last executing test programs: 5.351312001s ago: executing program 4 (id=309): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 5.237386565s ago: executing program 4 (id=311): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000140), 0x0, 0x810, &(0x7f0000000000)={0xa, 0x0, 0x8, @empty, 0x800, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xd3, &(0x7f0000000040)=""/211, 0x0, 0x6, '\x00', r1, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) 5.136179124s ago: executing program 4 (id=312): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'netdevsim0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "60c0dabb5b1426c4d39d6ca8f9e9b04f2598c3e8ca765c99257ba3ec12b64f21", "56234d41007178f07ce6e42270fbe2024bcc1b66d284ba6d4e79b07e5a2f036d", "d2e79b3c2756637d6823684de723331b49fe227470a7a99cc515e59d4a895167", "1c3215327faa228e1192e65bb2df9f393360e736a386f1d3e71cb741a0d9d110", "fe52afb405057833d62bf514c5cd9a58d5d3b660635aa1122c07d848a5c2eea7", "6c769b011440601e8500", 0xffffff48, 0x80000001, 0xe, 0x6, 0x9}}) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080)) socket(0x3, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) accept4(r0, 0x0, &(0x7f0000000000), 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'netdevsim0\x00', &(0x7f00000005c0)=@ethtool_drvinfo={0x3, "60c0dabb5b1426c4d39d6ca8f9e9b04f2598c3e8ca765c99257ba3ec12b64f21", "56234d41007178f07ce6e42270fbe2024bcc1b66d284ba6d4e79b07e5a2f036d", "d2e79b3c2756637d6823684de723331b49fe227470a7a99cc515e59d4a895167", "1c3215327faa228e1192e65bb2df9f393360e736a386f1d3e71cb741a0d9d110", "fe52afb405057833d62bf514c5cd9a58d5d3b660635aa1122c07d848a5c2eea7", "6c769b011440601e8500", 0xffffff48, 0x80000001, 0xe, 0x6, 0x9}}) (async) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080)) (async) socket(0x3, 0x0, 0x4) (async) 4.67753743s ago: executing program 4 (id=315): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000080)=0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b049, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000480)={'gretap0\x00', r7, 0x7800, 0x1, 0xfffffff9, 0x80000001, {{0x21, 0x4, 0x0, 0x24, 0x84, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0xfffffffffffffef3, 0x82, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x5, 0x2}, {0x6585a3322059b481, 0x2}, {0x6, 0x12, "d7a66fb3b620c4acc86794d1e04b5bec"}, {0x7, 0x3, 'L'}, {0x5, 0x10, "2174b3d778afd71078c6b5291447"}, {0x7, 0x7, "a091f3b166"}, {0x2, 0xc, "dd893b49f585371cda22"}, {0x7, 0x7, "415d4aae10"}, {0x1, 0xa, "a6e4457f1ecce483"}]}, @lsrr={0x83, 0x7, 0xca}]}}}}}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0xfd31}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r4, r5}}}], 0x20, 0x4004c}}], 0x1, 0x4) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000001c0)={0x0, r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r4, r8, 0x0, 0x53, &(0x7f0000000540)='#F](/]\x00\x1d\x1a\x1f\xd06\xdc\xc7\xbfk\xeexx\xb8;\xdb\xe7-/1\xe1}\xd1\x8a\x90\xd1\xd4\xae\xc8\xa1\xa5@\xffD4k\xd1\xb9\xd6\x16=Y\xb0\x171yJ0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4a0, 0x2c, 0xd27, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x8}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x470, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x10, 0xffe0}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x14fa8}, @TCA_FLOW_POLICE={0x45c, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0xa3e, 0x1, 0x80, 0x80000001, 0x3, {0x16, 0x1, 0xe5b, 0x5, 0x9, 0x2}, {0x7, 0x0, 0x2, 0x0, 0xfffe, 0xfffff976}, 0x0, 0x200, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1ff, 0xa4, 0x7, 0x101, 0x7, 0x8, 0xfffff000, 0x3, 0x0, 0xfffffffd, 0x1, 0x3932685, 0x4, 0x0, 0x5, 0x8, 0x0, 0x8, 0xfffffffd, 0x9, 0x0, 0x4, 0x1000, 0x8, 0x9, 0x66c, 0x3b8f5929, 0x3, 0x9, 0xa, 0x101, 0x3, 0x4, 0x8, 0xf0a, 0x800, 0x1, 0x1, 0x47905ebf, 0xfffffffe, 0x1, 0x1, 0xa, 0xf7f0, 0x3, 0x401, 0x7, 0xc, 0xa, 0xf, 0x7, 0xff0b882, 0x7ff, 0x55, 0xd, 0x2, 0xad, 0x2, 0x80000001, 0x0, 0x7fffffff, 0x6, 0x4, 0x2, 0x6c, 0x0, 0x5, 0x5, 0x57, 0x3, 0x14, 0x2d9, 0x0, 0x3, 0x0, 0x5, 0xab7, 0x9abb, 0x48, 0xfff, 0x8, 0x1, 0x4, 0x40, 0x8d23, 0xffff, 0x3, 0x31b, 0x8, 0x1, 0x9, 0x1, 0x5, 0x4, 0x7, 0x5, 0x8, 0x9, 0x53, 0xffffffff, 0x10000, 0x8, 0x7, 0x892, 0xb, 0x4bfbd968, 0x401, 0x2, 0x6, 0xa2c7, 0x3, 0xfffffffb, 0x16eae2cc, 0x3, 0x9, 0x3, 0x6, 0x4, 0x4, 0x0, 0x9, 0x7, 0x8, 0x1, 0x6, 0xff, 0x6, 0x3, 0x6, 0xfffffffd, 0x0, 0x6, 0x4, 0x3, 0x2, 0xffffffee, 0x10001, 0xba87, 0x1000, 0xb, 0x4000000, 0x10001, 0x9, 0x4, 0x2, 0x8, 0x3, 0x5, 0xffffffc1, 0x200, 0x5, 0x80, 0x1800, 0x3ff, 0x5b6, 0xb245, 0x4, 0x5, 0x401, 0xb, 0x9, 0x4, 0x790, 0xb, 0x400, 0xedd1, 0x6, 0x7ff, 0x8, 0x1ff, 0x4, 0xfffffffd, 0x0, 0x0, 0x7, 0x3, 0x5, 0x3, 0x6f2d, 0x3, 0xe1, 0x6, 0x5, 0x40, 0x28, 0x8000000, 0x1, 0x5, 0x9, 0xd5, 0x905f, 0x2, 0x1, 0xffff, 0x8, 0x80, 0x6fd, 0x65dd, 0x8, 0x3272, 0x4, 0x497, 0x6, 0x7fffffff, 0x8, 0x3, 0x6, 0x400, 0xa, 0xfee6, 0xff, 0x7, 0x0, 0x7, 0x5406, 0x7, 0x1, 0x6, 0x0, 0x5, 0x2, 0x81, 0x80000000, 0x7, 0xf, 0x1000, 0x0, 0x75, 0x6, 0x10801, 0x200, 0x4, 0xff, 0xe7, 0x40, 0x0, 0x401, 0x47ac2596, 0x39, 0xffffffff, 0x6, 0x1ff, 0x2, 0x2, 0x2, 0xffffe9e6, 0x3, 0x5, 0x8, 0x1, 0x3, 0xfffffffe, 0x3, 0xaf79, 0x101]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000000001000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]}]}}]}, 0x4a0}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r9, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf0900000000000055090800000000009500000000000000bf91000000000000b7020000000000008500000011000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x0) 4.406332787s ago: executing program 2 (id=321): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 4.246129786s ago: executing program 4 (id=322): r0 = socket$alg(0x26, 0x5, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000) (async) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xae, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000500)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000900000028000000", @ANYRES32, @ANYBLOB="e7074693d90000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611280008c0000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r8}, 0x10) (async) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r9 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 4.078914897s ago: executing program 2 (id=326): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newsa={0x184, 0x10, 0x1, 0x3, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x80ff, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x100, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x4, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm(aes-arm)\x00'}, 0x0, 0x40}}]}, 0x184}}, 0x0) 3.596672974s ago: executing program 2 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="15000000100000000800"/20, @ANYRES32=0x1, @ANYBLOB="030000ca00000000000000d500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r3], 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="55e17d64350f000027040000000800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000100feffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="631000000024001a8020000a0000000000070000000000bb05000800000000008b714ff88d1f66f8ffff4b638d95ad6cd96c25f289417e668ad992cdddcce28349b0bc67b300000000006ac2d50479afc1f8cc3c0b0000"], 0x44}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000005600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x5}}}}]}, 0x44}}, 0x4) r12 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r7, 0x0, 0xa, 0x1000, &(0x7f0000000340)="edd515f906fc6f5c474c", &(0x7f00000010c0)=""/4096, 0x2, 0x0, 0xd, 0x72, &(0x7f0000000380)="d41f623d07221b7dba6731171b", &(0x7f0000000500)="057d44e3a1e6a51e5a04b20c4dcb185ce41e9b5f73b0b85291b8c497f422d0bb69528f771e4cb8a1751c0dd94b97466315b52bde210ffe969ebfb8c0800099099fcbc551815383f748cf58946c73f43811144fa52183591a516fadcda67545ce841d1eeb15fd0596d545348f7d90dfa53212", 0x0, 0x0, 0x7d}, 0x50) sendto(r12, &(0x7f00000000c0)="120000001200e7ef007b0000", 0xc, 0x0, 0x0, 0x0) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r14, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f00000004c0)={r14, 0xe}, 0x8) 3.526463145s ago: executing program 4 (id=331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x2, 0xf000000) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1, 0x0, 0x0, 0x4000}, 0x4040000) (async) close(r3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) (async) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x4, 0x2, 0xff, 0x2, 0x0, 0xb88f}, &(0x7f0000001200)=0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0003010000000000000000017c0000040008800c00018006000600800a000008000280040015"], 0x76}, 0x1, 0x0, 0x0, 0x10}, 0xc000) (async) listen(r3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0x46, &(0x7f0000000040)=0x800002, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008e00)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000100000004001f00d0460180ca465a80080015", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYBLOB], 0x46e8}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb0805010b018c08518cc0c5c41df7c177cdb366e040fd23321e161f57e65fabf0bb241d20038ca5dcf76cc10616d8a95f17e7f4f067de5874edc378b810eff2b723696d302da371552de0e206a3872af9a32c538bd2562485ba2ecc53b75e16f8124e72b1a0498138d8bd63d1ad958a47259f6f6535dd7e948a1e5018518e9c64fe50e11555831e8df0ceb866e71179f8955ebbd965bedaeba0be3bf483038758ceb35d8844cb8c67cc35bf8db7f9708669240903aa0b1c8ee062e395e3d9f629890bd688fc5a552770755dff6bb66603b288fc9758be943e384a607852ea616900d816b6b652e6bd7fe928ae714d2dfa85867a04a510b8584cd22a87a7cea449a1b2dd7a76705c0562bfdbe41f54ef9f7f21de15ddf541b8003d4827ff595bc1d83d9d994e68bb5bd79159bbd78fcc8d9b8b6ff286e9f24ec188a9de6129789d415e891438bef0c169fb4a60e83f5ac82008bd70a9f35abbbea4012f7beda4b57340a9c357434ab2e411e9d22a8a7a156a981d56db12d007ef934ac765567ebe10125a1de0659bcd51b4cf2d83aedd7ba8682e0bd8957621c42d56788b9ffd7bd9a898fd80583dc4983b584ffe87c17c6ef156c6122ba18984f605c8cf696ad467e15f9a476ec2712c5b9fd538d2052681867a55d9eff9d235341192ca9bbe37b0df7fee1cbdef9c7438e0b53ba54e93c52a06b05548ccdf2a678a237d6d5d874c4af926eed5952f06f84e33233f6d707476a47d56c902a5f0e582f29623614b16c20d24db95e6dbe993dd87607825fcb2a5ffc778aaf210888187d720c21b3271cb3c75ced4fbf84e3e861e61d6f157d474d60cb8ab4006dd1a6442f8c0d4fbd4dc62effdb144e77c84691f263d657169da21e9c17b7669c80368d032d67a363988b821e281efc873b09960a00eb695a50403c1fb39d98891c96cdf1c756500e515985caf49eaa402a734fa00b599a1a82d336b54a4def8f3648e10ad1580d3cbe1a3f71093647947e7c8b25e59b08f73d6469477c5034d8f7d74f163d5360476639ccfd9f87de9a0ee9af9a4439454956bb8e5acf7a9905aaf2c64b9c2fe1d4623b34b7ce2b09815eaf4411ceef3c6ac554da3310b647592e98d320c1a69f67b4bffa0d8abf0731a4ee4eea8fc2613d4125966e26fd41e254a0c3071c1e225d5c95bb51a5e6871fab02ff9254dbca1b9ebcfe286862d47ca79c52ded061f920ab1ee4c7d14b0a2c6b8fe8397e75f531db3f140e53f6a4525c5ab687882fe3eae06736f527cd64dfa21bf405ffe6315c2a97b3e0bd5d0b0501d8efa8918acf8f42f193b80ecfa4283db29541e763e8508a386424f0905a94904d6afe7a46b0ce252f08baf9e57c209dd37b89a282beb6be8387e09e09b530c92ae2d09dc18c1a2cef427f9129354015eaaf79f4050de6ca46e7564501a4117f7672598a1bf6dfc2d68393deabb41cbb3fe2bec7a3e6c0e9ceac5761d6b358f1ab2c3aa86c25ba70bf09412f47c90d032bec6041240ea7cf5a1d890d17e26a72ce1ae8a6733d6f353017624d20c485706ff47d6c055a84fdb79b1fee63e93d884d3ac6682d509ebb211beb71bb6334019ace96d5a769408ae2fa18849ab95a6f83276152bd7ccd5cb1a53d9024d0be19e7fb1e3adceec1a448d5fce82f9df027b31d4e1ff1f491306cd1eeed73cf0d07b70806cca3bd1e6c1f2d85de71e2114f27212626b9283f493f0822db323fded4d15d4e6043cb20625071fc672ad698e145f6474240a1b00f8a80e04a5f24e3bc072bec6a58fef60d39b241d6e3ec66c044136f305001ebf4ff51ce94bf167da3242689b3099bddd1be2aea659c3ac416c4e094eb193fa59da96b31c57cd111d5b163532ee9f675a15410c0e4423229b3a17b64d19c57ad10dba1e14412585f21ebbc841ac39ae6dcd6267f8846ab80ad4dd9bcb0226f593af7f537dccc5ef9a5a49815f385543c91b91481dcd4bb903d650f2e0074f07ef06f3d4ef6c375491cd0c07896f91ba3caaea409ee532bfcdc3c3557a3f63e84b83b6870ffe7b1e2dbf1ceac0b0e1a5d0404e9897b40429f6f00d7b325b16b8e59764b9905b6bb508744690c653ab77c25ed81548d81b9c7fec8bc4db5a748e2fdd73024185b20c68f22a210eef6315f1d0a9f92b939f7c67e7b867eddfe110dc5b151eff47c35d3daa8a49da7a474f27c4f83e21bffbd90c463e25ba8cbb485b34deec8cde125dd56c58baf286309ddbf42da245cb85d6ee351cb8032616987aed6a436bb83bc363ec19845bbc8e29caeb4fd1167c67be26b28cb8f6aae57698290f2e1af7b056334941ec38b5c89d12ffe40f6d309070765db5f18c4fcd683746ac617adb9350cc44c1cde881e0dfd86e2d9b00d01bc2bbc5a3ff5b8be6b58c49f241469d2d097f226c1230f3f062ce8a168f0ce3aae2a102c8079cd16e99c186748eb1449d71836d851629619f2c389f38ec023cf111ad3beb5cbb9e208142ddb2b11895e4fd3afe9d6e72a9478ed3bc3c41853a65b5879ac60b202d39761cbeef98d0688370f7d868253128b0c8d1cf3372061d68d750b0bdecb56cfd3be3184725f144bce826211a2529f63ec26e6354a45e3948a17135d1ccdefca2309683033248371ac09660f4e25e9316766b151188b2a97fa8c7a4220d895bda4d79c008381c08e342f0691a28e99067c3927bd8b587dda4f1c38153909eccaf2177a9b200663b41aecb8d92e7e02cb6277e7953baa69efe2f8be3fa0ee6adfbb1ed928c42dc26550de1778ee5ac94395482efb0eac5b15538dd5dbe371557e984114edd935cd2d3453ceb832840f21538b452ce915cfcfea148d35f651e78688f332b7428583a9082deb94375cc4d585c2b2c1d50974b54b1c1fd5318add59192128a444c3f00599275a48487bc02d209b76a57864dd591796005539b8048e1965f3588c4ce71d3714c9640844061e4c09abc2e8ffe0de03cd5b2e6f6809d856d9fe165952a1146b0939c57dfbc41129301407d2fc5e8b481a84fc7e1c13fa4f2d1813311cf7506bc5352eefc87d1ab021271fe29f817e1ef882f8ed5b4a5d9c2f8706764949a3b795e1c3b4516ce6a8a16a54cf7ccec112fe4e745960df6c43014e8bdbe73e161611ba46755cb75d7c69d3c63a3be43e57cc06d30848f920ad27d921dcae2750888811f49f7eddef5fc83f55d4bc4ed424aa3f2dd10770d5a4c7f61b4496df04dcae509a147e6ff5840fd60c674f873fc4c4782b99e00b302e5a61e6e63edc554d3d42d10840b9e37601c2919502feae3fb953eab21582b9b94902bf908cbea4714e7e61c7cfc1f75193698228a00bf8380ad37f3fc2260e2279d4c6e4624e30b1a3b7320589fc72c592adb23ead08fc7ce4b5aa7780cf6b82f51f0d94e974858ac5a1174f90a720775c105f43a2f374d576c103fa369850d8f1a5997f06db5000811a255b7ccf26747264d15c69ddc3bacae2fe81a42b8ff000e19d7942fe6aca890d8caa42a246d304526707067f28a29053db2f1b1a6c25086a5757faba186d6e5db951915f6559d4d5647a5a88667cb09d5afe7c39dff6ca536f6c486059b0dd735d9bd3c2e35d8c6d21c5ae76b1fd8ade01888f4e2b045d38aa2a39b4e81ddc4d5676532390785d45609331543fd3231936426dcf52248affabd7623033020e61966ec136d6350e75ebd5505c98c8fe8464b3af565afa845aac17ac491426239f0adc0497bbd0e54ba9c05927895cc188f8bce2d315a3ee36e2863eb2a223c72cfe1637adf006f99a977262328c2b9b1adacf442eb0967ab49c9c3ac02a99aeead957f044e46a74b49e996fe4ef1d5baf798d554516007298be33fd8e38dcf49060fa55c554b00418c489c7ce46855f858b98ce3ce163eb2793840e56eaedd7cf33a39c25da9d5c285cf6d978c910e0574b04