last executing test programs: 47.894603384s ago: executing program 4 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x78bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x24}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x4, 0x0, 0x400000, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x6, 0x4, 0x4000000, 0x8, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 41.083743878s ago: executing program 4 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x78bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x24}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x4, 0x0, 0x400000, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x6, 0x4, 0x4000000, 0x8, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 36.677647485s ago: executing program 2 (id=2853): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x7fe}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0bac0f00"]}]}, 0x1c}], 0x1}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0xa, 0x1, 0x3088, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r0, 0x8871b000) r7 = socket$key(0xf, 0x3, 0x2) unshare(0x400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000080)=0xafee60a, 0x4) sendmsg$key(r7, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xa8}}, 0x0) socket(0x11, 0x800000003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x4, 0x8, 0xffff, 0x0, 0x7, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="dd99ce1916013b028bc23bf9e56402bb80ae21947d9588ebe8d8643276a1e20484f46f25cdf2a632de4045662e2df89a1772eebddf67be531421c422ea717c6d804a0443012fdc34afb113875106642ef37b1c435a5cc42eaab679d79daae249c80b5070f2c139832dcce17d0dd13fb8892040fa86fc21bfd319c5a50a547847c34a6fb29206d44dff8d5db05a538f3618ac3473f520b6627db03cf184f384674a24616dfd0182750f29fcf12211a57099679e40c1b370b98534c6c2517970"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c) 34.84021414s ago: executing program 0 (id=2874): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4a90, 0x6608}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x58}, 0x1, 0x0, 0x2000000000000000}, 0x0) 34.757988555s ago: executing program 0 (id=2875): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='swiotlb_bounced\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x7, &(0x7f00000000c0)='\\\\-{+)\x00'}, 0x30) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, @vifc_lcl_ifindex, @loopback}, 0x10) getpid() (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @empty, 0x0}, &(0x7f0000000500)=0xc) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x9, 0x0, 0x5, 0x1, 0xfffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff3760}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x37b878f3, 0xec, &(0x7f00000003c0)=""/236, 0x41100, 0x24, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x2, 0x3ff, 0x8000}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x5, 0x3, 0xf, 0xa}, {0x0, 0x2, 0x3, 0x4}, {0x0, 0x4, 0x1, 0x8}, {0x5, 0x1, 0xa}, {0x2, 0x5, 0xd, 0x2}], 0x10, 0x2, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000700)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x393ca5021bb8664, 0x4, [@remote, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2a}]}, 0x20) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'syztnl2\x00', r5, 0x7800, 0x57, 0x59, 0x4, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @remote, {[@noop]}}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x9, 0x8000, 0x10c0, r4, 0x7ff, '\x00', r8, r6, 0x4, 0x1, 0x9, 0xf, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f00000008c0)={r2, 0xff, 0x8, 0x80000001}) write$cgroup_type(r10, &(0x7f0000000900), 0x9) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) splice(r7, &(0x7f0000000940)=0x4, r11, &(0x7f0000000980)=0x6, 0x1, 0x5) (async) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$OSF_MSG_REMOVE(r12, &(0x7f0000001180)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x214}, 0x9, 0x8, 0x9, 0x0, 0xa, 'syz0\x00', "9c19a5ed7789336009dc78885a95b679d7b5d580fd323b971e6e1cac0017bbf1", "fc994254704dcf7dada758e836145b168306d0ca7a086b8ceb01393d8a814c73", [{0xff, 0x7ff, {0x2, 0xed}}, {0xff94, 0x0, {0x3, 0x3}}, {0x533, 0x7, {0x0, 0x8001}}, {0x7, 0x7, {0x1, 0x6}}, {0x8, 0x3, {0x3, 0x8}}, {0xe22, 0x100, {0x0, 0x2}}, {0x2, 0x1, {0x2, 0x8000}}, {0x4, 0x9, {0x3, 0x6}}, {0x1, 0xfffe, {0x1, 0x5}}, {0x8, 0x9, {0x0, 0x60000000}}, {0x3, 0x6, {0x1, 0x4}}, {0x3, 0x8, {0x2, 0x1}}, {0x200, 0x0, {0x3, 0x4}}, {0x8a, 0x1, {0x0, 0x4}}, {0x9, 0x9c60, {0x0, 0x10001}}, {0x2, 0xa, {0x2, 0xc29}}, {0x4, 0x7, {0x2, 0x3}}, {0xc5b, 0x3, {0x3, 0x2}}, {0x5, 0x7, {0x1, 0x200}}, {0x7, 0x8000, {0x2, 0x2}}, {0x0, 0xa, {0x0, 0xa}}, {0x3cad, 0x7, {0x0, 0x5ab6}}, {0x3, 0xc5e0, {0x3, 0x6}}, {0xd, 0x8, {0x0, 0xbfe}}, {0x3, 0x8, {0x1, 0x5}}, {0xc, 0x2, {0x0, 0x1}}, {0xb, 0x0, {0x3, 0x1}}, {0x4, 0xdb3b, {0x2, 0x5}}, {0x1, 0x3, {0x2, 0x8000}}, {0xfff, 0x0, {0x2}}, {0x5, 0x401, {0x3, 0xfe94}}, {0xc, 0x5, {0x3, 0x8}}, {0xfff8, 0x3, {0x0, 0x1}}, {0x8, 0x3, {0x0, 0x31}}, {0x5, 0x10, {0x3, 0x5}}, {0x0, 0x5, {0x2, 0x2}}, {0x6, 0x401, {0x3, 0x6}}, {0x79, 0x3, {0x1, 0x6}}, {0xffff, 0x40, {0x0, 0x8641}}, {0xaf, 0xe, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0xbd0b6fe5854be752, 0x4}, 0x0, 0xfc, 0xffff, 0x1, 0x20, 'syz1\x00', "f31aca6edc537870ee8a3bd8549c016acfb2ee49d97582e293f4b8a6ef630dd5", "da3d5ab41c5a600ebce956dcde2821dee59e857026e55668678a9cbc656923bb", [{0x5, 0x2, {0x0, 0xcb}}, {0xfff7, 0x2, {0x1, 0xcaf3}}, {0x7, 0x0, {0x6478444d1faecd23, 0x3}}, {0x1, 0x5, {0x0, 0x1000}}, {0x9, 0xa, {0x2, 0xc}}, {0xfffd, 0x9, {0x1, 0x6}}, {0xfff8, 0x5, {0x3, 0x10001}}, {0x1, 0x8d6a, {0x3, 0x8}}, {0x9, 0x7fff, {0x1, 0x7fffffff}}, {0x5, 0x7, {0x2, 0x5}}, {0xd5, 0x43, {0x2, 0xfb6}}, {0x65, 0x2, {0xca1332b199e71322, 0x1}}, {0x97fa, 0x2, {0x2, 0x8}}, {0x8, 0x9, {0x1, 0xaa61}}, {0x2, 0x8, {0x2, 0x7}}, {0x3d1, 0x800, {0x3, 0x3}}, {0x1, 0x5, {0x0, 0xa5}}, {0x1, 0x5, {0x1, 0x4}}, {0xf, 0x8001, {0x0, 0x268}}, {0xfff, 0x5, {0x1, 0x6}}, {0x10, 0x5, {0x2, 0xb6}}, {0x9f, 0x6, {0x0, 0x5610}}, {0x9, 0x48d, {0x3, 0x33d}}, {0x3, 0x9, {0x0, 0x6}}, {0x4, 0x858, {0x2, 0x4}}, {0x28, 0x4, {0x2, 0x4}}, {0x101, 0x0, {0x3, 0x3b}}, {0x1d, 0x6, {0x2, 0x3}}, {0x9f93, 0xffff, {0x2, 0x200}}, {0x1ff, 0x4, {0x0, 0x5}}, {0x81, 0xd, {0x2, 0xffffec3e}}, {0x2, 0x5, {0x2, 0x3}}, {0xa1c, 0x8000, {0x2, 0xfffffffb}}, {0x8, 0x70b8, {0x2, 0x3}}, {0x40, 0x1, {0x1, 0x5}}, {0x4000, 0xff, {0x1, 0x92}}, {0xff5b, 0x2, {0x2, 0x2}}, {0xe1, 0x3, {0x1, 0xffff0000}}, {0x3ff, 0x4, {0x0, 0x9}}, {0x44b, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0xa, 0x7f, 0x6, 0x8000, 0xb, 'syz0\x00', "e5dccc7d9bf7e0393ec5ac0e49e7aaf08f03247f63412b83911550e1072a3587", "e553f9582897104774b9954c14189061a073539d864a5bc8f5b53b9d78d57a5e", [{0x1, 0x6, {0x0, 0x6}}, {0x5, 0x6, {0x3, 0x3cbe}}, {0x0, 0xc871, {0x0, 0x7}}, {0xfff4, 0x55eb, {0x0, 0x3}}, {0x9, 0x5, {0x3, 0x47}}, {0x0, 0x1, {0x3, 0x7}}, {0x101, 0x4, {0x20a9503af351922, 0x80}}, {0x1000, 0x70, {0x3, 0x779}}, {0x9, 0xf7e, {0x3, 0x6}}, {0x4, 0xf7d, {0x1, 0x9}}, {0xfe, 0x800, {0x1, 0x1}}, {0xf9b4, 0x8c, {0x0, 0x7}}, {0x5, 0x8000, {0x0, 0x10}}, {0xff, 0x1000, {0x0, 0x7}}, {0x9, 0x9, {0x0, 0x9}}, {0x71, 0xff, {0x0, 0x8}}, {0x6, 0x11, {0x0, 0x2}}, {0x7, 0xe, {0x2, 0x3}}, {0xfff8, 0x8, {0x2, 0x1}}, {0x3ff, 0x2, {0x0, 0x1}}, {0x0, 0xa0b, {0x1, 0x10}}, {0xfff, 0x6, {0x3, 0x9}}, {0x3, 0xe817, {0x0, 0x4}}, {0x3ff, 0xc93, {0x3, 0x1}}, {0xffff, 0x2, {0x0, 0x2e3611b6}}, {0x1, 0x9, {0x1, 0xbcd4}}, {0x4, 0x4, {0x2, 0xfffffff8}}, {0x800, 0x2, {0x0, 0x5fed}}, {0xc, 0x8, {0x1, 0x8}}, {0x8, 0x0, {0x1, 0x1}}, {0x5, 0x8, {0x0, 0x7}}, {0x3, 0x6, {0x0, 0xffffffff}}, {0x2, 0x0, {0x0, 0xfffff800}}, {0x5838, 0x7360, {0x3, 0x9}}, {0xd5e, 0x2, {0x2, 0x3e8}}, {0x5, 0x1, {0x0, 0x1}}, {0x7, 0xfffc, {0x3, 0x6}}, {0x9, 0x2a82, {0x6, 0x1}}, {0x793e, 0xd, {0x2, 0x4}}, {0xe97, 0x8, {0x1, 0x2}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r12, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc89b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001340), 0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000001400)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1, 0x3, 0xc, 0x7f, 0x9}, 0x20) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r12, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r13, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 34.39531825s ago: executing program 4 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x78bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x24}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x4, 0x0, 0x400000, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x6, 0x4, 0x4000000, 0x8, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 31.441662128s ago: executing program 2 (id=2853): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x7fe}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0bac0f00"]}]}, 0x1c}], 0x1}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0xa, 0x1, 0x3088, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r0, 0x8871b000) r7 = socket$key(0xf, 0x3, 0x2) unshare(0x400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000080)=0xafee60a, 0x4) sendmsg$key(r7, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xa8}}, 0x0) socket(0x11, 0x800000003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x4, 0x8, 0xffff, 0x0, 0x7, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="dd99ce1916013b028bc23bf9e56402bb80ae21947d9588ebe8d8643276a1e20484f46f25cdf2a632de4045662e2df89a1772eebddf67be531421c422ea717c6d804a0443012fdc34afb113875106642ef37b1c435a5cc42eaab679d79daae249c80b5070f2c139832dcce17d0dd13fb8892040fa86fc21bfd319c5a50a547847c34a6fb29206d44dff8d5db05a538f3618ac3473f520b6627db03cf184f384674a24616dfd0182750f29fcf12211a57099679e40c1b370b98534c6c2517970"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c) 28.007443443s ago: executing program 0 (id=2875): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='swiotlb_bounced\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x7, &(0x7f00000000c0)='\\\\-{+)\x00'}, 0x30) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, @vifc_lcl_ifindex, @loopback}, 0x10) getpid() (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @empty, 0x0}, &(0x7f0000000500)=0xc) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x9, 0x0, 0x5, 0x1, 0xfffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff3760}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x37b878f3, 0xec, &(0x7f00000003c0)=""/236, 0x41100, 0x24, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x2, 0x3ff, 0x8000}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x5, 0x3, 0xf, 0xa}, {0x0, 0x2, 0x3, 0x4}, {0x0, 0x4, 0x1, 0x8}, {0x5, 0x1, 0xa}, {0x2, 0x5, 0xd, 0x2}], 0x10, 0x2, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000700)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x393ca5021bb8664, 0x4, [@remote, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2a}]}, 0x20) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'syztnl2\x00', r5, 0x7800, 0x57, 0x59, 0x4, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @remote, {[@noop]}}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x9, 0x8000, 0x10c0, r4, 0x7ff, '\x00', r8, r6, 0x4, 0x1, 0x9, 0xf, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f00000008c0)={r2, 0xff, 0x8, 0x80000001}) write$cgroup_type(r10, &(0x7f0000000900), 0x9) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) splice(r7, &(0x7f0000000940)=0x4, r11, &(0x7f0000000980)=0x6, 0x1, 0x5) (async) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$OSF_MSG_REMOVE(r12, &(0x7f0000001180)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x214}, 0x9, 0x8, 0x9, 0x0, 0xa, 'syz0\x00', "9c19a5ed7789336009dc78885a95b679d7b5d580fd323b971e6e1cac0017bbf1", "fc994254704dcf7dada758e836145b168306d0ca7a086b8ceb01393d8a814c73", [{0xff, 0x7ff, {0x2, 0xed}}, {0xff94, 0x0, {0x3, 0x3}}, {0x533, 0x7, {0x0, 0x8001}}, {0x7, 0x7, {0x1, 0x6}}, {0x8, 0x3, {0x3, 0x8}}, {0xe22, 0x100, {0x0, 0x2}}, {0x2, 0x1, {0x2, 0x8000}}, {0x4, 0x9, {0x3, 0x6}}, {0x1, 0xfffe, {0x1, 0x5}}, {0x8, 0x9, {0x0, 0x60000000}}, {0x3, 0x6, {0x1, 0x4}}, {0x3, 0x8, {0x2, 0x1}}, {0x200, 0x0, {0x3, 0x4}}, {0x8a, 0x1, {0x0, 0x4}}, {0x9, 0x9c60, {0x0, 0x10001}}, {0x2, 0xa, {0x2, 0xc29}}, {0x4, 0x7, {0x2, 0x3}}, {0xc5b, 0x3, {0x3, 0x2}}, {0x5, 0x7, {0x1, 0x200}}, {0x7, 0x8000, {0x2, 0x2}}, {0x0, 0xa, {0x0, 0xa}}, {0x3cad, 0x7, {0x0, 0x5ab6}}, {0x3, 0xc5e0, {0x3, 0x6}}, {0xd, 0x8, {0x0, 0xbfe}}, {0x3, 0x8, {0x1, 0x5}}, {0xc, 0x2, {0x0, 0x1}}, {0xb, 0x0, {0x3, 0x1}}, {0x4, 0xdb3b, {0x2, 0x5}}, {0x1, 0x3, {0x2, 0x8000}}, {0xfff, 0x0, {0x2}}, {0x5, 0x401, {0x3, 0xfe94}}, {0xc, 0x5, {0x3, 0x8}}, {0xfff8, 0x3, {0x0, 0x1}}, {0x8, 0x3, {0x0, 0x31}}, {0x5, 0x10, {0x3, 0x5}}, {0x0, 0x5, {0x2, 0x2}}, {0x6, 0x401, {0x3, 0x6}}, {0x79, 0x3, {0x1, 0x6}}, {0xffff, 0x40, {0x0, 0x8641}}, {0xaf, 0xe, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0xbd0b6fe5854be752, 0x4}, 0x0, 0xfc, 0xffff, 0x1, 0x20, 'syz1\x00', "f31aca6edc537870ee8a3bd8549c016acfb2ee49d97582e293f4b8a6ef630dd5", "da3d5ab41c5a600ebce956dcde2821dee59e857026e55668678a9cbc656923bb", [{0x5, 0x2, {0x0, 0xcb}}, {0xfff7, 0x2, {0x1, 0xcaf3}}, {0x7, 0x0, {0x6478444d1faecd23, 0x3}}, {0x1, 0x5, {0x0, 0x1000}}, {0x9, 0xa, {0x2, 0xc}}, {0xfffd, 0x9, {0x1, 0x6}}, {0xfff8, 0x5, {0x3, 0x10001}}, {0x1, 0x8d6a, {0x3, 0x8}}, {0x9, 0x7fff, {0x1, 0x7fffffff}}, {0x5, 0x7, {0x2, 0x5}}, {0xd5, 0x43, {0x2, 0xfb6}}, {0x65, 0x2, {0xca1332b199e71322, 0x1}}, {0x97fa, 0x2, {0x2, 0x8}}, {0x8, 0x9, {0x1, 0xaa61}}, {0x2, 0x8, {0x2, 0x7}}, {0x3d1, 0x800, {0x3, 0x3}}, {0x1, 0x5, {0x0, 0xa5}}, {0x1, 0x5, {0x1, 0x4}}, {0xf, 0x8001, {0x0, 0x268}}, {0xfff, 0x5, {0x1, 0x6}}, {0x10, 0x5, {0x2, 0xb6}}, {0x9f, 0x6, {0x0, 0x5610}}, {0x9, 0x48d, {0x3, 0x33d}}, {0x3, 0x9, {0x0, 0x6}}, {0x4, 0x858, {0x2, 0x4}}, {0x28, 0x4, {0x2, 0x4}}, {0x101, 0x0, {0x3, 0x3b}}, {0x1d, 0x6, {0x2, 0x3}}, {0x9f93, 0xffff, {0x2, 0x200}}, {0x1ff, 0x4, {0x0, 0x5}}, {0x81, 0xd, {0x2, 0xffffec3e}}, {0x2, 0x5, {0x2, 0x3}}, {0xa1c, 0x8000, {0x2, 0xfffffffb}}, {0x8, 0x70b8, {0x2, 0x3}}, {0x40, 0x1, {0x1, 0x5}}, {0x4000, 0xff, {0x1, 0x92}}, {0xff5b, 0x2, {0x2, 0x2}}, {0xe1, 0x3, {0x1, 0xffff0000}}, {0x3ff, 0x4, {0x0, 0x9}}, {0x44b, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0xa, 0x7f, 0x6, 0x8000, 0xb, 'syz0\x00', "e5dccc7d9bf7e0393ec5ac0e49e7aaf08f03247f63412b83911550e1072a3587", "e553f9582897104774b9954c14189061a073539d864a5bc8f5b53b9d78d57a5e", [{0x1, 0x6, {0x0, 0x6}}, {0x5, 0x6, {0x3, 0x3cbe}}, {0x0, 0xc871, {0x0, 0x7}}, {0xfff4, 0x55eb, {0x0, 0x3}}, {0x9, 0x5, {0x3, 0x47}}, {0x0, 0x1, {0x3, 0x7}}, {0x101, 0x4, {0x20a9503af351922, 0x80}}, {0x1000, 0x70, {0x3, 0x779}}, {0x9, 0xf7e, {0x3, 0x6}}, {0x4, 0xf7d, {0x1, 0x9}}, {0xfe, 0x800, {0x1, 0x1}}, {0xf9b4, 0x8c, {0x0, 0x7}}, {0x5, 0x8000, {0x0, 0x10}}, {0xff, 0x1000, {0x0, 0x7}}, {0x9, 0x9, {0x0, 0x9}}, {0x71, 0xff, {0x0, 0x8}}, {0x6, 0x11, {0x0, 0x2}}, {0x7, 0xe, {0x2, 0x3}}, {0xfff8, 0x8, {0x2, 0x1}}, {0x3ff, 0x2, {0x0, 0x1}}, {0x0, 0xa0b, {0x1, 0x10}}, {0xfff, 0x6, {0x3, 0x9}}, {0x3, 0xe817, {0x0, 0x4}}, {0x3ff, 0xc93, {0x3, 0x1}}, {0xffff, 0x2, {0x0, 0x2e3611b6}}, {0x1, 0x9, {0x1, 0xbcd4}}, {0x4, 0x4, {0x2, 0xfffffff8}}, {0x800, 0x2, {0x0, 0x5fed}}, {0xc, 0x8, {0x1, 0x8}}, {0x8, 0x0, {0x1, 0x1}}, {0x5, 0x8, {0x0, 0x7}}, {0x3, 0x6, {0x0, 0xffffffff}}, {0x2, 0x0, {0x0, 0xfffff800}}, {0x5838, 0x7360, {0x3, 0x9}}, {0xd5e, 0x2, {0x2, 0x3e8}}, {0x5, 0x1, {0x0, 0x1}}, {0x7, 0xfffc, {0x3, 0x6}}, {0x9, 0x2a82, {0x6, 0x1}}, {0x793e, 0xd, {0x2, 0x4}}, {0xe97, 0x8, {0x1, 0x2}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r12, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc89b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001340), 0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000001400)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1, 0x3, 0xc, 0x7f, 0x9}, 0x20) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r12, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r13, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 24.689271604s ago: executing program 4 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x78bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x24}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x4, 0x0, 0x400000, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x6, 0x4, 0x4000000, 0x8, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 23.970181744s ago: executing program 2 (id=2853): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x7fe}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0bac0f00"]}]}, 0x1c}], 0x1}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0xa, 0x1, 0x3088, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r0, 0x8871b000) r7 = socket$key(0xf, 0x3, 0x2) unshare(0x400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000080)=0xafee60a, 0x4) sendmsg$key(r7, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xa8}}, 0x0) socket(0x11, 0x800000003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x4, 0x8, 0xffff, 0x0, 0x7, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="dd99ce1916013b028bc23bf9e56402bb80ae21947d9588ebe8d8643276a1e20484f46f25cdf2a632de4045662e2df89a1772eebddf67be531421c422ea717c6d804a0443012fdc34afb113875106642ef37b1c435a5cc42eaab679d79daae249c80b5070f2c139832dcce17d0dd13fb8892040fa86fc21bfd319c5a50a547847c34a6fb29206d44dff8d5db05a538f3618ac3473f520b6627db03cf184f384674a24616dfd0182750f29fcf12211a57099679e40c1b370b98534c6c2517970"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c) 21.205114393s ago: executing program 0 (id=2875): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='swiotlb_bounced\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x7, &(0x7f00000000c0)='\\\\-{+)\x00'}, 0x30) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, @vifc_lcl_ifindex, @loopback}, 0x10) getpid() (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @empty, 0x0}, &(0x7f0000000500)=0xc) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x9, 0x0, 0x5, 0x1, 0xfffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff3760}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x37b878f3, 0xec, &(0x7f00000003c0)=""/236, 0x41100, 0x24, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x2, 0x3ff, 0x8000}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x5, 0x3, 0xf, 0xa}, {0x0, 0x2, 0x3, 0x4}, {0x0, 0x4, 0x1, 0x8}, {0x5, 0x1, 0xa}, {0x2, 0x5, 0xd, 0x2}], 0x10, 0x2, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000700)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x393ca5021bb8664, 0x4, [@remote, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2a}]}, 0x20) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'syztnl2\x00', r5, 0x7800, 0x57, 0x59, 0x4, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @remote, {[@noop]}}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x9, 0x8000, 0x10c0, r4, 0x7ff, '\x00', r8, r6, 0x4, 0x1, 0x9, 0xf, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f00000008c0)={r2, 0xff, 0x8, 0x80000001}) write$cgroup_type(r10, &(0x7f0000000900), 0x9) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) splice(r7, &(0x7f0000000940)=0x4, r11, &(0x7f0000000980)=0x6, 0x1, 0x5) (async) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$OSF_MSG_REMOVE(r12, &(0x7f0000001180)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x214}, 0x9, 0x8, 0x9, 0x0, 0xa, 'syz0\x00', "9c19a5ed7789336009dc78885a95b679d7b5d580fd323b971e6e1cac0017bbf1", "fc994254704dcf7dada758e836145b168306d0ca7a086b8ceb01393d8a814c73", [{0xff, 0x7ff, {0x2, 0xed}}, {0xff94, 0x0, {0x3, 0x3}}, {0x533, 0x7, {0x0, 0x8001}}, {0x7, 0x7, {0x1, 0x6}}, {0x8, 0x3, {0x3, 0x8}}, {0xe22, 0x100, {0x0, 0x2}}, {0x2, 0x1, {0x2, 0x8000}}, {0x4, 0x9, {0x3, 0x6}}, {0x1, 0xfffe, {0x1, 0x5}}, {0x8, 0x9, {0x0, 0x60000000}}, {0x3, 0x6, {0x1, 0x4}}, {0x3, 0x8, {0x2, 0x1}}, {0x200, 0x0, {0x3, 0x4}}, {0x8a, 0x1, {0x0, 0x4}}, {0x9, 0x9c60, {0x0, 0x10001}}, {0x2, 0xa, {0x2, 0xc29}}, {0x4, 0x7, {0x2, 0x3}}, {0xc5b, 0x3, {0x3, 0x2}}, {0x5, 0x7, {0x1, 0x200}}, {0x7, 0x8000, {0x2, 0x2}}, {0x0, 0xa, {0x0, 0xa}}, {0x3cad, 0x7, {0x0, 0x5ab6}}, {0x3, 0xc5e0, {0x3, 0x6}}, {0xd, 0x8, {0x0, 0xbfe}}, {0x3, 0x8, {0x1, 0x5}}, {0xc, 0x2, {0x0, 0x1}}, {0xb, 0x0, {0x3, 0x1}}, {0x4, 0xdb3b, {0x2, 0x5}}, {0x1, 0x3, {0x2, 0x8000}}, {0xfff, 0x0, {0x2}}, {0x5, 0x401, {0x3, 0xfe94}}, {0xc, 0x5, {0x3, 0x8}}, {0xfff8, 0x3, {0x0, 0x1}}, {0x8, 0x3, {0x0, 0x31}}, {0x5, 0x10, {0x3, 0x5}}, {0x0, 0x5, {0x2, 0x2}}, {0x6, 0x401, {0x3, 0x6}}, {0x79, 0x3, {0x1, 0x6}}, {0xffff, 0x40, {0x0, 0x8641}}, {0xaf, 0xe, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0xbd0b6fe5854be752, 0x4}, 0x0, 0xfc, 0xffff, 0x1, 0x20, 'syz1\x00', "f31aca6edc537870ee8a3bd8549c016acfb2ee49d97582e293f4b8a6ef630dd5", "da3d5ab41c5a600ebce956dcde2821dee59e857026e55668678a9cbc656923bb", [{0x5, 0x2, {0x0, 0xcb}}, {0xfff7, 0x2, {0x1, 0xcaf3}}, {0x7, 0x0, {0x6478444d1faecd23, 0x3}}, {0x1, 0x5, {0x0, 0x1000}}, {0x9, 0xa, {0x2, 0xc}}, {0xfffd, 0x9, {0x1, 0x6}}, {0xfff8, 0x5, {0x3, 0x10001}}, {0x1, 0x8d6a, {0x3, 0x8}}, {0x9, 0x7fff, {0x1, 0x7fffffff}}, {0x5, 0x7, {0x2, 0x5}}, {0xd5, 0x43, {0x2, 0xfb6}}, {0x65, 0x2, {0xca1332b199e71322, 0x1}}, {0x97fa, 0x2, {0x2, 0x8}}, {0x8, 0x9, {0x1, 0xaa61}}, {0x2, 0x8, {0x2, 0x7}}, {0x3d1, 0x800, {0x3, 0x3}}, {0x1, 0x5, {0x0, 0xa5}}, {0x1, 0x5, {0x1, 0x4}}, {0xf, 0x8001, {0x0, 0x268}}, {0xfff, 0x5, {0x1, 0x6}}, {0x10, 0x5, {0x2, 0xb6}}, {0x9f, 0x6, {0x0, 0x5610}}, {0x9, 0x48d, {0x3, 0x33d}}, {0x3, 0x9, {0x0, 0x6}}, {0x4, 0x858, {0x2, 0x4}}, {0x28, 0x4, {0x2, 0x4}}, {0x101, 0x0, {0x3, 0x3b}}, {0x1d, 0x6, {0x2, 0x3}}, {0x9f93, 0xffff, {0x2, 0x200}}, {0x1ff, 0x4, {0x0, 0x5}}, {0x81, 0xd, {0x2, 0xffffec3e}}, {0x2, 0x5, {0x2, 0x3}}, {0xa1c, 0x8000, {0x2, 0xfffffffb}}, {0x8, 0x70b8, {0x2, 0x3}}, {0x40, 0x1, {0x1, 0x5}}, {0x4000, 0xff, {0x1, 0x92}}, {0xff5b, 0x2, {0x2, 0x2}}, {0xe1, 0x3, {0x1, 0xffff0000}}, {0x3ff, 0x4, {0x0, 0x9}}, {0x44b, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0xa, 0x7f, 0x6, 0x8000, 0xb, 'syz0\x00', "e5dccc7d9bf7e0393ec5ac0e49e7aaf08f03247f63412b83911550e1072a3587", "e553f9582897104774b9954c14189061a073539d864a5bc8f5b53b9d78d57a5e", [{0x1, 0x6, {0x0, 0x6}}, {0x5, 0x6, {0x3, 0x3cbe}}, {0x0, 0xc871, {0x0, 0x7}}, {0xfff4, 0x55eb, {0x0, 0x3}}, {0x9, 0x5, {0x3, 0x47}}, {0x0, 0x1, {0x3, 0x7}}, {0x101, 0x4, {0x20a9503af351922, 0x80}}, {0x1000, 0x70, {0x3, 0x779}}, {0x9, 0xf7e, {0x3, 0x6}}, {0x4, 0xf7d, {0x1, 0x9}}, {0xfe, 0x800, {0x1, 0x1}}, {0xf9b4, 0x8c, {0x0, 0x7}}, {0x5, 0x8000, {0x0, 0x10}}, {0xff, 0x1000, {0x0, 0x7}}, {0x9, 0x9, {0x0, 0x9}}, {0x71, 0xff, {0x0, 0x8}}, {0x6, 0x11, {0x0, 0x2}}, {0x7, 0xe, {0x2, 0x3}}, {0xfff8, 0x8, {0x2, 0x1}}, {0x3ff, 0x2, {0x0, 0x1}}, {0x0, 0xa0b, {0x1, 0x10}}, {0xfff, 