb722dd5b7094a2848a281f495acbbcd2ef25eda26333df5db4ff0e7445ebd3013ac9cfc2cdb5bacafde79b40baa19cc2eb0e93c6a2d8877149aa5ed8fe477a51b8d647f9e83d4a407635696cc48d821023080c40b66e5aba44dcd95781075a42155c821a0c41c324532c1abccb4ae1dcec2e3cec396c49ccacc787f795e03cc908a6defc7073c3452a8362951bb4c7c42a40321e85708aaa3283c79fbf7d8055bd9b740c616ec70"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x1}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r6], 0x398}}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a80)=@base={0x20, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000009700)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)={0x3c, r10, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048834}, 0x8040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x4, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70000000000000000001da00000000000009500002000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x65) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000500)={'wg0\x00'}) 635.459554ms ago: executing program 3 (id=2330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010000304000c04dd014cde872309d200", @ANYRES32=r1, @ANYBLOB="e8bf010004a701002c00128009000100626f6e64000000001c000280060018"], 0x4c}, 0x1, 0x200000000000000, 0x0, 0x11}, 0x4000044) 387.978186ms ago: executing program 3 (id=2331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001cb4d0d6850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 387.576033ms ago: executing program 4 (id=2332): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) 323.720885ms ago: executing program 4 (id=2333): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x80) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x400, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) 226.01021ms ago: executing program 3 (id=2334): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640a", 0x3}], 0x1}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0xf5) 140.827046ms ago: executing program 0 (id=2335): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000006800010000000000000000000a0000000000000008000500", @ANYRES32=0x0, @ANYBLOB="040001"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/17, 0x11}, 0x2}], 0x1, 0x10002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x24}}, 0x40) socket(0x1e, 0x4, 0x0) (async) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon, @chandef_params, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd29}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd29}, 0x1c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x4048095) recvfrom(r0, &(0x7f0000000080)=""/4, 0x4, 0x40000000, &(0x7f0000000200)=@generic={0x26, "4a8a572ee6818b6258436bc98c14d3a761e3c0c5c1cab15586f21473171d366ee6a10dd6bc1211819cc473c5f582807caab74159dec664bc0e78365af7a6aa762ff54bf74d7363bd4943be141d5874d4e2b497f5b0abc33f22c118a5bd8f5e60cd004f9f2cac350a201ba316a529bbba959163d9aecf750077f1130f10e3"}, 0x80) (async) recvfrom(r0, &(0x7f0000000080)=""/4, 0x4, 0x40000000, &(0x7f0000000200)=@generic={0x26, "4a8a572ee6818b6258436bc98c14d3a761e3c0c5c1cab15586f21473171d366ee6a10dd6bc1211819cc473c5f582807caab74159dec664bc0e78365af7a6aa762ff54bf74d7363bd4943be141d5874d4e2b497f5b0abc33f22c118a5bd8f5e60cd004f9f2cac350a201ba316a529bbba959163d9aecf750077f1130f10e3"}, 0x80) r11 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r11, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$inet6_int(r11, 0x29, 0x24, &(0x7f0000000040)=0xe6fb, 0x4) (async) setsockopt$inet6_int(r11, 0x29, 0x24, &(0x7f0000000040)=0xe6fb, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r11, 0x29, 0x37, &(0x7f00000006c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 0s ago: executing program 3 (id=2336): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="27050200340f14000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4000000010000570000000600000000000012805d918fc0830900"/79, 0x4f}, {&(0x7f0000002180)="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", 0xed6}, {&(0x7f0000000640)="bce217fab8bcdfe60af39e03ece24b1da76dc86238db4d8f37ee2b3eaf96df0ab781b3e32be9e2dcef3bb379cc43ac544a987f896e54", 0x36}], 0x3}, 0x4000) kernel console output (not intermixed with test programs): 3] tap0: linktype set to 280 [ 276.001457][T10827] veth0_macvtap: entered promiscuous mode [ 276.024840][T10827] veth1_macvtap: entered promiscuous mode [ 276.138157][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.159925][T11066] lo: entered allmulticast mode [ 276.167053][T11066] tunl0: entered allmulticast mode [ 276.183399][T11066] gre0: entered allmulticast mode [ 276.195495][T11066] gretap0: entered allmulticast mode [ 276.210457][T11066] erspan0: entered allmulticast mode [ 276.221688][T11066] ip_vti0: entered allmulticast mode [ 276.234013][T11066] ip6_vti0: entered allmulticast mode [ 276.246389][T11066] sit0: entered allmulticast mode [ 276.282614][T11066] ip6tnl0: entered allmulticast mode [ 276.288258][T11066] ip6gre0: entered allmulticast mode [ 276.313487][T11066] bridge0: entered allmulticast mode [ 276.329224][T11066] vcan0: entered allmulticast mode [ 276.334528][T11066] bond0: entered allmulticast mode [ 276.349048][T11066] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 276.356627][T11066] team0: entered allmulticast mode [ 276.364461][T11066] dummy0: entered allmulticast mode [ 276.370034][T11066] nlmon0: entered allmulticast mode [ 276.375476][T11066] caif0: entered allmulticast mode [ 276.383225][T11066] vxcan0: entered allmulticast mode [ 276.388570][T11066] vxcan1: entered allmulticast mode [ 276.394003][T11066] veth0: entered allmulticast mode [ 276.401755][T11066] veth1: entered allmulticast mode [ 276.406979][T11066] wg0: entered allmulticast mode [ 276.413862][T11066] wg1: entered allmulticast mode [ 276.419160][T11066] wg2: entered allmulticast mode [ 276.424213][T11066] veth0_to_bridge: entered allmulticast mode [ 276.430522][T11066] bridge_slave_0: entered allmulticast mode [ 276.436645][T11066] veth1_to_bridge: entered allmulticast mode [ 276.442828][T11066] bridge_slave_1: entered allmulticast mode [ 276.449453][T11066] veth0_to_bond: entered allmulticast mode [ 276.455522][T11066] bond_slave_0: entered allmulticast mode [ 276.461504][T11066] veth1_to_bond: entered allmulticast mode [ 276.467510][T11066] bond_slave_1: entered allmulticast mode [ 276.473474][T11066] veth0_to_team: entered allmulticast mode [ 276.479564][T11066] team_slave_0: entered allmulticast mode [ 276.485410][T11066] veth1_to_team: entered allmulticast mode [ 276.491705][T11066] team_slave_1: entered allmulticast mode [ 276.497605][T11066] veth0_to_batadv: entered allmulticast mode [ 276.503947][T11066] batadv_slave_0: entered allmulticast mode [ 276.510322][T11066] veth1_to_batadv: entered allmulticast mode [ 276.516460][T11066] batadv_slave_1: entered allmulticast mode [ 276.523690][T11066] xfrm0: entered allmulticast mode [ 276.529568][T11066] veth0_to_hsr: entered allmulticast mode [ 276.535433][T11066] hsr_slave_0: entered allmulticast mode [ 276.541385][T11066] veth1_to_hsr: entered allmulticast mode [ 276.547241][T11066] hsr_slave_1: entered allmulticast mode [ 276.553635][T11066] hsr0: entered allmulticast mode [ 276.558778][T11066] geneve0: entered allmulticast mode [ 276.564386][T11066] geneve1: entered allmulticast mode [ 276.573212][T11066] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 276.580835][T11066] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 276.588411][T11066] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 276.596348][T11066] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 276.608516][T11066] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 276.618044][T11066] syztnl1: entered allmulticast mode [ 276.632871][T11066] ip6erspan0: left promiscuous mode [ 276.638158][T11066] ip6erspan0: entered allmulticast mode [ 276.650962][T11066] vxlan0: entered allmulticast mode [ 276.656780][T11066] veth2: entered allmulticast mode [ 276.662363][T11066] veth3: entered allmulticast mode [ 276.667654][T11066] bridge1: entered allmulticast mode [ 276.673485][T11066] ip6gre1: entered allmulticast mode [ 276.681759][T11066] bridge2: entered allmulticast mode [ 276.690778][T11066] ip6gretap1: entered allmulticast mode [ 276.698578][T11066] bridge3: entered allmulticast mode [ 276.709514][T11066] ÿ»: entered allmulticast mode [ 276.717396][T11066] bridge4: left promiscuous mode [ 276.728288][T11066] bridge5: entered allmulticast mode [ 276.736580][T11066] gretap1: entered allmulticast mode [ 276.746583][T11066] sit1: left promiscuous mode [ 276.752705][T11066] ip6tnl1: entered allmulticast mode [ 276.765840][T11066] bond1: left promiscuous mode [ 276.770991][T11066] bond1: entered allmulticast mode [ 276.782980][T11066] batadv0: left promiscuous mode [ 276.790088][T11066] ip6_vti1: entered allmulticast mode [ 276.795618][T11066] bridge6: entered allmulticast mode [ 276.806459][ T59] lo speed is unknown, defaulting to 1000 [ 276.836232][T11072] gretap0: entered promiscuous mode [ 276.863021][T11072] gretap0: left promiscuous mode [ 276.933743][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.006298][T10827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.017243][T10827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.026074][T10827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.034894][T10827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.150617][T11083] netlink: 'syz.3.1571': attribute type 10 has an invalid length. [ 277.182402][T11083] bond0: entered promiscuous mode [ 277.187952][T11083] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 277.196288][T11083] bond0: left allmulticast mode [ 277.203385][ T8029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.225306][ T8029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.278399][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.294820][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.321171][T11089] bond0: option resend_igmp: invalid value (7540) [ 277.334250][T11089] bond0: option resend_igmp: allowed values 0 - 255 [ 277.586946][T11096] netem: incorrect ge model size [ 277.593829][T11096] netem: change failed [ 277.694986][T11103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.070348][T11118] __nla_validate_parse: 7 callbacks suppressed [ 278.070373][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'. [ 278.138349][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.467224][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.620222][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.708037][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.865067][ T12] bridge_slave_1: left allmulticast mode [ 278.877545][ T12] bridge_slave_1: left promiscuous mode [ 278.883462][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.892745][ T12] bridge_slave_0: left allmulticast mode [ 278.898456][ T12] bridge_slave_0: left promiscuous mode [ 278.905075][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.227700][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.240661][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.249193][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.258200][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.267226][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.275022][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.707973][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.719882][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.731508][ T12] bond0 (unregistering): Released all slaves [ 279.751115][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1588'. [ 280.062292][T11137] lo speed is unknown, defaulting to 1000 [ 280.377145][T11137] lo speed is unknown, defaulting to 1000 [ 280.490900][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1599'. [ 280.645865][T11173] bond2: entered promiscuous mode [ 280.662741][T11173] bond2: entered allmulticast mode [ 280.673117][T11173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 280.783584][T11178] netlink: 'syz.4.1601': attribute type 4 has an invalid length. [ 280.834975][T11181] netlink: 'syz.4.1601': attribute type 4 has an invalid length. [ 280.988099][T11173] bond2 (unregistering): Released all slaves [ 281.037837][ T12] hsr_slave_0: left promiscuous mode [ 281.058084][ T12] hsr_slave_1: left promiscuous mode [ 281.071914][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.079708][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.089405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.097208][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.140490][ T12] veth1_macvtap: left promiscuous mode [ 281.146096][ T12] veth0_macvtap: left promiscuous mode [ 281.165837][ T12] veth1_vlan: left promiscuous mode [ 281.174751][ T12] veth0_vlan: left promiscuous mode [ 281.295845][T11191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1605'. [ 281.373575][ T5848] Bluetooth: hci2: command tx timeout [ 281.866228][ T12] team0 (unregistering): Port device team_slave_1 removed [ 281.918166][ T12] team0 (unregistering): Port device team_slave_0 removed [ 282.385138][T11197] netlink: 'syz.3.1603': attribute type 1 has an invalid length. [ 282.622941][T11137] chnl_net:caif_netlink_parms(): no params data found [ 282.665338][T11210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'. [ 282.695127][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1607'. [ 282.762626][T11216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1606'. [ 282.799167][T11210] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 282.841113][T11218] nr0: entered promiscuous mode [ 283.009035][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 283.096075][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.104884][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.112309][T11137] bridge_slave_0: entered allmulticast mode [ 283.119578][T11137] bridge_slave_0: entered promiscuous mode [ 283.127480][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.134840][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.142164][T11137] bridge_slave_1: entered allmulticast mode [ 283.151349][T11137] bridge_slave_1: entered promiscuous mode [ 283.240810][T11137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.253047][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1616'. [ 283.266634][T11137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.283656][T11236] veth0_to_batadv: entered promiscuous mode [ 283.292959][T11236] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 283.384397][T11137] team0: Port device team_slave_0 added [ 283.393662][T11239] openvswitch: netlink: IP tunnel dst address not specified [ 283.402868][T11137] team0: Port device team_slave_1 added [ 283.418060][T11239] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 283.449112][ T5848] Bluetooth: hci2: command tx timeout [ 283.468639][T11137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.486822][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.519242][T11137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.561243][T11137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.568273][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.622699][T11137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.682892][T11137] hsr_slave_0: entered promiscuous mode [ 283.705857][T11137] hsr_slave_1: entered promiscuous mode [ 