abeeeb94e0db5badc3fe3ffc6e7451bc6b62d271512f12dc2b098357ff51dcce7b4015e4ac084908f3c49cd3a7c1536e3fdcca94e82362d60e781cb414af45af7f73d0c8517f221eba91dcb7f517b8a5104d1f1a53e0c468163654ed312c329ddfa6dbae3b19ba82a4652937198898e32394ea6ad080b1fbaeec0dd8ae4f28ead734b60632dc21e8acae64c6af92814966c65927768fcbf584dcf25b77b1ef13a8e1574909b93b142116b3da99fce2aa914b7054000ced4ca832f8256d2e1a9b7e0e775e3f3b9900d7909682d48db4f389c80aa8ae24c76b3cea0b2d82af07e1c9b14849df01adadfe5d590c3676c51c4ffeb44d744a7b4677733c51beebb97a4bfcfecc42e5a763d229895a3b15a2b7c3d2535df9b227c58b87b90aef6d0605e7eb52e362fea865da95d41c657bfc1f70b2132a47131f4f882c672d2782e06e78abf1c30f4f7b6d9026d57b11ce00d6fed4dda5adb5f97c97111e8d55401634eef043e97db34d1cc87fe732509eb81660b2f4681b5cef69096652a4152b1128315ea937938abafbb086f9da1604c58c1e77bd135b936f633cdc8197efd5d4ff08c8eae41712572e25b7eef0cd0e10a04a8f2655bee58e9b70c9dfa25f0eb091f0fc45f4aeac148985bc692bc477fa1f2329df6c99e90bf22860fd681bcd3a97d69f7bf8df90baf62ddf1dd24a80b54f8fb9c841e466840fe07a78f4270136193af0853f0210d6a606921ceb3c8833b9cf20576380d18f0758b146d509a493080ce9d2c5e6b7e62553c464ad9b40576bcb3cab66fc27787034112b3391e114ba5c5215fe41ea971da6731a4eec6b368c8453395deb6c3654e66947b5c25cd2bcb5ea79be710963bd7ad71d7d01b6fc7197c1619518809f78165bc7d6942d6d335686a7a0705465e32d963a0a75688950f4fbe3916b0650c963cd3b1e895bb434ffef300e927da22a05199476bf988af53c27e34ec4db7a7d648a95201d0fabf057263d517f697822f09a00f93af7e1d426db5716856097b3759385076afd62c153e9300248cbd1b8909d379cfa9d16a16e3fb6e278ab963fd3103a858429a46e30e702c1fb2f8aa516945512f109abd764ab44953bef5d8ee8fec77a095723b1b8467e96af19d256a7ff442b62cea82cd0078280fabe23231f5ee1f74ca332112d13868a6899d566cd9d2d51aa56fd54a900af9a48bd210e90d2d4c92aa5e57279832f7c4382c0088e6fb372cb7504968f19387370a8ceef4523e20cda17bcd46ceab4d483b0f67a1dfa682d52804cdde569a0feb39f93ee0f94c3519d55c6f1fcf6cef2d0e663f0f049384cec9a32a319dd84edc48bfa494b13a6f9c6c5cd69e57001510211f842ed4bccf5bec5161cb34b9e48be5ed27189534e16144c102322d012ea91305c484a7f7dab0c30797139010c8ba5b82f1e9522351762df8c2f7a4913cdf4dfd9cbe7b201079394d9eeed673cb1b779bb0b7ef646b411a19bacc3aaaff3314078e33b421a8bf1f37656eb97b3187fbb0c0ac795575fe8ad567ebc4c006211a5a441022d213c8801e2b1dae5557af0eca9b5e146814462e07038453e3fa1bb1f6327a0adbe01515e6fa492c0e6a05dc29a28c9d544cd276e8d117051ef2f3b66ce12a3b9d18d5d318388111841a10c0c312a9b392e0a0e674a99300b67e2d94aad3a5119d3bfccc3e25b553644ba5f173b5a5a37ff0aa9bf46f88d839c05e7284965205890b8b0c337553b571529e1a18a0e9eb52251232bf87c935afc0e9d14320007b36db37e9d9d151f16618de0f1f9c015859df6f6b0657950791f9f0957d2342829a8e4afedd4c8475d97e8a97f4d3e468ce21e074f8521152ac8bc2b2"], 0x1011) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYBLOB="d41b00003b0007010000000000000000017c00000400fc801000018054717f8008213700", @ANYRES32, @ANYBLOB="ac1b02"], 0x1bd4}}, 0xc000) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0x9, 0x4) (async) getsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, &(0x7f0000000240)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0x24e, 0xfffffffffffffcb7, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 3.037933101s ago: executing program 2 (id=335): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x10000ec}}], 0x18}}], 0x1, 0x0) r1 = socket$kcm(0x10, 0x4, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x28) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x10000008ebc, 0x4) pread64(r6, &(0x7f0000001140)=""/4109, 0xfffffe08, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000240)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0x69c4, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="a98835c2b5980000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r9}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000000000000400008004001000"], 0x18}], 0x1}, 0x0) 3.037515282s ago: executing program 3 (id=336): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 2.82295597s ago: executing program 1 (id=337): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x24020400) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000280)=0xffff8000, 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) syz_emit_ethernet(0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="aa2acbaaaab44080c30000000800451000540000000000069078640101f8ab1414aa01004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0c02000090780000080a00000006fffffffffe06e2d4c3d9080a0000020000000009050a0000000200000002fe06f98943ec0000"], 0x0) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000500)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='memory.low\x00', 0x2, 0x0) 2.672673586s ago: executing program 3 (id=338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$alg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) recvmsg$unix(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/6, 0x6}], 0x1}, 0x100) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r10) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a55cf11daf5085c56babc3c9", @ANYRES16=0x0, @ANYBLOB="658300000000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000400000040000000"], 0x28}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000700)={0x10c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x181, 0x5d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ba}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_SSID={0x10, 0x34, @random="b68e8ffd4f5181a77171522e"}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c4bf23c60a"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}], @NL80211_ATTR_SSID={0x17, 0x34, @random="2925581df0f6c316761e7ef1aa4141975f5237"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008080) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x38, r1, 0x100, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x38}, 0x1, 0x0, 0x0, 0x8891}, 0x20000010) 2.602070868s ago: executing program 1 (id=339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x39c, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffeffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf1, 0x3, "8cf7d2fbdd8be34741f12ab5afb8feff6f298b2e31d3ae3343f36c0684f313083c9a515e661fef0be0b45495e40a048545d1f7dcb4d310ed8ae58e430118b012241ed431ee6d234c830ec98eed4f260b41794a4c566cce5a4e35152c9d7a67ed46c321e6831780815346907dfd960e936d56fbbe0370bd5e7653f2ef2284f8f578dea07b704c65f20f87aceed2f72548311377e067cf7bc8458292c63b69d57b6eaf8cd5a1f4d147149fbb688d6fc2d0fe521b17d53bb11f6364e6180ce2041683eb9f8dc3fea8444551517e9c53e06355c98bd22f1446a88f4a39a43eccb25b4e8bf2d6aeb3e07e2aaad250bc"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x14c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa63}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15fea1cd}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf4f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa4f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6a6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x82da}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfee}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8d8f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbd3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000700)={0x10000000}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x0, 0x0, 0x7fff, 0x8, {{0x19, 0x4, 0x1, 0x2, 0x64, 0x65, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @multicast2, {[@ssrr={0x89, 0x27, 0x9f, [@empty, @multicast1, @broadcast, @remote, @empty, @private=0xa010100, @rand_addr=0x64010101, @multicast1, @empty]}, @end, @lsrr={0x83, 0x1b, 0x36, [@multicast1, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0xc, 0x16, 0x3, 0xf, [{@remote, 0x300}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000640)={'ip_vti0\x00', r6, 0x20, 0x10, 0xc, 0x1, {{0x10, 0x4, 0x2, 0x4, 0x40, 0x64, 0x0, 0xad, 0x29, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x99, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp_prespec={0x44, 0xc, 0x32, 0x3, 0x5, [{@private=0xa010100, 0x336}]}]}}}}}) 2.543079146s ago: executing program 0 (id=340): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000500)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (fail_nth: 4) 2.403869418s ago: executing program 2 (id=341): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x1100, &(0x7f0000000780)={&(0x7f0000000bc0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6f}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.134887251s ago: executing program 0 (id=342): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socket$netlink(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r4, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5ae341dbac30653a130057a4cddc7c7e153f6c8fa49896613e0dbe5e8183be97ea9486821fa12ed926f35a8b42e55079654448773f4dff0000000000000000", 0x13) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0xf, &(0x7f00000010c0)=ANY=[@ANYRES64=r5, @ANYBLOB="20ee79f505ae38dd4a0e767528ebe47196c5eb2296bd0fb44d5afe066b880cf95635cafbc57e4eecfc011525c8b48f54a8d7c261522eeb2f870e26aff2704aa213615b6bec2527160f6b18174aafed4390c9503cf6386751207712454f8660d230e19759e73c0e7210248b9fd3b0da552c06ca06a67f7a0d8f3093c97358c33446a7546aa983d72c11e433b1308715975fe20757c7332dbeaf3f2811b53f7e997c1e4ac75acee426e76f7ed7dc6203c250c3acd3248573980084a23babbf294dd40e9de4095317be66b663e46ac5fec76383c0dc87e4b8f9a962e01e3bf1da623af9268277a38acbbbe8f146f44a260a04510000000000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x7533, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000001940)=ANY=[@ANYBLOB="d4060000cecb86a858f590c97155b1dfcecd0ffb498871d1ed5196c56c5b031b981d85094ce5963b2d166a2ea08a1e857ff5381a2eb3bb277159a78ec0fb09c59b4cbbdb36bad99a9563fc0df5860f8af15c112a9e11daf16870619a4914e721b7ac875d4309d254a3400ba60ba51ffa31913b7cb1ee225f56ee7483ea11fff9e5909c188daa414c21fccf752a9b266e885fb6efcf05af5943aef777db23c00cd739f9ecd657623f0fb897d8ea7307a5ae1a502ed141d4924f775a0ed57bcca3185eb443085029a214c7b84b62dd5353422dd70830ade6310dff6cd40142cc461ddcb4c680", @ANYRES16=0x0, @ANYBLOB="000825bd7000fedbdf250c0000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300050000007400038067000500a4cb90df8a7eee6950bd433d65d9644dc4e86720a33db3989360ac8005aba1cbacf7e88f0b43a38196d2e1a74adf0a506e6eca79bf4201251530a2782a1c2be9a8f77d883c93d64c8f74826c409e779665aee15287506302c0a4fe96fec33ab253b98b000800020008000000680001801400020076657468305f746f5f68737200000000080003000100000008000300000000000800030003000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="14000200636169663000000000000000000000001400020070696d36726567300000000000000000f0000380ec000380080001800400030038000180080001005a0000000400030008000100020000000800010001800000080001000500000004000300080001000600000004000300040001803400018008000100010001000500020000000000070002006c6f000016000200626c6b696f2e6266712e736563746f727300000008000180040003003000018004000300080001000300000008000100ff010000040003000400030008000100470f0000080001000500000004000180340001800800010004000000040003000c0002002b2d235d252a5c00080001000800000008000100ff07000008000100000200008800038083000500aa916850d0b12804def1bbd6bcd6c23e2f015201d54180563f2245a886e05cb275b1cadf1f17a78708617be832183c3da33723987ee43d6cbd250d580aeb30f03f163ce4971b9f2a53befee280e1301c472b04d0fd133d21084cb362f5f555244120f62130478fafd6a3d9e6f3953166bfdee2d33639cb4b214aba0c32965200ec010380d10004009f024a1798b44f0660a1c599afd7aa52cfdf777b93ee8abe7845c5303f916caaa9d9d65f0eefd1df7508cb25b56ce4ec9434b724f7e2fd32572be43838796911df411bf67f2a96c86112d87419acbe28d5777c92afb47181b09f1f183936b497d344984ac825ebfa669e676d223df5d65fd1f139e8ae98dd1135e7b331febba96361bff8e1c4c4482360bd40eaa4feab53130c354368111b75be17fa4489f4a385abc5cb7a3133aa5f10f39121ae2dda86d581013990cdbcaa9270ad8bd103e5cdccf1cbe5806ac4a7832bb94f00000094000400a8aa55c6229ad9000e089746bec4e27192a51569f0f0758d20ee88015b93244b157d0adf99d051fd751d3957844350eb772ba5b0f3d2b4d767edf8ed7323f74a65c56824aab0e76ff2e405e467a5d1bbc75ad783f9e5211f824a085956dfd12b793f82cb3ba5e62ea92e1b0002a5072d90f2e675d8678a49e398a6f243de9ac6aeb1516a0f838844ce5a4d1f919f497308000200070000006f000400cbfd5f9cc64695456712c4e5600de8170c25bfd3be1e91b975e4c50b23d2d9a85e8e28794189dce3c5a595d72c42eadf28e5da7f5e461f702699ae04a8176fb4377d7cccffb3f0a7850e1936a08187fee11e8eeafc3133146c405541ba814a9011d314783453bd2d96869900080002000700000074010380d80003800c00018004000300040003004800018008000100030000000800010008000000040003000400030004000300050002000000000016000200516c6b696f2e2e736563746f32730000000000000800010004000000300001800400030008000100e60100000800010010000000110002004e4c424c5f434950534f763400000000040003000c0001800800010003000000340001800a000200776c616e310000000800010006000000110002004e4c424c5f434950534f7634000000000800010000000000100001800400030008000100ce0c00003000038028000180090002002f5b5d270000000004000300080001000600000004000300080001000900000004000180080002000f0000004d00040002231f1c5d04021eea4b823e482f2e027bbc024459aa167a3b2c6c265459b27d288d63fc86cf9859098c0c216677357ed905ade374d1074a5b75fd9df1ed8d4223db66e43ff18b5c69000000080002004400000008000200f0ffffffb40003804f00040092eb1aec63380039f7ffffffffffffffa9f0a52b410c0700004e6e9d1c2e5f1da5100b7491ccd3bd364056b86dff2a2de0f601000000003ae22acf68580000000000000000000000000000005d000500a03c459bc612932ee6a5d483dcc6e71344a49e01ae745b9502bd616ec1c6e8272ce8ddd04c36828ad030f29943df4385f237f441f344778ef568e4eba8f2474e75f93f6bd792d330d57925156feb4f63b2aea544dc7e55e14d00000004000180"], 0x6d8}}, 0x4000041) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="80010000", @ANYRES16=r3, @ANYBLOB="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"], 0x180}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="00010000", @ANYRES16=r9], 0x100}, 0x1, 0x0, 0x0, 0x2004811}, 0x40000) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r10, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 1.906144703s ago: executing program 2 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) unshare(0x68040200) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x810, 0xffffffffffffffff, 0xfff7f000) (async) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe, 0x9}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth1\x00', 0x1}) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000de0200"/28], 0x48) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000d3d1b6cc3b38b9e6c9fc6b890b81043e00000000604f39"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5992a015}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r7, 0xe0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x8, 0x0, 0x0}}, 