0x6, {0x3, 0x9}}, {0x3, 0xe817, {0x0, 0x4}}, {0x3ff, 0xc93, {0x3, 0x1}}, {0xffff, 0x2, {0x0, 0x2e3611b6}}, {0x1, 0x9, {0x1, 0xbcd4}}, {0x4, 0x4, {0x2, 0xfffffff8}}, {0x800, 0x2, {0x0, 0x5fed}}, {0xc, 0x8, {0x1, 0x8}}, {0x8, 0x0, {0x1, 0x1}}, {0x5, 0x8, {0x0, 0x7}}, {0x3, 0x6, {0x0, 0xffffffff}}, {0x2, 0x0, {0x0, 0xfffff800}}, {0x5838, 0x7360, {0x3, 0x9}}, {0xd5e, 0x2, {0x2, 0x3e8}}, {0x5, 0x1, {0x0, 0x1}}, {0x7, 0xfffc, {0x3, 0x6}}, {0x9, 0x2a82, {0x6, 0x1}}, {0x793e, 0xd, {0x2, 0x4}}, {0xe97, 0x8, {0x1, 0x2}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r12, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc89b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001340), 0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000001400)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1, 0x3, 0xc, 0x7f, 0x9}, 0x20) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r12, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r13, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 16.414340703s ago: executing program 2 (id=2853): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x7fe}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0bac0f00"]}]}, 0x1c}], 0x1}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0xa, 0x1, 0x3088, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r0, 0x8871b000) r7 = socket$key(0xf, 0x3, 0x2) unshare(0x400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000080)=0xafee60a, 0x4) sendmsg$key(r7, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xa8}}, 0x0) socket(0x11, 0x800000003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x4, 0x8, 0xffff, 0x0, 0x7, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="dd99ce1916013b028bc23bf9e56402bb80ae21947d9588ebe8d8643276a1e20484f46f25cdf2a632de4045662e2df89a1772eebddf67be531421c422ea717c6d804a0443012fdc34afb113875106642ef37b1c435a5cc42eaab679d79daae249c80b5070f2c139832dcce17d0dd13fb8892040fa86fc21bfd319c5a50a547847c34a6fb29206d44dff8d5db05a538f3618ac3473f520b6627db03cf184f384674a24616dfd0182750f29fcf12211a57099679e40c1b370b98534c6c2517970"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c) 15.854905039s ago: executing program 4 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x78bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x24}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x4, 0x0, 0x400000, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x6, 0x4, 0x4000000, 0x8, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14.804224772s ago: executing program 0 (id=2875): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='swiotlb_bounced\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x7, &(0x7f00000000c0)='\\\\-{+)\x00'}, 0x30) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, @vifc_lcl_ifindex, @loopback}, 0x10) getpid() (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @empty, 0x0}, &(0x7f0000000500)=0xc) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x9, 0x0, 0x5, 0x1, 0xfffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff3760}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x37b878f3, 0xec, &(0x7f00000003c0)=""/236, 0x41100, 0x24, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x2, 0x3ff, 0x8000}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x5, 0x3, 0xf, 0xa}, {0x0, 0x2, 0x3, 0x4}, {0x0, 0x4, 0x1, 0x8}, {0x5, 0x1, 0xa}, {0x2, 0x5, 0xd, 0x2}], 0x10, 0x2, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000700)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x393ca5021bb8664, 0x4, [@remote, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2a}]}, 0x20) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'syztnl2\x00', r5, 0x7800, 0x57, 0x59, 0x4, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @remote, {[@noop]}}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x9, 0x8000, 0x10c0, r4, 0x7ff, '\x00', r8, r6, 0x4, 0x1, 0x9, 0xf, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f00000008c0)={r2, 0xff, 0x8, 0x80000001}) write$cgroup_type(r10, &(0x7f0000000900), 0x9) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) splice(r7, &(0x7f0000000940)=0x4, r11, &(0x7f0000000980)=0x6, 0x1, 0x5) (async) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$OSF_MSG_REMOVE(r12, &(0x7f0000001180)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x214}, 0x9, 0x8, 0x9, 0x0, 0xa, 'syz0\x00', "9c19a5ed7789336009dc78885a95b679d7b5d580fd323b971e6e1cac0017bbf1", "fc994254704dcf7dada758e836145b168306d0ca7a086b8ceb01393d8a814c73", [{0xff, 0x7ff, {0x2, 0xed}}, {0xff94, 0x0, {0x3, 0x3}}, {0x533, 0x7, {0x0, 0x8001}}, {0x7, 0x7, {0x1, 0x6}}, {0x8, 0x3, {0x3, 0x8}}, {0xe22, 0x100, {0x0, 0x2}}, {0x2, 0x1, {0x2, 0x8000}}, {0x4, 0x9, {0x3, 0x6}}, {0x1, 0xfffe, {0x1, 0x5}}, {0x8, 0x9, {0x0, 0x60000000}}, {0x3, 0x6, {0x1, 0x4}}, {0x3, 0x8, {0x2, 0x1}}, {0x200, 0x0, {0x3, 0x4}}, {0x8a, 0x1, {0x0, 0x4}}, {0x9, 0x9c60, {0x0, 0x10001}}, {0x2, 0xa, {0x2, 0xc29}}, {0x4, 0x7, {0x2, 0x3}}, {0xc5b, 0x3, {0x3, 0x2}}, {0x5, 0x7, {0x1, 0x200}}, {0x7, 0x8000, {0x2, 0x2}}, {0x0, 0xa, {0x0, 0xa}}, {0x3cad, 0x7, {0x0, 0x5ab6}}, {0x3, 0xc5e0, {0x3, 0x6}}, {0xd, 0x8, {0x0, 0xbfe}}, {0x3, 0x8, {0x1, 0x5}}, {0xc, 0x2, {0x0, 0x1}}, {0xb, 0x0, {0x3, 0x1}}, {0x4, 0xdb3b, {0x2, 0x5}}, {0x1, 0x3, {0x2, 0x8000}}, {0xfff, 0x0, {0x2}}, {0x5, 0x401, {0x3, 0xfe94}}, {0xc, 0x5, {0x3, 0x8}}, {0xfff8, 0x3, {0x0, 0x1}}, {0x8, 0x3, {0x0, 0x31}}, {0x5, 0x10, {0x3, 0x5}}, {0x0, 0x5, {0x2, 0x2}}, {0x6, 0x401, {0x3, 0x6}}, {0x79, 0x3, {0x1, 0x6}}, {0xffff, 0x40, {0x0, 0x8641}}, {0xaf, 0xe, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0xbd0b6fe5854be752, 0x4}, 0x0, 0xfc, 0xffff, 0x1, 0x20, 'syz1\x00', "f31aca6edc537870ee8a3bd8549c016acfb2ee49d97582e293f4b8a6ef630dd5", "da3d5ab41c5a600ebce956dcde2821dee59e857026e55668678a9cbc656923bb", [{0x5, 0x2, {0x0, 0xcb}}, {0xfff7, 0x2, {0x1, 0xcaf3}}, {0x7, 0x0, {0x6478444d1faecd23, 0x3}}, {0x1, 0x5, {0x0, 0x1000}}, {0x9, 0xa, {0x2, 0xc}}, {0xfffd, 0x9, {0x1, 0x6}}, {0xfff8, 0x5, {0x3, 0x10001}}, {0x1, 0x8d6a, {0x3, 0x8}}, {0x9, 0x7fff, {0x1, 0x7fffffff}}, {0x5, 0x7, {0x2, 0x5}}, {0xd5, 0x43, {0x2, 0xfb6}}, {0x65, 0x2, {0xca1332b199e71322, 0x1}}, {0x97fa, 0x2, {0x2, 0x8}}, {0x8, 0x9, {0x1, 0xaa61}}, {0x2, 0x8, {0x2, 0x7}}, {0x3d1, 0x800, {0x3, 0x3}}, {0x1, 0x5, {0x0, 0xa5}}, {0x1, 0x5, {0x1, 0x4}}, {0xf, 0x8001, {0x0, 0x268}}, {0xfff, 0x5, {0x1, 0x6}}, {0x10, 0x5, {0x2, 0xb6}}, {0x9f, 0x6, {0x0, 0x5610}}, {0x9, 0x48d, {0x3, 0x33d}}, {0x3, 0x9, {0x0, 0x6}}, {0x4, 0x858, {0x2, 0x4}}, {0x28, 0x4, {0x2, 0x4}}, {0x101, 0x0, {0x3, 0x3b}}, {0x1d, 0x6, {0x2, 0x3}}, {0x9f93, 0xffff, {0x2, 0x200}}, {0x1ff, 0x4, {0x0, 0x5}}, {0x81, 0xd, {0x2, 0xffffec3e}}, {0x2, 0x5, {0x2, 0x3}}, {0xa1c, 0x8000, {0x2, 0xfffffffb}}, {0x8, 0x70b8, {0x2, 0x3}}, {0x40, 0x1, {0x1, 0x5}}, {0x4000, 0xff, {0x1, 0x92}}, {0xff5b, 0x2, {0x2, 0x2}}, {0xe1, 0x3, {0x1, 0xffff0000}}, {0x3ff, 0x4, {0x0, 0x9}}, {0x44b, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0xa, 0x7f, 0x6, 0x8000, 0xb, 'syz0\x00', "e5dccc7d9bf7e0393ec5ac0e49e7aaf08f03247f63412b83911550e1072a3587", "e553f9582897104774b9954c14189061a073539d864a5bc8f5b53b9d78d57a5e", [{0x1, 0x6, {0x0, 0x6}}, {0x5, 0x6, {0x3, 0x3cbe}}, {0x0, 0xc871, {0x0, 0x7}}, {0xfff4, 0x55eb, {0x0, 0x3}}, {0x9, 0x5, {0x3, 0x47}}, {0x0, 0x1, {0x3, 0x7}}, {0x101, 0x4, {0x20a9503af351922, 0x80}}, {0x1000, 0x70, {0x3, 0x779}}, {0x9, 0xf7e, {0x3, 0x6}}, {0x4, 0xf7d, {0x1, 0x9}}, {0xfe, 0x800, {0x1, 0x1}}, {0xf9b4, 0x8c, {0x0, 0x7}}, {0x5, 0x8000, {0x0, 0x10}}, {0xff, 0x1000, {0x0, 0x7}}, {0x9, 0x9, {0x0, 0x9}}, {0x71, 0xff, {0x0, 0x8}}, {0x6, 0x11, {0x0, 0x2}}, {0x7, 0xe, {0x2, 0x3}}, {0xfff8, 0x8, {0x2, 0x1}}, {0x3ff, 0x2, {0x0, 0x1}}, {0x0, 0xa0b, {0x1, 0x10}}, {0xfff, 0x6, {0x3, 0x9}}, {0x3, 0xe817, {0x0, 0x4}}, {0x3ff, 0xc93, {0x3, 0x1}}, {0xffff, 0x2, {0x0, 0x2e3611b6}}, {0x1, 0x9, {0x1, 0xbcd4}}, {0x4, 0x4, {0x2, 0xfffffff8}}, {0x800, 0x2, {0x0, 0x5fed}}, {0xc, 0x8, {0x1, 0x8}}, {0x8, 0x0, {0x1, 0x1}}, {0x5, 0x8, {0x0, 0x7}}, {0x3, 0x6, {0x0, 0xffffffff}}, {0x2, 0x0, {0x0, 0xfffff800}}, {0x5838, 0x7360, {0x3, 0x9}}, {0xd5e, 0x2, {0x2, 0x3e8}}, {0x5, 0x1, {0x0, 0x1}}, {0x7, 0xfffc, {0x3, 0x6}}, {0x9, 0x2a82, {0x6, 0x1}}, {0x793e, 0xd, {0x2, 0x4}}, {0xe97, 0x8, {0x1, 0x2}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r12, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc89b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001340), 0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000001400)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1, 0x3, 0xc, 0x7f, 0x9}, 0x20) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r12, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r13, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 7.933741787s ago: executing program 2 (id=2853): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x7fe}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0bac0f00"]}]}, 0x1c}], 0x1}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0xa, 0x1, 0x3088, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r0, 0x8871b000) r7 = socket$key(0xf, 0x3, 0x2) unshare(0x400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000080)=0xafee60a, 0x4) sendmsg$key(r7, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xa8}}, 0x0) socket(0x11, 0x800000003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x4, 0x8, 0xffff, 0x0, 0x7, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="dd99ce1916013b028bc23bf9e56402bb80ae21947d9588ebe8d8643276a1e20484f46f25cdf2a632de4045662e2df89a1772eebddf67be531421c422ea717c6d804a0443012fdc34afb113875106642ef37b1c435a5cc42eaab679d79daae249c80b5070f2c139832dcce17d0dd13fb8892040fa86fc21bfd319c5a50a547847c34a6fb29206d44dff8d5db05a538f3618ac3473f520b6627db03cf184f384674a24616dfd0182750f29fcf12211a57099679e40c1b370b98534c6c2517970"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c) 6.183381173s ago: executing program 4 (id=2133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000ff000000000000090000002c0000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x78bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x24}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x3, 0x4, 0x0, 0x400000, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xa, 0x1, {0x6, 0x4, 0x4000000, 0x8, 0x3}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.49348608s ago: executing program 0 (id=2875): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='swiotlb_bounced\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r1, 0x0, 0x7, &(0x7f00000000c0)='\\\\-{+)\x00'}, 0x30) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, @vifc_lcl_ifindex, @loopback}, 0x10) getpid() (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000004c0)={@rand_addr, @empty, 0x0}, &(0x7f0000000500)=0xc) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000300)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @generic={0x9, 0x0, 0x5, 0x1, 0xfffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff3760}}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x37b878f3, 0xec, &(0x7f00000003c0)=""/236, 0x41100, 0x24, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x2, 0x3ff, 0x8000}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000005c0)=[{0x5, 0x3, 0xf, 0xa}, {0x0, 0x2, 0x3, 0x4}, {0x0, 0x4, 0x1, 0x8}, {0x5, 0x1, 0xa}, {0x2, 0x5, 0xd, 0x2}], 0x10, 0x2, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000700)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x393ca5021bb8664, 0x4, [@remote, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x2a}]}, 0x20) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000740), &(0x7f0000000780)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gre0\x00', &(0x7f00000007c0)={'syztnl2\x00', r5, 0x7800, 0x57, 0x59, 0x4, {{0x6, 0x4, 0x0, 0x3d, 0x18, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @remote, {[@noop]}}}}}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x2, 0x9, 0x8000, 0x10c0, r4, 0x7ff, '\x00', r8, r6, 0x4, 0x1, 0x9, 0xf, @void, @value, @void, @value}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f00000008c0)={r2, 0xff, 0x8, 0x80000001}) write$cgroup_type(r10, &(0x7f0000000900), 0x9) (async) r11 = socket$nl_rdma(0x10, 0x3, 0x14) splice(r7, &(0x7f0000000940)=0x4, r11, &(0x7f0000000980)=0x6, 0x1, 0x5) (async) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$OSF_MSG_REMOVE(r12, &(0x7f0000001180)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000a00)={0x710, 0x1, 0x5, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [{{0x254, 0x1, {{0x0, 0x214}, 0x9, 0x8, 0x9, 0x0, 0xa, 'syz0\x00', "9c19a5ed7789336009dc78885a95b679d7b5d580fd323b971e6e1cac0017bbf1", "fc994254704dcf7dada758e836145b168306d0ca7a086b8ceb01393d8a814c73", [{0xff, 0x7ff, {0x2, 0xed}}, {0xff94, 0x0, {0x3, 0x3}}, {0x533, 0x7, {0x0, 0x8001}}, {0x7, 0x7, {0x1, 0x6}}, {0x8, 0x3, {0x3, 0x8}}, {0xe22, 0x100, {0x0, 0x2}}, {0x2, 0x1, {0x2, 0x8000}}, {0x4, 0x9, {0x3, 0x6}}, {0x1, 0xfffe, {0x1, 0x5}}, {0x8, 0x9, {0x0, 0x60000000}}, {0x3, 0x6, {0x1, 0x4}}, {0x3, 0x8, {0x2, 0x1}}, {0x200, 0x0, {0x3, 0x4}}, {0x8a, 0x1, {0x0, 0x4}}, {0x9, 0x9c60, {0x0, 0x10001}}, {0x2, 0xa, {0x2, 0xc29}}, {0x4, 0x7, {0x2, 0x3}}, {0xc5b, 0x3, {0x3, 0x2}}, {0x5, 0x7, {0x1, 0x200}}, {0x7, 0x8000, {0x2, 0x2}}, {0x0, 0xa, {0x0, 0xa}}, {0x3cad, 0x7, {0x0, 0x5ab6}}, {0x3, 0xc5e0, {0x3, 0x6}}, {0xd, 0x8, {0x0, 0xbfe}}, {0x3, 0x8, {0x1, 0x5}}, {0xc, 0x2, {0x0, 0x1}}, {0xb, 0x0, {0x3, 0x1}}, {0x4, 0xdb3b, {0x2, 0x5}}, {0x1, 0x3, {0x2, 0x8000}}, {0xfff, 0x0, {0x2}}, {0x5, 0x401, {0x3, 0xfe94}}, {0xc, 0x5, {0x3, 0x8}}, {0xfff8, 0x3, {0x0, 0x1}}, {0x8, 0x3, {0x0, 0x31}}, {0x5, 0x10, {0x3, 0x5}}, {0x0, 0x5, {0x2, 0x2}}, {0x6, 0x401, {0x3, 0x6}}, {0x79, 0x3, {0x1, 0x6}}, {0xffff, 0x40, {0x0, 0x8641}}, {0xaf, 0xe, {0x2, 0x401}}]}}}, {{0x254, 0x1, {{0xbd0b6fe5854be752, 0x4}, 0x0, 0xfc, 0xffff, 0x1, 0x20, 'syz1\x00', "f31aca6edc537870ee8a3bd8549c016acfb2ee49d97582e293f4b8a6ef630dd5", "da3d5ab41c5a600ebce956dcde2821dee59e857026e55668678a9cbc656923bb", [{0x5, 0x2, {0x0, 0xcb}}, {0xfff7, 0x2, {0x1, 0xcaf3}}, {0x7, 0x0, {0x6478444d1faecd23, 0x3}}, {0x1, 0x5, {0x0, 0x1000}}, {0x9, 0xa, {0x2, 0xc}}, {0xfffd, 0x9, {0x1, 0x6}}, {0xfff8, 0x5, {0x3, 0x10001}}, {0x1, 0x8d6a, {0x3, 0x8}}, {0x9, 0x7fff, {0x1, 0x7fffffff}}, {0x5, 0x7, {0x2, 0x5}}, {0xd5, 0x43, {0x2, 0xfb6}}, {0x65, 0x2, {0xca1332b199e71322, 0x1}}, {0x97fa, 0x2, {0x2, 0x8}}, {0x8, 0x9, {0x1, 0xaa61}}, {0x2, 0x8, {0x2, 0x7}}, {0x3d1, 0x800, {0x3, 0x3}}, {0x1, 0x5, {0x0, 0xa5}}, {0x1, 0x5, {0x1, 0x4}}, {0xf, 0x8001, {0x0, 0x268}}, {0xfff, 0x5, {0x1, 0x6}}, {0x10, 0x5, {0x2, 0xb6}}, {0x9f, 0x6, {0x0, 0x5610}}, {0x9, 0x48d, {0x3, 0x33d}}, {0x3, 0x9, {0x0, 0x6}}, {0x4, 0x858, {0x2, 0x4}}, {0x28, 0x4, {0x2, 0x4}}, {0x101, 0x0, {0x3, 0x3b}}, {0x1d, 0x6, {0x2, 0x3}}, {0x9f93, 0xffff, {0x2, 0x200}}, {0x1ff, 0x4, {0x0, 0x5}}, {0x81, 0xd, {0x2, 0xffffec3e}}, {0x2, 0x5, {0x2, 0x3}}, {0xa1c, 0x8000, {0x2, 0xfffffffb}}, {0x8, 0x70b8, {0x2, 0x3}}, {0x40, 0x1, {0x1, 0x5}}, {0x4000, 0xff, {0x1, 0x92}}, {0xff5b, 0x2, {0x2, 0x2}}, {0xe1, 0x3, {0x1, 0xffff0000}}, {0x3ff, 0x4, {0x0, 0x9}}, {0x44b, 0x4, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x2}, 0xa, 0x7f, 0x6, 0x8000, 0xb, 'syz0\x00', "e5dccc7d9bf7e0393ec5ac0e49e7aaf08f03247f63412b83911550e1072a3587", "e553f9582897104774b9954c14189061a073539d864a5bc8f5b53b9d78d57a5e", [{0x1, 0x6, {0x0, 0x6}}, {0x5, 0x6, {0x3, 0x3cbe}}, {0x0, 0xc871, {0x0, 0x7}}, {0xfff4, 0x55eb, {0x0, 0x3}}, {0x9, 0x5, {0x3, 0x47}}, {0x0, 0x1, {0x3, 0x7}}, {0x101, 0x4, {0x20a9503af351922, 0x80}}, {0x1000, 0x70, {0x3, 0x779}}, {0x9, 0xf7e, {0x3, 0x6}}, {0x4, 0xf7d, {0x1, 0x9}}, {0xfe, 0x800, {0x1, 0x1}}, {0xf9b4, 0x8c, {0x0, 0x7}}, {0x5, 0x8000, {0x0, 0x10}}, {0xff, 0x1000, {0x0, 0x7}}, {0x9, 0x9, {0x0, 0x9}}, {0x71, 0xff, {0x0, 0x8}}, {0x6, 0x11, {0x0, 0x2}}, {0x7, 0xe, {0x2, 0x3}}, {0xfff8, 0x8, {0x2, 0x1}}, {0x3ff, 0x2, {0x0, 0x1}}, {0x0, 0xa0b, {0x1, 0x10}}, {0xfff, 0x6, {0x3, 0x9}}, {0x3, 0xe817, {0x0, 0x4}}, {0x3ff, 0xc93, {0x3, 0x1}}, {0xffff, 0x2, {0x0, 0x2e3611b6}}, {0x1, 0x9, {0x1, 0xbcd4}}, {0x4, 0x4, {0x2, 0xfffffff8}}, {0x800, 0x2, {0x0, 0x5fed}}, {0xc, 0x8, {0x1, 0x8}}, {0x8, 0x0, {0x1, 0x1}}, {0x5, 0x8, {0x0, 0x7}}, {0x3, 0x6, {0x0, 0xffffffff}}, {0x2, 0x0, {0x0, 0xfffff800}}, {0x5838, 0x7360, {0x3, 0x9}}, {0xd5e, 0x2, {0x2, 0x3e8}}, {0x5, 0x1, {0x0, 0x1}}, {0x7, 0xfffc, {0x3, 0x6}}, {0x9, 0x2a82, {0x6, 0x1}}, {0x793e, 0xd, {0x2, 0x4}}, {0xe97, 0x8, {0x1, 0x2}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r12, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xac, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc89b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x48000) (async) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000001340), 0x4) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r10, 0x84, 0x12, &(0x7f0000001380), &(0x7f00000013c0)=0x4) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000001400)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1, 0x3, 0xc, 0x7f, 0x9}, 0x20) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r12, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0xc00000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r13, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x4, 0x58}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040800) 3.667183748s ago: executing program 1 (id=3085): r0 = socket$rds(0x15, 0x5, 0x0) unshare(0x8040600) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6c}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x40, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}]}, 0x40}}, 0x200040c4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000001640)={0x2, 0x4e22, @broadcast}, 0x10) 3.51893212s ago: executing program 1 (id=3086): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000305000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a00239b67c51c2b2a930200000000000000ef4271c4370bc250ffff6864b7a2b5d481b4822a5ae70a1316000200007e724e216a1f6924ec854989e138"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 3.362842864s ago: executing program 1 (id=3089): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x84, 0x1}], 0x10}}], 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x8, r4}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv6_newrule={0x64, 0x20, 0x4, 0x70bd25, 0x25dfdbff, {0xa, 0x10, 0x14, 0x1, 0x2, 0x0, 0x0, 0x4, 0x10}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x4}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.34467932s ago: executing program 1 (id=3091): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="6000000000060300"], 0x60}}, 0x0) 1.994525314s ago: executing program 1 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780), 0x4, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'erspan0\x00', 0x0}) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x1}}, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x8e00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x14801}, 0x0) 1.310490577s ago: executing program 1 (id=3095): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x5, 0x16, 0x81, 0x2001, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x400}, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000001440)=@broadcast, &(0x7f0000001480)=@mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x66c0}, @device_b, @broadcast, @initial, {0x9, 0x9}}, 0x2c, @val={0x8c, 0x18, {0x2d6, "c1f700c110d1", @long="3e5a103b4249fe4ac8e9426f0a96c685"}}}, 0x34) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000024000100010000000000000000000000060003006649"], 0x35}}, 0x8004) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @rand_addr, 0xffffffff}, 0x1c) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvmsg(r2, &(0x7f0000001400)={&(0x7f00000012c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/25, 0x19}, {&(0x7f0000001340)=""/1, 0x1}], 0x2, &(0x7f00000013c0)=""/19, 0x13}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1000000}, 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc000000, @void, @value}, 0x48) 1.090723993s ago: executing program 3 (id=3098): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000305000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="08000a00239b67c51c2b2a930200000000000000ef4271c4370bc250ffff6864b7a2b5d481b4822a5ae70a1316000200007e724e216a1f6924ec854989e138"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 715.094221ms ago: executing program 3 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 613.125092ms ago: executing program 3 (id=3100): r0 = socket$inet6(0xa, 0x2, 0x0) unshare(0x40600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) listen(r1, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000712"], 0x30}, 0x0) 596.982031ms ago: executing program 3 (id=3101): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x1b, 0x56a0, 0x400006b}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x22, 0x0, &(0x7f0000000800)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x4f, {{0x17, 0x4, 0x3, 0x7, 0x5c, 0x67, 0x0, 0x3, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x83, 0x9, "30a97c85a979c2"}, @rr={0x7, 0x17, 0x51, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010100, @private=0xa010101]}, @noop, @timestamp_prespec={0x44, 0x14, 0xfb, 0x3, 0x5, [{@remote}, {@loopback, 0xfffffff9}]}, @generic={0x83, 0x12, "5bf6f368f0c3d45f8165a4c7541b0ca1"}]}}}}}) bind$xdp(r3, &(0x7f0000000640)={0x2c, 0x2, r4, 0x31}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000e3ff00003d6f82caebfb0af46e699b7fd0f064de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010000010000000037dd460700006040cbdf6ec98ba671"], 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020400050e000000000000000000000005000600000000000a000000000000000000000000000000000000000000025f5cf32d0000000000000000000200"], 0x70}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}, @common=@unspec=@time={{0x38}, {0xfffffffc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 376.236512ms ago: executing program 3 (id=3102): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x53}, 0x5000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x790}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xd02}]}, 0x44}}, 0x200448d1) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="f687399f190b9c3c3365c88435dbefeccb62c5b518376ee7c4e9c7c15d72ead89940f450ed44265767850a56ab4627cef5dfffe9b338014151190d27c8c0b7833a25cd66934acd533b8b5d9fa7f178ecd0bd1fe9b6196dc73fa06d607175890dfd7d218cbd9eb66b30208eae80f6edf9b4bce7db3c20a05538f2cbad86475a08958cd316f50aa0e9ae2ecdd71b62196fd1a48d60d94eb830c47ccd8edbcfecc9e9e7e51f86740d5ab5c5563fde42ce3635aa81a4b357bd6d0ff4f859de6e5a7ab3893a2c7792fe45ce829228a6508d1852ac3bf4f20eb85684515af3d961903e63", 