283.741424][T11137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.757612][T11137] Cannot create hsr debugfs directory [ 284.045780][T11263] veth0_to_hsr: mtu less than device minimum [ 284.083383][T11263] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1626'. [ 284.144732][T11273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1628'. [ 284.255628][T11273] lo speed is unknown, defaulting to 1000 [ 284.541736][T11137] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 284.585883][T11137] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 284.622984][T11137] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 284.675607][T11137] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 284.762081][T11273] lo speed is unknown, defaulting to 1000 [ 284.954335][T11137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.004629][T11137] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.045170][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.052456][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.121927][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.129189][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.529220][ T5848] Bluetooth: hci2: command tx timeout [ 285.635780][T11137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.731855][T11312] xt_TCPMSS: Only works on TCP SYN packets [ 285.771694][T11312] netlink: 'syz.2.1640': attribute type 1 has an invalid length. [ 285.788748][T11137] veth0_vlan: entered promiscuous mode [ 285.844747][T11312] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.866846][T11316] bond4: (slave bridge5): making interface the new active one [ 285.875718][T11316] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 285.936025][T11137] veth1_vlan: entered promiscuous mode [ 285.975539][T11137] veth0_macvtap: entered promiscuous mode [ 286.017507][T11137] veth1_macvtap: entered promiscuous mode [ 286.042846][T11137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.077343][T11137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.112766][T11137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.155475][T11137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.178907][T11137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.187678][T11137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.387950][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.432396][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.557051][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.573722][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.927202][T11354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'. [ 287.094862][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1660'. [ 287.675802][T11390] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1670'. [ 287.729583][T11390] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1670'. [ 287.991273][T11399] netlink: 'syz.0.1673': attribute type 1 has an invalid length. [ 287.999577][T11399] netlink: 'syz.0.1673': attribute type 4 has an invalid length. [ 288.007678][T11399] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1673'. [ 288.119768][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.865745][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.928177][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.270630][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.289354][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.300540][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.311863][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.323742][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 289.336100][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.351088][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.416751][T11422] lo speed is unknown, defaulting to 1000 [ 289.470305][T11435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1683'. [ 289.523879][T11422] lo speed is unknown, defaulting to 1000 [ 289.660701][ T53] bridge_slave_1: left allmulticast mode [ 289.666433][ T53] bridge_slave_1: left promiscuous mode [ 289.676132][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.693397][ T53] bridge_slave_0: left allmulticast mode [ 289.701141][ T53] bridge_slave_0: left promiscuous mode [ 289.707107][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.728202][T11439] netlink: 'syz.2.1684': attribute type 2 has an invalid length. [ 289.736917][T11439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 290.000248][T11443] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 290.116174][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.136568][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.148599][ T53] bond0 (unregistering): Released all slaves [ 290.324551][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 290.564729][T11458] netlink: 'syz.4.1688': attribute type 16 has an invalid length. [ 290.589341][T11458] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1688'. [ 290.606621][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 290.876182][T11475] SET target dimension over the limit! [ 290.892998][ T9] hid-generic 0005:0B57:0040.0002: item fetching failed at offset 0/1 [ 290.923498][T11422] chnl_net:caif_netlink_parms(): no params data found [ 290.949392][ T9] hid-generic 0005:0B57:0040.0002: probe with driver hid-generic failed with error -22 [ 291.449662][ T5143] Bluetooth: hci2: command tx timeout [ 291.912623][ T53] hsr_slave_0: left promiscuous mode [ 291.926378][ T53] hsr_slave_1: left promiscuous mode [ 291.970059][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.978313][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.987146][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.996370][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.025870][ T53] veth1_macvtap: left promiscuous mode [ 292.032135][ T53] veth0_macvtap: left promiscuous mode [ 292.037941][ T53] veth1_vlan: left promiscuous mode [ 292.047327][ T53] veth0_vlan: left promiscuous mode [ 292.574509][ T53] team0 (unregistering): Port device team_slave_1 removed [ 292.627304][ T53] team0 (unregistering): Port device team_slave_0 removed [ 293.276679][T11422] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.299097][T11422] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.306413][T11422] bridge_slave_0: entered allmulticast mode [ 293.317373][T11422] bridge_slave_0: entered promiscuous mode [ 293.355004][T11422] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.362321][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.369800][T11422] bridge_slave_1: entered allmulticast mode [ 293.377001][T11422] bridge_slave_1: entered promiscuous mode [ 293.447342][T11422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.511952][T11422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.529071][ T5143] Bluetooth: hci2: command tx timeout [ 293.647974][T11422] team0: Port device team_slave_0 added [ 293.676615][T11422] team0: Port device team_slave_1 added [ 293.774110][T11422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.788781][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.841872][T11422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.853914][T11523] atomic_op ffff88807bb97198 conn xmit_atomic 0000000000000000 [ 293.867429][T11422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.882672][T11422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.912896][T11422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.934426][T11523] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 294.015366][T11422] hsr_slave_0: entered promiscuous mode [ 294.031395][T11422] hsr_slave_1: entered promiscuous mode [ 294.044047][T11422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.058659][T11422] Cannot create hsr debugfs directory [ 294.146421][T11527] sctp: [Deprecated]: syz.3.1710 (pid 11527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.146421][T11527] Use struct sctp_sack_info instead [ 294.383989][T11535] SET target dimension over the limit! [ 294.433680][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 294.750738][T11422] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 294.763871][T11546] sctp: [Deprecated]: syz.3.1715 (pid 11546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.763871][T11546] Use struct sctp_sack_info instead [ 294.789229][T11422] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 294.805052][T11422] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 294.835157][T11422] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 294.944266][T11548] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.980382][ C1] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:ffff:fffd with DS=0xb [ 295.137891][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1720'. [ 295.140817][T11548] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.184424][T11558] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 295.273293][T11548] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.362125][T11548] tipc: Resetting bearer [ 295.433662][T11548] tipc: Disabling bearer [ 295.442878][T11548] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.496642][T11422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.533029][T11422] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.573184][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.580540][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.610268][ T5143] Bluetooth: hci2: command tx timeout [ 295.655418][T11548] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.735667][T11548] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.775103][T11548] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.794958][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.802186][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.824294][T11548] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.906056][T11422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.009685][ T5143] Bluetooth: hci0: command tx timeout [ 296.064661][T11581] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1729'. [ 296.114691][T11581] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1729'. [ 296.151830][T11581] netlink: 'syz.4.1729': attribute type 2 has an invalid length. [ 296.266328][T11422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.348454][T11422] veth0_vlan: entered promiscuous mode [ 296.376406][T11422] veth1_vlan: entered promiscuous mode [ 296.465713][T11422] veth0_macvtap: entered promiscuous mode [ 296.486012][T11422] veth1_macvtap: entered promiscuous mode [ 296.522584][T11422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.580147][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'. [ 296.581140][T11422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.642801][T11422] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.652318][T11422] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.669079][T11422] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.678195][T11422] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.726733][T11602] ax25_connect(): syz.2.1735 uses autobind, please contact jreuter@yaina.de [ 296.818489][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.837260][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.919807][T11602] lo speed is unknown, defaulting to 1000 [ 296.928327][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.947407][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.003967][T11610] netlink: 'syz.3.1737': attribute type 10 has an invalid length. [ 297.015600][T11610] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 297.039312][T11610] bond0: (slave netdevsim0): Releasing backup interface [ 297.067191][T11611] netlink: 'syz.3.1737': attribute type 10 has an invalid length. [ 297.089846][T11610] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 297.111383][T11610] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 297.153293][T11610] team0: Port device netdevsim0 added [ 297.221513][T11611] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 297.250630][T11611] team0: Port device netdevsim0 removed [ 297.259518][T11611] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 297.267395][T11611] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 297.323512][T11602] lo speed is unknown, defaulting to 1000 [ 297.431742][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 297.903289][ T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.488179][ T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.199370][ T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.242543][T11648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1753'. [ 299.246854][T11646] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 299.265795][T11650] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 299.270420][T11646] macvlan0: entered allmulticast mode [ 299.273890][T11650] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1754'. [ 299.310443][T11646] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 299.327846][T11646] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 299.418298][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.427946][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.437369][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.445960][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.455265][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.484618][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.507487][ T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.543774][T11648] lo speed is unknown, defaulting to 1000 [ 299.653400][T11656] lo speed is unknown, defaulting to 1000 [ 299.733333][T11660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1756'. [ 299.775223][T11659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.891366][T11659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.971228][T11659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.039587][T11659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.075816][ T83] bridge_slave_1: left allmulticast mode [ 300.089296][ T83] bridge_slave_1: left promiscuous mode [ 300.102546][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.112447][ T83] bridge_slave_0: left allmulticast mode [ 300.118614][ T83] bridge_slave_0: left promiscuous mode [ 300.128259][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.519660][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.534303][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.544895][ T83] bond0 (unregistering): Released all slaves [ 300.556250][T11674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 300.569290][T11648] lo speed is unknown, defaulting to 1000 [ 300.603662][T11659] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.625523][T11659] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.656492][T11659] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.748632][T11659] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.911029][T11656] lo speed is unknown, defaulting to 1000 [ 301.272211][T11689] geneve2: entered promiscuous mode [ 301.297993][T11689] geneve2: entered allmulticast mode [ 301.321285][T11691] netlink: 'syz.0.1766': attribute type 4 has an invalid length. [ 301.346649][T11692] netlink: 'syz.0.1766': attribute type 4 has an invalid length. [ 301.474093][T11696] sctp: [Deprecated]: syz.2.1767 (pid 