0x10) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="0e0c02a9c25f2ad44a5c70e304196beaf4fb3747451889314ea3c921faed4945855ba09d162150d71402cca83521f46c0bf5eee0e810aa9bd356aa84eaacd561e55d0f6ffeb6218c447035528e67e7c4e59f51120c47cff1a6830a3e8724470cf53b73447ce3a8b4500301aa56fc13a0587f82bc9bcafc7cf3e5efb8b35642a61b8d91022a4e6690a74b6f34114dfbfbd99d0dac1cc79bc64e26b14355762c99f90d4bdcb0b60e322e0cc500"/185}, {&(0x7f0000000380)="51a58fafdef31778e03dcd46ed8c4c3b8577e8edfffffffb4a4d473e230f1f"}], 0x10000000000000ae) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r8]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x0) (async, rerun: 32) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91", 0x14}, {0x0}], 0x2}, 0xb00) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x9c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x53b}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_FLAGS={0x8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x1}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e63}]}}}]}, 0x9c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async, rerun: 64) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x20000007) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0], 0x7c}}, 0x80) 1.833489394s ago: executing program 3 (id=344): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000bc0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x11}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6f}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.335209769s ago: executing program 1 (id=345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@allocspi={0x130, 0x16, 0x8, 0x70bd28, 0x25dfdbfb, {{{@in6=@local, @in=@multicast2, 0x4e23, 0xf, 0x4e23, 0xe, 0x2, 0x20, 0x0, 0x3a}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x6c}, @in=@private=0xa010100, {0x8, 0x100, 0x5, 0x7, 0x1000, 0x20000000000001, 0x0, 0x10000}, {0x2, 0x9, 0x9b8b, 0x195d}, {0x9, 0x6, 0x81}, 0x70bd25, 0x3501, 0xa, 0x1, 0xda, 0xec}, 0x3, 0x32b}, [@srcaddr={0x14, 0xd, @in=@remote}, @lifetime_val={0x24, 0x9, {0x9, 0x2, 0x3, 0x8}}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) 1.27516942s ago: executing program 1 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800209d798f3acc6eaa67b503400000000a080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000e08000240000000010900010073797a30000000000900020073797a320000000014000000110001000000"], 0xb0}}, 0x0) 1.230773117s ago: executing program 3 (id=347): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000040)) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 1.198316845s ago: executing program 0 (id=348): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 1.011074024s ago: executing program 1 (id=349): accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x6c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4c, 0x1, 0x0, 0x1, [@nested={0x48, 0x10, 0x0, 0x1, [@typed={0x42, 0x8, 0x0, 0x0, @binary="509d5dba6c50869ca71ec714b69739fc7eb4464e4b4c200003f460a768d2149821eb570d55bdf9c7ec33e87d6b7b3328f40e7a7ee63fd9ecdfdecf44f1ed"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000280)=0x3ff, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x3e, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) 851.524779ms ago: executing program 3 (id=350): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x3ffe, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x82ae}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0xffff, 0x4, [0x0, 0x2, 0x1, 0xfff7]}, &(0x7f0000000180)=0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r4, &(0x7f0000000680)={0xa, 0x4e21, 0xffff, @empty, 0x8000}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newsa={0x184, 0x10, 0x1, 0x3, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x100, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x4, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm(aes-arm)\x00'}, 0x0, 0x40}}]}, 0x184}}, 0x0) 813.267706ms ago: executing program 0 (id=351): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0xfffffff3, 0x0, 0x6, 0x4, 0x3]}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40041}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x9, 0x1, ']+^{\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040084}, 0x10) 527.162729ms ago: executing program 3 (id=352): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x10000ec}}], 0x18}}], 0x1, 0x0) r1 = socket$kcm(0x10, 0x4, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x28) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x10000008ebc, 0x4) pread64(r6, &(0x7f0000001140)=""/4109, 0xfffffe08, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000240)) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0x69c4, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="a98835c2b5980000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r9}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c00010000000000000000000400008004001000"], 0x18}], 0x1}, 0x0) 479.728364ms ago: executing program 0 (id=353): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x232000, 0x1000}, 0x20) 18.471798ms ago: executing program 1 (id=354): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4) sendmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x14, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3}}}, 0x24}}, 0x20040000) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x148, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "da1cc5b5b5f8d88d93e63385eee674a2394a579adb8e44e9c59d46822605bcda97887d60955904fabd922ffff333092d1407625c1693a46ddcbdd1b3d522732f2d2e6c827195122d6badccae53ab1961baf4d6e1cfa786a55381fcf9577f8f74f1e15a803e667c8c7a5b07ed05a9adbdce0ef5efe6785e3194975284eac7d296bc00d5e4fb689925cfa254d859141c0948c62a0e64eac0edd2cc5a298550ed37889721fdce10fae3f5dad41ee3adb0d30f3712d3659790e6963bba39e73696c06a7dbf959ba3374d904f2e5c5a1c933b1b432e54d178164a14ebffd5ed9303bae4fccf0e236f08e7839594071410b51a4415bdb2a319658ad3135351b3a34e9f"}, @TCA_RED_PARMS={0x14, 0x1, {0x3, 0x1, 0xd, 0x8, 0x18, 0x14, 0x8}}]}}]}, 0x148}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r0, 0xffffffffffffffff, 0x2b, 0x0, 0x4000, @void, @value}, 0x10) 0s ago: executing program 0 (id=355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newsa={0x184, 0x10, 0x1, 0x3, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@mcast2, {0x0, 0xffffff80, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x100, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x4, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm(aes-arm)\x00'}, 0x0, 0x40}}]}, 0x184}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 58.875149][ T5822] cgroup: Unknown subsys name 'net' [ 59.028308][ T5822] cgroup: Unknown subsys name 'cpuset' [ 59.036178][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.405020][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.619729][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.628338][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.628621][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.637455][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.645566][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.652212][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.666216][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.666778][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.682003][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.687925][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.689358][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.712148][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.724267][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.726642][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.732182][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.740822][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.754409][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.754728][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.762399][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.776578][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.777360][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.794661][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.804663][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.812120][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.862005][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.875529][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.886441][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.899542][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.910629][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.918153][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.220460][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 63.299362][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 63.365537][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 63.404474][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.412075][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.420916][ T5832] bridge_slave_0: entered allmulticast mode [ 63.428509][ T5832] bridge_slave_0: entered promiscuous mode [ 63.475241][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.483328][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.491422][ T5832] bridge_slave_1: entered allmulticast mode [ 63.501520][ T5832] bridge_slave_1: entered promiscuous mode [ 63.559528][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 63.579048][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.596397][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.603791][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.611220][ T5833] bridge_slave_0: entered allmulticast mode [ 63.618089][ T5833] bridge_slave_0: entered promiscuous mode [ 63.655736][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.680643][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.688622][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.696905][ T5833] bridge_slave_1: entered allmulticast mode [ 63.703582][ T5833] bridge_slave_1: entered promiscuous mode [ 63.763033][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.772138][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.779693][ T5835] bridge_slave_0: entered allmulticast mode [ 63.789959][ T5835] bridge_slave_0: entered promiscuous mode [ 63.800696][ T5832] team0: Port device team_slave_0 added [ 63.809171][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.821755][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.856119][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.863904][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.871459][ T5835] bridge_slave_1: entered allmulticast mode [ 63.879118][ T5835] bridge_slave_1: entered promiscuous mode [ 63.887247][ T5832] team0: Port device team_slave_1 added [ 63.919901][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.927217][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.934619][ T5843] bridge_slave_0: entered allmulticast mode [ 63.941279][ T5843] bridge_slave_0: entered promiscuous mode [ 63.970914][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 63.983801][ T5833] team0: Port device team_slave_0 added [ 63.992328][ T5833] team0: Port device team_slave_1 added [ 63.999739][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.009553][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.018705][ T5843] bridge_slave_1: entered allmulticast mode [ 64.027499][ T5843] bridge_slave_1: entered promiscuous mode [ 64.037760][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.055449][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.062533][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.088535][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.143009][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.161513][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.169964][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.197119][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.219346][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.226587][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.252648][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.271486][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.300728][ T5835] team0: Port device team_slave_0 added [ 64.317247][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.324423][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.353605][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.372909][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.400420][ T5835] team0: Port device team_slave_1 added [ 64.469077][ T5843] team0: Port device team_slave_0 added [ 64.478791][ T5832] hsr_slave_0: entered promiscuous mode [ 64.486238][ T5832] hsr_slave_1: entered promiscuous mode [ 64.492954][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.500063][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.526031][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.538586][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.545602][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.571766][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.590054][ T5833] hsr_slave_0: entered promiscuous mode [ 64.596546][ T5833] hsr_slave_1: entered promiscuous mode [ 64.602774][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.610835][ T5833] Cannot create hsr debugfs directory [ 64.618703][ T5843] team0: Port device team_slave_1 added [ 64.654299][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.661637][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.669231][ T5848] bridge_slave_0: entered allmulticast mode [ 64.676271][ T5848] bridge_slave_0: entered promiscuous mode [ 64.692628][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.700183][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.726145][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.738707][ T5842] Bluetooth: hci0: command tx timeout [ 64.746383][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.753660][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.761376][ T5848] bridge_slave_1: entered allmulticast mode [ 64.768417][ T5848] bridge_slave_1: entered promiscuous mode [ 64.786233][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.793246][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.820080][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.893433][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.902770][ T5842] Bluetooth: hci1: command tx timeout [ 64.903169][ T5842] Bluetooth: hci2: command tx timeout [ 64.908687][ T5846] Bluetooth: hci3: command tx timeout [ 64.933546][ T5835] hsr_slave_0: entered promiscuous mode [ 64.940656][ T5835] hsr_slave_1: entered promiscuous mode [ 64.946975][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.955296][ T5835] Cannot