0xe1}, {&(0x7f0000000400)="8940bd3afdef8de7631294623a4e71e36cc5b3acb0032f9ea48b6bcb7ab4ec", 0x1f}, {&(0x7f0000000440)="afac6041bb914ff12bc45036e5feda273b783a027dcc71c79801fc9b332cc096f89199b835329fd476363da60cb0c9ef36f2b6ae7121ca37b2c18e5cc65bbaeb74faeede182d3c87e978bba100dab53d82ed3cdc354ad192c3763fbcbbcb8b51ed0ebd1b95d279fa6e3f4b4ad6d93f171cb7cdd2940df5d15e493027c6441da093dbe508c3f5fc978dec927866a096e51bfc0a851ef135399981708ffb9844e51a2b278ecb5fa9809bb772eed6a5c92f376bbb9a2b62901ce73a2c55d33af00cd68df51e9ec1", 0xc6}], 0x3, &(0x7f0000000580)=[@ip_retopts={{0xb4, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xa4, 0x1, 0x0, [{@multicast2, 0x5c}, {@private=0xa010101}]}, @generic={0x7, 0x11, "fb962bb67fbdc3830b9d974f1f4a06"}, @timestamp_prespec={0x44, 0x14, 0xdf, 0x3, 0xc, [{@empty, 0xe}, {@loopback, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xdb, 0x1, 0x6, [{@remote, 0x209e}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@broadcast, 0x56a4}, {@multicast1, 0xffffffff}]}, @cipso={0x86, 0x44, 0x3, [{0x5, 0x11, "05606b25c17f8ed80572d303f939b1"}, {0x2, 0x3, '\b'}, {0x2, 0x7, "833cd72940"}, {0x7, 0x11, "797d1fe1e4f4f3308bb5b31bc71160"}, {0x5, 0x12, "6825c5e3ad26693e9079b1b1b2ac59cc"}]}]}}}], 0xb8}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x144, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_MODES_OURS={0x114, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_VALUE={0x39, 0x4, "90999afbf95af42e6b2bc4947c616f8964526b22657aa8db146c19ce2f52ab2c7ddfe433bb50c9fe5e5eb8ce7de3dd9a3bb7167ad9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "17e5f41c4021c9b4b7d1d1d232bec27b290b31336afb8bd36a2db77bc7ba9a11af8cf063b353582531aef8f37706dd2eb0f08bcc65f11ad0c20d206c139e2bd769123a93376d517533bdb2f757a6236526f95b04039fc16974616768374372d9e20b6dbaab5f37683a20563d7db7c846c4bc574fb0ee6c471744b5c8bc962eb4708874835b396f2706bfdb00537e80f0ad72573736f3e8681203e69a72da6f043611e906b782e367a1718e85d725a08d42fc79584439e9f97c"}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008816}, 0x20004811) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x1000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0x24, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6df, 0x0, 0x0, 0x0, 0x800}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x0, 0xa, 0x7, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff0}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @ldst={0x2, 0x2, 0x4, 0x4, 0x1, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000b40)='GPL\x00', 0xd3, 0x49, &(0x7f0000000b80)=""/73, 0x40f00, 0x1c, '\x00', r4, @fallback=0x34, r0, 0x8, &(0x7f0000000c00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x3, 0x3, 0x8, 0x7}, 0x10, r6, r0, 0x0, 0x0, &(0x7f0000000cc0), 0x10, 0x7ff, @void, @value}, 0x94) r7 = accept(r2, &(0x7f0000000dc0)=@hci, &(0x7f0000000e40)=0x80) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f00)={0x1c0, r8, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3db04e14ce4c16d7}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x80000001}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x49}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x8cc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xbf}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x9}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10}, 0x241691799b38b9f4) sendmsg$NFT_BATCH(r7, &(0x7f0000001740)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x498, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x38c, 0x3, 0x0, 0x1, [{0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1000}]}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_ELEM_USERDATA={0x9e, 0x6, 0x1, 0x0, "6e74a5b6eec4b6b49f323be0b36dec591a856abb8e29455aeaca9cefb4b9a96ca633910ee196de0d7bec2f944d12fce4299113da66df910c2316246daca67644c038082aa0b764114fbfa894f90da13de28f907776c2d33b8a5d73d90bb2afd29a28a9ea951ee43d39ebb177d2cb53d0bd39b05706fad3e776be96b272b24ce1df86779e9f45b3feb4037105ab855532dfc863b90565a1abfe25"}, @NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xd}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xed}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xf2}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa0, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x34}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xf31}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xd8, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x40000000000}]}, {0xc0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "5b36b6072dc7dc5b57b1316616cf0908940f04c17c586193cce256a61cbacd593298f88f563963a6b1d14dcbfb578c8fab9a40256e1069b10ced2004edc44d2f61a9377ea8d4dcc769d3e243d1c0de18406b7a13a4affa8981f768fa4626ffc9fad4714551c715da35acec55a35d4dd7474b43453dbdbce8941d0f6997b32be50183bcf360733329ceda1c576558f2eb79ccc359813343e3e5b67aac2062a11e0ad6d3"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001780)={0x0, 0xd}) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000001b80)={r9, 0x2, 0x1, 0x1}) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000002400)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000023c0)={&(0x7f0000001fc0)={0x3d4, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x484f000000000000}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc0, 0x3, "d98fd59ef4f1701cfca9c8af51386ac11d60b50a5b310242b7679a3d7be23b577b1be5f30b0a94d386f45d397f74f2eff8d86364ca3e1e6c6d380e1e47fb9db5a9d36454a833c607f3f339bd0c29e2e1717185c466304eaf77e21d2e50dc00d3a0e1816cf168a3fd863dfc424b5150e0d10f8104db222fcb12d1935d34d1a8190bd211ae3d9eea87f77495e1fb3bae63b0046c61b75fa69515ee87799da8159c71e2208a362ed07a93978942e70aa664a036a2fd38b32e5c9ae9ca28"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "642cc55a7e6e1cdc30e19fdb66f67450cac9eb4bbaccbe940d28"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x53e}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x38d6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3d3e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf4d0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ef1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}]}]}, 0x3d4}}, 0xc0) accept$packet(r7, &(0x7f0000002440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002480)=0x14) recvmsg$unix(r0, &(0x7f00000027c0)={&(0x7f00000024c0), 0x6e, &(0x7f0000002640)=[{&(0x7f0000002540)=""/249, 0xf9}], 0x1, &(0x7f0000002680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x40012102) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r13, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0xac, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x880}, 0x20044044) r14 = socket$isdn(0x22, 0x3, 0x26) setsockopt$sock_linger(r14, 0x1, 0xd, &(0x7f0000002980)={0x1, 0x7f}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=@bloom_filter={0x1e, 0xfffffff8, 0x800, 0x7, 0xa00, r12, 0x4f, '\x00', r10, r12, 0x5, 0x0, 0x0, 0xf, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002a40)=@base={0x1d, 0x8, 0x3, 0xfffffff9, 0x60000, r11, 0x8, '\x00', r4, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r15, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4002}, 0x40000) 294.444632ms ago: executing program 3 (id=3103): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@default, @rose, @rose, @remote, @bcast, @null, @rose, @null]}, &(0x7f00000001c0)=0x48) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r2, 0x5, 0x3, 0x6f91a871}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'caif0\x00', {0x2, 0x0, @private}}) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x100}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "b05c84be2e0c1f7d", "2af9f8c3730598f1aeeb7c5f1ffd95b6", "612883b6", "77dfa06c7938a7a6"}, 0x28) sendto$inet6(r7, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0x8000f2b, 0x1) splice(r8, 0x0, r6, 0x0, 0x3, 0x5) accept$alg(r5, 0x0, 0x0) 0s ago: executing program 2 (id=2853): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x7fe}, @nested={0x8, 0x18, 0x0, 0x1, [@generic="0bac0f00"]}]}, 0x1c}], 0x1}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f00000000c0)={0xa, 0x1, 0x3088, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/106, 0x6a}], 0x1}, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r1, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r0, 0x8871b000) r7 = socket$key(0xf, 0x3, 0x2) unshare(0x400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000080)=0xafee60a, 0x4) sendmsg$key(r7, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xa8}}, 0x0) socket(0x11, 0x800000003, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x4, 0x8, 0xffff, 0x0, 0x7, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="dd99ce1916013b028bc23bf9e56402bb80ae21947d9588ebe8d8643276a1e20484f46f25cdf2a632de4045662e2df89a1772eebddf67be531421c422ea717c6d804a0443012fdc34afb113875106642ef37b1c435a5cc42eaab679d79daae249c80b5070f2c139832dcce17d0dd13fb8892040fa86fc21bfd319c5a50a547847c34a6fb29206d44dff8d5db05a538f3618ac3473f520b6627db03cf184f384674a24616dfd0182750f29fcf12211a57099679e40c1b370b98534c6c2517970"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c) kernel console output (not intermixed with test programs): 56914][T14103] ? __pfx_lock_release+0x10/0x10 [ 205.556931][T14103] ? aa_file_perm+0x137/0xf50 [ 205.556949][T14103] ? aa_file_perm+0x3ef/0xf50 [ 205.556967][T14103] should_fail_ex+0x3b0/0x4e0 [ 205.556986][T14103] _copy_from_user+0x2f/0xc0 [ 205.557010][T14103] kstrtouint_from_user+0xc6/0x190 [ 205.557030][T14103] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 205.557051][T14103] ? __pfx_lock_acquire+0x10/0x10 [ 205.557071][T14103] ? __pfx___might_resched+0x10/0x10 [ 205.557091][T14103] proc_fail_nth_write+0xaa/0x2d0 [ 205.557110][T14103] ? common_file_perm+0x1a6/0x210 [ 205.656352][T14103] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 205.661995][T14103] ? bpf_lsm_file_permission+0x9/0x10 [ 205.667380][T14103] ? preempt_count_add+0x93/0x190 [ 205.672402][T14103] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 205.678027][T14103] vfs_write+0x2a3/0xd30 [ 205.682270][T14103] ? __pfx_vfs_write+0x10/0x10 [ 205.687029][T14103] ? __fget_files+0x2a/0x410 [ 205.691629][T14103] ? __fget_files+0x395/0x410 [ 205.696299][T14103] ? __fget_files+0x2a/0x410 [ 205.700888][T14103] ksys_write+0x18f/0x2b0 [ 205.705226][T14103] ? __pfx_ksys_write+0x10/0x10 [ 205.710077][T14103] ? rcu_is_watching+0x15/0xb0 [ 205.714843][T14103] ? rcu_is_watching+0x15/0xb0 [ 205.719624][T14103] do_syscall_64+0xf3/0x230 [ 205.724213][T14103] ? clear_bhb_loop+0x35/0x90 [ 205.728915][T14103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.734809][T14103] RIP: 0033:0x7f13fed847df [ 205.739217][T14103] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 205.758825][T14103] RSP: 002b:00007f13ffc82030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 205.767243][T14103] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f13fed847df [ 205.775383][T14103] RDX: 0000000000000001 RSI: 00007f13ffc820a0 RDI: 0000000000000004 [ 205.783366][T14103] RBP: 00007f13ffc82090 R08: 0000000000000000 R09: 0000000000000000 [ 205.791331][T14103] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 205.799322][T14103] R13: 0000000000000000 R14: 00007f13fef75fa0 R15: 00007ffebe08ae28 [ 205.807306][T14103] [ 205.841817][T14081] team0: Port device team_slave_0 added [ 205.861315][T14081] team0: Port device team_slave_1 added [ 205.873320][T14105] IPVS: Error joining to the multicast group [ 205.896559][T14081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.904080][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.931054][T14081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.943496][T14081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.952471][T14081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.978707][T14081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.992629][T13988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.014587][T13988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.024523][T13988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.035104][T13988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.044969][T13988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.055562][T13988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.065500][T13988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.075974][T13988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.086951][T13988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.098586][T10210] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.123706][T14108] veth1: entered promiscuous mode [ 206.129405][T14108] macsec0: entered allmulticast mode [ 206.135024][T14108] veth1: entered allmulticast mode [ 206.141825][T14108] veth1: left allmulticast mode [ 206.145945][T14111] __nla_validate_parse: 10 callbacks suppressed [ 206.145963][T14111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2913'. [ 206.150048][T14108] veth1: left promiscuous mode [ 206.178422][T10210] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.207311][T13988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.229559][T13988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.240262][T13988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.251323][T13988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.261469][T13988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.272803][T13988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.283141][T13988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.293851][T13988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.307241][T13988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.324449][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.331518][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.351470][T14081] hsr_slave_0: entered promiscuous mode [ 206.359146][T14081] hsr_slave_1: entered promiscuous mode [ 206.366239][T14081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.373815][T14081] Cannot create hsr debugfs directory [ 206.390488][T10210] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.427082][T13988] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.441213][T13988] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.450733][T13988] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.459762][T13988] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.474106][T10210] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.487868][T14005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.497062][T14005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.523164][T14005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.550410][T14005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.613306][T10210] bridge_slave_1: left allmulticast mode [ 206.619553][T10210] bridge_slave_1: left promiscuous mode [ 206.626634][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.636600][T10210] bridge_slave_0: left allmulticast mode [ 206.642467][T10210] bridge_slave_0: left promiscuous mode [ 206.648812][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.724402][ T5837] Bluetooth: hci2: command tx timeout [ 206.748335][T14129] ax25_connect(): syz.3.2921 uses autobind, please contact jreuter@yaina.de [ 206.779199][T10210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.791776][T10210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.801401][T10210] bond0 (unregistering): Released all slaves [ 206.837068][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.851448][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.938825][T10208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.961662][T10208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.964879][ T5837] Bluetooth: hci3: command tx timeout [ 207.026237][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.042681][T10210] hsr_slave_0: left promiscuous mode [ 207.057563][T10210] hsr_slave_1: left promiscuous mode [ 207.063654][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.071558][T10210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.079748][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.087380][T10210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.097162][T10210] veth1_macvtap: left promiscuous mode [ 207.102673][T10210] veth0_macvtap: left promiscuous mode [ 207.109561][T10210] veth1_vlan: left promiscuous mode [ 207.114972][T10210] veth0_vlan: left promiscuous mode [ 207.269459][T10210] team0 (unregistering): Port device team_slave_1 removed [ 207.287682][T10210] team0 (unregistering): Port device team_slave_0 removed [ 207.357990][T14135] tipc: Resetting bearer [ 207.364429][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.371486][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.444469][ T5834] block nbd23: shutting down sockets [ 207.449885][ T5834] blk_print_req_error: 101 callbacks suppressed [ 207.449900][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.465780][ T5834] buffer_io_error: 101 callbacks suppressed [ 207.465797][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.479891][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.489302][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.497334][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.513410][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.523683][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.531404][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.542037][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.550270][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.559734][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.571820][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.581138][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.583962][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.596103][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.606864][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.621045][T10208] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.628219][T10208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.635754][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.647481][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.669977][T14081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.679063][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.706544][T14081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.713413][ T5834] ldm_validate_partition_table(): Disk read failed. [ 207.738842][T14081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.747465][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.761400][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.777911][ T5834] I/O error, dev nbd23, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.789418][T14081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.804965][ T5834] Buffer I/O error on dev nbd23, logical block 0, async page read [ 207.813173][ T5834] Dev nbd23: unable to read RDB block 0 [ 207.819249][ T5834] nbd23: unable to read partition table [ 207.834968][ T5834] ldm_validate_partition_table(): Disk read failed. [ 207.852136][ T5834] Dev nbd23: unable to read RDB block 0 [ 207.862322][ T5834] nbd23: unable to read partition table [ 207.899601][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 207.930677][ T5834] ldm_validate_partition_table(): Disk read failed. [ 207.945443][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2927'. [ 207.965089][ T5834] Dev nbd23: unable to read RDB block 0 [ 207.974998][ T5834] nbd23: unable to read partition table [ 208.011967][ T5834] ldm_validate_partition_table(): Disk read failed. [ 208.045443][ T5834] Dev nbd23: unable to read RDB block 0 [ 208.061506][ T5834] nbd23: unable to read partition table [ 208.062467][T14081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.108375][ T5834] ldm_validate_partition_table(): Disk read failed. [ 208.120313][ T5834] Dev nbd23: unable to read RDB block 0 [ 208.127354][ T5834] nbd23: unable to read partition table [ 208.135398][ T5834] ldm_validate_partition_table(): Disk read failed. [ 208.142459][ T5834] Dev nbd23: unable to read RDB block 0 [ 208.155604][ T5834] nbd23: unable to read partition table [ 208.198232][T10210] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.218956][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.230988][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.236108][T14081] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.245087][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.252678][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.263263][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.270596][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.277934][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.300495][T10210] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.346427][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.353608][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.404335][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.411368][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.442991][ T5834] block nbd24: Dead connection, failed to find a fallback [ 208.458335][T14176] ax25_connect(): syz.3.2932 uses autobind, please contact jreuter@yaina.de [ 208.464644][T10210] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.491092][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.498257][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.531754][T10210] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.681589][T14187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2935'. [ 208.691917][T14187] netlink: 'syz.3.2935': attribute type 1 has an invalid length. [ 208.693877][T10210] bridge_slave_1: left allmulticast mode [ 208.706338][T10210] bridge_slave_1: left promiscuous mode [ 208.712058][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.721109][T10210] bridge_slave_0: left allmulticast mode [ 208.727618][T10210] bridge_slave_0: left promiscuous mode [ 208.733342][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.804705][ T54] Bluetooth: hci2: command tx timeout [ 208.820285][T10210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.830435][T10210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.840365][T10210] bond0 (unregistering): Released all slaves [ 208.897928][T14005] veth0_vlan: entered promiscuous mode [ 208.929494][T14005] veth1_vlan: entered promiscuous mode [ 208.966146][T14163] chnl_net:caif_netlink_parms(): no params data found [ 208.995434][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 209.043663][T14204] netlink: 'syz.3.2938': attribute type 32 has an invalid length. [ 209.051721][ T54] Bluetooth: hci3: command tx timeout [ 209.059357][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 209.080964][T14005] veth0_macvtap: entered promiscuous mode [ 209.109887][T10210] hsr_slave_0: left promiscuous mode [ 209.120427][T10210] hsr_slave_1: left promiscuous mode [ 209.128414][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.137541][T10210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.147494][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.157543][T10210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.172371][T10210] veth1_macvtap: left promiscuous mode [ 209.179493][T10210] veth0_macvtap: left promiscuous mode [ 209.189050][T10210] veth1_vlan: left promiscuous mode [ 209.194932][T10210] veth0_vlan: left promiscuous mode [ 209.311155][T10210] team0 (unregistering): Port device team_slave_1 removed [ 209.322453][T10210] team0 (unregistering): Port device team_slave_0 removed [ 209.370563][T14081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.410127][T14211] veth1: entered promiscuous mode [ 209.415961][T14211] macsec0: entered allmulticast mode [ 209.421751][T14211] veth1: entered allmulticast mode [ 209.431886][T14211] veth1: left allmulticast mode [ 209.437559][T14211] veth1: left promiscuous mode [ 209.444457][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.451419][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.470192][T14219] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2942'. [ 209.482095][T14163] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.490839][T14163] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.499675][T14163] bridge_slave_0: entered allmulticast mode [ 209.506629][T14163] bridge_slave_0: entered promiscuous mode [ 209.521354][T14005] veth1_macvtap: entered promiscuous mode [ 209.568603][T14163] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.577978][T14163] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.586380][T14163] bridge_slave_1: entered allmulticast mode [ 209.593520][T14163] bridge_slave_1: entered promiscuous mode [ 209.650132][T14163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.670685][T14081] veth0_vlan: entered promiscuous mode [ 209.696694][T14163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.710325][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.721498][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.731418][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.742208][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.752202][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.763021][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.773936][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.783820][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.794469][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.804646][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.815157][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.825002][T14005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.835816][T14005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.846595][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.878243][T14163] team0: Port device team_slave_0 added [ 209.886679][T14005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.895753][T14005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.906024][T14005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.915046][T14005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.928027][T14163] team0: Port device team_slave_1 added [ 209.941133][T14081] veth1_vlan: entered promiscuous mode [ 210.011893][T14163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.022619][T14163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.055811][T14163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.089300][T14163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.096578][T14163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.124747][T14163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.196537][T14163] hsr_slave_0: entered promiscuous mode [ 210.211351][T14163] hsr_slave_1: entered promiscuous mode [ 210.227379][T14163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.238120][T14163] Cannot create hsr debugfs directory [ 210.242587][T14245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2950'. [ 210.262322][T14081] veth0_macvtap: entered promiscuous mode [ 210.272911][T10214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.299025][T10214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.326767][ T54] Bluetooth: hci0: command tx timeout [ 210.389386][T14081] veth1_macvtap: entered promiscuous mode [ 210.416795][T10219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.427483][T10219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.459341][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.473488][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.483807][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.494555][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.494674][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 210.510182][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.520933][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.531767][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.542289][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.553225][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.569203][T14081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.611512][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.636100][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.656609][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.672250][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.682524][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.693403][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.703638][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.714615][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.726429][T14081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.762414][T14081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.781146][T14081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.793761][T14081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.803024][T14081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.884620][ T54] Bluetooth: hci2: command tx timeout [ 210.948487][T10205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.004524][T10217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.026770][T10217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.057759][T10205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.117259][T10204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.138413][T10204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.170001][T10205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.219084][T14163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.232494][T14163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.247267][T10205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.260251][T14163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.272847][T14163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.318869][T14163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.333475][T14163] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.343748][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.350872][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.363002][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.370108][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.438481][T10205] bridge_slave_1: left allmulticast mode [ 211.444175][T10205] bridge_slave_1: left promiscuous mode [ 211.460832][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.469209][T10205] bridge_slave_0: left allmulticast mode [ 211.478112][T10205] bridge_slave_0: left promiscuous mode [ 211.483850][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.524330][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.531321][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.637048][T14254] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.659313][T10205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.678822][T10205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.718006][T10205] bond0 (unregistering): Released all slaves [ 211.895413][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.917766][T14272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2956'. [ 211.924136][T14163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.927054][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.941670][T14272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2956'. [ 211.951342][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.000595][T14163] veth0_vlan: entered promiscuous mode [ 212.019796][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.022383][T14163] veth1_vlan: entered promiscuous mode [ 212.027666][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.041894][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.050209][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.058069][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.062579][T14163] veth0_macvtap: entered promiscuous mode [ 212.066139][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.073613][T14163] veth1_macvtap: entered promiscuous mode [ 212.089980][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.091112][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.098037][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.107851][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.107878][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.107894][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.107903][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.107915][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.107946][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.107959][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.107974][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.107985][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.109576][T14163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.119931][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.127866][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.232350][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.242553][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.253604][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.263659][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.274119][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.284191][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.298410][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.308499][T14163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.318999][T14163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.330012][T14163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.350258][T14163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.359646][T14163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.372450][T14163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.381705][T14163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.405984][ T54] Bluetooth: hci0: command tx timeout [ 212.492486][T10205] hsr_slave_0: left promiscuous mode [ 212.502778][T10205] hsr_slave_1: left promiscuous mode [ 212.509986][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.517955][T10205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.526525][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.534005][T10205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.544173][T10205] veth1_macvtap: left promiscuous mode [ 212.550186][T10205] veth0_macvtap: left promiscuous mode [ 212.557476][T10205] veth1_vlan: left promiscuous mode [ 212.563360][T10205] veth0_vlan: left promiscuous mode [ 212.568786][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.575792][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.697065][T10205] team0 (unregistering): Port device team_slave_1 removed [ 212.708423][T10205] team0 (unregistering): Port device team_slave_0 removed [ 212.805603][T14291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.824519][T14291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.830107][T14295] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.882770][T14291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.897548][T14295] xt_CT: No such helper "pptp" [ 212.902703][T14291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.939052][T14300] Bluetooth: MGMT ver 1.23 [ 212.950110][T10219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.967720][T10219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.997399][T14291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.008164][T14291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.038460][T10219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.046988][T14269] chnl_net:caif_netlink_parms(): no params data found [ 213.055371][T10219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.073634][T14291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.085030][T14291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.188824][T14269] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.196401][T14269] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.203618][T14269] bridge_slave_0: entered allmulticast mode [ 213.210821][T14269] bridge_slave_0: entered promiscuous mode [ 213.219051][T14273] chnl_net:caif_netlink_parms(): no params data found [ 213.230221][T14269] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.238088][T14269] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.246197][T14269] bridge_slave_1: entered allmulticast mode [ 213.252751][T14269] bridge_slave_1: entered promiscuous mode [ 213.281720][T14269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.294229][T14291] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.303096][T14291] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.335970][T14269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.348671][T14291] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.357057][T14291] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.371230][T14291] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.379832][T14291] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.391762][T14291] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 213.400305][T14291] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 213.476747][T10205] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.506208][T14269] team0: Port device team_slave_0 added [ 213.521811][T14269] team0: Port device team_slave_1 added [ 213.540592][T14273] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.549742][T14273] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.560763][T14273] bridge_slave_0: entered allmulticast mode [ 213.567947][T14273] bridge_slave_0: entered promiscuous mode [ 213.576128][T14273] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.583574][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.591089][T14273] bridge_slave_1: entered allmulticast mode [ 213.599554][T14273] bridge_slave_1: entered promiscuous mode [ 213.605432][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.617049][T10205] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.641678][T14269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.648826][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.675416][T14269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.689772][T14269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.697174][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.723729][T14269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.741838][T10205] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.762161][T14273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.773698][T14273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.799921][T10205] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.829233][T14319] xt_hashlimit: size too large, truncated to 1048576 [ 213.829529][T14273] team0: Port device team_slave_0 added [ 213.880637][T14273] team0: Port device team_slave_1 added [ 213.994118][T14269] hsr_slave_0: entered promiscuous mode [ 214.009768][T14269] hsr_slave_1: entered promiscuous mode [ 214.020874][T14269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.038465][T14269] Cannot create hsr debugfs directory [ 214.086364][T14273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.093356][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.136894][T14329] netlink: 'syz.1.2968': attribute type 32 has an invalid length. [ 214.150440][T14273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.158672][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'. [ 214.164385][ T54] Bluetooth: hci3: command tx timeout [ 214.239081][T14273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.248345][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.274988][T14273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.292106][T10205] bridge_slave_1: left allmulticast mode [ 214.298131][T10205] bridge_slave_1: left promiscuous mode [ 214.308172][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.324642][ T54] Bluetooth: hci2: command tx timeout [ 214.335925][T10205] bridge_slave_0: left allmulticast mode [ 214.341721][T10205] bridge_slave_0: left promiscuous mode [ 214.350249][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.518444][T10205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.528690][T10205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.548107][T10205] bond0 (unregistering): Released all slaves [ 214.629855][T14273] hsr_slave_0: entered promiscuous mode [ 214.644328][ C0] net_ratelimit: 1 callbacks suppressed [ 214.644348][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.656929][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 214.679275][T14273] hsr_slave_1: entered promiscuous mode [ 214.685847][T14273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.693434][T14273] Cannot create hsr debugfs directory [ 214.755832][T14339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 215.001322][T10205] hsr_slave_0: left promiscuous mode [ 215.011221][T10205] hsr_slave_1: left promiscuous mode [ 215.030992][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.038980][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.047216][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.054797][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.062416][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.070170][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.077567][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.100226][T10205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.113791][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.136901][T10205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.160316][T10205] veth1_macvtap: left promiscuous mode [ 215.171456][T10205] veth0_macvtap: left promiscuous mode [ 215.186863][T10205] veth1_vlan: left promiscuous mode [ 215.201087][T10205] veth0_vlan: left promiscuous mode [ 215.381344][T10205] team0 (unregistering): Port device team_slave_1 removed [ 215.396885][T10205] team0 (unregistering): Port device team_slave_0 removed [ 215.653243][T14354] Bluetooth: MGMT ver 1.23 [ 215.668230][T14356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.684373][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.691397][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.790869][T14269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.812357][T14269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.830979][T14344] chnl_net:caif_netlink_parms(): no params data found [ 215.853579][T14269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.876397][T14269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.950204][T14374] netlink: 'syz.1.2983': attribute type 21 has an invalid length. [ 216.002389][T10205] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.039376][T14344] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.052474][T14344] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.060811][T14344] bridge_slave_0: entered allmulticast mode [ 216.069204][T14344] bridge_slave_0: entered promiscuous mode [ 216.084625][T14344] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.101977][T14344] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.114585][T14344] bridge_slave_1: entered allmulticast mode [ 216.121489][T14344] bridge_slave_1: entered promiscuous mode [ 216.139236][T10205] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.176362][T14344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.203161][T14344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.219452][T14387] netlink: 'syz.1.2985': attribute type 1 has an invalid length. [ 216.228005][T14387] netlink: 15391 bytes leftover after parsing attributes in process `syz.1.2985'. [ 216.239098][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'. [ 216.248194][ T54] Bluetooth: hci3: command tx timeout [ 216.255669][T10205] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.313655][T14389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'. [ 216.327230][T14344] team0: Port device team_slave_0 added [ 216.333078][T14273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.345517][T10205] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.362862][T14344] team0: Port device team_slave_1 added [ 216.369165][T14273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.389203][T14273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 216.405771][T14269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.416664][ T54] Bluetooth: hci2: command tx timeout [ 216.423612][T14344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.431468][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.459053][T14344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.465193][T14393] dccp_invalid_packet: P.Data Offset(0) too small [ 216.476222][T14273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 216.505666][T14344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.516869][T14344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.567885][T14344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.661274][T14403] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.680068][T14344] hsr_slave_0: entered promiscuous mode [ 216.700052][T14344] hsr_slave_1: entered promiscuous mode [ 216.709859][T14344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.720157][T14344] Cannot create hsr debugfs