11696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.474093][T11696] Use struct sctp_sack_info instead [ 301.529861][ T5848] Bluetooth: hci2: command tx timeout [ 301.550155][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'. [ 301.569505][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1766'. [ 301.741422][T11696] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1767'. [ 301.810730][ T83] hsr_slave_0: left promiscuous mode [ 301.836199][ T83] hsr_slave_1: left promiscuous mode [ 301.845268][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.846192][ C0] IPv6: addrconf: prefix option has invalid lifetime [ 301.861644][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.929385][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.936881][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.940058][T11710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'. [ 302.013225][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 302.037140][ T83] veth1_macvtap: left promiscuous mode [ 302.047419][ T83] veth0_macvtap: left promiscuous mode [ 302.059086][ T83] veth1_vlan: left promiscuous mode [ 302.064485][ T83] veth0_vlan: left promiscuous mode [ 302.574511][ T83] team0 (unregistering): Port device team_slave_1 removed [ 302.623253][ T83] team0 (unregistering): Port device team_slave_0 removed [ 303.276513][T11656] chnl_net:caif_netlink_parms(): no params data found [ 303.330459][T11733] siw: device registration error -23 [ 303.452304][T11738] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1779'. [ 303.580043][T11656] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.602182][T11656] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.610482][ T5848] Bluetooth: hci2: command tx timeout [ 303.625070][T11656] bridge_slave_0: entered allmulticast mode [ 303.640206][T11656] bridge_slave_0: entered promiscuous mode [ 303.663096][T11656] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.682679][T11656] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.696351][T11656] bridge_slave_1: entered allmulticast mode [ 303.715016][T11656] bridge_slave_1: entered promiscuous mode [ 303.786895][T11656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.817872][T11656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.863646][T11656] team0: Port device team_slave_0 added [ 303.873957][T11656] team0: Port device team_slave_1 added [ 303.924101][T11656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.932027][T11656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.958574][T11656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.977234][T11656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.984840][T11656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.018995][T11656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.181248][T11656] hsr_slave_0: entered promiscuous mode [ 304.216341][T11656] hsr_slave_1: entered promiscuous mode [ 304.233049][T11656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.252629][T11656] Cannot create hsr debugfs directory [ 304.836801][T11774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1792'. [ 304.862259][T11656] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 304.884020][T11656] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 304.900022][T11776] bond0: option resend_igmp: invalid value (7540) [ 304.907412][T11776] bond0: option resend_igmp: allowed values 0 - 255 [ 304.924778][T11774] gretap0: entered promiscuous mode [ 304.933766][T11774] gretap0: left promiscuous mode [ 304.979453][T11656] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 304.990496][T11656] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 305.002534][T11780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.137406][T11656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.182760][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1796'. [ 305.213950][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 305.226693][T11656] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.290865][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.298064][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.344834][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.352029][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.386715][T11789] netlink: 'syz.3.1799': attribute type 1 has an invalid length. [ 305.532792][T11800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.548269][T11801] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 305.565594][T11800] __nla_validate_parse: 1 callbacks suppressed [ 305.565615][T11800] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1803'. [ 305.667450][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'. [ 305.685551][T11804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1805'. [ 305.694833][ T5848] Bluetooth: hci2: command tx timeout [ 305.787453][T11656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.818329][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1806'. [ 305.875533][T11656] veth0_vlan: entered promiscuous mode [ 305.895732][T11656] veth1_vlan: entered promiscuous mode [ 305.901999][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1806'. [ 305.913570][T11809] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1806'. [ 305.940601][T11813] sit1: entered promiscuous mode [ 305.945950][T11813] sit1: entered allmulticast mode [ 305.996109][T11656] veth0_macvtap: entered promiscuous mode [ 306.006705][T11656] veth1_macvtap: entered promiscuous mode [ 306.035078][T11656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.055626][T11656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.077949][T11656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.088641][T11656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.103337][T11656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.116639][T11656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.233925][T11820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 306.267291][T11820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 306.282117][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 306.305216][T11823] IPVS: stopping backup sync thread 10008 ... [ 306.312114][T11820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 306.337016][T11820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 306.358315][T11820] geneve2: entered promiscuous mode [ 306.412484][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.431179][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.485888][T11820] netlink: 'syz.3.1809': attribute type 1 has an invalid length. [ 306.487130][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.520142][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.547989][T11820] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1809'. [ 306.697475][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 307.031045][T11853] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 307.209181][T11856] can: request_module (can-proto-0) failed. [ 307.224916][T11856] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1820'. [ 307.235736][T11856] netlink: 'syz.3.1820': attribute type 2 has an invalid length. [ 307.346742][T11867] batadv_slave_1: entered promiscuous mode [ 307.356267][T11866] batadv_slave_1: left promiscuous mode [ 307.749925][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.706302][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.903212][T11883] bond0: entered promiscuous mode [ 308.908769][T11883] bond_slave_0: entered promiscuous mode [ 308.929219][T11883] bond_slave_1: entered promiscuous mode [ 308.936190][T11883] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 308.996774][T11883] bond0: left promiscuous mode [ 309.001801][T11883] bond_slave_0: left promiscuous mode [ 309.016586][T11883] bond_slave_1: left promiscuous mode [ 309.111413][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.152916][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.181223][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.206997][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.229602][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.244648][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 309.252250][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.331373][T11897] FAULT_INJECTION: forcing a failure. [ 309.331373][T11897] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 309.377870][T11897] CPU: 0 UID: 0 PID: 11897 Comm: syz.3.1834 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 309.388712][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 309.398829][T11897] Call Trace: [ 309.402136][T11897] [ 309.405089][T11897] dump_stack_lvl+0x241/0x360 [ 309.409799][T11897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.415051][T11897] ? __pfx__printk+0x10/0x10 [ 309.419682][T11897] should_fail_ex+0x3b0/0x4e0 [ 309.424408][T11897] prepare_alloc_pages+0x1da/0x5b0 [ 309.429633][T11897] __alloc_pages_noprof+0x16f/0x710 [ 309.434939][T11897] ? is_bpf_text_address+0x285/0x2a0 [ 309.440333][T11897] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 309.446241][T11897] ? register_lock_class+0x102/0x980 [ 309.451552][T11897] ? __pfx_register_lock_class+0x10/0x10 [ 309.457205][T11897] ? mark_lock+0x9a/0x360 [ 309.461557][T11897] alloc_pages_mpol_noprof+0x3e8/0x680 [ 309.467044][T11897] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 309.473063][T11897] ? alloc_pages_noprof+0xef/0x170 [ 309.478198][T11897] pte_alloc_one+0x8f/0x510 [ 309.482730][T11897] ? __pfx_pte_alloc_one+0x10/0x10 [ 309.487874][T11897] ? __pfx_lock_release+0x10/0x10 [ 309.492925][T11897] handle_pte_fault+0x2913/0x5ed0 [ 309.497973][T11897] ? up_write+0x1a9/0x590 [ 309.502334][T11897] ? __pfx_validate_chain+0x10/0x10 [ 309.507573][T11897] ? __pfx_handle_pte_fault+0x10/0x10 [ 309.513068][T11897] ? __lock_acquire+0x1397/0x2100 [ 309.518162][T11897] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 309.524169][T11897] ? __pfx_lock_release+0x10/0x10 [ 309.529261][T11897] handle_mm_fault+0x1106/0x1bb0 [ 309.534226][T11897] ? mt_find+0x2a9/0x920 [ 309.538496][T11897] ? __pfx_handle_mm_fault+0x10/0x10 [ 309.543812][T11897] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.550159][T11897] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 309.555467][T11897] exc_page_fault+0x2b9/0x8b0 [ 309.560169][T11897] asm_exc_page_fault+0x26/0x30 [ 309.565037][T11897] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 309.570861][T11897] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 309.590485][T11897] RSP: 0018:ffffc90003c2fa70 EFLAGS: 00050202 [ 309.596588][T11897] RAX: 0000000000000001 RBX: 0000000020000480 RCX: 0000000000000060 [ 309.604581][T11897] RDX: 0000000000000001 RSI: 0000000020000480 RDI: ffffc90003c2fb70 [ 309.612574][T11897] RBP: ffffc90003c2fd10 R08: ffffc90003c2fbcf R09: 1ffff92000785f79 [ 309.620563][T11897] R10: dffffc0000000000 R11: fffff52000785f7a R12: 0000000020000480 [ 309.628553][T11897] R13: ffffc90003c2fb70 R14: ffffc90003c2fb70 R15: 0000000000000060 [ 309.636563][T11897] _copy_from_user+0x7f/0xc0 [ 309.641183][T11897] do_ipt_set_ctl+0x731/0x1250 [ 309.645969][T11897] ? __pfx___mutex_trylock_common+0x10/0x10 [ 309.651883][T11897] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 309.657098][T11897] ? __pfx_lock_release+0x10/0x10 [ 309.662134][T11897] ? rcu_is_watching+0x15/0xb0 [ 309.666917][T11897] ? trace_contention_end+0x3c/0x120 [ 309.672231][T11897] ? __mutex_unlock_slowpath+0x21e/0x790 [ 309.677886][T11897] ? __pfx___mutex_lock+0x10/0x10 [ 309.682932][T11897] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.688932][T11897] ? aa_sk_perm+0x96d/0xab0 [ 309.693547][T11897] ? __pfx_aa_sk_perm+0x10/0x10 [ 309.698420][T11897] nf_setsockopt+0x295/0x2c0 [ 309.703026][T11897] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 309.708940][T11897] do_sock_setsockopt+0x3af/0x720 [ 309.713987][T11897] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 309.719566][T11897] ? __fget_files+0x395/0x410 [ 309.724270][T11897] ? __fget_files+0x2a/0x410 [ 309.728898][T11897] __x64_sys_setsockopt+0x1ee/0x280 [ 309.734131][T11897] do_syscall_64+0xf3/0x230 [ 309.738644][T11897] ? clear_bhb_loop+0x35/0x90 [ 309.743336][T11897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.749239][T11897] RIP: 0033:0x7efffc585d19 [ 309.753679][T11897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.773305][T11897] RSP: 002b:00007efffd2e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.781738][T11897] RAX: ffffffffffffffda RBX: 00007efffc775fa0 RCX: 00007efffc585d19 [ 309.789737][T11897] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 309.797728][T11897] RBP: 00007efffd2e4090 R08: 0000000000000348 R09: 0000000000000000 [ 309.805716][T11897] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 309.813732][T11897] R13: 0000000000000000 R14: 00007efffc775fa0 R15: 00007fff252a8ae8 [ 309.821764][T11897] [ 309.925833][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.973689][T11892] lo speed is unknown, defaulting to 1000 [ 310.079395][T11911] netlink: 'syz.4.1839': attribute type 10 has an invalid length. [ 310.083257][T11892] lo speed is unknown, defaulting to 1000 [ 310.126382][T11908] bond0: entered promiscuous mode [ 310.152575][T11908] bond_slave_0: entered promiscuous mode [ 310.179192][T11908] bond_slave_1: entered promiscuous mode [ 310.192274][T11916] netlink: 'syz.4.1839': attribute type 9 has an invalid length. [ 310.200338][T11916] netlink: 'syz.4.1839': attribute type 7 has an invalid length. [ 310.208295][T11916] netlink: 'syz.4.1839': attribute type 8 has an invalid length. [ 310.247140][T11918] hsr_slave_0: left promiscuous mode [ 310.264000][T11918] hsr_slave_1: left promiscuous mode [ 310.302313][T11908] xt_hashlimit: size too large, truncated to 1048576 [ 310.309759][T11908] xt_hashlimit: max too large, truncated to 1048576 [ 310.318234][T11908] xt_hashlimit: overflow, try lower: 0/0 [ 310.513398][T11924] tipc: Started in network mode [ 310.518587][T11924] tipc: Node identity 06d997549bc4, cluster identity 4711 [ 310.533077][T11924] tipc: Enabled bearer , priority 3 [ 310.552280][ T3462] bridge_slave_1: left allmulticast mode [ 310.558000][ T3462] bridge_slave_1: left promiscuous mode [ 310.565179][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.578190][ T3462] bridge_slave_0: left allmulticast mode [ 310.588696][ T3462] bridge_slave_0: left promiscuous mode [ 310.597874][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.968430][T11938] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 311.054314][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.067049][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.078784][ T3462] bond0 (unregistering): Released all slaves [ 311.096522][T11926] bond0: (slave vlan0): Opening slave failed [ 311.099462][T11943] __nla_validate_parse: 10 callbacks suppressed [ 311.099489][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 311.123426][T11929] veth0_to_bridge: entered promiscuous mode [ 311.135261][T11930] batadv_slave_1: entered promiscuous mode [ 311.212431][T11935] batadv_slave_1 (unregistering): left promiscuous mode [ 311.295059][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 311.332989][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1849'. [ 311.370747][ T5143] Bluetooth: hci2: command tx timeout [ 311.467828][T11928] veth0_to_bridge: left promiscuous mode [ 