create hsr debugfs directory [ 64.969702][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.984676][ T5846] Bluetooth: hci4: command tx timeout [ 65.043988][ T5843] hsr_slave_0: entered promiscuous mode [ 65.050887][ T5843] hsr_slave_1: entered promiscuous mode [ 65.057619][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.065631][ T5843] Cannot create hsr debugfs directory [ 65.073554][ T5848] team0: Port device team_slave_0 added [ 65.081753][ T5848] team0: Port device team_slave_1 added [ 65.148451][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.156125][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.182241][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.218876][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.225957][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.252108][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.407283][ T5848] hsr_slave_0: entered promiscuous mode [ 65.413824][ T5848] hsr_slave_1: entered promiscuous mode [ 65.420491][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.428814][ T5848] Cannot create hsr debugfs directory [ 65.541204][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.565492][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.576086][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.596510][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.641736][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.651872][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.666729][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.686210][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.739435][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.750236][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.762638][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.773983][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.843847][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.868879][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.879267][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.903534][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.951792][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.976470][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.005589][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.016667][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.028675][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.043271][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.097437][ T4597] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.104785][ T4597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.159700][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.169649][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.176878][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.229952][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.273982][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.291287][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.309534][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.323145][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.330321][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.357050][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.364235][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.375628][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.382787][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.394327][ T4597] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.401610][ T4597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.478865][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.491037][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.548662][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.556000][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.582431][ T4936] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.589700][ T4936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.658315][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.687941][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.719817][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.727061][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.784052][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.791240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.815776][ T5846] Bluetooth: hci0: command tx timeout [ 66.921794][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.959291][ T5832] veth0_vlan: entered promiscuous mode [ 66.977289][ T5846] Bluetooth: hci3: command tx timeout [ 66.977341][ T5842] Bluetooth: hci1: command tx timeout [ 66.982757][ T5846] Bluetooth: hci2: command tx timeout [ 66.992324][ T5832] veth1_vlan: entered promiscuous mode [ 67.055018][ T5846] Bluetooth: hci4: command tx timeout [ 67.093538][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.111080][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.147209][ T5832] veth0_macvtap: entered promiscuous mode [ 67.169701][ T5833] veth0_vlan: entered promiscuous mode [ 67.209066][ T5832] veth1_macvtap: entered promiscuous mode [ 67.230756][ T5833] veth1_vlan: entered promiscuous mode [ 67.271998][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.315521][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.341913][ T5843] veth0_vlan: entered promiscuous mode [ 67.372062][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.390598][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.400412][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.410750][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.419712][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.432318][ T5833] veth0_macvtap: entered promiscuous mode [ 67.441469][ T5843] veth1_vlan: entered promiscuous mode [ 67.453096][ T5833] veth1_macvtap: entered promiscuous mode [ 67.539978][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.551872][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.563383][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.575483][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.586149][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.600893][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.617876][ T5835] veth0_vlan: entered promiscuous mode [ 67.635158][ T5843] veth0_macvtap: entered promiscuous mode [ 67.649270][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.658451][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.668087][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.677365][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.709484][ T5843] veth1_macvtap: entered promiscuous mode [ 67.736444][ T5835] veth1_vlan: entered promiscuous mode [ 67.769560][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.780687][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.792812][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.803630][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.817585][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.836943][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.848240][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.860599][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.871850][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.882019][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.895552][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.906306][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.925663][ T5835] veth0_macvtap: entered promiscuous mode [ 67.939224][ T5848] veth0_vlan: entered promiscuous mode [ 67.949907][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.959331][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.968157][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.976944][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.014165][ T5835] veth1_macvtap: entered promiscuous mode [ 68.043014][ T5848] veth1_vlan: entered promiscuous mode [ 68.053210][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.061654][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.069407][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.069448][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.069459][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.101712][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.111682][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.122339][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.133287][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.140818][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.158310][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.211274][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.222191][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.232282][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.242842][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.252740][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.264128][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.277156][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.287210][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.296681][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.305634][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.314351][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.332559][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.335428][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.356088][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.407607][ T5848] veth0_macvtap: entered promiscuous mode [ 68.460451][ T5848] veth1_macvtap: entered promiscuous mode [ 68.522644][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.544332][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.547671][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.569411][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.611651][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.623822][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.640416][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.653085][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.659558][ T5920] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1'. [ 68.669249][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.682943][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.695801][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.739957][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.774618][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.792303][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.803032][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.822052][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.832918][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.843445][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.855546][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.867305][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.883708][ T5924] sctp: [Deprecated]: syz.1.6 (pid 5924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.883708][ T5924] Use struct sctp_sack_info instead [ 68.900326][ T5846] Bluetooth: hci0: command tx timeout [ 68.908508][ T5924] x_tables: duplicate underflow at hook 1 [ 68.937248][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.946840][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.956015][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.965623][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.978212][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.999767][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.054930][ T5846] Bluetooth: hci1: command tx timeout [ 69.060461][ T5846] Bluetooth: hci3: command tx timeout [ 69.066546][ T5842] Bluetooth: hci2: command tx timeout [ 69.091308][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.100031][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.135117][ T5842] Bluetooth: hci4: command tx timeout [ 69.172868][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.172938][ T5931] Zero length message leads to an empty skb [ 69.199732][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.346311][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.394801][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.500290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.545199][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.631958][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.918217][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.972910][ T5959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.997383][ T5960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'. [ 70.066388][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 70.193835][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.202866][ T5958] Bluetooth: MGMT ver 1.23 [ 70.228331][ T5949] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 70.507954][ T5977] netlink: 'syz.2.13': attribute type 9 has an invalid length. [ 70.599815][ T5980] netlink: 140 bytes leftover after parsing attributes in process `syz.0.12'. [ 70.714818][ T5977] syz.2.13 (5977) used greatest stack depth: 19152 bytes left [ 70.811065][ T5987] bond_slave_0: entered allmulticast mode [ 70.873004][ T5987] pim6reg: entered allmulticast mode [ 70.969998][ T5998] pim6reg: left allmulticast mode [ 70.989026][ T5842] Bluetooth: hci0: command tx timeout [ 71.097174][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 71.135339][ T5842] Bluetooth: hci3: command tx timeout [ 71.141496][ T5842] Bluetooth: hci1: command tx timeout [ 71.144692][ T5846] Bluetooth: hci2: command tx timeout [ 71.200007][ T6007] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 71.215841][ T5846] Bluetooth: hci4: command tx timeout [ 71.372760][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.618224][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.630611][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.678779][ T6010] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.718771][ T6010] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 71.873424][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 72.045186][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 72.207236][ T6028] netlink: 76 bytes leftover after parsing attributes in process `syz.1.22'. [ 72.268618][ T6026] bridge_slave_0: left allmulticast mode [ 72.284272][ T6026] bridge_slave_0: left promiscuous mode [ 72.296893][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.321081][ T6031] netlink: 256 bytes leftover after parsing attributes in process `syz.2.23'. [ 72.338433][ T6026] bridge_slave_1: left allmulticast mode [ 72.344142][ T6026] bridge_slave_1: left promiscuous mode [ 72.373150][ T6031] unsupported nlmsg_type 40 [ 72.380706][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.452741][ T6026] bond0: (slave bond_slave_0): Releasing backup interface [ 72.488413][ T6026] bond0: (slave bond_slave_1): Releasing backup interface [ 72.566845][ T6026] team0: Port device team_slave_0 removed [ 72.617714][ T6026] team0: Port device team_slave_1 removed [ 72.624357][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.634061][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.646487][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.664157][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.726507][ T6028] team0: Mode changed to "loadbalance" [ 74.117763][ T6059] __nla_validate_parse: 3 callbacks suppressed [ 74.117782][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30'. [ 74.182711][ T6042] syzkaller1: entered promiscuous mode [ 74.188700][ T6042] syzkaller1: entered allmulticast mode [ 74.661039][ T6069] team0: Failed to send options change via netlink (err -105) [ 74.700959][ T6077] openvswitch: netlink: IP tunnel TTL not specified. [ 74.702941][ T6069] team0: Failed to send options change via netlink (err -105) [ 74.720245][ T6069] team0: Mode changed to "activebackup" [ 74.931174][ T6074] bridge1: entered promiscuous mode [ 74.940032][ T6087] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 74.957635][ T6074] bridge1: entered allmulticast mode [ 75.110427][ T6087] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 75.221070][ T6089] macsec0: entered promiscuous mode [ 75.255303][ T6089] veth1_macvtap: left promiscuous mode [ 75.265044][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.40'. [ 75.307247][ T6089] macsec0 (unregistering): left promiscuous mode [ 75.372105][ T6100] netlink: 36 bytes leftover after parsing attributes in process `syz.3.42'. [ 75.681007][ T6108] FAULT_INJECTION: forcing a failure. [ 75.681007][ T6108] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 75.702221][ T6108] CPU: 1 UID: 0 PID: 6108 Comm: syz.2.47 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 75.702246][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.702259][ T6108] Call Trace: [ 75.702265][ T6108] [ 75.702273][ T6108] dump_stack_lvl+0x241/0x360 [ 75.702304][ T6108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.702322][ T6108] ? __pfx__printk+0x10/0x10 [ 75.702340][ T6108] ? __pfx_lock_release+0x10/0x10 [ 75.702370][ T6108] should_fail_ex+0x40a/0x550 [ 75.702397][ T6108] _copy_from_user+0x2d/0xb0 [ 75.702418][ T6108] copy_msghdr_from_user+0xae/0x680 [ 75.702444][ T6108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 75.702462][ T6108] ? __fget_files+0x2a/0x410 [ 75.702486][ T6108] ? __fget_files+0x2a/0x410 [ 75.702514][ T6108] __sys_sendmsg+0x209/0x350 [ 75.702537][ T6108] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.702565][ T6108] ? do_sys_openat2+0x17a/0x1d0 [ 75.702611][ T6108] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.702634][ T6108] ? do_syscall_64+0x100/0x230 [ 75.702655][ T6108] ? do_syscall_64+0xb6/0x230 [ 75.702676][ T6108] do_syscall_64+0xf3/0x230 [ 75.702694][ T6108] ? clear_bhb_loop+0x35/0x90 [ 75.702717][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.702740][ T6108] RIP: 0033:0x7f8055b8d169 [ 75.702758][ T6108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.702771][ T6108] RSP: 002b:00007f8056914038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.702789][ T6108] RAX: ffffffffffffffda RBX: 00007f8055da5fa0 RCX: 00007f8055b8d169 [ 75.702801][ T6108] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000003 [ 75.702811][ T6108] RBP: 00007f8056914090 R08: 0000000000000000 R09: 0000000000000000 [ 75.702821][ T6108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.702830][ T6108] R13: 0000000000000000 R14: 00007f8055da5fa0 R15: 00007fff2474bf38 [ 75.702855][ T6108] [ 76.290233][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'. [ 76.700504][ T6127] vxcan1 speed is unknown, defaulting to 1000 [ 76.727703][ T6127] vxcan1 speed is unknown, defaulting to 1000 [ 76.768771][ T6127] vxcan1 speed is unknown, defaulting to 1000 [ 76.802325][ T6144] warning: `syz.0.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.872646][ T6147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.57'. [ 76.918973][ T6127] infiniband syz2: set active [ 76.924812][ T6127] infiniband syz2: added vxcan1 [ 76.971911][ T6127] RDS/IB: syz2: added [ 76.977178][ T6127] smc: adding ib device syz2 with port count 1 [ 76.983701][ T6127] smc: ib device syz2 port 1 has pnetid [ 77.011104][ T5882] vxcan1 speed is unknown, defaulting to 1000 [ 77.022036][ T80] vxcan1 speed is unknown, defaulting to 1000 [ 77.046628][ T6127] vxcan1 speed is unknown, defaulting to 1000 [ 77.046695][ T6149] FAULT_INJECTION: forcing a failure. [ 77.046695][ T6149] name failslab, interval 1, probability 0, space 0, times 1 [ 77.169816][ T6127] vxcan1 speed is unknown, defaulting to 1000 [ 77.244738][ T6149] CPU: 1 UID: 0 PID: 6149 Comm: syz.1.58 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 77.244769][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.244779][ T6149] Call Trace: [ 77.244785][ T6149] [ 77.244793][ T6149] dump_stack_lvl+0x241/0x360 [ 77.244818][ T6149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.244835][ T6149] ? __pfx__printk+0x10/0x10 [ 77.244853][ T6149] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 77.244875][ T6149] ? __pfx___might_resched+0x10/0x10 [ 77.244900][ T6149] should_fail_ex+0x40a/0x550 [ 77.244926][ T6149] should_failslab+0xac/0x100 [ 77.244947][ T6149] kmem_cache_alloc_node_noprof+0x77/0x380 [ 77.244967][ T6149] ? __alloc_skb+0x1c3/0x440 [ 77.244984][ T6149] __alloc_skb+0x1c3/0x440 [ 77.245002][ T6149] ? __pfx___alloc_skb+0x10/0x10 [ 77.245027][ T6149] ? netlink_autobind+0xd6/0x2f0 [ 77.245047][ T6149] ? netlink_autobind+0x2b0/0x2f0 [ 77.245070][ T6149] netlink_sendmsg+0x634/0xcb0 [ 77.245098][ T6149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.245121][ T6149] ? aa_sock_msg_perm+0x91/0x160 [ 77.245148][ T6149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.245167][ T6149] __sock_sendmsg+0x221/0x270 [ 77.245190][ T6149] ____sys_sendmsg+0x53a/0x860 [ 77.245214][ T6149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.245229][ T6149] ? __fget_files+0x2a/0x410 [ 77.245253][ T6149] ? __fget_files+0x2a/0x410 [ 77.245281][ T6149] __sys_sendmsg+0x269/0x350 [ 77.245302][ T6149] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.245330][ T6149] ? do_sys_openat2+0x17a/0x1d0 [ 77.245375][ T6149] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.245398][ T6149] ? do_syscall_64+0x100/0x230 [ 77.245419][ T6149] ? do_syscall_64+0xb6/0x230 [ 77.245439][ T6149] do_syscall_64+0xf3/0x230 [ 77.245457][ T6149] ? clear_bhb_loop+0x35/0x90 [ 77.245480][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.245499][ T6149] RIP: 0033:0x7f844058d169 [ 77.245514][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.245526][ T6149] RSP: 002b:00007f84413e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.245544][ T6149] RAX: ffffffffffffffda RBX: 00007f84407a5fa0 RCX: 00007f844058d169 [ 77.245556][ T6149] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000003 [ 77.245566][ T6149] RBP: 00007f84413e9090 R08: 0000000000000000 R09: 0000000000000000 [ 77.245575][ T6149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.245584][ T6149] R13: 0000000000000000 R14: 00007f84407a5fa0 R15: 00007ffc903d5428 [ 77.245609][ T6149] [ 77.799534][ T6170] netlink: 232 bytes leftover after parsing attributes in process `syz.1.62'. [ 77.803694][ T6169] netlink: 232 bytes leftover after parsing attributes in process `syz.1.62'. [ 77.901079][ T6127] vxcan1 speed is unknown, defaulting to 1000 [ 78.360848][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 78.388121][ T6175] vxcan1 speed is unknown, defaulting to 1000 [ 78.636653][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 78.671200][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 78.682421][ T6190] tc_dump_action: action bad kind [ 78.831026][ T6127] vxcan1 speed is unknown, defaulting to 1000 [ 78.849083][ T5846] block nbd0: Receive control failed (result -32) [ 79.195484][ T6200] vxcan1 speed is unknown, defaulting to 1000 [ 79.228522][ T6212] __nla_validate_parse: 1 callbacks suppressed [ 79.228540][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 79.520050][ T6127] vxcan1 speed is unknown, defaulting to 1000 [ 80.030979][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 80.085137][ T6245] team0: No ports can be present during mode change [ 80.292020][ T6253] FAULT_INJECTION: forcing a failure. [ 80.292020][ T6253] name failslab, interval 1, probability 0, space 0, times 0 [ 80.354256][ T6253] CPU: 1 UID: 0 PID: 6253 Comm: syz.3.81 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 80.354282][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 80.354292][ T6253] Call Trace: [ 80.354298][ T6253] [ 80.354305][ T6253] dump_stack_lvl+0x241/0x360 [ 80.354331][ T6253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.354349][ T6253] ? __pfx__printk+0x10/0x10 [ 80.354368][ T6253] ? __kmalloc_noprof+0xb5/0x4c0 [ 80.354390][ T6253] ? __pfx___might_resched+0x10/0x10 [ 80.354408][ T6253] ? aa_get_newest_label+0xff/0x6f0 [ 80.354430][ T6253] ? genl_get_cmd+0x19e/0xce0 [ 80.354449][ T6253] should_fail_ex+0x40a/0x550 [ 80.354479][ T6253] should_failslab+0xac/0x100 [ 80.354499][ T6253] __kmalloc_noprof+0xdd/0x4c0 [ 80.354517][ T6253] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 80.354531][ T6253] ? apparmor_capable+0x13b/0x1b0 [ 80.354550][ T6253] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 80.354575][ T6253] genl_rcv_msg+0x80b/0xec0 [ 80.354598][ T6253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.354638][ T6253] ? __pfx_lock_acquire+0x10/0x10 [ 80.354659][ T6253] ? __pfx_wg_set_device+0x10/0x10 [ 80.354682][ T6253] ? __pfx___might_resched+0x10/0x10 [ 80.354719][ T6253] netlink_rcv_skb+0x206/0x480 [ 80.354741][ T6253] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.354759][ T6253] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.354793][ T6253] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 80.354828][ T6253] genl_rcv+0x28/0x40 [ 80.354843][ T6253] netlink_unicast+0x7f6/0x990 [ 80.354870][ T6253] ? __pfx_netlink_unicast+0x10/0x10 [ 80.354887][ T6253] ? __virt_addr_valid+0x45f/0x530 [ 80.354904][ T6253] ? __phys_addr_symbol+0x2f/0x70 [ 80.354919][ T6253] ? __check_object_size+0x47a/0x730 [ 80.354944][ T6253] netlink_sendmsg+0x8de/0xcb0 [ 80.354977][ T6253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.355003][ T6253] ? aa_sock_msg_perm+0x91/0x160 [ 80.355030][ T6253] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.355049][ T6253] __sock_sendmsg+0x221/0x270 [ 80.355074][ T6253] ____sys_sendmsg+0x53a/0x860 [ 80.355100][ T6253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.355115][ T6253] ? __fget_files+0x2a/0x410 [ 80.355139][ T6253] ? __fget_files+0x2a/0x410 [ 80.355169][ T6253] __sys_sendmsg+0x269/0x350 [ 80.355192][ T6253] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.355222][ T6253] ? do_sys_openat2+0x17a/0x1d0 [ 80.355271][ T6253] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.355295][ T6253] ? do_syscall_64+0x100/0x230 [ 80.355317][ T6253] ? do_syscall_64+0xb6/0x230 [ 80.355338][ T6253] do_syscall_64+0xf3/0x230 [ 80.355357][ T6253] ? clear_bhb_loop+0x35/0x90 [ 80.355381][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.355401][ T6253] RIP: 0033:0x7f897078d169 [ 80.355416][ T6253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.355429][ T6253] RSP: 002b:00007f8971555038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.355446][ T6253] RAX: ffffffffffffffda RBX: 00007f89709a5fa0 RCX: 00007f897078d169 [ 80.355458][ T6253] RDX: 0000000020000010 RSI: 0000400000001000 RDI: 0000000000000003 [ 80.355469][ T6253] RBP: 00007f8971555090 R08: 0000000000000000 R09: 0000000000000000 [ 80.355479][ T6253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.355488][ T6253] R13: 0000000000000000 R14: 00007f89709a5fa0 R15: 00007ffca7521498 [ 80.355516][ T6253] [ 80.708110][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'. [ 80.765389][ T6258] team0: No ports can be present during mode change [ 80.859519][ T6263] trusted_key: syz.0.85 sent an empty control message without MSG_MORE. [ 80.895509][ T6247] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 81.030017][ T6268] FAULT_INJECTION: forcing a failure. [ 81.030017][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 81.077588][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.0.87 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 81.077613][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.077623][ T6268] Call Trace: [ 81.077629][ T6268] [ 81.077636][ T6268] dump_stack_lvl+0x241/0x360 [ 81.077674][ T6268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.077693][ T6268] ? __pfx__printk+0x10/0x10 [ 81.077722][ T6268] should_fail_ex+0x40a/0x550 [ 81.077750][ T6268] should_failslab+0xac/0x100 [ 81.077772][ T6268] ? skb_clone+0x20c/0x390 [ 81.077788][ T6268] kmem_cache_alloc_noprof+0x70/0x380 [ 81.077815][ T6268] skb_clone+0x20c/0x390 [ 81.077837][ T6268] __netlink_deliver_tap+0x3c4/0x7f0 [ 81.077870][ T6268] ? netlink_deliver_tap+0x2e/0x1b0 [ 81.077887][ T6268] netlink_deliver_tap+0x19d/0x1b0 [ 81.077907][ T6268] netlink_unicast+0x7c4/0x990 [ 81.077932][ T6268] ? __pfx_netlink_unicast+0x10/0x10 [ 81.077948][ T6268] ? __virt_addr_valid+0x45f/0x530 [ 81.077965][ T6268] ? __phys_addr_symbol+0x2f/0x70 [ 81.077980][ T6268] ? __check_object_size+0x47a/0x730 [ 81.078004][ T6268] netlink_sendmsg+0x8de/0xcb0 [ 81.078034][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.078057][ T6268] ? aa_sock_msg_perm+0x91/0x160 [ 81.078084][ T6268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.078101][ T6268] __sock_sendmsg+0x221/0x270 [ 81.078123][ T6268] ____sys_sendmsg+0x53a/0x860 [ 81.078147][ T6268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.078161][ T6268] ? __fget_files+0x2a/0x410 [ 81.078184][ T6268] ? __fget_files+0x2a/0x410 [ 81.078214][ T6268] __sys_sendmsg+0x269/0x350 [ 81.078234][ T6268] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.078264][ T6268] ? do_sys_openat2+0x17a/0x1d0 [ 81.078313][ T6268] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.078337][ T6268] ? do_syscall_64+0x100/0x230 [ 81.078359][ T6268] ? do_syscall_64+0xb6/0x230 [ 81.078380][ T6268] do_syscall_64+0xf3/0x230 [ 81.078396][ T6268] ? clear_bhb_loop+0x35/0x90 [ 81.078420][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.078440][ T6268] RIP: 