directory [ 216.725697][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.725756][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.746678][T10205] bridge_slave_1: left allmulticast mode [ 216.757071][T10205] bridge_slave_1: left promiscuous mode [ 216.769142][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.788074][T10205] bridge_slave_0: left allmulticast mode [ 216.793769][T10205] bridge_slave_0: left promiscuous mode [ 216.794909][T14406] xt_CT: No such helper "pptp" [ 216.804803][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.942317][T14414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.953811][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'. [ 216.968448][T10205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.978680][T10205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.989014][T10205] bond0 (unregistering): Released all slaves [ 217.018454][T14269] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.077936][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.085180][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.102793][T14273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.123329][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.130492][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.138243][ T54] Bluetooth: hci0: command tx timeout [ 217.193814][T14273] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.218687][T10217] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.225838][T10217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.241611][T10205] hsr_slave_0: left promiscuous mode [ 217.247797][T10205] hsr_slave_1: left promiscuous mode [ 217.253607][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.262527][T10205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.271078][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.280779][T10205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.290107][T10205] veth1_macvtap: left promiscuous mode [ 217.297378][T10205] veth0_macvtap: left promiscuous mode [ 217.303118][T10205] veth1_vlan: left promiscuous mode [ 217.309100][T10205] veth0_vlan: left promiscuous mode [ 217.402615][T10205] team0 (unregistering): Port device team_slave_1 removed [ 217.412541][T10205] team0 (unregistering): Port device team_slave_0 removed [ 217.463863][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.470995][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.638753][T14269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.676754][T14273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.723768][T14273] veth0_vlan: entered promiscuous mode [ 217.749863][T14273] veth1_vlan: entered promiscuous mode [ 217.764410][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.771394][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.791540][T14344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.802413][T14344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.812710][T14344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.829517][T14344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.845914][T14273] veth0_macvtap: entered promiscuous mode [ 217.855537][T14273] veth1_macvtap: entered promiscuous mode [ 217.891403][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.902641][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.912563][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.923354][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.933335][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.943967][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.957928][T14273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.967600][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.978553][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.989023][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.000910][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.011169][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.021834][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.032799][T14273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.051137][T14273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.060059][T14273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.069315][T14273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.078837][T14273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.116094][T14269] veth0_vlan: entered promiscuous mode [ 218.154778][T10198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.162841][T10198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.183226][T14269] veth1_vlan: entered promiscuous mode [ 218.198843][T14344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.216012][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.221918][T14344] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.256413][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.258556][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.270894][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.287342][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.294514][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.324682][ T54] Bluetooth: hci3: command tx timeout [ 218.367045][T14269] veth0_macvtap: entered promiscuous mode [ 218.382642][T14269] veth1_macvtap: entered promiscuous mode [ 218.406071][T14269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.417080][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.439130][T14269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.460076][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.472235][T14269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.483483][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.496830][ T54] Bluetooth: hci2: command tx timeout [ 218.503667][T14269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.518007][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.529061][T14269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.553740][T14269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.566643][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.577217][T14269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.591079][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.605800][T14269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.616543][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.626774][T14269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.637343][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.648616][T14269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.668755][T14269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.682732][T14269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.692525][T14269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.705243][T14269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.749860][T14344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.793366][T14344] veth0_vlan: entered promiscuous mode [ 218.806947][T14344] veth1_vlan: entered promiscuous mode [ 218.843375][T10198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.873782][T10198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.906127][T14344] veth0_macvtap: entered promiscuous mode [ 218.916771][T14464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3009'. [ 218.927478][T14464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3009'. [ 218.937384][T14344] veth1_macvtap: entered promiscuous mode [ 218.956810][T10204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.972578][T10204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.992725][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.004957][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.015782][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.026526][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.036958][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.047763][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.058002][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.069169][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.079514][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.090268][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.102255][T14344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.120195][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.131019][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.143245][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.156004][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.166634][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.177794][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.188632][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.199834][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.209726][ T54] Bluetooth: hci0: command tx timeout [ 219.220326][T14344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.231507][T14344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.247047][T14344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.255974][T14468] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20002 [ 219.310407][T10208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.350728][T14344] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.363073][T14344] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.376242][T14344] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.385232][T14344] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.456270][T10219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.471022][T10219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.491327][T10219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.500116][T10219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.759538][T10208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.844545][ C0] net_ratelimit: 2 callbacks suppressed [ 219.844567][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.857190][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 219.901975][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.913857][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.921315][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.929421][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.938601][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.946010][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.030385][T14477] chnl_net:caif_netlink_parms(): no params data found [ 220.066104][T14477] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.073258][T14477] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.080700][T14477] bridge_slave_0: entered allmulticast mode [ 220.088011][T14477] bridge_slave_0: entered promiscuous mode [ 220.096306][T14477] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.103475][T14477] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.111085][T14477] bridge_slave_1: entered allmulticast mode [ 220.118136][T14477] bridge_slave_1: entered promiscuous mode [ 220.137789][T14477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.148578][T14477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.169371][T14477] team0: Port device team_slave_0 added [ 220.177212][T14477] team0: Port device team_slave_1 added [ 220.194061][T14477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.201519][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.228655][T14477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.241477][T14477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.249288][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.275437][T14477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.302185][T14477] hsr_slave_0: entered promiscuous mode [ 220.308959][T14477] hsr_slave_1: entered promiscuous mode [ 220.315897][T14477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.323464][T14477] Cannot create hsr debugfs directory [ 220.518217][T10208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.677885][T10208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.844076][T14488] FAULT_INJECTION: forcing a failure. [ 220.844076][T14488] name failslab, interval 1, probability 0, space 0, times 0 [ 220.858522][T14488] CPU: 0 UID: 0 PID: 14488 Comm: syz.1.3013 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 220.869330][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.879408][T14488] Call Trace: [ 220.882699][T14488] [ 220.885645][T14488] dump_stack_lvl+0x241/0x360 [ 220.890348][T14488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.895573][T14488] ? __pfx__printk+0x10/0x10 [ 220.900190][T14488] ? __nla_validate_parse+0x26ce/0x3090 [ 220.905857][T14488] should_fail_ex+0x3b0/0x4e0 [ 220.910563][T14488] should_failslab+0xac/0x100 [ 220.915267][T14488] ? xfrm_state_alloc+0x22/0x2e0 [ 220.920232][T14488] kmem_cache_alloc_noprof+0x70/0x380 [ 220.925812][T14488] ? aa_get_newest_label+0xff/0x6f0 [ 220.931034][T14488] xfrm_state_alloc+0x22/0x2e0 [ 220.935823][T14488] xfrm_add_sa+0x146c/0x3d70 [ 220.940972][T14488] ? __pfx_xfrm_add_sa+0x10/0x10 [ 220.946289][T14488] ? __nla_parse+0x40/0x60 [ 220.950752][T14488] xfrm_user_rcv_msg+0x890/0xb90 [ 220.955726][T14488] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 220.961226][T14488] ? __mutex_trylock_common+0x183/0x2e0 [ 220.966810][T14488] ? __pfx___might_resched+0x10/0x10 [ 220.972115][T14488] ? __pfx___mutex_trylock_common+0x10/0x10 [ 220.978036][T14488] netlink_rcv_skb+0x1e3/0x430 [ 220.982803][T14488] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 220.988280][T14488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.993661][T14488] ? lock_release+0xbf/0xa30 [ 220.998343][T14488] xfrm_netlink_rcv+0x79/0x90 [ 221.003022][T14488] netlink_unicast+0x7f6/0x990 [ 221.007786][T14488] ? __pfx_netlink_unicast+0x10/0x10 [ 221.013064][T14488] ? __virt_addr_valid+0x45f/0x530 [ 221.018201][T14488] ? __phys_addr_symbol+0x2f/0x70 [ 221.023224][T14488] ? __check_object_size+0x47a/0x730 [ 221.028532][T14488] netlink_sendmsg+0x8e4/0xcb0 [ 221.033307][T14488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.038592][T14488] ? aa_sock_msg_perm+0x91/0x160 [ 221.043527][T14488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.048804][T14488] __sock_sendmsg+0x221/0x270 [ 221.053481][T14488] ____sys_sendmsg+0x52a/0x7e0 [ 221.058251][T14488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.063551][T14488] ? __fget_files+0x2a/0x410 [ 221.068151][T14488] ? __fget_files+0x2a/0x410 [ 221.072853][T14488] __sys_sendmsg+0x269/0x350 [ 221.077443][T14488] ? __pfx_lock_release+0x10/0x10 [ 221.082464][T14488] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.087594][T14488] ? __pfx_vfs_write+0x10/0x10 [ 221.092359][T14488] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.098683][T14488] ? rcu_is_watching+0x15/0xb0 [ 221.103451][T14488] ? rcu_is_watching+0x15/0xb0 [ 221.108229][T14488] do_syscall_64+0xf3/0x230 [ 221.112736][T14488] ? clear_bhb_loop+0x35/0x90 [ 221.117416][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.123407][T14488] RIP: 0033:0x7f8a08585d29 [ 221.127824][T14488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.147526][T14488] RSP: 002b:00007f8a0933f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.155936][T14488] RAX: ffffffffffffffda RBX: 00007f8a08775fa0 RCX: 00007f8a08585d29 [ 221.163901][T14488] RDX: 000000000404c0a0 RSI: 0000000020000080 RDI: 0000000000000003 [ 221.171958][T14488] RBP: 00007f8a0933f090 R08: 0000000000000000 R09: 0000000000000000 [ 221.179928][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.187905][T14488] R13: 0000000000000000 R14: 00007f8a08775fa0 R15: 00007fff52eec958 [ 221.195881][T14488] [ 221.199349][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.206404][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.259105][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.267227][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.276137][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.283766][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.291584][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.299516][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.432298][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.442706][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.450749][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.459504][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.472171][T14499] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3017'. [ 221.484051][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.487278][T10208] bridge_slave_1: left allmulticast mode [ 221.499479][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.532314][T10208] bridge_slave_1: left promiscuous mode [ 221.546800][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.566706][T10208] bridge_slave_0: left allmulticast mode [ 221.572958][T10208] bridge_slave_0: left promiscuous mode [ 221.583187][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.706871][T14512] netlink: 'syz.1.3020': attribute type 32 has an invalid length. [ 221.716707][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3020'. [ 221.733722][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.759902][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.786101][T10208] bond0 (unregistering): Released all slaves [ 221.976198][T14491] chnl_net:caif_netlink_parms(): no params data found [ 222.004952][ T54] Bluetooth: hci0: command tx timeout [ 222.049678][T10208] hsr_slave_0: left promiscuous mode [ 222.057139][T10208] hsr_slave_1: left promiscuous mode [ 222.063184][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.071511][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.081306][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.090398][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.099478][T10208] veth1_macvtap: left promiscuous mode [ 222.105174][T10208] veth0_macvtap: left promiscuous mode [ 222.110735][T10208] veth1_vlan: left promiscuous mode [ 222.116252][T10208] veth0_vlan: left promiscuous mode [ 222.244417][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.251388][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.264626][T10208] team0 (unregistering): Port device team_slave_1 removed [ 222.275626][T10208] team0 (unregistering): Port device team_slave_0 removed [ 222.407576][T14477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.426152][T14491] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.433314][T14491] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.441072][T14491] bridge_slave_0: entered allmulticast mode [ 222.448013][T14491] bridge_slave_0: entered promiscuous mode [ 222.457072][T14477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.466161][T14477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.475197][T14491] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.482474][T14491] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.490148][T14491] bridge_slave_1: entered allmulticast mode [ 222.502313][T14491] bridge_slave_1: entered promiscuous mode [ 222.522829][T14501] chnl_net:caif_netlink_parms(): no params data found [ 222.532512][T14477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.571152][T14491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.592915][T14534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 222.621114][T14491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.702572][T14491] team0: Port device team_slave_0 added [ 222.722569][T14491] team0: Port device team_slave_1 added [ 222.833433][T14501] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.857465][T14501] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.871409][T14501] bridge_slave_0: entered allmulticast mode [ 222.886507][T14501] bridge_slave_0: entered promiscuous mode [ 222.895789][T14491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.908116][T14491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.935768][T14552] netlink: 'syz.1.3028': attribute type 32 has an invalid length. [ 222.943761][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3028'. [ 222.954396][T14491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.979401][T14491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.987115][T14491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.015711][T14491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.032355][T14501] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.040375][T14501] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.049047][T14501] bridge_slave_1: entered allmulticast mode [ 223.056674][T14501] bridge_slave_1: entered promiscuous mode [ 223.067046][T14554] veth1: entered promiscuous mode [ 223.072119][T14554] macsec0: entered allmulticast mode [ 223.077548][T14554] veth1: entered allmulticast mode [ 223.084024][T14554] veth1: left allmulticast mode [ 223.089216][T14554] veth1: left promiscuous mode [ 223.128579][T10208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.253851][T14501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.286054][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 223.293025][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 223.372269][ T54] Bluetooth: hci2: command tx timeout [ 223.500191][T14491] hsr_slave_0: entered promiscuous mode [ 223.539936][T14491] hsr_slave_1: entered promiscuous mode [ 223.547760][ T54] Bluetooth: hci3: command tx timeout [ 223.553338][T14491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.569535][T14491] Cannot create hsr debugfs directory [ 223.613048][T10208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.629343][T14501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.659112][T14567] ax25_connect(): syz.1.3033 uses autobind, please contact jreuter@yaina.de [ 223.700779][T10208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.731496][T14501] team0: Port device team_slave_0 added [ 223.748131][T14501] team0: Port device team_slave_1 added [ 223.769284][T10208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.819035][T14501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.832244][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.862467][T14501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.874647][T14501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.881680][T14501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.908261][T14501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.939838][T14477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.961926][T14477] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.993099][T14491] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.036022][T14501] hsr_slave_0: entered promiscuous mode [ 224.057192][T14501] hsr_slave_1: entered promiscuous mode [ 224.083574][T14501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.094185][ T54] Bluetooth: hci0: command tx timeout [ 224.103270][T14501] Cannot create hsr debugfs directory [ 224.110723][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.118011][T10214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.142924][T14491] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.188613][T14593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.211113][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.218260][T10214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.233233][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3040'. [ 224.265264][T14491] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.324569][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 224.331522][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 224.342292][T14491] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.425648][T10208] bridge_slave_1: left allmulticast mode [ 224.431351][T10208] bridge_slave_1: left promiscuous mode [ 224.441195][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.453550][T10208] bridge_slave_0: left allmulticast mode [ 224.459830][T10208] bridge_slave_0: left promiscuous mode [ 224.465926][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.474923][T10208] bridge_slave_1: left allmulticast mode [ 224.480614][T10208] bridge_slave_1: left promiscuous mode [ 224.486934][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.495703][T10208] bridge_slave_0: left allmulticast mode [ 224.501361][T10208] bridge_slave_0: left promiscuous mode [ 224.507424][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.698205][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.708225][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.718133][T10208] bond0 (unregistering): Released all slaves [ 224.730355][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.740511][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.751924][T10208] bond0 (unregistering): Released all slaves [ 224.808702][T14491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.829330][T14608] netlink: 'syz.3.3044': attribute type 8 has an invalid length. [ 224.851731][T14491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.871970][T14491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.908370][T14491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.928994][T14477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.930214][T14612] Bluetooth: MGMT ver 1.23 [ 225.019328][T14614] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.023501][T14477] veth0_vlan: entered promiscuous mode [ 225.080992][T14477] veth1_vlan: entered promiscuous mode [ 225.113045][T14614] xt_CT: No such helper "pptp" [ 225.119219][T14491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.163570][T10208] hsr_slave_0: left promiscuous mode [ 225.170604][T10208] hsr_slave_1: left promiscuous mode [ 225.183709][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.193586][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.205396][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.212907][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.226522][T10208] hsr_slave_0: left promiscuous mode [ 225.232289][T10208] hsr_slave_1: left promiscuous mode [ 225.241316][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.249026][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.261534][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.269142][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.285100][T10208] veth1_macvtap: left promiscuous mode [ 225.290715][T10208] veth0_macvtap: left promiscuous mode [ 225.296856][T10208] veth1_vlan: left promiscuous mode [ 225.302159][T10208] veth0_vlan: left promiscuous mode [ 225.308485][T10208] veth1_macvtap: left promiscuous mode [ 225.313978][T10208] veth0_macvtap: left promiscuous mode [ 225.319822][T10208] veth1_vlan: left promiscuous mode [ 225.325152][T10208] veth0_vlan: left promiscuous mode [ 225.364422][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.371436][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.444389][ T54] Bluetooth: hci2: command tx timeout [ 225.461792][T10208] team0 (unregistering): Port device team_slave_1 removed [ 225.478897][T10208] team0 (unregistering): Port device team_slave_0 removed [ 225.614646][ T54] Bluetooth: hci3: command tx timeout [ 225.625853][T10208] team0 (unregistering): Port device team_slave_1 removed [ 225.637375][T10208] team0 (unregistering): Port device team_slave_0 removed [ 225.712649][T14491] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.751669][T14477] veth0_macvtap: entered promiscuous mode [ 225.771485][T14501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.785591][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.792753][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.809423][T14477] veth1_macvtap: entered promiscuous mode [ 225.837421][T14501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 225.847113][T14631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.870436][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.877697][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.898786][T14501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 225.928238][T14501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 225.934667][T14636] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3055'. [ 225.959485][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.971050][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.982389][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.993202][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.003393][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.016088][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.030450][T14477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.045035][T14637] veth1: entered promiscuous mode [ 226.050596][T14637] macsec0: entered allmulticast mode [ 226.056808][T14637] veth1: entered allmulticast mode [ 226.063662][T14637] veth1: left allmulticast mode [ 226.070230][T14637] veth1: left promiscuous mode [ 226.099707][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.122472][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.132844][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.143753][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.153819][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.165314][ T54] Bluetooth: hci0: command tx timeout [ 226.166034][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.182949][T14477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.198225][T14477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.209700][T14477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.226858][T14477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.248664][T14477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.404384][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.411503][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.487938][T10198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.515482][T10198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.516281][T14501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.549680][T14667] netlink: 'syz.1.3062': attribute type 32 has an invalid length. [ 226.570235][T14667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3062'. [ 226.571570][T14491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.615694][T14501] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.635785][T10205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.667314][T10204] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.674511][T10204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.683654][T10205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.707819][T10204] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.714979][T10204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.785787][T14675] syz.3.3063: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 226.813064][T14501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.845811][T14675] CPU: 1 UID: 0 PID: 14675 Comm: syz.3.3063 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 226.856640][T14675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 226.866724][T14675] Call Trace: [ 226.870026][T14675] [ 226.872975][T14675] dump_stack_lvl+0x241/0x360 [ 226.877686][T14675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.882924][T14675] ? __pfx__printk+0x10/0x10 [ 226.887541][T14675] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 226.893991][T14675] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 226.900170][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3063'. [ 226.900512][T14675] warn_alloc+0x278/0x410 [ 226.913732][T14675] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 226.919833][T14675] ? __pfx_warn_alloc+0x10/0x10 [ 226.924690][T14675] ? kasan_save_track+0x3f/0x80 [ 226.929541][T14675] ? __kasan_kmalloc+0x98/0xb0 [ 226.934307][T14675] ? xsk_setsockopt+0x4ea/0x950 [ 226.939158][T14675] ? do_sock_setsockopt+0x3af/0x720 [ 226.944374][T14675] ? __x64_sys_setsockopt+0x1ee/0x280 [ 226.949831][T14675] ? do_syscall_64+0xf3/0x230 [ 226.954522][T14675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.960623][T14675] __vmalloc_node_range_noprof+0x126/0x1380 [ 226.966527][T14675] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 226.972873][T14675] ? __kasan_kmalloc+0x98/0xb0 [ 226.977642][T14675] vmalloc_user_noprof+0x74/0x80 [ 226.982686][T14675] ? xskq_create+0xb6/0x170 [ 226.987237][T14675] xskq_create+0xb6/0x170 [ 226.991579][T14675] xsk_init_queue+0xa1/0x100 [ 226.996176][T14675] xsk_setsockopt+0x4ea/0x950 [ 227.000863][T14675] ? __pfx_xsk_setsockopt+0x10/0x10 [ 227.006089][T14675] ? rcu_is_watching+0x15/0xb0 [ 227.010857][T14675] ? __pfx_aa_sk_perm+0x10/0x10 [ 227.015708][T14675] ? lock_release+0xbf/0xa30 [ 227.020299][T14675] ? aa_sock_opt_perm+0x79/0x120 [ 227.025241][T14675] ? __pfx_xsk_setsockopt+0x10/0x10 [ 227.030794][T14675] do_sock_setsockopt+0x3af/0x720 [ 227.035871][T14675] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 227.041419][T14675] ? __fget_files+0x395/0x410 [ 227.046098][T14675] ? __fget_files+0x2a/0x410 [ 227.050692][T14675] __x64_sys_setsockopt+0x1ee/0x280 [ 227.055984][T14675] do_syscall_64+0xf3/0x230 [ 227.060494][T14675] ? clear_bhb_loop+0x35/0x90 [ 227.065701][T14675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.071596][T14675] RIP: 0033:0x7f13fed85d29 [ 227.076122][T14675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.095923][T14675] RSP: 002b:00007f13ffc61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 227.104361][T14675] RAX: ffffffffffffffda RBX: 00007f13fef76080 RCX: 00007f13fed85d29 [ 227.112372][T14675] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 227.120381][T14675] RBP: 00007f13fee01b08 R08: 0000000000000004 R09: 0000000000000000 [ 227.128358][T14675] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.136329][T14675] R13: 0000000000000000 R14: 00007f13fef76080 R15: 00007ffebe08ae28 [ 227.144309][T14675] [ 227.165563][T14675] Mem-Info: [ 227.168748][T14675] active_anon:7597 inactive_anon:0 isolated_anon:0 [ 227.168748][T14675] active_file:1586 inactive_file:38407 isolated_file:0 [ 227.168748][T14675] unevictable:768 dirty:185 writeback:0 [ 227.168748][T14675] slab_reclaimable:12110 slab_unreclaimable:110172 [ 227.168748][T14675] mapped:29018 shmem:1422 pagetables:796 [ 227.168748][T14675] sec_pagetables:0 bounce:0 [ 227.168748][T14675] kernel_misc_reclaimable:0 [ 227.168748][T14675] free:1321429 free_pcp:351 free_cma:0 [ 227.265724][T14675] Node 0 active_anon:30384kB inactive_anon:0kB active_file:6344kB inactive_file:153552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115996kB dirty:740kB writeback:0kB shmem:4152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13712kB pagetables:3132kB sec_pagetables:0kB all_unreclaimable? no [ 227.315223][T14491] veth0_vlan: entered promiscuous mode [ 227.329757][T14675] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 227.362690][T14491] veth1_vlan: entered promiscuous mode [ 227.376259][T14675] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.395446][T14501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.411282][T14675] lowmem_reserve[]: 0 2465 2466 0 0 [ 227.416848][T14675] Node 0 DMA32 free:1361992kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:30244kB inactive_anon:0kB active_file:6344kB inactive_file:152728kB unevictable:1536kB writepending:744kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:896kB local_pcp:704kB free_cma:0kB [ 227.447154][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.447217][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.464803][T14675] lowmem_reserve[]: 0 0 0 0 0 [ 227.469765][T14675] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 227.491222][T14491] veth0_macvtap: entered promiscuous mode [ 227.503463][T14675] lowmem_reserve[]: 0 0 0 0 0 [ 227.508490][T14675] Node 1 Normal free:3909540kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 227.513911][T14491] veth1_macvtap: entered promiscuous mode [ 227.544354][T14675] lowmem_reserve[]: 0 0 0 0 0 [ 227.547450][ T54] Bluetooth: hci2: command tx timeout [ 227.549091][T14675] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 227.565192][T14501] veth0_vlan: entered promiscuous mode [ 227.567547][T14675] Node 0 DMA32: 62*4kB (UE) 26*8kB (UME) 133*16kB (UME) 355*32kB (UME) 84*64kB (UME) 40*128kB (UME) 10*256kB (UM) 19*512kB (UM) 32*1024kB (UM) 37*2048kB (U) 297*4096kB (UME) = 1361784kB [ 227.581291][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.591824][T14675] Node 0 Normal: [ 227.603575][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.617989][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.620212][T14675] 0*4kB [ 227.628907][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.642034][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.652697][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.662432][T14675] 0*8kB 0*16kB [ 227.662574][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.666052][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.666965][T14491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.696806][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.707537][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.717856][ T54] Bluetooth: hci3: command tx timeout [ 227.723266][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.734119][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.744457][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.755021][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.765255][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.775937][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.786722][T14491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.795648][T14675] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 227.804662][T14675] Node 1 Normal: 211*4kB (UE) 65*8kB (UME) 41*16kB (UME) 216*32kB (UME) 113*64kB (UME) 29*128kB (UM) 18*256kB (UME) 10*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3909540kB [ 227.846700][T14675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.856906][T14675] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.867883][T14675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 227.878894][T10208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.879540][T14675] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 227.898727][T14675] 41418 total pagecache pages [ 227.903513][T14675] 0 pages in swap cache [ 227.905483][T14491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.909832][T14675] Free swap = 124764kB [ 227.919979][T14491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.921891][T14675] Total swap = 124996kB [ 227.930866][T14491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.934974][T14675] 2097051 pages RAM [ 227.947610][T14675] 0 pages HighMem/MovableOnly [ 227.952319][T14675] 427011 pages reserved [ 227.957274][T14675] 0 pages cma reserved [ 227.957360][T14491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.977525][T14501] veth1_vlan: entered promiscuous mode [ 228.003100][T14501] veth0_macvtap: entered promiscuous mode [ 228.015816][T14501] veth1_macvtap: entered promiscuous mode [ 228.033826][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.045974][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.056557][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.067535][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.077849][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.088581][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.098748][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.109337][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.119254][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.129980][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.141142][T14501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.157699][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.168846][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.178750][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.189279][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.199550][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.210247][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.220157][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.231354][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.241993][T14501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.253645][T14501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.265113][T14501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.284827][T10207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.292667][T10207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.313223][T10219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.323227][T10219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.336710][T14501] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.345811][T14501] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.358035][T14501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.386339][T14501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.438552][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 228.473411][T10208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.484333][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.491447][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.504942][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3068'. [ 228.521604][T14695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3068'. [ 228.537526][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'. [ 228.574932][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.582347][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.590027][ T5837] block nbd43: Receive control failed (result -107) [ 228.599318][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.608264][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.608960][T10208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.631219][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.638900][T14695] nbd43: detected capacity change from 0 to 256 [ 228.639608][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.652397][T14697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.696756][T10208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.753714][T10214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.762486][T10214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.834093][T10214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.861108][T10214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.892902][T10208] bridge_slave_1: left allmulticast mode [ 228.907746][T10208] bridge_slave_1: left promiscuous mode [ 228.913578][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.005493][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3070'. [ 229.039444][T10208] bridge_slave_0: left allmulticast mode [ 229.046600][T10208] bridge_slave_0: left promiscuous mode [ 229.052335][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.147493][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.158514][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.168254][T10208] bond0 (unregistering): Released all slaves [ 229.227722][T14700] chnl_net:caif_netlink_parms(): no params data found [ 229.281071][T14700] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.289223][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.297831][T14700] bridge_slave_0: entered allmulticast mode [ 229.308332][T14700] bridge_slave_0: entered promiscuous mode [ 229.316368][T14700] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.323849][T14700] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.331305][T14700] bridge_slave_1: entered allmulticast mode [ 229.338481][T14700] bridge_slave_1: entered promiscuous mode [ 229.389759][T14700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.401553][T14700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.453406][T10208] hsr_slave_0: left promiscuous mode [ 229.469887][T10208] hsr_slave_1: left promiscuous mode [ 229.477050][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.485690][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.494081][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.502072][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.512162][T10208] veth1_macvtap: left promiscuous mode [ 229.518125][T10208] veth0_macvtap: left promiscuous mode [ 229.523786][T10208] veth1_vlan: left promiscuous mode [ 229.529137][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 229.537085][T10208] veth0_vlan: left promiscuous mode [ 229.672727][T10208] team0 (unregistering): Port device team_slave_1 removed [ 229.683758][T10208] team0 (unregistering): Port device team_slave_0 removed [ 229.803309][T14700] team0: Port device team_slave_0 added [ 229.812132][T14700] team0: Port device team_slave_1 added [ 229.843595][T14700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.851258][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.877573][T14700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.894988][T14700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.902067][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.929771][T14700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.957663][T14700] hsr_slave_0: entered promiscuous mode [ 229.963884][T14700] hsr_slave_1: entered promiscuous mode [ 229.972048][T14700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.980138][T14700] Cannot