311.480299][T11892] chnl_net:caif_netlink_parms(): no params data found [ 311.658694][ T59] tipc: Node number set to 2635962196 [ 311.809419][T11892] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.819997][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.827306][T11892] bridge_slave_0: entered allmulticast mode [ 311.840880][T11892] bridge_slave_0: entered promiscuous mode [ 311.864563][T11892] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.879263][T11892] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.886571][T11892] bridge_slave_1: entered allmulticast mode [ 311.916104][T11892] bridge_slave_1: entered promiscuous mode [ 311.991952][T11892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.055702][T11892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.089872][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 312.227852][T11892] team0: Port device team_slave_0 added [ 312.326373][T11892] team0: Port device team_slave_1 added [ 312.366309][ T3462] hsr_slave_0: left promiscuous mode [ 312.373315][ T3462] hsr_slave_1: left promiscuous mode [ 312.380077][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.387610][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.397803][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.414540][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.467387][ T3462] veth1_macvtap: left promiscuous mode [ 312.471346][T11992] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 312.475112][ T3462] veth0_macvtap: left promiscuous mode [ 312.486952][ T3462] veth1_vlan: left promiscuous mode [ 312.493736][ T3462] veth0_vlan: left promiscuous mode [ 313.228024][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 313.276336][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 313.452571][ T5143] Bluetooth: hci2: command tx timeout [ 313.786678][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1868'. [ 313.800593][T11892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.807599][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.841172][T11892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.869001][T12001] lo speed is unknown, defaulting to 1000 [ 313.878592][T12005] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 313.918580][T11892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.927056][T11892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.985479][T11892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.051215][T12011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1872'. [ 314.126863][T11892] hsr_slave_0: entered promiscuous mode [ 314.136159][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'. [ 314.156943][T11892] hsr_slave_1: entered promiscuous mode [ 314.178162][T11892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.196305][T11892] Cannot create hsr debugfs directory [ 314.369373][T12001] lo speed is unknown, defaulting to 1000 [ 314.905101][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1878'. [ 315.118443][T11892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.160317][T11892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 315.179937][T11892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.191558][T11892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.380412][T11892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.436712][T11892] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.475578][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.483045][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.513403][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.520668][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.539210][ T5143] Bluetooth: hci2: command tx timeout [ 315.634271][T12046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1883'. [ 315.676890][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1885'. [ 316.183026][T12071] dvmrp8: entered allmulticast mode [ 316.227875][T11892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.350518][T11892] veth0_vlan: entered promiscuous mode [ 316.368751][T11892] veth1_vlan: entered promiscuous mode [ 316.425133][T11892] veth0_macvtap: entered promiscuous mode [ 316.448473][T11892] veth1_macvtap: entered promiscuous mode [ 316.483829][T11892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.508730][T11892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.535913][T11892] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.545752][T11892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.556230][T11892] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.566646][T11892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.682321][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.700262][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.751578][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.774375][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.900844][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1897'. [ 317.059437][T12096] bond0: option resend_igmp: invalid value (7540) [ 317.079524][T12096] bond0: option resend_igmp: allowed values 0 - 255 [ 317.263342][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1902'. [ 317.709655][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 317.890407][T12120] nftables ruleset with unbound set [ 318.200298][T12114] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 318.502666][ T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.530643][T12141] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1918'. [ 319.540069][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1918'. [ 319.554337][T12141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1918'. [ 319.571915][T12141] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1918'. [ 319.596009][T12147] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1918'. [ 319.646608][T12147] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 319.709854][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.741202][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.787045][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.825493][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.834932][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 319.847481][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.884915][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1921'. [ 319.895633][T12149] lo speed is unknown, defaulting to 1000 [ 320.002540][T12149] lo speed is unknown, defaulting to 1000 [ 320.194019][T12168] xt_l2tp: invalid flags combination: c [ 320.331850][T12149] chnl_net:caif_netlink_parms(): no params data found [ 320.558604][T12149] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.582279][T12149] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.589902][T12149] bridge_slave_0: entered allmulticast mode [ 320.597064][T12149] bridge_slave_0: entered promiscuous mode [ 320.605622][T12149] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.619270][T12149] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.627044][T12149] bridge_slave_1: entered allmulticast mode [ 320.636219][T12149] bridge_slave_1: entered promiscuous mode [ 320.674771][T12186] bond0: (slave team0): Releasing backup interface [ 320.755418][T12186] bond0: (slave bond_slave_0): Releasing backup interface [ 320.787768][T12186] bond0: (slave bond_slave_1): Releasing backup interface [ 320.788111][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1931'. [ 320.824793][T12186] infiniband syz1: set down [ 320.832529][T12186] team0: Port device team_slave_0 removed [ 320.857524][T12186] team0: Port device team_slave_1 removed [ 320.874518][T12186] bond1: (slave batadv1): Releasing active interface [ 320.953662][ T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.002470][T12192] bridge_slave_1: left allmulticast mode [ 321.013231][T12192] bridge_slave_1: left promiscuous mode [ 321.024577][T12192] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.051893][T12192] bridge_slave_0: left allmulticast mode [ 321.058018][T12192] bridge_slave_0: left promiscuous mode [ 321.068198][T12192] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.164677][T12149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.213492][ T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.244290][T12149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.408375][ T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.443292][T12149] team0: Port device team_slave_0 added [ 321.455205][T12149] team0: Port device team_slave_1 added [ 321.561144][T12149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.591430][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.677396][T12149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.792208][T12149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.809474][T12149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.883695][T12149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.930468][ T5848] Bluetooth: hci2: command tx timeout [ 322.057897][T12227] syzkaller1: entered promiscuous mode [ 322.063609][T12227] syzkaller1: entered allmulticast mode [ 322.157203][ T83] bridge_slave_1: left allmulticast mode [ 322.173309][ T83] bridge_slave_1: left promiscuous mode [ 322.193512][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.261494][ T83] bridge_slave_0: left allmulticast mode [ 322.267341][ T83] bridge_slave_0: left promiscuous mode [ 322.278288][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.362680][T12249] netlink: 'syz.3.1948': attribute type 4 has an invalid length. [ 322.437611][T12252] netlink: 'syz.3.1948': attribute type 4 has an invalid length. [ 322.823680][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.837441][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.852368][ T83] bond0 (unregistering): Released all slaves [ 322.902912][T12149] hsr_slave_0: entered promiscuous mode [ 322.944557][T12149] hsr_slave_1: entered promiscuous mode [ 322.963563][T12149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.971721][T12149] Cannot create hsr debugfs directory [ 323.017930][ T47] lo speed is unknown, defaulting to 1000 [ 323.183628][T12267] netlink: 'syz.4.1955': attribute type 14 has an invalid length. [ 323.200006][T12267] __nla_validate_parse: 2 callbacks suppressed [ 323.200026][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1955'. [ 323.236131][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 323.817242][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'. [ 323.834082][T12290] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 324.009068][ T5848] Bluetooth: hci2: command tx timeout [ 324.160460][ T83] hsr_slave_0: left promiscuous mode [ 324.167968][ T83] hsr_slave_1: left promiscuous mode [ 324.183514][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.203627][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.215131][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.227684][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.272341][ T83] veth1_macvtap: left promiscuous mode [ 324.278314][ T83] veth0_macvtap: left promiscuous mode [ 324.291120][ T83] veth1_vlan: left promiscuous mode [ 324.296541][ T83] veth0_vlan: left promiscuous mode [ 324.704659][T12317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.097098][ T83] team0 (unregistering): Port device team_slave_1 removed [ 325.167973][ T83] team0 (unregistering): Port device team_slave_0 removed [ 325.774845][T12330] veth0: entered promiscuous mode [ 325.962354][T12149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.022773][T12149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.074626][T12149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.089103][ T5848] Bluetooth: hci2: command tx timeout [ 326.101511][T12149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.232899][T12346] lo speed is unknown, defaulting to 1000 [ 326.302614][T12149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.321441][T12149] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.389769][T12134] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.397002][T12134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.423648][T12134] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.430895][T12134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.695234][T12363] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1986'. [ 326.727888][T12365] FAULT_INJECTION: forcing a failure. [ 326.727888][T12365] name failslab, interval 1, probability 0, space 0, times 0 [ 326.752188][T12365] CPU: 1 UID: 0 PID: 12365 Comm: syz.3.1987 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 326.763044][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 326.773156][T12365] Call Trace: [ 326.776483][T12365] [ 326.779460][T12365] dump_stack_lvl+0x241/0x360 [ 326.784203][T12365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.789469][T12365] ? __pfx__printk+0x10/0x10 [ 326.794159][T12365] ? kmem_cache_alloc_noprof+0x48/0x380 [ 326.799773][T12365] ? __pfx___might_resched+0x10/0x10 [ 326.805120][T12365] should_fail_ex+0x3b0/0x4e0 [ 326.809868][T12365] should_failslab+0xac/0x100 [ 326.814621][T12365] ? ptlock_alloc+0x20/0x70 [ 326.819234][T12365] kmem_cache_alloc_noprof+0x70/0x380 [ 326.824770][T12365] ptlock_alloc+0x20/0x70 [ 326.829154][T12365] pte_alloc_one+0xd3/0x510 [ 326.833718][T12365] ? __pfx_pte_alloc_one+0x10/0x10 [ 326.838888][T12365] ? __pfx_lock_release+0x10/0x10 [ 326.840876][T12346] lo speed is unknown, defaulting to 1000 [ 326.843950][T12365] handle_pte_fault+0x2913/0x5ed0 [ 326.854781][T12365] ? up_write+0x1a9/0x590 [ 326.859177][T12365] ? __pfx_validate_chain+0x10/0x10 [ 326.864452][T12365] ? __pfx_handle_pte_fault+0x10/0x10 [ 326.869892][T12365] ? __lock_acquire+0x1397/0x2100 [ 326.875010][T12365] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 326.880963][T12365] ? __pfx_lock_release+0x10/0x10 [ 326.886057][T12365] handle_mm_fault+0x1106/0x1bb0 [ 326.891059][T12365] ? mt_find+0x2a9/0x920 [ 326.895383][T12365] ? __pfx_handle_mm_fault+0x10/0x10 [ 326.900756][T12365] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.907206][T12365] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 326.912568][T12365] exc_page_fault+0x2b9/0x8b0 [ 326.917317][T12365] asm_exc_page_fault+0x26/0x30 [ 326.922226][T12365] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 326.928181][T12365] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 326.947890][T12365] RSP: 0018:ffffc900051c7a70 EFLAGS: 00050202 [ 326.954015][T12365] RAX: 0000000000000001 RBX: 0000000020000480 RCX: 0000000000000060 [ 326.962066][T12365] RDX: 0000000000000001 RSI: 0000000020000480 RDI: ffffc900051c7b70 [ 326.970154][T12365] RBP: ffffc900051c7d10 R08: ffffc900051c7bcf R09: 1ffff92000a38f79 [ 326.978269][T12365] R10: dffffc0000000000 R11: fffff52000a38f7a R12: 0000000020000480 [ 326.986307][T12365] R13: ffffc900051c7b70 R14: ffffc900051c7b70 R15: 0000000000000060 [ 326.994348][T12365] _copy_from_user+0x7f/0xc0 [ 326.999023][T12365] do_ipt_set_ctl+0x731/0x1250 [ 327.003847][T12365] ? __pfx___mutex_trylock_common+0x10/0x10 [ 327.009896][T12365] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 327.015152][T12365] ? __pfx_lock_release+0x10/0x10 [ 327.020230][T12365] ? rcu_is_watching+0x15/0xb0 [ 327.025051][T12365] ? trace_contention_end+0x3c/0x120 [ 327.030451][T12365] ? __mutex_unlock_slowpath+0x21e/0x790 [ 