0033:0x7fc60cd8d169 [ 81.078455][ T6268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.078468][ T6268] RSP: 002b:00007fc60abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.078486][ T6268] RAX: ffffffffffffffda RBX: 00007fc60cfa5fa0 RCX: 00007fc60cd8d169 [ 81.078498][ T6268] RDX: 0000000020000800 RSI: 0000400000000100 RDI: 0000000000000003 [ 81.078509][ T6268] RBP: 00007fc60abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 81.078519][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.078532][ T6268] R13: 0000000000000000 R14: 00007fc60cfa5fa0 R15: 00007ffdf185c1d8 [ 81.078559][ T6268] [ 81.520075][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.91'. [ 81.543351][ T6280] team0: No ports can be present during mode change [ 81.711127][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 81.779642][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 81.820660][ T6295] team0: No ports can be present during mode change [ 81.844852][ T6300] FAULT_INJECTION: forcing a failure. [ 81.844852][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 81.881072][ T976] cfg80211: failed to load regulatory.db [ 82.004348][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.1.96 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 82.004374][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.004383][ T6300] Call Trace: [ 82.004389][ T6300] [ 82.004396][ T6300] dump_stack_lvl+0x241/0x360 [ 82.004421][ T6300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.004437][ T6300] ? __pfx__printk+0x10/0x10 [ 82.004454][ T6300] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 82.004479][ T6300] ? __pfx___might_resched+0x10/0x10 [ 82.004502][ T6300] should_fail_ex+0x40a/0x550 [ 82.004527][ T6300] should_failslab+0xac/0x100 [ 82.004547][ T6300] ? sock_alloc_inode+0x28/0xc0 [ 82.004565][ T6300] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 82.004590][ T6300] sock_alloc_inode+0x28/0xc0 [ 82.004607][ T6300] ? __pfx_sock_alloc_inode+0x10/0x10 [ 82.004622][ T6300] alloc_inode+0x65/0x1a0 [ 82.004644][ T6300] __sock_create+0x127/0xa30 [ 82.004672][ T6300] udp_sock_create4+0xda/0x670 [ 82.004688][ T6300] ? wg_socket_init+0x292/0xea0 [ 82.004707][ T6300] ? __pfx_lock_release+0x10/0x10 [ 82.004729][ T6300] ? __pfx_udp_sock_create4+0x10/0x10 [ 82.004755][ T6300] wg_socket_init+0x6c0/0xea0 [ 82.004781][ T6300] ? __pfx_wg_socket_init+0x10/0x10 [ 82.004800][ T6300] ? __pfx_wg_receive+0x10/0x10 [ 82.004836][ T6300] ? __local_bh_enable_ip+0x168/0x200 [ 82.004859][ T6300] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 82.004877][ T6300] ? dst_cache_reset_now+0x1f0/0x220 [ 82.004903][ T6300] wg_set_device+0x710/0x20d0 [ 82.004940][ T6300] ? __pfx___nla_validate_parse+0x10/0x10 [ 82.004962][ T6300] ? __pfx_wg_set_device+0x10/0x10 [ 82.005008][ T6300] ? __nla_parse+0x40/0x60 [ 82.005028][ T6300] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 82.005055][ T6300] genl_rcv_msg+0xb1f/0xec0 [ 82.005081][ T6300] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.005126][ T6300] ? __pfx_lock_acquire+0x10/0x10 [ 82.005147][ T6300] ? __pfx_wg_set_device+0x10/0x10 [ 82.005170][ T6300] ? __pfx___might_resched+0x10/0x10 [ 82.005201][ T6300] netlink_rcv_skb+0x206/0x480 [ 82.005223][ T6300] ? __pfx_genl_rcv_msg+0x10/0x10 [ 82.005242][ T6300] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.005277][ T6300] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 82.005320][ T6300] genl_rcv+0x28/0x40 [ 82.005335][ T6300] netlink_unicast+0x7f6/0x990 [ 82.005364][ T6300] ? __pfx_netlink_unicast+0x10/0x10 [ 82.005380][ T6300] ? __virt_addr_valid+0x45f/0x530 [ 82.005396][ T6300] ? __phys_addr_symbol+0x2f/0x70 [ 82.005410][ T6300] ? __check_object_size+0x47a/0x730 [ 82.005436][ T6300] netlink_sendmsg+0x8de/0xcb0 [ 82.005470][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.005495][ T6300] ? aa_sock_msg_perm+0x91/0x160 [ 82.005524][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.005542][ T6300] __sock_sendmsg+0x221/0x270 [ 82.005566][ T6300] ____sys_sendmsg+0x53a/0x860 [ 82.005592][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.005606][ T6300] ? __fget_files+0x2a/0x410 [ 82.005631][ T6300] ? __fget_files+0x2a/0x410 [ 82.005661][ T6300] __sys_sendmsg+0x269/0x350 [ 82.005684][ T6300] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.005715][ T6300] ? do_sys_openat2+0x17a/0x1d0 [ 82.005766][ T6300] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.005790][ T6300] ? do_syscall_64+0x100/0x230 [ 82.005812][ T6300] ? do_syscall_64+0xb6/0x230 [ 82.005833][ T6300] do_syscall_64+0xf3/0x230 [ 82.005851][ T6300] ? clear_bhb_loop+0x35/0x90 [ 82.005875][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.005895][ T6300] RIP: 0033:0x7f844058d169 [ 82.005909][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.005922][ T6300] RSP: 002b:00007f84413e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.005945][ T6300] RAX: ffffffffffffffda RBX: 00007f84407a5fa0 RCX: 00007f844058d169 [ 82.005956][ T6300] RDX: 0000000020000010 RSI: 0000400000001000 RDI: 0000000000000003 [ 82.005966][ T6300] RBP: 00007f84413e9090 R08: 0000000000000000 R09: 0000000000000000 [ 82.005975][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.005984][ T6300] R13: 0000000000000000 R14: 00007f84407a5fa0 R15: 00007ffc903d5428 [ 82.006011][ T6300] [ 82.453699][ T6304] netlink: 2992 bytes leftover after parsing attributes in process `syz.0.98'. [ 82.509306][ T6300] socket: no more sockets [ 82.520332][ T6300] wireguard: wg1: Could not create IPv4 socket [ 82.820893][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.103'. [ 82.918966][ T6327] team0: No ports can be present during mode change [ 83.040214][ T6334] netlink: 14 bytes leftover after parsing attributes in process `syz.1.106'. [ 83.091069][ T6341] team0: No ports can be present during mode change [ 83.420701][ T6353] FAULT_INJECTION: forcing a failure. [ 83.420701][ T6353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.438367][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.3.112 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 83.438389][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.438395][ T6353] Call Trace: [ 83.438400][ T6353] [ 83.438405][ T6353] dump_stack_lvl+0x241/0x360 [ 83.438426][ T6353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.438437][ T6353] ? __pfx__printk+0x10/0x10 [ 83.438449][ T6353] ? snprintf+0xda/0x120 [ 83.438465][ T6353] should_fail_ex+0x40a/0x550 [ 83.438483][ T6353] _copy_to_user+0x31/0xb0 [ 83.438497][ T6353] simple_read_from_buffer+0xca/0x150 [ 83.438512][ T6353] proc_fail_nth_read+0x1e9/0x250 [ 83.438528][ T6353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.438543][ T6353] ? rw_verify_area+0x243/0x630 [ 83.438552][ T6353] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.438565][ T6353] vfs_read+0x1f8/0xb40 [ 83.438576][ T6353] ? fdget_pos+0x254/0x320 [ 83.438590][ T6353] ? __pfx___mutex_lock+0x10/0x10 [ 83.438602][ T6353] ? __pfx_vfs_read+0x10/0x10 [ 83.438610][ T6353] ? do_sys_openat2+0x17a/0x1d0 [ 83.438625][ T6353] ? __fget_files+0x2a/0x410 [ 83.438639][ T6353] ? __fget_files+0x395/0x410 [ 83.438651][ T6353] ? __fget_files+0x2a/0x410 [ 83.438669][ T6353] ksys_read+0x18f/0x2b0 [ 83.438680][ T6353] ? __pfx_ksys_read+0x10/0x10 [ 83.438689][ T6353] ? do_syscall_64+0x100/0x230 [ 83.438703][ T6353] ? do_syscall_64+0xb6/0x230 [ 83.438715][ T6353] do_syscall_64+0xf3/0x230 [ 83.438726][ T6353] ? clear_bhb_loop+0x35/0x90 [ 83.438742][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.438754][ T6353] RIP: 0033:0x7f897078bb7c [ 83.438764][ T6353] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.438771][ T6353] RSP: 002b:00007f8971555030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.438782][ T6353] RAX: ffffffffffffffda RBX: 00007f89709a5fa0 RCX: 00007f897078bb7c [ 83.438789][ T6353] RDX: 000000000000000f RSI: 00007f89715550a0 RDI: 0000000000000004 [ 83.438794][ T6353] RBP: 00007f8971555090 R08: 0000000000000000 R09: 0000000000000000 [ 83.438800][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.438805][ T6353] R13: 0000000000000000 R14: 00007f89709a5fa0 R15: 00007ffca7521498 [ 83.438819][ T6353] [ 83.736146][ T6355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.882066][ T6355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.979001][ T29] audit: type=1804 audit(1741434326.329:2): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.117" name=2F6E6577726F6F742F32382F18 dev="tmpfs" ino=161 res=1 errno=0 [ 84.021258][ T29] audit: type=1800 audit(1741434326.329:3): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.117" name=18 dev="tmpfs" ino=161 res=0 errno=0 [ 84.118069][ T6355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.183801][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 84.233666][ T6355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.249974][ T6376] team0: No ports can be present during mode change [ 84.268665][ T6381] gtp0: entered promiscuous mode [ 84.276513][ T6381] gtp0: entered allmulticast mode [ 84.283510][ T6375] team0: No ports can be present during mode change [ 84.303623][ T6378] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 84.341020][ T6378] team0: Port device wlan1 added [ 84.368022][ T6377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.489505][ T6355] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.533919][ T6355] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.556009][ T6355] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.590149][ T6355] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800909][ T6406] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 85.069224][ T6425] team0: No ports can be present during mode change [ 85.214112][ T6432] __nla_validate_parse: 2 callbacks suppressed [ 85.214137][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 85.275334][ T6432] team0: No ports can be present during mode change [ 85.379060][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 85.449266][ T6444] netlink: 96 bytes leftover after parsing attributes in process `syz.0.140'. [ 85.702434][ T6462] netlink: 280 bytes leftover after parsing attributes in process `syz.1.145'. [ 85.865739][ T6464] netlink: 'syz.0.146': attribute type 10 has an invalid length. [ 85.924016][ T6472] netlink: 'syz.0.146': attribute type 10 has an invalid length. [ 85.988047][ T6464] team0: Port device netdevsim0 added [ 86.110255][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 86.110264][ T6472] team0: Port device netdevsim0 removed [ 86.180552][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 86.206033][ T6472] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 86.291881][ T6486] team0: Unable to change to the same mode the team is in [ 86.354808][ T6475] vxcan1 speed is unknown, defaulting to 1000 [ 86.813065][ T6488] vxcan1 speed is unknown, defaulting to 1000 [ 87.332144][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 87.515072][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.4.163'. [ 87.601995][ T6533] netlink: 368 bytes leftover after parsing attributes in process `syz.1.165'. [ 87.674857][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 87.929906][ T6540] team0: No ports can be present during mode change [ 87.975360][ T6542] netlink: 'syz.1.168': attribute type 1 has an invalid length. [ 88.032983][ T6545] lo speed is unknown, defaulting to 1000 [ 88.051669][ T6546] bond_slave_0: entered promiscuous mode [ 88.057704][ T6546] bond_slave_1: entered promiscuous mode [ 88.063471][ T6546] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 88.152674][ T6545] lo speed is unknown, defaulting to 1000 [ 88.165245][ T6545] lo speed is unknown, defaulting to 1000 [ 88.177484][ T6552] xt_TCPMSS: Only works on TCP SYN packets [ 88.241859][ T6553] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.250035][ T6545] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 88.305032][ T6545] lo speed is unknown, defaulting to 1000 [ 88.312116][ T6545] lo speed is unknown, defaulting to 1000 [ 88.357035][ T6545] lo speed is unknown, defaulting to 1000 [ 88.364722][ T6553] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.390023][ T6545] lo speed is unknown, defaulting to 1000 [ 88.414227][ T6545] lo speed is unknown, defaulting to 1000 [ 88.473471][ T6553] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.674162][ T6553] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.746259][ T6571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.759182][ T6571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.862838][ T6553] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.949914][ T6553] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.008062][ T6553] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.017205][ T6581] team0: No ports can be present during mode change [ 89.045174][ T6553] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.374065][ T6598] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 89.865254][ T6617] team0: No ports can be present during mode change [ 90.088519][ T6626] vxcan1 speed is unknown, defaulting to 1000 [ 90.548591][ T6626] lo speed is unknown, defaulting to 1000 [ 90.693225][ T6658] __nla_validate_parse: 8 callbacks suppressed [ 90.693242][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.208'. [ 90.802655][ T6658] team0: Unable to change to the same mode the team is in [ 91.043943][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.198'. [ 91.096998][ T6626] netlink: 28 bytes leftover after parsing attributes in process `syz.4.198'. [ 91.142716][ T6675] smc: removing ib device syz2 [ 91.593071][ T6684] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 92.031729][ T6695] ipvlan2: entered promiscuous mode [ 92.223963][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 92.250217][ T6699] team0: Unable to change to the same mode the team is in [ 92.554228][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 92.605883][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 92.624697][ T6713] nbd: nbd0 already in use [ 93.535679][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 93.691899][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 93.724586][ T6731] team0: No ports can be present during mode change [ 93.766043][ T6733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.234'. [ 94.111422][ T6745] dvmrp0: entered allmulticast mode [ 94.218487][ T6747] vlan2: entered promiscuous mode [ 94.233147][ T6747] hsr0: entered promiscuous mode [ 94.354713][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.491939][ T6758] netlink: 'syz.0.244': attribute type 3 has an invalid length. [ 