create hsr debugfs directory [ 230.179296][T10208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.281844][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.292040][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.300647][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.309565][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.318005][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.329462][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.351588][T10208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.371669][T14700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 230.411343][T14700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.426229][T14700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 230.437615][T14700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 230.449749][T10208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.500941][T10208] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.527691][T14720] chnl_net:caif_netlink_parms(): no params data found [ 230.564352][ C0] net_ratelimit: 1 callbacks suppressed [ 230.564370][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.576930][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.623586][T14732] netlink: 'syz.3.3073': attribute type 32 has an invalid length. [ 230.658875][T14700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.696622][T14700] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.713251][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3073'. [ 230.744404][ T5833] Bluetooth: hci0: command tx timeout [ 230.753354][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.760536][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.797652][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.817125][T14720] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.856578][T14720] bridge_slave_0: entered allmulticast mode [ 230.860028][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.870860][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.878353][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.886254][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.889674][T14720] bridge_slave_0: entered promiscuous mode [ 230.894215][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.906653][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.925311][T14720] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.932513][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.940764][T14740] ax25_connect(): syz.3.3074 uses autobind, please contact jreuter@yaina.de [ 230.944642][T14720] bridge_slave_1: entered allmulticast mode [ 230.956488][T14720] bridge_slave_1: entered promiscuous mode [ 230.973290][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.980691][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.060240][T14720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.077810][T14720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.138982][T10208] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.250453][T14750] FAULT_INJECTION: forcing a failure. [ 231.250453][T14750] name failslab, interval 1, probability 0, space 0, times 0 [ 231.263614][T14750] CPU: 0 UID: 0 PID: 14750 Comm: syz.1.3080 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 231.274406][T14750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 231.284480][T14750] Call Trace: [ 231.287779][T14750] [ 231.290727][T14750] dump_stack_lvl+0x241/0x360 [ 231.295454][T14750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.300675][T14750] ? __pfx__printk+0x10/0x10 [ 231.305295][T14750] ? __pfx___might_resched+0x10/0x10 [ 231.310605][T14750] should_fail_ex+0x3b0/0x4e0 [ 231.315303][T14750] should_failslab+0xac/0x100 [ 231.320001][T14750] __kmalloc_node_noprof+0xe1/0x4d0 [ 231.325253][T14750] ? crypto_create_tfm_node+0x88/0x3d0 [ 231.330734][T14750] crypto_create_tfm_node+0x88/0x3d0 [ 231.336049][T14750] crypto_spawn_tfm2+0x5c/0x90 [ 231.340834][T14750] aead_init_geniv+0x18e/0x260 [ 231.345614][T14750] crypto_create_tfm_node+0x167/0x3d0 [ 231.351001][T14750] crypto_alloc_tfm_node+0x161/0x360 [ 231.356303][T14750] esp_init_state+0x387/0x10b0 [ 231.361276][T14750] ? xfrm_add_sa+0x1a45/0x3d70 [ 231.366065][T14750] ? netlink_rcv_skb+0x1e3/0x430 [ 231.371018][T14750] ? xfrm_netlink_rcv+0x79/0x90 [ 231.376061][T14750] ? ____sys_sendmsg+0x52a/0x7e0 [ 231.381020][T14750] ? __sys_sendmsg+0x269/0x350 [ 231.385812][T14750] ? do_syscall_64+0xf3/0x230 [ 231.390508][T14750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.396597][T14750] ? __pfx_esp_init_state+0x10/0x10 [ 231.401830][T14750] ? rcu_is_watching+0x15/0xb0 [ 231.406616][T14750] ? rcu_is_watching+0x15/0xb0 [ 231.411400][T14750] ? lock_release+0xbf/0xa30 [ 231.416006][T14750] ? __pfx_lock_acquire+0x10/0x10 [ 231.421064][T14750] ? __xfrm_init_state+0x708/0xea0 [ 231.426206][T14750] __xfrm_init_state+0x9db/0xea0 [ 231.431227][T14750] xfrm_add_sa+0x2c6e/0x3d70 [ 231.435847][T14750] ? __pfx_xfrm_add_sa+0x10/0x10 [ 231.440820][T14750] ? __nla_parse+0x40/0x60 [ 231.445264][T14750] xfrm_user_rcv_msg+0x890/0xb90 [ 231.450228][T14750] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 231.455716][T14750] ? __mutex_trylock_common+0x183/0x2e0 [ 231.461288][T14750] ? __pfx___might_resched+0x10/0x10 [ 231.466603][T14750] ? __pfx___mutex_trylock_common+0x10/0x10 [ 231.472549][T14750] netlink_rcv_skb+0x1e3/0x430 [ 231.477346][T14750] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 231.482839][T14750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.488162][T14750] ? lock_release+0xbf/0xa30 [ 231.489120][T14748] ax25_connect(): syz.3.3079 uses autobind, please contact jreuter@yaina.de [ 231.492764][T14750] xfrm_netlink_rcv+0x79/0x90 [ 231.506106][T14750] netlink_unicast+0x7f6/0x990 [ 231.510900][T14750] ? __pfx_netlink_unicast+0x10/0x10 [ 231.516297][T14750] ? __virt_addr_valid+0x45f/0x530 [ 231.521431][T14750] ? __phys_addr_symbol+0x2f/0x70 [ 231.526464][T14750] ? __check_object_size+0x47a/0x730 [ 231.531751][T14750] netlink_sendmsg+0x8e4/0xcb0 [ 231.536519][T14750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.541800][T14750] ? aa_sock_msg_perm+0x91/0x160 [ 231.546733][T14750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.552010][T14750] __sock_sendmsg+0x221/0x270 [ 231.556687][T14750] ____sys_sendmsg+0x52a/0x7e0 [ 231.561460][T14750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.566745][T14750] ? __fget_files+0x2a/0x410 [ 231.571338][T14750] ? __fget_files+0x2a/0x410 [ 231.575929][T14750] __sys_sendmsg+0x269/0x350 [ 231.580535][T14750] ? __pfx_lock_release+0x10/0x10 [ 231.585555][T14750] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.590666][T14750] ? __pfx_vfs_write+0x10/0x10 [ 231.595431][T14750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.601754][T14750] ? rcu_is_watching+0x15/0xb0 [ 231.606516][T14750] ? rcu_is_watching+0x15/0xb0 [ 231.611366][T14750] do_syscall_64+0xf3/0x230 [ 231.615871][T14750] ? clear_bhb_loop+0x35/0x90 [ 231.620640][T14750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.626530][T14750] RIP: 0033:0x7f8a08585d29 [ 231.630941][T14750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.650546][T14750] RSP: 002b:00007f8a0933f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.658970][T14750] RAX: ffffffffffffffda RBX: 00007f8a08775fa0 RCX: 00007f8a08585d29 [ 231.666949][T14750] RDX: 000000000404c0a0 RSI: 0000000020000080 RDI: 0000000000000003 [ 231.674918][T14750] RBP: 00007f8a0933f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.682886][T14750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.690850][T14750] R13: 0000000000000000 R14: 00007f8a08775fa0 R15: 00007fff52eec958 [ 231.698823][T14750] [ 231.703065][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.710072][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 231.739274][T14720] team0: Port device team_slave_0 added [ 231.746707][T14720] team0: Port device team_slave_1 added [ 231.839160][T10208] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.852309][T14759] xt_hashlimit: invalid rate [ 231.872517][T14720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.884342][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.921379][T14720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.949542][T10208] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.991099][T14764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3082'. [ 232.000322][T14764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3082'. [ 232.031114][T14720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.042556][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.071903][T14720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.097549][T14767] veth1: entered promiscuous mode [ 232.102678][T14767] macsec0: entered allmulticast mode [ 232.127946][T14767] veth1: entered allmulticast mode [ 232.140141][T14767] veth1: left allmulticast mode [ 232.145724][T14767] veth1: left promiscuous mode [ 232.158748][T10208] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.212768][T14720] hsr_slave_0: entered promiscuous mode [ 232.236286][T14720] hsr_slave_1: entered promiscuous mode [ 232.249057][T14720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.270299][T14720] Cannot create hsr debugfs directory [ 232.315445][T14700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.404829][ T54] Bluetooth: hci2: command tx timeout [ 232.578347][T10208] bridge_slave_1: left allmulticast mode [ 232.596665][T10208] bridge_slave_1: left promiscuous mode [ 232.608168][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.628048][T10208] bridge_slave_0: left allmulticast mode [ 232.634607][T10208] bridge_slave_0: left promiscuous mode [ 232.640319][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.658908][T10208] bridge_slave_1: left allmulticast mode [ 232.664708][T10208] bridge_slave_1: left promiscuous mode [ 232.670409][T10208] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.680340][T10208] bridge_slave_0: left allmulticast mode [ 232.689308][T10208] bridge_slave_0: left promiscuous mode [ 232.695991][T10208] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.724448][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.731423][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 232.804598][ T54] Bluetooth: hci0: command tx timeout [ 232.964416][ T54] Bluetooth: hci3: command tx timeout [ 232.970287][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.981257][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.991487][T10208] bond0 (unregistering): Released all slaves [ 233.003898][T10208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.014443][T10208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.024127][T10208] bond0 (unregistering): Released all slaves [ 233.069130][T14738] chnl_net:caif_netlink_parms(): no params data found [ 233.390696][T14700] veth0_vlan: entered promiscuous mode [ 233.398930][T14738] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.424452][T14738] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.431727][T14738] bridge_slave_0: entered allmulticast mode [ 233.462741][T14738] bridge_slave_0: entered promiscuous mode [ 233.513943][T14700] veth1_vlan: entered promiscuous mode [ 233.525256][T14738] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.542612][T14738] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.550048][T14738] bridge_slave_1: entered allmulticast mode [ 233.565009][T14738] bridge_slave_1: entered promiscuous mode [ 233.613897][T10208] hsr_slave_0: left promiscuous mode [ 233.622163][T10208] hsr_slave_1: left promiscuous mode [ 233.629810][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.638361][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.646478][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.654219][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.665687][T10208] hsr_slave_0: left promiscuous mode [ 233.671465][T10208] hsr_slave_1: left promiscuous mode [ 233.677756][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.686118][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.693948][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.708015][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.721416][T10208] veth1_macvtap: left promiscuous mode [ 233.727377][T10208] veth0_macvtap: left promiscuous mode [ 233.732984][T10208] veth1_vlan: left promiscuous mode [ 233.739005][T10208] veth0_vlan: left promiscuous mode [ 233.745321][T10208] veth1_macvtap: left promiscuous mode [ 233.750945][T10208] veth0_macvtap: left promiscuous mode [ 233.756914][T10208] veth1_vlan: left promiscuous mode [ 233.762240][T10208] veth0_vlan: left promiscuous mode [ 233.767709][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.774678][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 233.899883][T10208] team0 (unregistering): Port device team_slave_1 removed [ 233.914053][T10208] team0 (unregistering): Port device team_slave_0 removed [ 234.013538][T10208] team0 (unregistering): Port device team_slave_1 removed [ 234.023933][T10208] team0 (unregistering): Port device team_slave_0 removed [ 234.092880][T14738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.107647][T14800] team0: Device ipvlan2 failed to register rx_handler [ 234.127765][T14738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.150768][T14720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.172809][T14738] team0: Port device team_slave_0 added [ 234.181649][T14720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.199337][T14738] team0: Port device team_slave_1 added [ 234.205515][T14720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.222638][T14720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.289166][T14720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.303167][T14720] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.328077][T14720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.338488][T14720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.354174][T10207] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.361323][T10207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.372446][T10207] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.379600][T10207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.403636][T14700] veth0_macvtap: entered promiscuous mode [ 234.425732][T14700] veth1_macvtap: entered promiscuous mode [ 234.445376][T14809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.461145][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 234.473562][T14738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.480953][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.494402][ T54] Bluetooth: hci2: command tx timeout [ 234.507480][T14738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.524627][T14738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.531595][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.557943][T14738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.597450][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.608818][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.620681][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.631688][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.641923][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.652833][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.663698][T14700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.680348][T14738] hsr_slave_0: entered promiscuous mode [ 234.686860][T14738] hsr_slave_1: entered promiscuous mode [ 234.692872][T14738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.700674][T14738] Cannot create hsr debugfs directory [ 234.718281][T14815] macsec0: entered allmulticast mode [ 234.723763][T14815] veth1: entered allmulticast mode [ 234.730799][T14815] veth1: left allmulticast mode [ 234.741597][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.752404][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.762448][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.772968][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.783218][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.793936][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.804377][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.806271][T14700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.811345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 234.851604][T14700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.862306][T14700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.872626][T14700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.880997][T14819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3099'. [ 234.882500][T14700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.891840][ T54] Bluetooth: hci0: command tx timeout [ 234.911937][T14819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3099'. [ 234.916526][T14720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.041579][T10204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.049916][ T54] Bluetooth: hci3: command tx timeout [ 235.060931][T10204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.081892][T10204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.090973][T10204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.157789][T14825] xt_CT: No such helper "pptp" [ 235.303676][T14720] veth0_vlan: entered promiscuous mode [ 235.322374][T14720] veth1_vlan: entered promiscuous mode [ 235.360051][T14738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.374668][T14738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.391399][T14738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.401552][T14720] veth0_macvtap: entered promiscuous mode [ 235.409840][T14738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 235.420761][T14720] veth1_macvtap: entered promiscuous mode [ 235.450589][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.461479][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.471903][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.482743][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.492976][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.503701][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.514654][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.525324][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.536730][T14720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.555808][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.566487][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.580421][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.591353][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.602082][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.604618][ T30] INFO: task udevd:5848 blocked for more than 143 seconds. [ 235.613736][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.634041][ T30] Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 235.645719][T14720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.655314][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.662385][T14720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.688191][ T30] task:udevd state:D stack:21264 pid:5848 tgid:5848 ppid:5205 flags:0x00004002 [ 235.695262][T14720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.712640][ T30] Call Trace: [ 235.716682][ T30] [ 235.719720][ T30] __schedule+0x1850/0x4c30 [ 235.724696][ T30] ? schedule+0x90/0x320 [ 235.729046][ T30] ? lock_release+0xbf/0xa30 [ 235.733720][ T30] ? __pfx___schedule+0x10/0x10 [ 235.739327][ T30] ? __blk_flush_plug+0x449/0x500 [ 235.744711][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.749828][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.756509][ T30] ? schedule+0x90/0x320 [ 235.760828][ T30] schedule+0x14b/0x320 [ 235.765722][ T30] schedule_timeout+0x15a/0x290 [ 235.770657][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 235.776652][ T30] ? __pfx_process_timeout+0x10/0x10 [ 235.782022][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 235.788046][ T30] nbd_queue_rq+0x7d9/0x2ef0 [ 235.792712][ T30] ? __ip_queue_xmit+0x12e8/0x1d50 [ 235.798485][ T30] ? deref_stack_reg+0x17c/0x210 [ 235.803470][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 235.808854][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 235.814166][ T30] ? deref_stack_reg+0x17c/0x210 [ 235.819151][ T30] ? do_dentry_open+0xbe1/0x1b70 [ 235.824098][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 235.829697][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.835918][ T30] ? lock_release+0xbf/0xa30 [ 235.840547][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 235.844403][ C0] net_ratelimit: 1 callbacks suppressed [ 235.844420][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.846573][ T30] ? sbitmap_get+0x289/0x3f0 [ 235.851692][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 235.858804][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 235.876766][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 235.882612][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 235.889236][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 235.896149][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 235.901192][ T30] ? __pfx___might_resched+0x10/0x10 [ 235.906685][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 235.911995][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 235.918015][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 235.924095][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 235.929826][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 235.935053][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 235.940703][ T30] ? __pfx_update_io_ticks+0x10/0x10 [ 235.946254][ T30] ? blk_add_rq_to_plug+0x308/0x4b0 [ 235.951464][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 235.957474][ T30] ? blk_mq_submit_bio+0xf74/0x2390 [ 235.962691][ T30] __blk_flush_plug+0x420/0x500 [ 235.967602][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 235.973042][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.979686][ T30] ? rcu_is_watching+0x15/0xb0 [ 235.984770][ T30] ? blkg_get+0x1e/0x1d0 [ 235.989084][ T30] __submit_bio+0x46a/0x560 [ 235.993608][ T30] ? __pfx___submit_bio+0x10/0x10 [ 235.999061][ T30] ? bio_associate_blkg+0x6c/0x230 [ 236.004443][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.009646][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 236.015867][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 236.021879][ T30] ? __pfx_mempool_alloc_noprof+0x10/0x10 [ 