327.036236][T12365] ? __pfx___mutex_lock+0x10/0x10 [ 327.041317][T12365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 327.047369][T12365] ? aa_sk_perm+0x96d/0xab0 [ 327.051990][T12365] ? __pfx_aa_sk_perm+0x10/0x10 [ 327.056892][T12365] nf_setsockopt+0x295/0x2c0 [ 327.061534][T12365] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 327.067489][T12365] do_sock_setsockopt+0x3af/0x720 [ 327.072559][T12365] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 327.078151][T12365] ? __fget_files+0x395/0x410 [ 327.082878][T12365] ? __fget_files+0x2a/0x410 [ 327.087533][T12365] __x64_sys_setsockopt+0x1ee/0x280 [ 327.092787][T12365] do_syscall_64+0xf3/0x230 [ 327.097340][T12365] ? clear_bhb_loop+0x35/0x90 [ 327.102070][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.108025][T12365] RIP: 0033:0x7efffc585d19 [ 327.112493][T12365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.132159][T12365] RSP: 002b:00007efffd2e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 327.140640][T12365] RAX: ffffffffffffffda RBX: 00007efffc775fa0 RCX: 00007efffc585d19 [ 327.148671][T12365] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 327.156693][T12365] RBP: 00007efffd2e4090 R08: 0000000000000348 R09: 0000000000000000 [ 327.164721][T12365] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 327.172838][T12365] R13: 0000000000000000 R14: 00007efffc775fa0 R15: 00007fff252a8ae8 [ 327.180885][T12365] [ 327.237837][T12368] syzkaller0: refused to change device tx_queue_len [ 327.246007][T12373] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 327.453456][T12149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.495849][T12149] veth0_vlan: entered promiscuous mode [ 327.522090][T12149] veth1_vlan: entered promiscuous mode [ 327.676462][T12390] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1992'. [ 327.795306][T12391] xt_cluster: node mask cannot exceed total number of nodes [ 327.818258][T12149] veth0_macvtap: entered promiscuous mode [ 327.846722][T12391] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1994'. [ 327.867380][T12149] veth1_macvtap: entered promiscuous mode [ 327.952987][T12149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.160691][T12149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.178659][ T5848] Bluetooth: hci2: command tx timeout [ 328.187279][T12149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.196594][T12149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.205707][T12149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.214887][T12149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.237860][T12400] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1997'. [ 328.365288][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'. [ 328.528510][T12134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.546947][T12134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.596808][T12411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2001'. [ 328.622909][T12415] bond0: (slave vlan0): Opening slave failed [ 328.656043][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.657623][T12411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2001'. [ 328.678098][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.906819][T12422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'. [ 329.082523][T12429] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2006'. [ 329.502169][T12463] Cannot find del_set index 65534 as target [ 329.569457][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'. [ 329.590335][T12471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.704401][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 329.994896][T12493] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2027'. [ 330.243892][T12134] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.638631][T12134] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.724868][T12134] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.816091][T12134] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.931181][T12134] bridge_slave_1: left allmulticast mode [ 330.936985][T12134] bridge_slave_1: left promiscuous mode [ 330.943507][T12134] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.953276][T12134] bridge_slave_0: left allmulticast mode [ 330.960652][T12134] bridge_slave_0: left promiscuous mode [ 330.966408][T12134] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.310298][T12134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.321968][T12134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.334331][T12134] bond0 (unregistering): Released all slaves [ 331.649356][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2033'. [ 331.890723][T12518] team0: Mode changed to "random" [ 331.937546][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.954834][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.966975][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.129028][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.214995][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 332.254180][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.383833][T12134] hsr_slave_0: left promiscuous mode [ 332.395521][T12134] hsr_slave_1: left promiscuous mode [ 332.404766][T12134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.413443][T12134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.433951][T12134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.442988][T12134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.465054][T12537] Timeout policy `syz0' can only be used by L3 protocol number 35064 [ 332.519387][T12134] veth1_macvtap: left promiscuous mode [ 332.525076][T12134] veth0_macvtap: left promiscuous mode [ 332.531382][T12134] veth1_vlan: left promiscuous mode [ 332.536838][T12134] veth0_vlan: left promiscuous mode [ 333.343232][T12134] team0 (unregistering): Port device team_slave_1 removed [ 333.452166][T12134] team0 (unregistering): Port device team_slave_0 removed [ 334.075641][T12519] lo speed is unknown, defaulting to 1000 [ 334.095769][T12550] ip6gre1: entered allmulticast mode [ 334.207385][T12555] batadv_slave_1: entered promiscuous mode [ 334.235856][T12552] __nla_validate_parse: 1 callbacks suppressed [ 334.235882][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 334.340457][ T5848] Bluetooth: hci2: command tx timeout [ 334.456639][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 334.576104][T12571] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2049'. [ 334.654496][T12565] bond2: entered promiscuous mode [ 334.668947][T12565] bond2: entered allmulticast mode [ 334.674603][T12565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.877312][T12565] bond2 (unregistering): Released all slaves [ 334.892060][T12554] batadv_slave_1: left promiscuous mode [ 334.907950][T12519] lo speed is unknown, defaulting to 1000 [ 334.939596][T12577] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 335.139523][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2055'. [ 335.172361][T12581] netlink: 'syz.0.2055': attribute type 7 has an invalid length. [ 335.222630][T12581] netlink: 'syz.0.2055': attribute type 8 has an invalid length. [ 335.301683][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 335.517631][T12591] lo speed is unknown, defaulting to 1000 [ 335.526968][T12585] netlink: 'syz.2.2056': attribute type 10 has an invalid length. [ 335.601369][T12600] FAULT_INJECTION: forcing a failure. [ 335.601369][T12600] name failslab, interval 1, probability 0, space 0, times 0 [ 335.629057][T12600] CPU: 1 UID: 0 PID: 12600 Comm: syz.4.2059 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 335.639929][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 335.650037][T12600] Call Trace: [ 335.653359][T12600] [ 335.656420][T12600] dump_stack_lvl+0x241/0x360 [ 335.661155][T12600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.666409][T12600] ? __pfx__printk+0x10/0x10 [ 335.671085][T12600] ? __kmalloc_cache_noprof+0x48/0x390 [ 335.673924][T12606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2061'. [ 335.676593][T12600] ? __pfx___might_resched+0x10/0x10 [ 335.676629][T12600] should_fail_ex+0x3b0/0x4e0 [ 335.686261][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2061'. [ 335.691338][T12600] should_failslab+0xac/0x100 [ 335.691380][T12600] __kmalloc_cache_noprof+0x70/0x390 [ 335.691411][T12600] ? vlan_vid_add+0x31c/0x760 [ 335.691442][T12600] vlan_vid_add+0x31c/0x760 [ 335.691477][T12600] bond_vlan_rx_add_vid+0x14f/0x2f0 [ 335.691507][T12600] ? __pfx_bond_vlan_rx_add_vid+0x10/0x10 [ 335.691544][T12600] ? __kmalloc_cache_noprof+0x243/0x390 [ 335.691574][T12600] ? vlan_vid_add+0x31c/0x760 [ 335.691606][T12600] vlan_vid_add+0x64b/0x760 [ 335.691644][T12600] register_vlan_dev+0x9f/0x810 [ 335.691675][T12600] ? vlan_changelink+0x4c8/0x570 [ 335.691705][T12600] ? vlan_check_real_dev+0x10c/0x320 [ 335.691737][T12600] vlan_newlink+0x476/0x5c0 [ 335.691774][T12600] ? __pfx_vlan_newlink+0x10/0x10 [ 335.704338][T12606] netlink: zone id is out of range [ 335.705591][T12600] rtnl_newlink_create+0x2ee/0xa40 [ 335.710449][T12606] netlink: zone id is out of range [ 335.715577][T12600] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 335.720396][T12606] netlink: zone id is out of range [ 335.724748][T12600] ? ns_capable+0x8a/0xf0 [ 335.724792][T12600] rtnl_newlink+0x160d/0x2150 [ 335.810437][T12600] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.815506][T12600] ? __netlink_deliver_tap+0x56b/0x7f0 [ 335.821039][T12600] ? __pfx_validate_chain+0x10/0x10 [ 335.826271][T12600] ? __sock_sendmsg+0x221/0x270 [ 335.831140][T12600] ? ____sys_sendmsg+0x52a/0x7e0 [ 335.836103][T12600] ? __sys_sendmsg+0x269/0x350 [ 335.840891][T12600] ? do_syscall_64+0xf3/0x230 [ 335.845606][T12600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.851709][T12600] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.857711][T12600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.864073][T12600] ? mark_lock+0x9a/0x360 [ 335.868427][T12600] ? __lock_acquire+0x1397/0x2100 [ 335.873517][T12600] ? __pfx_lock_release+0x10/0x10 [ 335.878588][T12600] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.883634][T12600] rtnetlink_rcv_msg+0x791/0xcf0 [ 335.888605][T12600] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 335.893744][T12600] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.899329][T12600] ? ref_tracker_free+0x643/0x7e0 [ 335.904376][T12600] netlink_rcv_skb+0x1e3/0x430 [ 335.909158][T12600] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.914640][T12600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.919966][T12600] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.925186][T12600] netlink_unicast+0x7f6/0x990 [ 335.929983][T12600] ? __pfx_netlink_unicast+0x10/0x10 [ 335.935290][T12600] ? __virt_addr_valid+0x45f/0x530 [ 335.940426][T12600] ? __phys_addr_symbol+0x2f/0x70 [ 335.945473][T12600] ? __check_object_size+0x47a/0x730 [ 335.950789][T12600] netlink_sendmsg+0x8e4/0xcb0 [ 335.955588][T12600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.960895][T12600] ? aa_sock_msg_perm+0x91/0x160 [ 335.965946][T12600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.971246][T12600] __sock_sendmsg+0x221/0x270 [ 335.975958][T12600] ____sys_sendmsg+0x52a/0x7e0 [ 335.980752][T12600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.986060][T12600] ? __fget_files+0x2a/0x410 [ 335.990768][T12600] ? __fget_files+0x2a/0x410 [ 335.995404][T12600] __sys_sendmsg+0x269/0x350 [ 336.000197][T12600] ? __pfx_lock_release+0x10/0x10 [ 336.005242][T12600] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.010399][T12600] ? __pfx_vfs_write+0x10/0x10 [ 336.015224][T12600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.021575][T12600] ? do_syscall_64+0x100/0x230 [ 336.026356][T12600] ? do_syscall_64+0xb6/0x230 [ 336.031054][T12600] do_syscall_64+0xf3/0x230 [ 336.035583][T12600] ? clear_bhb_loop+0x35/0x90 [ 336.040282][T12600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.046197][T12600] RIP: 0033:0x7f2b15785d19 [ 336.050633][T12600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.070261][T12600] RSP: 002b:00007f2b16511038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.078879][T12600] RAX: ffffffffffffffda RBX: 00007f2b15975fa0 RCX: 00007f2b15785d19 [ 336.086875][T12600] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000003 [ 336.094865][T12600] RBP: 00007f2b16511090 R08: 0000000000000000 R09: 0000000000000000 [ 336.102853][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.110839][T12600] R13: 0000000000000000 R14: 00007f2b15975fa0 R15: 00007ffc599a3f88 [ 336.118847][T12600] [ 336.191832][T12519] chnl_net:caif_netlink_parms(): no params data found [ 336.235356][T12585] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 336.408926][ T5848] Bluetooth: hci2: command tx timeout [ 336.620379][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2065'. [ 336.633003][T12613] syzkaller0: entered promiscuous mode [ 336.638650][T12613] syzkaller0: entered allmulticast mode [ 336.668743][T12591] lo speed is unknown, defaulting to 1000 [ 336.884308][T12631] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2064'. [ 336.964471][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.972626][T12519] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.980277][T12519] bridge_slave_0: entered allmulticast mode [ 336.987232][T12519] bridge_slave_0: entered promiscuous mode [ 337.017534][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.029960][T12519] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.037352][T12519] bridge_slave_1: entered allmulticast mode [ 337.051683][T12519] bridge_slave_1: entered promiscuous mode [ 337.999170][T12642] siw: device registration error -23 [ 338.499013][ T5848] Bluetooth: hci2: command tx timeout [ 339.103913][T12637] sit2: entered promiscuous mode [ 339.109262][T12637] sit2: entered allmulticast mode [ 339.231656][T12519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.266590][T12519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.437175][T12647] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 339.465441][T12647] batman_adv: batadv0: Adding interface: ip6gretap1 [ 339.485332][T12647] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.569228][T12647] batman_adv: batadv0: Interface activated: ip6gretap1 [ 339.606927][T12519] team0: Port device team_slave_0 added [ 339.625176][T12519] team0: Port device team_slave_1 added [ 339.639760][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.742804][T12519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.755561][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.760411][T12661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2077'. [ 339.794635][T12519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.873616][T12519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.898919][T12519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.968906][T12519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.057920][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'. [ 340.199286][T12680] SET target dimension over the limit! [ 340.220123][T12675] bond1: (slave batadv0): Releasing active interface [ 340.313300][T12519] hsr_slave_0: entered promiscuous mode [ 340.351126][T12519] hsr_slave_1: entered promiscuous mode [ 340.367230][T12519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.379028][T12519] Cannot