94.510654][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 94.517845][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 94.881783][ T6777] FAULT_INJECTION: forcing a failure. [ 94.881783][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.895459][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.0.251 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 94.895480][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.895489][ T6777] Call Trace: [ 94.895494][ T6777] [ 94.895501][ T6777] dump_stack_lvl+0x241/0x360 [ 94.895527][ T6777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.895545][ T6777] ? __pfx__printk+0x10/0x10 [ 94.895565][ T6777] ? snprintf+0xda/0x120 [ 94.895589][ T6777] should_fail_ex+0x40a/0x550 [ 94.895614][ T6777] _copy_to_user+0x31/0xb0 [ 94.895636][ T6777] simple_read_from_buffer+0xca/0x150 [ 94.895659][ T6777] proc_fail_nth_read+0x1e9/0x250 [ 94.895680][ T6777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.895703][ T6777] ? rw_verify_area+0x243/0x630 [ 94.895718][ T6777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.895741][ T6777] vfs_read+0x1f8/0xb40 [ 94.895759][ T6777] ? fdget_pos+0x254/0x320 [ 94.895781][ T6777] ? __pfx___mutex_lock+0x10/0x10 [ 94.895800][ T6777] ? __pfx_vfs_read+0x10/0x10 [ 94.895819][ T6777] ? __fget_files+0x2a/0x410 [ 94.895841][ T6777] ? __fget_files+0x395/0x410 [ 94.895860][ T6777] ? __fget_files+0x2a/0x410 [ 94.895890][ T6777] ksys_read+0x18f/0x2b0 [ 94.895908][ T6777] ? __pfx_ksys_read+0x10/0x10 [ 94.895926][ T6777] ? do_syscall_64+0x100/0x230 [ 94.895946][ T6777] ? do_syscall_64+0xb6/0x230 [ 94.895965][ T6777] do_syscall_64+0xf3/0x230 [ 94.895982][ T6777] ? clear_bhb_loop+0x35/0x90 [ 94.896001][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.896018][ T6777] RIP: 0033:0x7fc60cd8bb7c [ 94.896032][ T6777] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 94.896045][ T6777] RSP: 002b:00007fc60abf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.896063][ T6777] RAX: ffffffffffffffda RBX: 00007fc60cfa5fa0 RCX: 00007fc60cd8bb7c [ 94.896074][ T6777] RDX: 000000000000000f RSI: 00007fc60abf60a0 RDI: 0000000000000007 [ 94.896085][ T6777] RBP: 00007fc60abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 94.896094][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.896102][ T6777] R13: 0000000000000000 R14: 00007fc60cfa5fa0 R15: 00007ffdf185c1d8 [ 94.896127][ T6777] [ 95.262615][ T6778] team0: No ports can be present during mode change [ 95.399040][ T6779] lo speed is unknown, defaulting to 1000 [ 95.500097][ T6786] sctp: failed to load transform for md5: -4 [ 96.367523][ T6835] __nla_validate_parse: 2 callbacks suppressed [ 96.367542][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 96.573589][ T6846] team0: No ports can be present during mode change [ 96.885286][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 96.978842][ T6863] netlink: 'syz.3.270': attribute type 1 has an invalid length. [ 96.987458][ T6863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.270'. [ 97.437458][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.3.275'. [ 97.538259][ T6889] sctp: [Deprecated]: syz.1.278 (pid 6889) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.538259][ T6889] Use struct sctp_sack_info instead [ 97.844806][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 97.879528][ T6900] lo speed is unknown, defaulting to 1000 [ 97.893477][ T6903] netlink: 188 bytes leftover after parsing attributes in process `syz.0.282'. [ 98.143955][ T6913] lo speed is unknown, defaulting to 1000 [ 98.178633][ T6923] Cannot find set identified by id 0 to match [ 98.223336][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 98.468603][ T6926] pim6reg: entered allmulticast mode [ 98.747245][ T6920] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 98.981288][ T6950] FAULT_INJECTION: forcing a failure. [ 98.981288][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 99.012885][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.2.289 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 99.012909][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.012918][ T6950] Call Trace: [ 99.012924][ T6950] [ 99.012931][ T6950] dump_stack_lvl+0x241/0x360 [ 99.012957][ T6950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.012975][ T6950] ? __pfx__printk+0x10/0x10 [ 99.012993][ T6950] ? fs_reclaim_acquire+0x93/0x130 [ 99.013010][ T6950] ? __pfx___might_resched+0x10/0x10 [ 99.013034][ T6950] should_fail_ex+0x40a/0x550 [ 99.013061][ T6950] should_failslab+0xac/0x100 [ 99.013083][ T6950] __kmalloc_noprof+0xdd/0x4c0 [ 99.013102][ T6950] ? kstrtouint_from_user+0x128/0x190 [ 99.013118][ T6950] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 99.013139][ T6950] tomoyo_realpath_from_path+0xcf/0x5e0 [ 99.013167][ T6950] tomoyo_path_number_perm+0x239/0x770 [ 99.013187][ T6950] ? __lock_acquire+0x1397/0x2100 [ 99.013211][ T6950] ? tomoyo_path_number_perm+0x209/0x770 [ 99.013234][ T6950] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 99.013293][ T6950] ? __fget_files+0x2a/0x410 [ 99.013317][ T6950] ? __fget_files+0x2a/0x410 [ 99.013342][ T6950] security_file_ioctl+0xc6/0x2a0 [ 99.013364][ T6950] __se_sys_ioctl+0x46/0x170 [ 99.013384][ T6950] do_syscall_64+0xf3/0x230 [ 99.013403][ T6950] ? clear_bhb_loop+0x35/0x90 [ 99.013427][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.013446][ T6950] RIP: 0033:0x7f8055b8d169 [ 99.013461][ T6950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.013474][ T6950] RSP: 002b:00007f8056914038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.013492][ T6950] RAX: ffffffffffffffda RBX: 00007f8055da5fa0 RCX: 00007f8055b8d169 [ 99.013504][ T6950] RDX: 0000400000000500 RSI: 00000000000089ea RDI: 0000000000000004 [ 99.013514][ T6950] RBP: 00007f8056914090 R08: 0000000000000000 R09: 0000000000000000 [ 99.013524][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.013534][ T6950] R13: 0000000000000000 R14: 00007f8055da5fa0 R15: 00007fff2474bf38 [ 99.013560][ T6950] [ 99.013567][ T6950] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.247128][ T6953] netlink: 'syz.4.291': attribute type 1 has an invalid length. [ 99.486127][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 99.527067][ T6965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.296'. [ 99.542803][ T6961] team0: No ports can be present during mode change [ 99.935267][ T6981] sctp: [Deprecated]: syz.4.302 (pid 6981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.935267][ T6981] Use struct sctp_sack_info instead [ 99.971829][ T6981] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 99.988531][ T6981] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 100.312680][ T7002] team0: No ports can be present during mode change [ 100.313458][ T7001] FAULT_INJECTION: forcing a failure. [ 100.313458][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 100.361139][ T7003] FAULT_INJECTION: forcing a failure. [ 100.361139][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 100.376712][ T7003] CPU: 1 UID: 0 PID: 7003 Comm: syz.0.308 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 100.376735][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.376745][ T7003] Call Trace: [ 100.376751][ T7003] [ 100.376757][ T7003] dump_stack_lvl+0x241/0x360 [ 100.376783][ T7003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.376800][ T7003] ? __pfx__printk+0x10/0x10 [ 100.376819][ T7003] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 100.376848][ T7003] ? __pfx___might_resched+0x10/0x10 [ 100.376873][ T7003] should_fail_ex+0x40a/0x550 [ 100.376899][ T7003] should_failslab+0xac/0x100 [ 100.376921][ T7003] kmem_cache_alloc_node_noprof+0x77/0x380 [ 100.376940][ T7003] ? __alloc_skb+0x1c3/0x440 [ 100.376958][ T7003] __alloc_skb+0x1c3/0x440 [ 100.376977][ T7003] ? __pfx___alloc_skb+0x10/0x10 [ 100.377002][ T7003] ? netlink_autobind+0xd6/0x2f0 [ 100.377021][ T7003] ? netlink_autobind+0x2b0/0x2f0 [ 100.377046][ T7003] netlink_sendmsg+0x634/0xcb0 [ 100.377076][ T7003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.377100][ T7003] ? aa_sock_msg_perm+0x91/0x160 [ 100.377126][ T7003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.377143][ T7003] __sock_sendmsg+0x221/0x270 [ 100.377167][ T7003] ____sys_sendmsg+0x53a/0x860 [ 100.377191][ T7003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.377206][ T7003] ? __fget_files+0x2a/0x410 [ 100.377229][ T7003] ? __fget_files+0x2a/0x410 [ 100.377257][ T7003] __sys_sendmsg+0x269/0x350 [ 100.377279][ T7003] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.377308][ T7003] ? do_sys_openat2+0x17a/0x1d0 [ 100.377353][ T7003] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.377376][ T7003] ? do_syscall_64+0x100/0x230 [ 100.377397][ T7003] ? do_syscall_64+0xb6/0x230 [ 100.377418][ T7003] do_syscall_64+0xf3/0x230 [ 100.377436][ T7003] ? clear_bhb_loop+0x35/0x90 [ 100.377459][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.377478][ T7003] RIP: 0033:0x7fc60cd8d169 [ 100.377493][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.377506][ T7003] RSP: 002b:00007fc60abf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.377524][ T7003] RAX: ffffffffffffffda RBX: 00007fc60cfa5fa0 RCX: 00007fc60cd8d169 [ 100.377535][ T7003] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000006 [ 100.377546][ T7003] RBP: 00007fc60abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.377556][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.377565][ T7003] R13: 0000000000000000 R14: 00007fc60cfa5fa0 R15: 00007ffdf185c1d8 [ 100.377590][ T7003] [ 100.475026][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.1.307 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 100.475050][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.475059][ T7001] Call Trace: [ 100.475065][ T7001] [ 100.475072][ T7001] dump_stack_lvl+0x241/0x360 [ 100.475101][ T7001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.475118][ T7001] ? __pfx__printk+0x10/0x10 [ 100.475136][ T7001] ? fs_reclaim_acquire+0x93/0x130 [ 100.475152][ T7001] ? __pfx___might_resched+0x10/0x10 [ 100.475170][ T7001] ? dynamic_dname+0x144/0x1b0 [ 100.475189][ T7001] should_fail_ex+0x40a/0x550 [ 100.475214][ T7001] should_failslab+0xac/0x100 [ 100.475235][ T7001] __kmalloc_noprof+0xdd/0x4c0 [ 100.475255][ T7001] ? tomoyo_encode+0x26f/0x540 [ 100.475274][ T7001] tomoyo_encode+0x26f/0x540 [ 100.475290][ T7001] ? __pfx_sockfs_dname+0x10/0x10 [ 100.475311][ T7001] tomoyo_realpath_from_path+0x59e/0x5e0 [ 100.475338][ T7001] tomoyo_path_number_perm+0x239/0x770 [ 100.475357][ T7001] ? __lock_acquire+0x1397/0x2100 [ 100.475380][ T7001] ? tomoyo_path_number_perm+0x209/0x770 [ 100.475401][ T7001] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 100.475457][ T7001] ? __fget_files+0x2a/0x410 [ 100.475480][ T7001] ? __fget_files+0x2a/0x410 [ 100.475504][ T7001] security_file_ioctl+0xc6/0x2a0 [ 100.475524][ T7001] __se_sys_ioctl+0x46/0x170 [ 100.475543][ T7001] do_syscall_64+0xf3/0x230 [ 100.475568][ T7001] ? clear_bhb_loop+0x35/0x90 [ 100.475591][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.475610][ T7001] RIP: 0033:0x7f844058d169 [ 100.475623][ T7001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.475636][ T7001] RSP: 002b:00007f84413e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.475653][ T7001] RAX: ffffffffffffffda RBX: 00007f84407a5fa0 RCX: 00007f844058d169 [ 100.475664][ T7001] RDX: 0000400000000500 RSI: 00000000000089ea RDI: 0000000000000004 [ 100.475674][ T7001] RBP: 00007f84413e9090 R08: 0000000000000000 R09: 0000000000000000 [ 100.475683][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.475692][ T7001] R13: 0000000000000000 R14: 00007f84407a5fa0 R15: 00007ffc903d5428 [ 100.475716][ T7001] [ 100.476001][ T7001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 101.271818][ T7034] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 101.323082][ T7037] 8021q: VLANs not supported on vxcan0 [ 101.386478][ T7040] team0: No ports can be present during mode change [ 101.551226][ T7048] FAULT_INJECTION: forcing a failure. [ 101.551226][ T7048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.595226][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.3.324 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 101.595251][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.595261][ T7048] Call Trace: [ 101.595267][ T7048] [ 101.595274][ T7048] dump_stack_lvl+0x241/0x360 [ 101.595299][ T7048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.595316][ T7048] ? __pfx__printk+0x10/0x10 [ 101.595334][ T7048] ? __pfx_lock_release+0x10/0x10 [ 101.595353][ T7048] ? rcu_is_watching+0x15/0xb0 [ 101.595374][ T7048] should_fail_ex+0x40a/0x550 [ 101.595400][ T7048] _copy_from_user+0x2d/0xb0 [ 101.595419][ T7048] ax25_ioctl+0xbe1/0x1d60 [ 101.595443][ T7048] ? mark_lock+0x9a/0x360 [ 101.595457][ T7048] ? __pfx_ax25_ioctl+0x10/0x10 [ 101.595488][ T7048] ? tomoyo_path_number_perm+0x209/0x770 [ 101.595610][ T7048] ? __pfx_lock_release+0x10/0x10 [ 101.595639][ T7048] ? tomoyo_path_number_perm+0x5dd/0x770 [ 101.595661][ T7048] ? tomoyo_path_number_perm+0x5dd/0x770 [ 101.595695][ T7048] ? tomoyo_path_number_perm+0x65d/0x770 [ 101.595719][ T7048] ? __lock_acquire+0x1397/0x2100 [ 101.595754][ T7048] sock_do_ioctl+0x158/0x460 [ 101.595779][ T7048] ? __pfx_sock_do_ioctl+0x10/0x10 [ 101.595814][ T7048] sock_ioctl+0x626/0x8e0 [ 101.595835][ T7048] ? __pfx_sock_ioctl+0x10/0x10 [ 101.595852][ T7048] ? __fget_files+0x2a/0x410 [ 101.595876][ T7048] ? __fget_files+0x2a/0x410 [ 101.595901][ T7048] ? __pfx_sock_ioctl+0x10/0x10 [ 101.595921][ T7048] __se_sys_ioctl+0xf5/0x170 [ 101.595941][ T7048] do_syscall_64+0xf3/0x230 [ 101.595966][ T7048] ? clear_bhb_loop+0x35/0x90 [ 101.595990][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.596010][ T7048] RIP: 0033:0x7f897078d169 [ 101.596025][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.596037][ T7048] RSP: 002b:00007f8971555038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.596054][ T7048] RAX: ffffffffffffffda RBX: 00007f89709a5fa0 RCX: 00007f897078d169 [ 101.596066][ T7048] RDX: 0000400000000500 RSI: 00000000000089ea RDI: 0000000000000004 [ 101.596076][ T7048] RBP: 00007f8971555090 R08: 0000000000000000 R09: 0000000000000000 [ 101.596086][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.596096][ T7048] R13: 0000000000000000 R14: 00007f89709a5fa0 R15: 00007ffca7521498 [ 101.596124][ T7048] [ 101.919173][ T7052] __nla_validate_parse: 6 callbacks suppressed [ 101.919191][ T7052] netlink: 23 bytes leftover after parsing attributes in process `syz.0.325'. [ 102.048093][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'. [ 