create hsr debugfs directory [ 340.569148][ T5848] Bluetooth: hci2: command tx timeout [ 340.983256][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 341.004285][T12697] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 341.021852][T12697] batman_adv: batadv0: Removing interface: ip6gretap1 [ 341.066431][T12700] SET target dimension over the limit! [ 341.172982][T12519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.202502][T12519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.236700][T12519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.294528][T12519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.613586][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.672860][T12519] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.711644][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.719321][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.752369][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.759677][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.790174][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2092'. [ 341.898378][T12708] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2092'. [ 342.274323][T12725] netlink: 'syz.2.2095': attribute type 1 has an invalid length. [ 342.276146][T12722] netlink: 'syz.4.2094': attribute type 6 has an invalid length. [ 342.300278][T12726] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 342.301298][T12725] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2095'. [ 342.310272][T12722] netlink: 'syz.4.2094': attribute type 7 has an invalid length. [ 342.340048][T12722] netlink: 'syz.4.2094': attribute type 8 has an invalid length. [ 342.365955][T12519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.496276][T12519] veth0_vlan: entered promiscuous mode [ 342.521385][T12519] veth1_vlan: entered promiscuous mode [ 342.599800][T12519] veth0_macvtap: entered promiscuous mode [ 342.620832][T12519] veth1_macvtap: entered promiscuous mode [ 342.678425][T12519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.706630][T12519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.731980][T12519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.753494][T12519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.769291][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2102'. [ 342.783826][T12519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.799133][T12519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.833245][T12744] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 343.018060][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.043107][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.053416][T12754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2106'. [ 343.088455][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.114563][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.154967][T12755] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2104'. [ 343.512905][T12769] netlink: 'syz.0.2110': attribute type 10 has an invalid length. [ 344.200577][T12659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.239341][T12800] gretap0: entered promiscuous mode [ 344.264973][T12800] gretap0: left promiscuous mode [ 345.230454][T12659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.447892][T12659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.506774][T12659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.721299][T12659] bridge_slave_1: left allmulticast mode [ 345.727404][T12659] bridge_slave_1: left promiscuous mode [ 345.738588][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.762075][T12659] bridge_slave_0: left allmulticast mode [ 345.767898][T12659] bridge_slave_0: left promiscuous mode [ 345.777642][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.893923][T12823] FAULT_INJECTION: forcing a failure. [ 345.893923][T12823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.929156][T12823] CPU: 1 UID: 0 PID: 12823 Comm: syz.4.2129 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 345.940187][T12823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 345.950390][T12823] Call Trace: [ 345.953754][T12823] [ 345.956779][T12823] dump_stack_lvl+0x241/0x360 [ 345.961523][T12823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.966786][T12823] ? __pfx__printk+0x10/0x10 [ 345.971467][T12823] ? snprintf+0xda/0x120 [ 345.975771][T12823] should_fail_ex+0x3b0/0x4e0 [ 345.980525][T12823] _copy_to_user+0x31/0xb0 [ 345.985004][T12823] simple_read_from_buffer+0xca/0x150 [ 345.990443][T12823] proc_fail_nth_read+0x1e9/0x250 [ 345.995535][T12823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.001153][T12823] ? rw_verify_area+0x55e/0x6f0 [ 346.006060][T12823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.011679][T12823] vfs_read+0x1fc/0xb70 [ 346.015897][T12823] ? __pfx___mutex_lock+0x10/0x10 [ 346.019808][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.020953][T12823] ? __pfx_vfs_read+0x10/0x10 [ 346.020992][T12823] ? __fget_files+0x2a/0x410 [ 346.037544][T12823] ? __fget_files+0x395/0x410 [ 346.042259][T12823] ? __fget_files+0x2a/0x410 [ 346.046884][T12823] ksys_read+0x18f/0x2b0 [ 346.051146][T12823] ? __pfx_ksys_read+0x10/0x10 [ 346.055941][T12823] ? do_syscall_64+0x100/0x230 [ 346.060729][T12823] ? do_syscall_64+0xb6/0x230 [ 346.065423][T12823] do_syscall_64+0xf3/0x230 [ 346.069948][T12823] ? clear_bhb_loop+0x35/0x90 [ 346.074646][T12823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.080566][T12823] RIP: 0033:0x7f2b1578472c [ 346.085048][T12823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 346.104763][T12823] RSP: 002b:00007f2b16511030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.113202][T12823] RAX: ffffffffffffffda RBX: 00007f2b15975fa0 RCX: 00007f2b1578472c [ 346.121191][T12823] RDX: 000000000000000f RSI: 00007f2b165110a0 RDI: 0000000000000005 [ 346.129181][T12823] RBP: 00007f2b16511090 R08: 0000000000000000 R09: 0000000000000000 [ 346.137177][T12823] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 346.145249][T12823] R13: 0000000000000000 R14: 00007f2b15975fa0 R15: 00007ffc599a3f88 [ 346.153342][T12823] [ 346.173109][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.182458][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.193474][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.203359][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.217455][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.580607][T12659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.594807][T12659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.606425][T12659] bond0 (unregistering): Released all slaves [ 346.698468][T12825] lo speed is unknown, defaulting to 1000 [ 346.759869][T12833] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4. [ 346.815096][T12837] netlink: 'syz.4.2133': attribute type 1 has an invalid length. [ 346.877228][T12838] __nla_validate_parse: 10 callbacks suppressed [ 346.877251][T12838] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2133'. [ 346.978068][T12838] batadv0: entered promiscuous mode [ 346.990707][T12838] batadv0: entered allmulticast mode [ 347.092805][T12825] lo speed is unknown, defaulting to 1000 [ 347.149411][T12842] lo speed is unknown, defaulting to 1000 [ 347.863536][T12659] hsr_slave_0: left promiscuous mode [ 347.883234][T12659] hsr_slave_1: left promiscuous mode [ 347.901162][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.908698][T12659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.934960][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.953086][T12659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.983227][T12659] veth1_macvtap: left promiscuous mode [ 347.989253][T12659] veth0_macvtap: left promiscuous mode [ 347.993374][T12878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2147'. [ 347.995061][T12659] veth1_vlan: left promiscuous mode [ 348.011946][T12659] veth0_vlan: left promiscuous mode [ 348.330399][ T5848] Bluetooth: hci2: command tx timeout [ 348.664455][T12659] team0 (unregistering): Port device team_slave_1 removed [ 348.708693][T12659] team0 (unregistering): Port device team_slave_0 removed [ 349.144568][T12842] lo speed is unknown, defaulting to 1000 [ 349.144585][T12879] netlink: 'syz.0.2146': attribute type 21 has an invalid length. [ 349.144639][T12879] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2146'. [ 349.248146][T12825] chnl_net:caif_netlink_parms(): no params data found [ 349.552887][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.565409][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.584570][T12825] bridge_slave_0: entered allmulticast mode [ 349.602817][T12825] bridge_slave_0: entered promiscuous mode [ 349.705445][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.713458][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.739302][T12825] bridge_slave_1: entered allmulticast mode [ 349.746437][T12825] bridge_slave_1: entered promiscuous mode [ 349.868359][T12825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.922791][T12825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.214119][T12825] team0: Port device team_slave_0 added [ 350.252260][T12825] team0: Port device team_slave_1 added [ 350.409375][ T5848] Bluetooth: hci2: command tx timeout [ 350.479774][T12825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.489708][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.516919][T12825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.534793][T12825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.544360][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.573427][T12825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.700161][T12825] hsr_slave_0: entered promiscuous mode [ 350.710055][T12825] hsr_slave_1: entered promiscuous mode [ 350.721430][T12825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.731471][T12825] Cannot create hsr debugfs directory [ 350.962578][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 350.986818][T12951] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 351.010230][T12952] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 351.156270][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'. [ 351.481840][T12976] netlink: 'syz.4.2177': attribute type 10 has an invalid length. [ 351.501512][T12976] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2177'. [ 351.527401][T12982] netlink: 'syz.3.2179': attribute type 12 has an invalid length. [ 351.572414][T12982] FAULT_INJECTION: forcing a failure. [ 351.572414][T12982] name failslab, interval 1, probability 0, space 0, times 0 [ 351.596957][T12982] CPU: 0 UID: 0 PID: 12982 Comm: syz.3.2179 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 351.607814][T12982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 351.617924][T12982] Call Trace: [ 351.621244][T12982] [ 351.624208][T12982] dump_stack_lvl+0x241/0x360 [ 351.628949][T12982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.634202][T12982] ? __pfx__printk+0x10/0x10 [ 351.638841][T12982] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 351.645398][T12982] ? __pfx___might_resched+0x10/0x10 [ 351.650731][T12982] should_fail_ex+0x3b0/0x4e0 [ 351.655474][T12982] should_failslab+0xac/0x100 [ 351.660204][T12982] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 351.666592][T12982] ? kasprintf+0xd5/0x120 [ 351.670994][T12982] kvasprintf+0xdf/0x190 [ 351.675295][T12982] ? __pfx_kvasprintf+0x10/0x10 [ 351.680195][T12982] ? lockdep_unlock+0x16a/0x300 [ 351.685088][T12982] ? __pfx_lockdep_unlock+0x10/0x10 [ 351.690312][T12982] ? preempt_count_add+0x93/0x190 [ 351.695370][T12982] kasprintf+0xd5/0x120 [ 351.699570][T12982] ? __pfx_kasprintf+0x10/0x10 [ 351.704384][T12982] alloc_workqueue+0x121/0x210 [ 351.709180][T12982] ? ieee80211_register_hw+0x297c/0x3e10 [ 351.714842][T12982] ? __pfx_alloc_workqueue+0x10/0x10 [ 351.720243][T12982] ? rcu_is_watching+0x15/0xb0 [ 351.725035][T12982] ? trace_kmalloc+0x1f/0xd0 [ 351.729658][T12982] ieee80211_register_hw+0x2a2d/0x3e10 [ 351.735145][T12982] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.741505][T12982] ? ieee80211_register_hw+0x16f1/0x3e10 [ 351.747189][T12982] ? ieee80211_register_hw+0x15f1/0x3e10 [ 351.752869][T12982] ? ieee80211_register_hw+0x14f1/0x3e10 [ 351.758800][T12982] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 351.764664][T12982] ? __asan_memset+0x23/0x50 [ 351.769290][T12982] ? __hrtimer_init+0x170/0x250 [ 351.774182][T12982] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 351.779956][T12982] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 351.786069][T12982] hwsim_new_radio_nl+0xece/0x2290 [ 351.791217][T12982] ? __pfx___nla_validate_parse+0x10/0x10 [ 351.796973][T12982] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 351.802578][T12982] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 351.808939][T12982] genl_rcv_msg+0xb14/0xec0 [ 351.813479][T12982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.818628][T12982] ? __pfx_lock_acquire+0x10/0x10 [ 351.823761][T12982] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 351.829334][T12982] ? __pfx___might_resched+0x10/0x10 [ 351.834650][T12982] netlink_rcv_skb+0x1e3/0x430 [ 351.839433][T12982] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.844482][T12982] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.849808][T12982] genl_rcv+0x28/0x40 [ 351.853831][T12982] netlink_unicast+0x7f6/0x990 [ 351.858628][T12982] ? __pfx_netlink_unicast+0x10/0x10 [ 351.863937][T12982] ? __virt_addr_valid+0x45f/0x530 [ 351.869071][T12982] ? __phys_addr_symbol+0x2f/0x70 [ 351.874121][T12982] ? __check_object_size+0x47a/0x730 [ 351.879429][T12982] netlink_sendmsg+0x8e4/0xcb0 [ 351.884222][T12982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.889529][T12982] ? aa_sock_msg_perm+0x91/0x160 [ 351.894493][T12982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.899794][T12982] __sock_sendmsg+0x221/0x270 [ 351.904497][T12982] ____sys_sendmsg+0x52a/0x7e0 [ 351.909286][T12982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.914586][T12982] ? __fget_files+0x2a/0x410 [ 351.919206][T12982] ? __fget_files+0x2a/0x410 [ 351.923828][T12982] __sys_sendmsg+0x269/0x350 [ 351.928450][T12982] ? __pfx_lock_release+0x10/0x10 [ 351.933511][T12982] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.938659][T12982] ? __pfx_vfs_write+0x10/0x10 [ 351.943464][T12982] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 351.949813][T12982] ? do_syscall_64+0x100/0x230 [ 351.954597][T12982] ? do_syscall_64+0xb6/0x230 [ 351.959292][T12982] do_syscall_64+0xf3/0x230 [ 351.963831][T12982] ? clear_bhb_loop+0x35/0x90 [ 351.968529][T12982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.974469][T12982] RIP: 0033:0x7efffc585d19 [ 351.979082][T12982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.998718][T12982] RSP: 002b:00007efffd2e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.007172][T12982] RAX: ffffffffffffffda RBX: 00007efffc775fa0 RCX: 00007efffc585d19 [ 352.015595][T12982] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 352.023592][T12982] RBP: 00007efffd2e4090 R08: 0000000000000000 R09: 0000000000000000 [ 352.031695][T12982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.039680][T12982] R13: 0000000000000000 R14: 00007efffc775fa0 R15: 00007fff252a8ae8 [ 352.047684][T12982] [ 352.112778][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2181'. [ 