102.067089][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 102.097774][ T7067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.329'. [ 102.235736][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.329'. [ 102.249715][ T1158] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.310291][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 102.458384][ T1158] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.648902][ T1158] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.653180][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.3.336'. [ 102.849769][ T7091] team0: No ports can be present during mode change [ 103.009811][ T1158] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.175156][ T7115] FAULT_INJECTION: forcing a failure. [ 103.175156][ T7115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.225107][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.0.340 Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 103.225133][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.225143][ T7115] Call Trace: [ 103.225148][ T7115] [ 103.225155][ T7115] dump_stack_lvl+0x241/0x360 [ 103.225182][ T7115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.225200][ T7115] ? __pfx__printk+0x10/0x10 [ 103.225222][ T7115] ? snprintf+0xda/0x120 [ 103.225246][ T7115] should_fail_ex+0x40a/0x550 [ 103.225273][ T7115] _copy_to_user+0x31/0xb0 [ 103.225295][ T7115] simple_read_from_buffer+0xca/0x150 [ 103.225320][ T7115] proc_fail_nth_read+0x1e9/0x250 [ 103.225348][ T7115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.225381][ T7115] ? rw_verify_area+0x243/0x630 [ 103.225396][ T7115] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.225418][ T7115] vfs_read+0x1f8/0xb40 [ 103.225443][ T7115] ? fdget_pos+0x254/0x320 [ 103.225465][ T7115] ? __pfx___mutex_lock+0x10/0x10 [ 103.225484][ T7115] ? __pfx_vfs_read+0x10/0x10 [ 103.225504][ T7115] ? __fget_files+0x2a/0x410 [ 103.225526][ T7115] ? __fget_files+0x395/0x410 [ 103.225545][ T7115] ? __fget_files+0x2a/0x410 [ 103.225573][ T7115] ksys_read+0x18f/0x2b0 [ 103.225592][ T7115] ? __pfx_ksys_read+0x10/0x10 [ 103.225609][ T7115] ? do_syscall_64+0x100/0x230 [ 103.225631][ T7115] ? do_syscall_64+0xb6/0x230 [ 103.225651][ T7115] do_syscall_64+0xf3/0x230 [ 103.225669][ T7115] ? clear_bhb_loop+0x35/0x90 [ 103.225692][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.225711][ T7115] RIP: 0033:0x7fc60cd8bb7c [ 103.225726][ T7115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.225739][ T7115] RSP: 002b:00007fc60abf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.225757][ T7115] RAX: ffffffffffffffda RBX: 00007fc60cfa5fa0 RCX: 00007fc60cd8bb7c [ 103.225768][ T7115] RDX: 000000000000000f RSI: 00007fc60abf60a0 RDI: 0000000000000003 [ 103.225778][ T7115] RBP: 00007fc60abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.225787][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.225796][ T7115] R13: 0000000000000000 R14: 00007fc60cfa5fa0 R15: 00007ffdf185c1d8 [ 103.225822][ T7115] [ 103.636375][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.647607][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.656855][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.677688][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.692955][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.702012][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.711069][ T1158] bridge_slave_1: left allmulticast mode [ 103.736230][ T1158] bridge_slave_1: left promiscuous mode [ 103.748684][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.829584][ T1158] bridge_slave_0: left allmulticast mode [ 103.835877][ T1158] bridge_slave_0: left promiscuous mode [ 103.841785][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.169446][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.184086][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.200908][ T1158] bond0 (unregistering): Released all slaves [ 104.280513][ T7130] lo speed is unknown, defaulting to 1000 [ 104.329824][ T7121] lo speed is unknown, defaulting to 1000 [ 104.440684][ T7141] netlink: 'syz.3.347': attribute type 13 has an invalid length. [ 104.461838][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.346'. [ 104.569785][ T7141] gretap0: refused to change device tx_queue_len [ 104.615298][ T7141] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 104.648529][ T7146] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 104.726686][ T7144] team0: No ports can be present during mode change [ 104.938607][ T7157] netlink: 'syz.0.351': attribute type 9 has an invalid length. [ 105.114356][ T1158] hsr_slave_0: left promiscuous mode [ 105.150882][ T1158] hsr_slave_1: left promiscuous mode [ 105.182425][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.211158][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.256790][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.283893][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.351882][ T1158] veth1_macvtap: left promiscuous mode [ 105.371432][ T1158] veth0_macvtap: left promiscuous mode [ 105.384265][ T1158] veth1_vlan: left promiscuous mode [ 105.396462][ T1158] veth0_vlan: left promiscuous mode [ 105.771898][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 105.786262][ T5846] Bluetooth: hci1: command tx timeout [ 105.961145][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 105.998598][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 106.397343][ T5504] [ 106.399743][ T5504] ============================================ [ 106.405898][ T5504] WARNING: possible recursive locking detected [ 106.412052][ T5504] 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 Not tainted [ 106.419145][ T5504] -------------------------------------------- [ 106.425306][ T5504] dhcpcd/5504 is trying to acquire lock: [ 106.430924][ T5504] ffff88802bd90d28 (&dev->lock){+.+.}-{4:4}, at: register_netdevice+0x12d8/0x1b70 [ 106.440137][ T5504] [ 106.440137][ T5504] but task is already holding lock: [ 106.447515][ T5504] ffff88805c59cd28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 106.456374][ T5504] [ 106.456374][ T5504] other info that might help us debug this: [ 106.464411][ T5504] Possible unsafe locking scenario: [ 106.464411][ T5504] [ 106.471859][ T5504] CPU0 [ 106.475119][ T5504] ---- [ 106.478376][ T5504] lock(&dev->lock); [ 106.482338][ T5504] lock(&dev->lock); [ 106.486300][ T5504] [ 106.486300][ T5504] *** DEADLOCK *** [ 106.486300][ T5504] [ 106.494433][ T5504] May be due to missing lock nesting notation [ 106.494433][ T5504] [ 106.502738][ T5504] 2 locks held by dhcpcd/5504: [ 106.507485][ T5504] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34c/0x1d80 [ 106.516618][ T5504] #1: ffff88805c59cd28 (&dev->lock){+.+.}-{4:4}, at: dev_change_flags+0x120/0x270 [ 106.525923][ T5504] [ 106.525923][ T5504] stack backtrace: [ 106.531791][ T5504] CPU: 0 UID: 0 PID: 5504 Comm: dhcpcd Not tainted 6.14.0-rc5-syzkaller-01140-ge2537326e3b6 #0 [ 106.531805][ T5504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.531813][ T5504] Call Trace: [ 106.531820][ T5504] [ 106.531826][ T5504] dump_stack_lvl+0x241/0x360 [ 106.531842][ T5504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.531855][ T5504] ? __pfx__printk+0x10/0x10 [ 106.531866][ T5504] ? lockdep_unlock+0x16a/0x300 [ 106.531885][ T5504] print_deadlock_bug+0x483/0x620 [ 106.531898][ T5504] ? lockdep_unlock+0x16a/0x300 [ 106.531913][ T5504] validate_chain+0x15e2/0x5920 [ 106.531934][ T5504] ? __pfx_validate_chain+0x10/0x10 [ 106.531948][ T5504] ? __pfx_validate_chain+0x10/0x10 [ 106.531962][ T5504] ? look_up_lock_class+0x77/0x170 [ 106.531977][ T5504] ? register_lock_class+0x102/0x980 [ 106.531999][ T5504] ? __pfx_register_lock_class+0x10/0x10 [ 106.532016][ T5504] ? mark_lock+0x9a/0x360 [ 106.532028][ T5504] __lock_acquire+0x1397/0x2100 [ 106.532050][ T5504] lock_acquire+0x1ed/0x550 [ 106.532065][ T5504] ? register_netdevice+0x12d8/0x1b70 [ 106.532081][ T5504] ? __pfx_lock_acquire+0x10/0x10 [ 106.532098][ T5504] ? __pfx___might_resched+0x10/0x10 [ 106.532113][ T5504] ? __pfx_lock_release+0x10/0x10 [ 106.532132][ T5504] __mutex_lock+0x19c/0x1010 [ 106.532145][ T5504] ? register_netdevice+0x12d8/0x1b70 [ 106.532158][ T5504] ? __mutex_unlock_slowpath+0x227/0x800 [ 106.532173][ T5504] ? _raw_spin_lock_irq+0xdf/0x120 [ 106.532185][ T5504] ? register_netdevice+0x12d8/0x1b70 [ 106.532196][ T5504] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.532210][ T5504] ? __pfx___mutex_lock+0x10/0x10 [ 106.532223][ T5504] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.532237][ T5504] ? netdev_register_kobject+0x2b0/0x2f0 [ 106.532253][ T5504] register_netdevice+0x12d8/0x1b70 [ 106.532270][ T5504] ? __pfx_register_netdevice+0x10/0x10 [ 106.532287][ T5504] bpq_device_event+0x4b1/0x8d0 [ 106.532304][ T5504] ? lockdep_rtnl_is_held+0x26/0x40 [ 106.532318][ T5504] notifier_call_chain+0x1a5/0x3f0 [ 106.532336][ T5504] __dev_notify_flags+0x207/0x400 [ 106.532354][ T5504] ? dev_set_rx_mode+0xb8/0x2e0 [ 106.532371][ T5504] ? __pfx___dev_notify_flags+0x10/0x10 [ 106.532388][ T5504] ? __dev_change_flags+0x515/0x6f0 [ 106.532400][ T5504] ? __pfx___mutex_lock+0x10/0x10 [ 106.532413][ T5504] ? __pfx___dev_change_flags+0x10/0x10 [ 106.532425][ T5504] ? __pfx___mutex_lock+0x10/0x10 [ 106.532439][ T5504] netif_change_flags+0xf0/0x1a0 [ 106.532452][ T5504] dev_change_flags+0x146/0x270 [ 106.532470][ T5504] devinet_ioctl+0xea2/0x1d80 [ 106.532489][ T5504] ? __pfx_devinet_ioctl+0x10/0x10 [ 106.532505][ T5504] ? get_user_ifreq+0x1bb/0x200 [ 106.532520][ T5504] inet_ioctl+0x3d7/0x4f0 [ 106.532532][ T5504] ? __pfx_inet_ioctl+0x10/0x10 [ 106.532545][ T5504] ? tomoyo_path_number_perm+0x5dd/0x770 [ 106.532569][ T5504] sock_do_ioctl+0x158/0x460 [ 106.532585][ T5504] ? __pfx_sock_do_ioctl+0x10/0x10 [ 106.532608][ T5504] ? __pfx_lock_release+0x10/0x10 [ 106.532627][ T5504] sock_ioctl+0x626/0x8e0 [ 106.532642][ T5504] ? __pfx_sock_ioctl+0x10/0x10 [ 106.532656][ T5504] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.532673][ T5504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.532690][ T5504] ? __pfx_sock_ioctl+0x10/0x10 [ 106.532704][ T5504] __se_sys_ioctl+0xf5/0x170 [ 106.532718][ T5504] do_syscall_64+0xf3/0x230 [ 106.532732][ T5504] ? clear_bhb_loop+0x35/0x90 [ 106.532749][ T5504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.532764][ T5504] RIP: 0033:0x7f9124b3dd49 [ 106.532776][ T5504] Code: 5c c3 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 76 10 48 8b 15 ae 60 0d 00 f7 d8 41 83 c8 [ 106.532786][ T5504] RSP: 002b:00007fff369c67e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.532799][ T5504] RAX: ffffffffffffffda RBX: 00007f9124a6f6c0 RCX: 00007f9124b3dd49 [ 106.532808][ T5504] RDX: 00007fff369d69d8 RSI: 0000000000008914 RDI: 0000000000000018 [ 106.532820][ T5504] RBP: 00007fff369e6b98 R08: 00007fff369d6998 R09: 00007fff369d6948 [ 106.532829][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.532837][ T5504] R13: 00007fff369d69d8 R14: 0000000000000028 R15: 0000000000008914 [ 106.532850][ T5504] [ 106.982590][ T5882] lo speed is unknown, defaulting to 1000 [ 107.002976][ T5882] infiniband s›z0: ib_query_port failed (-19) [ 107.732125][ T1158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.799851][ T1158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.848807][ T1158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.905522][ T1158] bond0: (slave netdevsim0): Releasing backup interface [ 107.914176][ T1158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.027136][ T1158] bridge_slave_1: left allmulticast mode [ 108.032833][ T1158] bridge_slave_1: left promiscuous mode [ 108.042306][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.057301][ T1158] bridge_slave_0: left allmulticast mode [ 108.063087][ T1158] bridge_slave_0: left promiscuous mode [ 108.069177][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.080505][ T1158] bond_slave_0: left promiscuous mode [ 108.086114][ T1158] bond_slave_1: left promiscuous mode [ 108.306666][ T1158] bond0 (unregistering): Released all slaves [ 108.318524][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.328690][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.338733][ T1158] bond0 (unregistering): Released all slaves [ 108.572253][ T1158] hsr_slave_0: left promiscuous mode [ 108.578507][ T1158] hsr_slave_1: left promiscuous mode [ 108.584077][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.592834][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.601016][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.608556][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.617049][ T1158] veth0_macvtap: left promiscuous mode [ 108.622562][ T1158] veth1_vlan: left promiscuous mode [ 108.627884][ T1158] veth0_vlan: left promiscuous mode [ 108.746479][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 108.770982][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 109.111582][ T1158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.171491][ T1158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.209196][ T1158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.257698][ T1158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.356135][ T1158] bridge_slave_1: left allmulticast mode [ 109.362422][ T1158] bridge_slave_1: left promiscuous mode [ 109.368386][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.378464][ T1158] bridge_slave_0: left allmulticast mode [ 109.384301][ T1158] bridge_slave_0: left promiscuous mode [ 109.391580][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.468498][ T1158] dvmrp0 (unregistering): left allmulticast mode [ 109.560108][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.570267][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.579698][ T1158] bond0 (unregistering): Released all slaves [ 109.781106][ T1158] hsr_slave_0: left promiscuous mode [ 109.789929][ T1158] hsr_slave_1: left promiscuous mode [ 109.796168][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.803589][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.813244][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.821001][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.830037][ T1158] veth1_macvtap: left promiscuous mode [ 109.835617][ T1158] veth0_macvtap: left promiscuous mode [ 109.841123][ T1158] veth1_vlan: left promiscuous mode [ 109.846481][ T1158] veth0_vlan: left promiscuous mode [ 109.879177][ T1158] pim6reg (unregistering): left allmulticast mode [ 109.967227][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 109.988457][ T1158] team0 (unregistering): Port device team_slave_0 removed