352.127975][T12989] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 352.145977][T12990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2181'. [ 352.241777][T12991] tipc: Enabling of bearer rejected, failed to enable media [ 352.326364][T12825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.379545][T12825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.499129][ T5848] Bluetooth: hci2: command tx timeout [ 352.537513][T12998] lo speed is unknown, defaulting to 1000 [ 352.548934][T12825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.584314][T12825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.696980][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.716984][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.740519][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.747710][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.801877][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.809051][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.986357][T12998] lo speed is unknown, defaulting to 1000 [ 353.151542][T13022] FAULT_INJECTION: forcing a failure. [ 353.151542][T13022] name failslab, interval 1, probability 0, space 0, times 0 [ 353.166635][T13022] CPU: 1 UID: 0 PID: 13022 Comm: syz.3.2191 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 353.177471][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 353.187567][T13022] Call Trace: [ 353.190906][T13022] [ 353.193872][T13022] dump_stack_lvl+0x241/0x360 [ 353.198695][T13022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.203945][T13022] ? __pfx__printk+0x10/0x10 [ 353.208674][T13022] ? __kmalloc_cache_noprof+0x48/0x390 [ 353.214169][T13022] ? __pfx___might_resched+0x10/0x10 [ 353.219498][T13022] should_fail_ex+0x3b0/0x4e0 [ 353.224222][T13022] should_failslab+0xac/0x100 [ 353.228943][T13022] __kmalloc_cache_noprof+0x70/0x390 [ 353.234276][T13022] ? garp_init_applicant+0x184/0x450 [ 353.239604][T13022] garp_init_applicant+0x184/0x450 [ 353.244737][T13022] ? vlan_gvrp_init_applicant+0xd/0x20 [ 353.250224][T13022] register_vlan_dev+0x1eb/0x810 [ 353.255202][T13022] vlan_newlink+0x476/0x5c0 [ 353.259730][T13022] ? __pfx_vlan_newlink+0x10/0x10 [ 353.264803][T13022] rtnl_newlink_create+0x2ee/0xa40 [ 353.269947][T13022] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 353.275613][T13022] ? ns_capable+0x8a/0xf0 [ 353.279970][T13022] rtnl_newlink+0x160d/0x2150 [ 353.284783][T13022] ? __pfx_rtnl_newlink+0x10/0x10 [ 353.289827][T13022] ? __pfx_validate_chain+0x10/0x10 [ 353.295086][T13022] ? validate_chain+0x11e/0x5920 [ 353.300047][T13022] ? __pfx_lock_acquire+0x10/0x10 [ 353.305092][T13022] ? __pfx_lock_release+0x10/0x10 [ 353.310134][T13022] ? __pfx_validate_chain+0x10/0x10 [ 353.315356][T13022] ? mark_lock+0x9a/0x360 [ 353.319720][T13022] ? __lock_acquire+0x1397/0x2100 [ 353.324961][T13022] ? __pfx_lock_release+0x10/0x10 [ 353.330012][T13022] ? __pfx_rtnl_newlink+0x10/0x10 [ 353.335059][T13022] rtnetlink_rcv_msg+0x791/0xcf0 [ 353.340016][T13022] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 353.345149][T13022] ? __lock_acquire+0x1397/0x2100 [ 353.350212][T13022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 353.355705][T13022] netlink_rcv_skb+0x1e3/0x430 [ 353.360487][T13022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 353.365967][T13022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 353.371290][T13022] ? netlink_deliver_tap+0x2e/0x1b0 [ 353.376514][T13022] netlink_unicast+0x7f6/0x990 [ 353.381488][T13022] ? __pfx_netlink_unicast+0x10/0x10 [ 353.386793][T13022] ? __virt_addr_valid+0x45f/0x530 [ 353.391927][T13022] ? __phys_addr_symbol+0x2f/0x70 [ 353.396976][T13022] ? __check_object_size+0x47a/0x730 [ 353.402304][T13022] netlink_sendmsg+0x8e4/0xcb0 [ 353.407184][T13022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.412492][T13022] ? aa_sock_msg_perm+0x91/0x160 [ 353.417454][T13022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.422758][T13022] __sock_sendmsg+0x221/0x270 [ 353.427461][T13022] ____sys_sendmsg+0x52a/0x7e0 [ 353.432250][T13022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.437555][T13022] ? __fget_files+0x2a/0x410 [ 353.442177][T13022] ? __fget_files+0x2a/0x410 [ 353.446802][T13022] __sys_sendmsg+0x269/0x350 [ 353.451435][T13022] ? __pfx_lock_release+0x10/0x10 [ 353.456485][T13022] ? __pfx___sys_sendmsg+0x10/0x10 [ 353.461626][T13022] ? __pfx_vfs_write+0x10/0x10 [ 353.466515][T13022] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.472890][T13022] ? do_syscall_64+0x100/0x230 [ 353.477675][T13022] ? do_syscall_64+0xb6/0x230 [ 353.482395][T13022] do_syscall_64+0xf3/0x230 [ 353.486911][T13022] ? clear_bhb_loop+0x35/0x90 [ 353.491609][T13022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.497516][T13022] RIP: 0033:0x7efffc585d19 [ 353.501952][T13022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.521607][T13022] RSP: 002b:00007efffd2e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.530568][T13022] RAX: ffffffffffffffda RBX: 00007efffc775fa0 RCX: 00007efffc585d19 [ 353.538573][T13022] RDX: 0000000000008000 RSI: 0000000020000280 RDI: 0000000000000003 [ 353.546580][T13022] RBP: 00007efffd2e4090 R08: 0000000000000000 R09: 0000000000000000 [ 353.554571][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.562575][T13022] R13: 0000000000000000 R14: 00007efffc775fa0 R15: 00007fff252a8ae8 [ 353.570682][T13022] [ 353.582468][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2192'. [ 353.593168][T13018] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2192'. [ 353.643636][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.793070][T12825] veth0_vlan: entered promiscuous mode [ 353.819851][T12825] veth1_vlan: entered promiscuous mode [ 353.905177][T12825] veth0_macvtap: entered promiscuous mode [ 353.912403][ T9] IPVS: starting estimator thread 0... [ 353.945011][T12825] veth1_macvtap: entered promiscuous mode [ 354.001911][T12825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.043440][T13032] IPVS: using max 25 ests per chain, 60000 per kthread [ 354.055876][T12825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.087081][T12825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.099785][T12825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.109520][T12825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.118280][T12825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.569139][ T5848] Bluetooth: hci2: command tx timeout [ 355.008195][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2199'. [ 355.110349][ T29] audit: type=1107 audit(1734128257.326:7): pid=13043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 355.163594][T13041] lo speed is unknown, defaulting to 1000 [ 355.183750][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.203232][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.255602][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.275380][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.446321][T13055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2203'. [ 355.525460][T13056] veth0_to_bridge: entered promiscuous mode [ 355.536365][T13054] veth0_to_bridge: left promiscuous mode [ 355.586841][T13041] lo speed is unknown, defaulting to 1000 [ 355.765479][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2206'. [ 355.782610][T13062] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2206'. [ 355.857639][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2207'. [ 355.871920][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2207'. [ 356.388512][T13080] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.442058][T13083] lo speed is unknown, defaulting to 1000 [ 356.815813][ T8029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.941580][T13083] lo speed is unknown, defaulting to 1000 [ 357.301169][ T8029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.361124][ T8029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.453425][ T8029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.594425][ T8029] bridge_slave_1: left allmulticast mode [ 357.600759][ T8029] bridge_slave_1: left promiscuous mode [ 357.608602][ T8029] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.617830][ T8029] bridge_slave_0: left allmulticast mode [ 357.624241][ T8029] bridge_slave_0: left promiscuous mode [ 357.630144][ T8029] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.960409][ T8029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.971750][ T8029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.983652][ T8029] bond0 (unregistering): Released all slaves [ 358.630383][T13116] __nla_validate_parse: 2 callbacks suppressed [ 358.630406][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2220'. [ 358.748522][ T8029] hsr_slave_0: left promiscuous mode [ 358.778288][ T8029] hsr_slave_1: left promiscuous mode [ 358.802352][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.825137][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.837296][T13120] netlink: 204156 bytes leftover after parsing attributes in process `syz.2.2222'. [ 358.873061][T13120] netlink: zone id is out of range [ 358.880730][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.888493][T13125] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2220'. [ 358.900401][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 358.910919][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 358.910974][T13120] netlink: zone id is out of range [ 358.923701][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 358.924152][ T8029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.943549][ T5143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 358.959518][ T5143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 358.967193][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 358.967790][T13120] netlink: zone id is out of range [ 359.039544][T13120] netlink: zone id is out of range [ 359.047181][ T8029] veth1_macvtap: left promiscuous mode [ 359.053169][T13120] netlink: zone id is out of range [ 359.063344][T13120] netlink: zone id is out of range [ 359.068642][ T8029] veth0_macvtap: left promiscuous mode [ 359.078545][T13120] netlink: zone id is out of range [ 359.086227][ T8029] veth1_vlan: left promiscuous mode [ 359.094040][T13120] netlink: zone id is out of range [ 359.099482][ T8029] veth0_vlan: left promiscuous mode [ 359.099652][T13120] netlink: zone id is out of range [ 359.645539][ T8029] team0 (unregistering): Port device team_slave_1 removed [ 359.701397][ T8029] team0 (unregistering): Port device team_slave_0 removed [ 360.207376][T13122] lo speed is unknown, defaulting to 1000 [ 360.320940][T13142] netlink: 'syz.4.2227': attribute type 2 has an invalid length. [ 360.350357][T13142] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2227'. [ 360.388179][T13148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2230'. [ 360.484818][T13122] lo speed is unknown, defaulting to 1000 [ 360.646558][T13155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2231'. [ 360.672994][T13155] bond0: entered promiscuous mode [ 360.683115][T13155] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 360.692209][T13155] bond0: left promiscuous mode [ 360.739545][T13157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2233'. [ 360.920216][T13122] chnl_net:caif_netlink_parms(): no params data found [ 361.032390][T13165] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2235'. [ 361.050057][ T5848] Bluetooth: hci2: command tx timeout [ 361.122793][T13122] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.138514][T13122] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.176704][T13122] bridge_slave_0: entered allmulticast mode [ 361.189420][T13122] bridge_slave_0: entered promiscuous mode [ 361.206854][T13122] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.219083][T13122] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.226569][T13122] bridge_slave_1: entered allmulticast mode [ 361.234722][T13122] bridge_slave_1: entered promiscuous mode [ 361.318446][T13122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.350037][T13122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.486460][T13122] team0: Port device team_slave_0 added [ 361.514353][T13122] team0: Port device team_slave_1 added [ 361.528710][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2240'. [ 361.566057][T13122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.576340][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.607384][T13122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.621020][T13122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.628018][T13122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.662082][T13122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.726344][T13122] hsr_slave_0: entered promiscuous mode [ 361.734017][T13122] hsr_slave_1: entered promiscuous mode [ 361.749130][T13122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.756890][T13122] Cannot create hsr debugfs directory [ 361.796429][T13193] netlink: 'syz.2.2245': attribute type 10 has an invalid length. [ 361.945683][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2247'. [ 362.283620][T13122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 362.304085][T13122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 362.326956][T13122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 362.375160][T13122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.574992][T13220] syz_tun (unregistering): left promiscuous mode [ 362.601702][T13223] nr0: left promiscuous mode [ 362.673937][T13122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.722128][T13122] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.752572][T12134] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.759780][T12134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.812381][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.819605][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.133534][ T5143] Bluetooth: hci2: command tx timeout [ 363.265598][T13122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.371021][T13122] veth0_vlan: entered promiscuous mode [ 363.384989][T13122] veth1_vlan: entered promiscuous mode [ 363.438658][T13122] veth0_macvtap: entered promiscuous mode [ 363.474562][T13122] veth1_macvtap: entered promiscuous mode [ 363.552574][T13255] can: request_module (can-proto-4) failed. [ 363.562490][T13122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.580954][T13259] net_ratelimit: 4 callbacks suppressed [ 363.580974][T13259] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 363.584519][T13122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.662361][T13122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.673812][T13122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.700410][T13122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.714204][T13122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.870687][T13265] bridge0: entered allmulticast mode [ 363.903423][T13267] __nla_validate_parse: 3 callbacks suppressed [ 363.903448][T13267] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2271'. [ 363.953287][ T8029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.961295][ T8029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.045958][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2271'. [ 364.056332][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.065525][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.132805][T13275] tap0: tun_chr_ioctl cmd 1074025677 [ 364.138496][T13275] tap0: linktype set to 770 [ 364.326357][T13273] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2272'. [ 364.477229][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2275'. [ 364.816657][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'. [ 364.849652][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 364.864036][T13298] ip6gretap0: left promiscuous mode [ 364.870514][T13298] bridge0: port 1(ip6gretap0) entered disabled state [ 365.136983][T13318] bond0: (slave vlan0): Opening slave failed [ 365.156920][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2288'. [ 365.292890][ T1106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.175908][ T1106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.366479][ T1106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.404371][ T1106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.507951][ T1106] bridge_slave_1: left allmulticast mode [ 366.514513][ T1106] bridge_slave_1: left promiscuous mode [ 366.521302][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.532903][ T1106] bridge_slave_0: left allmulticast mode [ 366.538575][ T1106] bridge_slave_0: left promiscuous mode [ 366.544563][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.857103][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 366.866928][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2291'. [ 367.231680][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.243939][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.268933][ T1106] bond0 (unregistering): Released all slaves [ 367.357157][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.375354][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.393366][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.413766][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.424858][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 367.432440][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.566860][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 367.581272][T13342] lo speed is unknown, defaulting to 1000 [ 367.981154][T13342] lo speed is unknown, defaulting to 1000 [ 368.046243][T13365] bond0: option resend_igmp: invalid value (7540) [ 368.089261][T13365] bond0: option resend_igmp: allowed values 0 - 255 [ 368.624128][ T1106] hsr_slave_0: left promiscuous mode [ 368.632355][ T1106] hsr_slave_1: left promiscuous mode [ 368.660090][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.671302][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.681511][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.689803][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.736288][ T1106] veth1_macvtap: left promiscuous mode [ 368.741988][ T1106] veth0_macvtap: left promiscuous mode [ 368.747636][ T1106] veth1_vlan: left promiscuous mode [ 368.753119][ T1106] veth0_vlan: left promiscuous mode [ 368.754574][ T29] audit: type=1107 audit(1734128270.986:8): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¯' [ 368.960755][T13402] __nla_validate_parse: 6 callbacks suppressed [ 368.960778][T13402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2309'. [ 369.453876][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 369.508327][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 369.536117][ T5848] Bluetooth: hci2: command tx timeout [ 370.253221][T13342] chnl_net:caif_netlink_parms(): no params data found [ 370.261657][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'. [ 370.332295][T13438] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2316'. [ 370.373736][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2317'. [ 370.582737][T13342] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.590346][T13342] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.597749][T13342] bridge_slave_0: entered allmulticast mode [ 370.616457][T13342] bridge_slave_0: entered promiscuous mode [ 370.656470][T13342] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.674266][T13342] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.706614][T13342] bridge_slave_1: entered allmulticast mode [ 370.732787][T13342] bridge_slave_1: entered promiscuous mode [ 370.759993][T13437] lo speed is unknown, defaulting to 1000 [ 370.875695][T13461] xt_HMARK: spi-set and port-set can't be combined [ 370.920097][T13461] xt_HMARK: spi-set and port-set can't be combined [ 370.926844][T13461] xt_HMARK: spi-set and port-set can't be combined [ 370.971406][T13342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.983616][T13342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.075618][T13342] team0: Port device team_slave_0 added [ 371.088037][T13342] team0: Port device team_slave_1 added [ 371.155103][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 371.165821][T13470] netlink: 'syz.4.2327': attribute type 3 has an invalid length. [ 371.182275][T13437] lo speed is unknown, defaulting to 1000 [ 371.183535][T13342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.209394][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.244912][T13342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.259338][T13342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.266353][T13342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.296621][T13342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.402985][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 371.427602][T13342] hsr_slave_0: entered promiscuous mode [ 371.433774][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2330'. [ 371.443555][T13342] hsr_slave_1: entered promiscuous mode [ 371.461331][T13342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.477931][T13342] Cannot create hsr debugfs directory [ 371.484220][T13479] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 371.609762][ T5143] Bluetooth: hci2: command tx timeout [ 371.733719][T13489] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 371.919969][T13494] netlink: 'syz.0.2335': attribute type 1 has an invalid length. [ 371.962195][T13494] ------------[ cut here ]------------ [ 371.968005][T13494] WARNING: CPU: 0 PID: 13494 at net/rxrpc/sendmsg.c:296 rxrpc_send_data+0x2969/0x2b30 [ 371.977990][T13494] Modules linked in: [ 371.982356][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.0.2335 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 371.993588][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 372.003974][T13494] RIP: 0010:rxrpc_send_data+0x2969/0x2b30 [ 372.010096][T13494] Code: 24 48 48 89 de e8 77 33 b3 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 78 2e b3 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 8a f2 0d f7 e9 46 fd ff ff 89 d9 80 e1 [ 372.030141][T13494] RSP: 0018:ffffc9000b52f3a0 EFLAGS: 00010293 [ 372.036262][T13494] RAX: ffffffff8aec2fc8 RBX: ffff8880785bb080 RCX: ffff8880607e9e00 [ 372.044330][T13494] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffff8880574bd440 [ 372.052401][T13494] RBP: ffffc9000b52f650 R08: ffff8880574bd43f R09: 0000000000000000 [ 372.060637][T13494] R10: ffff8880574bd340 R11: ffffed100ae97a88 R12: ffff8880785bb048 [ 372.068655][T13494] R13: 1ffff1100f0b760f R14: ffff8880574bd000 R15: 0000000000000000 [ 372.076719][T13494] FS: 00007f1ee25f36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 372.085763][T13494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.092689][T13494] CR2: 00005555936135c8 CR3: 000000005c390000 CR4: 00000000003526f0 [ 372.100797][T13494] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.108904][T13494] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 372.116927][T13494] Call Trace: [ 372.120310][T13494] [ 372.123292][T13494] ? __warn+0x165/0x4d0 [ 372.127507][T13494] ? rxrpc_send_data+0x2969/0x2b30 [ 372.132696][T13494] ? report_bug+0x2b3/0x500 [ 372.137215][T13494] ? rxrpc_send_data+0x2969/0x2b30 [ 372.142400][T13494] ? handle_bug+0x60/0x90 [ 372.146754][T13494] ? exc_invalid_op+0x1a/0x50 [ 372.151495][T13494] ? asm_exc_invalid_op+0x1a/0x20 [ 372.156747][T13494] ? rxrpc_send_data+0x2968/0x2b30 [ 372.161963][T13494] ? rxrpc_send_data+0x2969/0x2b30 [ 372.167170][T13494] ? __pfx_rxrpc_send_data+0x10/0x10 [ 372.172576][T13494] ? __local_bh_enable_ip+0x168/0x200 [ 372.178049][T13494] ? lockdep_hardirqs_on+0x99/0x150 [ 372.183388][T13494] ? __local_bh_enable_ip+0x168/0x200 [ 372.188845][T13494] ? __pfx_default_wake_function+0x10/0x10 [ 372.194835][T13494] rxrpc_do_sendmsg+0x1569/0x1910 [ 372.199976][T13494] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 372.205398][T13494] ? rxrpc_sendmsg+0x127/0x920 [ 372.210430][T13494] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 372.216204][T13494] ? do_raw_spin_unlock+0x13c/0x8b0 [ 372.221482][T13494] ? rxrpc_sendmsg+0x5d8/0x920 [ 372.226286][T13494] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 372.231468][T13494] __sock_sendmsg+0x221/0x270 [ 372.236193][T13494] ____sys_sendmsg+0x52a/0x7e0 [ 372.241082][T13494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.246432][T13494] ? __fget_files+0x2a/0x410 [ 372.251214][T13494] ? __fget_files+0x2a/0x410 [ 372.255872][T13494] __sys_sendmmsg+0x36a/0x720 [ 372.260631][T13494] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.267097][T13494] ? __pfx___sys_sendmmsg+0x10/0x10 [ 372.272377][T13494] ? try_to_wake_up+0x9c3/0x1470 [ 372.277369][T13494] ? __pfx_lock_release+0x10/0x10 [ 372.282469][T13494] ? wake_up_q+0xdc/0x120 [ 372.286822][T13494] ? futex_wake+0x523/0x5c0 [ 372.291378][T13494] ? __pfx_futex_wake+0x10/0x10 [ 372.296356][T13494] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.301572][T13494] ? do_futex+0x392/0x560 [ 372.305948][T13494] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 372.312039][T13494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.318421][T13494] ? do_syscall_64+0x100/0x230 [ 372.323358][T13494] __x64_sys_sendmmsg+0xa0/0xb0 [ 372.328232][T13494] do_syscall_64+0xf3/0x230 [ 372.332968][T13494] ? clear_bhb_loop+0x35/0x90 [ 372.337671][T13494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.343644][T13494] RIP: 0033:0x7f1ee1785d19 [ 372.348073][T13494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.367835][T13494] RSP: 002b:00007f1ee25f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.376367][T13494] RAX: ffffffffffffffda RBX: 00007f1ee1975fa0 RCX: 00007f1ee1785d19 [ 372.384418][T13494] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 372.392499][T13494] RBP: 00007f1ee1801a20 R08: 0000000000000000 R09: 0000000000000000 [ 372.400664][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.408730][T13494] R13: 0000000000000000 R14: 00007f1ee1975fa0 R15: 00007ffd3f323888 [ 372.416862][T13494] [ 372.420020][T13494] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 372.427353][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.0.2335 Not tainted 6.13.0-rc2-syzkaller-00389-g2c27c7663390 #0 [ 372.438152][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 372.448229][T13494] Call Trace: [ 372.451536][T13494] [ 372.454498][T13494] dump_stack_lvl+0x241/0x360 [ 372.459215][T13494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.464478][T13494] ? __pfx__printk+0x10/0x10 [ 372.469115][T13494] ? _printk+0xd5/0x120 [ 372.473400][T13494] ? __init_begin+0x41000/0x41000 [ 372.478528][T13494] ? vscnprintf+0x5d/0x90 [ 372.482877][T13494] panic+0x349/0x880 [ 372.486793][T13494] ? __warn+0x174/0x4d0 [ 372.490971][T13494] ? __pfx_panic+0x10/0x10 [ 372.495441][T13494] __warn+0x344/0x4d0 [ 372.499464][T13494] ? rxrpc_send_data+0x2969/0x2b30 [ 372.504774][T13494] report_bug+0x2b3/0x500 [ 372.509146][T13494] ? rxrpc_send_data+0x2969/0x2b30 [ 372.514307][T13494] handle_bug+0x60/0x90 [ 372.518498][T13494] exc_invalid_op+0x1a/0x50 [ 372.523020][T13494] asm_exc_invalid_op+0x1a/0x20 [ 372.527891][T13494] RIP: 0010:rxrpc_send_data+0x2969/0x2b30 [ 372.533666][T13494] Code: 24 48 48 89 de e8 77 33 b3 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 78 2e b3 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 8a f2 0d f7 e9 46 fd ff ff 89 d9 80 e1 [ 372.553290][T13494] RSP: 0018:ffffc9000b52f3a0 EFLAGS: 00010293 [ 372.559384][T13494] RAX: ffffffff8aec2fc8 RBX: ffff8880785bb080 RCX: ffff8880607e9e00 [ 372.567375][T13494] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffff8880574bd440 [ 372.575454][T13494] RBP: ffffc9000b52f650 R08: ffff8880574bd43f R09: 0000000000000000 [ 372.583445][T13494] R10: ffff8880574bd340 R11: ffffed100ae97a88 R12: ffff8880785bb048 [ 372.591434][T13494] R13: 1ffff1100f0b760f R14: ffff8880574bd000 R15: 0000000000000000 [ 372.599428][T13494] ? rxrpc_send_data+0x2968/0x2b30 [ 372.604604][T13494] ? __pfx_rxrpc_send_data+0x10/0x10 [ 372.609910][T13494] ? __local_bh_enable_ip+0x168/0x200 [ 372.615349][T13494] ? lockdep_hardirqs_on+0x99/0x150 [ 372.620572][T13494] ? __local_bh_enable_ip+0x168/0x200 [ 372.625974][T13494] ? __pfx_default_wake_function+0x10/0x10 [ 372.631812][T13494] rxrpc_do_sendmsg+0x1569/0x1910 [ 372.636868][T13494] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 372.642257][T13494] ? rxrpc_sendmsg+0x127/0x920 [ 372.647040][T13494] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 372.652783][T13494] ? do_raw_spin_unlock+0x13c/0x8b0 [ 372.658002][T13494] ? rxrpc_sendmsg+0x5d8/0x920 [ 372.662791][T13494] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 372.667943][T13494] __sock_sendmsg+0x221/0x270 [ 372.672669][T13494] ____sys_sendmsg+0x52a/0x7e0 [ 372.677474][T13494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.682778][T13494] ? __fget_files+0x2a/0x410 [ 372.687392][T13494] ? __fget_files+0x2a/0x410 [ 372.692011][T13494] __sys_sendmmsg+0x36a/0x720 [ 372.696711][T13494] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.703085][T13494] ? __pfx___sys_sendmmsg+0x10/0x10 [ 372.708305][T13494] ? try_to_wake_up+0x9c3/0x1470 [ 372.713274][T13494] ? __pfx_lock_release+0x10/0x10 [ 372.718336][T13494] ? wake_up_q+0xdc/0x120 [ 372.722680][T13494] ? futex_wake+0x523/0x5c0 [ 372.727213][T13494] ? __pfx_futex_wake+0x10/0x10 [ 372.732095][T13494] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.737229][T13494] ? do_futex+0x392/0x560 [ 372.741588][T13494] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 372.747591][T13494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.753973][T13494] ? do_syscall_64+0x100/0x230 [ 372.758797][T13494] __x64_sys_sendmmsg+0xa0/0xb0 [ 372.763695][T13494] do_syscall_64+0xf3/0x230 [ 372.768216][T13494] ? clear_bhb_loop+0x35/0x90 [ 372.772943][T13494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.778851][T13494] RIP: 0033:0x7f1ee1785d19 [ 372.783277][T13494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.803010][T13494] RSP: 002b:00007f1ee25f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 372.811534][T13494] RAX: ffffffffffffffda RBX: 00007f1ee1975fa0 RCX: 00007f1ee1785d19 [ 372.819525][T13494] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 372.827511][T13494] RBP: 00007f1ee1801a20 R08: 0000000000000000 R09: 0000000000000000 [ 372.835496][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.843477][T13494] R13: 0000000000000000 R14: 00007f1ee1975fa0 R15: 00007ffd3f323888 [ 372.851476][T13494] [ 372.854658][T13494] Kernel Offset: disabled [ 372.859049][T13494] Rebooting in 86400 seconds..