236.027668][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.032967][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 236.039231][ T30] block_read_full_folio+0x9b3/0xae0 [ 236.044688][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 236.050090][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 236.056101][ T30] filemap_read_folio+0x148/0x3b0 [ 236.061188][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.066725][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 236.072312][ T30] ? __filemap_get_folio+0x848/0x940 [ 236.077998][ T30] do_read_cache_folio+0x373/0x5b0 [ 236.083211][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.089210][ T30] read_part_sector+0xb3/0x260 [ 236.095762][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 236.100794][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 236.106217][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 236.112007][ T30] ? snprintf+0xda/0x120 [ 236.116521][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 236.122535][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 236.127256][ T30] ? vsnprintf+0x184/0x1da0 [ 236.131777][ T30] ? __pfx_snprintf+0x10/0x10 [ 236.136740][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 236.141527][ T30] bdev_disk_changed+0x72c/0x13f0 [ 236.146603][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.151901][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 236.157442][ T30] ? wait_on_inode+0xc1/0x230 [ 236.162148][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 236.167780][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 236.173006][ T30] blkdev_get_whole+0x2d2/0x450 [ 236.177906][ T30] bdev_open+0x2d4/0xc50 [ 236.182161][ T30] blkdev_open+0x389/0x4f0 [ 236.186630][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 236.191576][ T30] do_dentry_open+0xbe1/0x1b70 [ 236.196764][ T30] vfs_open+0x3e/0x330 [ 236.200861][ T30] path_openat+0x2c84/0x3590 [ 236.205487][ T30] ? stack_depot_save_flags+0x37/0x940 [ 236.210992][ T30] ? __pfx_path_openat+0x10/0x10 [ 236.216247][ T30] ? __virt_addr_valid+0x183/0x530 [ 236.221400][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.226406][ T30] ? __virt_addr_valid+0x183/0x530 [ 236.231548][ T30] do_filp_open+0x27f/0x4e0 [ 236.236169][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 236.241296][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 236.246681][ T30] do_sys_openat2+0x13e/0x1d0 [ 236.251381][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.256848][ T30] __x64_sys_openat+0x247/0x2a0 [ 236.261716][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 236.267119][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.271891][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.277044][ T30] do_syscall_64+0xf3/0x230 [ 236.281557][ T30] ? clear_bhb_loop+0x35/0x90 [ 236.286509][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.292410][ T30] RIP: 0033:0x7feb7e9169a4 [ 236.296875][ T30] RSP: 002b:00007ffe42ab9a10 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.305330][ T30] RAX: ffffffffffffffda RBX: 000055d49fd0cc40 RCX: 00007feb7e9169a4 [ 236.313297][ T30] RDX: 00000000000a0800 RSI: 000055d49fd0ba40 RDI: 00000000ffffff9c [ 236.321794][ T30] RBP: 000055d49fd0ba40 R08: 0000000000000001 R09: 7fffffffffffffff [ 236.329974][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 236.337992][ T30] R13: 000055d49fcf08a0 R14: 0000000000000001 R15: 000055d49fce7910 [ 236.346259][ T30] [ 236.349363][ T30] INFO: task udevd:6400 blocked for more than 144 seconds. [ 236.357999][ T30] Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.365679][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.374612][ T30] task:udevd state:D stack:21264 pid:6400 tgid:6400 ppid:5205 flags:0x00004002 [ 236.384947][ T30] Call Trace: [ 236.388231][ T30] [ 236.391152][ T30] __schedule+0x1850/0x4c30 [ 236.395710][ T30] ? schedule+0x90/0x320 [ 236.399978][ T30] ? lock_release+0xbf/0xa30 [ 236.405053][ T30] ? __pfx___schedule+0x10/0x10 [ 236.414311][ T30] ? __blk_flush_plug+0x449/0x500 [ 236.419584][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.430836][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.437929][ T30] ? schedule+0x90/0x320 [ 236.442209][ T30] schedule+0x14b/0x320 [ 236.447015][ T30] schedule_timeout+0x15a/0x290 [ 236.451899][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 236.457518][ T30] ? __pfx_process_timeout+0x10/0x10 [ 236.462876][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 236.471734][ T30] nbd_queue_rq+0x7d9/0x2ef0 [ 236.488974][ T30] ? deref_stack_reg+0x17c/0x210 [ 236.493974][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 236.514475][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 236.519829][ T30] ? deref_stack_reg+0x17c/0x210 [ 236.534377][ T30] ? do_dentry_open+0xbe1/0x1b70 [ 236.539381][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 236.554593][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 236.560727][ T30] ? lock_release+0xbf/0xa30 [ 236.564465][ T54] Bluetooth: hci2: command tx timeout [ 236.574298][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 236.579908][ T30] ? sbitmap_get+0x289/0x3f0 [ 236.595205][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 236.601264][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 236.617064][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 236.624202][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 236.631131][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 236.636566][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.641890][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 236.647460][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 236.653214][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 236.659639][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 236.665087][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 236.670365][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 236.676025][ T30] ? __pfx_update_io_ticks+0x10/0x10 [ 236.681481][ T30] ? blk_add_rq_to_plug+0x308/0x4b0 [ 236.687163][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 236.693084][ T30] ? blk_mq_submit_bio+0xf74/0x2390 [ 236.698607][ T30] __blk_flush_plug+0x420/0x500 [ 236.703493][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 236.709189][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.715799][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.720592][ T30] ? blkg_get+0x1e/0x1d0 [ 236.724940][ T30] __submit_bio+0x46a/0x560 [ 236.730328][ T30] ? __pfx___submit_bio+0x10/0x10 [ 236.735521][ T30] ? bio_associate_blkg+0x6c/0x230 [ 236.740848][ T30] ? rcu_is_watching+0x15/0xb0 [ 236.745893][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 236.751554][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 236.757616][ T30] ? __pfx_mempool_alloc_noprof+0x10/0x10 [ 236.763520][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.768947][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 236.775846][ T30] block_read_full_folio+0x9b3/0xae0 [ 236.781168][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 236.786903][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 236.786926][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.792734][ T30] filemap_read_folio+0x148/0x3b0 [ 236.805104][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.805235][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.810661][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 236.823517][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.826081][ T30] ? __filemap_get_folio+0x848/0x940 [ 236.837751][ T30] do_read_cache_folio+0x373/0x5b0 [ 236.843007][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.845900][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.850748][ T30] read_part_sector+0xb3/0x260 [ 236.857235][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.868269][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 236.873259][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 236.878463][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 236.884050][ T30] ? snprintf+0xda/0x120 [ 236.884394][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.889621][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 236.895315][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 236.901238][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 236.908366][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.915927][ T30] ? vsnprintf+0x184/0x1da0 [ 236.924626][ T30] ? __pfx_snprintf+0x10/0x10 [ 236.929351][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 236.937083][ T30] bdev_disk_changed+0x72c/0x13f0 [ 236.942157][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.948161][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 236.953684][ T30] ? wait_on_inode+0xc1/0x230 [ 236.958798][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 236.964011][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 236.969534][ T30] blkdev_get_whole+0x2d2/0x450 [ 236.974543][ T30] bdev_open+0x2d4/0xc50 [ 236.978805][ T30] blkdev_open+0x389/0x4f0 [ 236.983236][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 236.988473][ T30] do_dentry_open+0xbe1/0x1b70 [ 236.993321][ T30] vfs_open+0x3e/0x330 [ 236.998118][ T30] path_openat+0x2c84/0x3590 [ 237.002751][ T30] ? stack_depot_save_flags+0x37/0x940 [ 237.008293][ T30] ? __pfx_path_openat+0x10/0x10 [ 237.013293][ T30] ? __virt_addr_valid+0x183/0x530 [ 237.018777][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.023564][ T30] ? __virt_addr_valid+0x183/0x530 [ 237.028738][ T30] do_filp_open+0x27f/0x4e0 [ 237.033443][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 237.038528][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 237.043575][ T30] do_sys_openat2+0x13e/0x1d0 [ 237.048647][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.053874][ T30] __x64_sys_openat+0x247/0x2a0 [ 237.058780][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 237.064170][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.068981][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.073761][ T30] do_syscall_64+0xf3/0x230 [ 237.078581][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.083274][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.089202][ T30] RIP: 0033:0x7feb7e9169a4 [ 237.093627][ T30] RSP: 002b:00007ffe42ab9a10 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.102117][ T30] RAX: ffffffffffffffda RBX: 000055d49fd13ae0 RCX: 00007feb7e9169a4 [ 237.110396][ T30] RDX: 00000000000a0800 RSI: 000055d49fce85f0 RDI: 00000000ffffff9c [ 237.118807][ T30] RBP: 000055d49fce85f0 R08: 0000000000000001 R09: 7fffffffffffffff [ 237.126886][ T5833] Bluetooth: hci3: command tx timeout [ 237.132745][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 237.141148][ T30] R13: 000055d49fcf2ce0 R14: 0000000000000001 R15: 000055d49fce7910 [ 237.149229][ T30] [ 237.152308][ T30] INFO: task udevd:7127 blocked for more than 144 seconds. [ 237.159643][ T30] Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 237.167820][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.176568][ T30] task:udevd state:D stack:22416 pid:7127 tgid:7127 ppid:5205 flags:0x00000002 [ 237.186798][ T30] Call Trace: [ 237.190063][ T30] [ 237.192983][ T30] __schedule+0x1850/0x4c30 [ 237.197702][ T30] ? schedule+0x90/0x320 [ 237.201969][ T30] ? lock_release+0xbf/0xa30 [ 237.206766][ T30] ? __pfx___schedule+0x10/0x10 [ 237.211629][ T30] ? __blk_flush_plug+0x449/0x500 [ 237.216790][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.221847][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.228412][ T30] ? schedule+0x90/0x320 [ 237.232672][ T30] schedule+0x14b/0x320 [ 237.236926][ T30] schedule_timeout+0x15a/0x290 [ 237.242050][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 237.247478][ T30] ? __pfx_process_timeout+0x10/0x10 [ 237.252793][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 237.258490][ T30] nbd_queue_rq+0x7d9/0x2ef0 [ 237.263115][ T30] ? deref_stack_reg+0x17c/0x210 [ 237.268093][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 237.273127][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 237.278460][ T30] ? deref_stack_reg+0x17c/0x210 [ 237.283409][ T30] ? do_dentry_open+0xbe1/0x1b70 [ 237.288780][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 237.294082][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 237.300255][ T30] ? lock_release+0xbf/0xa30 [ 237.304942][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 237.310502][ T30] ? sbitmap_get+0x289/0x3f0 [ 237.315360][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 237.321355][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 237.327278][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 237.333697][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 237.341016][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 237.346375][ T30] ? __pfx___might_resched+0x10/0x10 [ 237.351689][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 237.357080][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 237.362855][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 237.369444][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 237.375029][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 237.380162][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 237.385798][ T30] ? __pfx_update_io_ticks+0x10/0x10 [ 237.391096][ T30] ? blk_add_rq_to_plug+0x308/0x4b0 [ 237.396348][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 237.402254][ T30] ? blk_mq_submit_bio+0xf74/0x2390 [ 237.407690][ T30] __blk_flush_plug+0x420/0x500 [ 237.412582][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 237.418007][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.424386][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.429162][ T30] ? blkg_get+0x1e/0x1d0 [ 237.433397][ T30] __submit_bio+0x46a/0x560 [ 237.438215][ T30] ? __pfx___submit_bio+0x10/0x10 [ 237.443491][ T30] ? bio_associate_blkg+0x6c/0x230 [ 237.449295][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.454117][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 237.459905][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 237.466148][ T30] ? __pfx_mempool_alloc_noprof+0x10/0x10 [ 237.471873][ T30] ? __pfx___might_resched+0x10/0x10 [ 237.477206][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 237.483397][ T30] block_read_full_folio+0x9b3/0xae0 [ 237.488778][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 237.494298][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 237.500123][ T30] filemap_read_folio+0x148/0x3b0 [ 237.505382][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 237.510863][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 237.516442][ T30] ? __filemap_get_folio+0x848/0x940 [ 237.521738][ T30] do_read_cache_folio+0x373/0x5b0 [ 237.528506][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 237.534010][ T30] read_part_sector+0xb3/0x260 [ 237.539040][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 237.544006][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 237.549061][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 237.554845][ T30] ? snprintf+0xda/0x120 [ 237.559128][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 237.564862][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 237.569471][ T30] ? vsnprintf+0x184/0x1da0 [ 237.573966][ T30] ? __pfx_snprintf+0x10/0x10 [ 237.578781][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 237.583559][ T30] bdev_disk_changed+0x72c/0x13f0 [ 237.588683][ T30] ? __pfx___might_resched+0x10/0x10 [ 237.594008][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 237.599566][ T30] ? wait_on_inode+0xc1/0x230 [ 237.604336][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 237.609472][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 237.614880][ T30] blkdev_get_whole+0x2d2/0x450 [ 237.619778][ T30] bdev_open+0x2d4/0xc50 [ 237.624013][ T30] blkdev_open+0x389/0x4f0 [ 237.628595][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 237.633546][ T30] do_dentry_open+0xbe1/0x1b70 [ 237.638369][ T30] vfs_open+0x3e/0x330 [ 237.642450][ T30] path_openat+0x2c84/0x3590 [ 237.647726][ T30] ? stack_depot_save_flags+0x37/0x940 [ 237.653219][ T30] ? __pfx_path_openat+0x10/0x10 [ 237.658329][ T30] ? __virt_addr_valid+0x183/0x530 [ 237.663474][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.668329][ T30] ? __virt_addr_valid+0x183/0x530 [ 237.673455][ T30] do_filp_open+0x27f/0x4e0 [ 237.678040][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 237.683085][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 237.688197][ T30] do_sys_openat2+0x13e/0x1d0 [ 237.692909][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.698249][ T30] __x64_sys_openat+0x247/0x2a0 [ 237.703138][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 237.708608][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.713406][ T30] ? rcu_is_watching+0x15/0xb0 [ 237.718247][ T30] do_syscall_64+0xf3/0x230 [ 237.722775][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.727544][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.733452][ T30] RIP: 0033:0x7feb7e9169a4 [ 237.738054][ T30] RSP: 002b:00007ffe42ab9a10 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.746581][ T30] RAX: ffffffffffffffda RBX: 000055d49fd0d4c0 RCX: 00007feb7e9169a4 [ 237.755226][ T30] RDX: 00000000000a0800 RSI: 000055d49fce8300 RDI: 00000000ffffff9c [ 237.763216][ T30] RBP: 000055d49fce8300 R08: 0000000000000001 R09: 7fffffffffffffff [ 237.771442][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 237.779576][ T30] R13: 000055d49fcf08a0 R14: 0000000000000001 R15: 000055d49fce7910 [ 237.788456][ T30] [ 237.791666][ T30] INFO: task udevd:7336 blocked for more than 145 seconds. [ 237.799274][ T30] Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 237.809438][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.818469][ T30] task:udevd state:D stack:22416 pid:7336 tgid:7336 ppid:5205 flags:0x00000002 [ 237.829026][ T30] Call Trace: [ 237.832331][ T30] [ 237.835602][ T30] __schedule+0x1850/0x4c30 [ 237.840146][ T30] ? schedule+0x90/0x320 [ 237.844916][ T30] ? lock_release+0xbf/0xa30 [ 237.849542][ T30] ? __pfx___schedule+0x10/0x10 [ 237.857128][ T30] ? __blk_flush_plug+0x449/0x500 [ 237.862195][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.867634][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.874012][ T30] ? schedule+0x90/0x320 [ 237.879171][ T30] schedule+0x14b/0x320 [ 237.883366][ T30] schedule_timeout+0x15a/0x290 [ 237.890712][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 237.896839][ T30] ? __pfx_process_timeout+0x10/0x10 [ 237.902159][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 237.908113][ T30] nbd_queue_rq+0x7d9/0x2ef0 [ 237.912753][ T30] ? deref_stack_reg+0x17c/0x210 [ 237.918177][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 237.923243][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 237.928662][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.928729][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 237.942730][ T30] ? deref_stack_reg+0x17c/0x210 [ 237.947784][ T30] ? do_dentry_open+0xbe1/0x1b70 [ 237.952749][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 237.958770][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 237.965131][ T30] ? lock_release+0xbf/0xa30 [ 237.969746][ T30] blk_mq_dispatch_rq_list+0xad3/0x19d0 [ 237.975431][ T30] ? sbitmap_get+0x289/0x3f0 [ 237.980176][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 237.986271][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 237.992118][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 237.998726][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 238.006096][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 238.011166][ T30] ? __pfx___might_resched+0x10/0x10 [ 238.016592][ T30] ? sbitmap_any_bit_set+0x155/0x190 [ 238.021929][ T30] ? blk_mq_hw_queue_need_run+0x14d/0x6d0 [ 238.027781][ T30] blk_mq_sched_dispatch_requests+0xd6/0x190 [ 238.033877][ T30] ? blk_mq_run_hw_queue+0x32b/0x500 [ 238.039249][ T30] blk_mq_run_hw_queue+0x354/0x500 [ 238.044432][ T30] blk_mq_flush_plug_list+0x118e/0x1870 [ 238.049999][ T30] ? __pfx_update_io_ticks+0x10/0x10 [ 238.055421][ T30] ? blk_add_rq_to_plug+0x308/0x4b0 [ 238.061181][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 238.067219][ T30] ? blk_mq_submit_bio+0xf74/0x2390 [ 238.072435][ T30] __blk_flush_plug+0x420/0x500 [ 238.077364][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 238.082748][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.089216][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.094003][ T30] ? blkg_get+0x1e/0x1d0 [ 238.098371][ T30] __submit_bio+0x46a/0x560 [ 238.102990][ T30] ? __pfx___submit_bio+0x10/0x10 [ 238.108091][ T30] ? bio_associate_blkg+0x6c/0x230 [ 238.113247][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.118153][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 238.123892][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 238.129968][ T30] ? __pfx_mempool_alloc_noprof+0x10/0x10 [ 238.135925][ T30] ? __pfx___might_resched+0x10/0x10 [ 238.141237][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 238.147700][ T30] block_read_full_folio+0x9b3/0xae0 [ 238.153015][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 238.158475][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 238.165133][ T30] filemap_read_folio+0x148/0x3b0 [ 238.170201][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 238.175863][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 238.181427][ T30] ? __filemap_get_folio+0x848/0x940 [ 238.186817][ T30] do_read_cache_folio+0x373/0x5b0 [ 238.191951][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 238.197524][ T30] read_part_sector+0xb3/0x260 [ 238.202317][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 238.207322][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 238.212128][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 238.217810][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.222626][ T30] bdev_disk_changed+0x72c/0x13f0 [ 238.227729][ T30] ? __pfx___might_resched+0x10/0x10 [ 238.233027][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 238.238566][ T30] ? wait_on_inode+0xc1/0x230 [ 238.243286][ T30] ? __pfx_wait_on_inode+0x10/0x10 [ 238.248596][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 238.253822][ T30] blkdev_get_whole+0x2d2/0x450 [ 238.258911][ T30] bdev_open+0x2d4/0xc50 [ 238.263818][ T30] blkdev_open+0x389/0x4f0 [ 238.268353][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 238.273318][ T30] do_dentry_open+0xbe1/0x1b70 [ 238.278172][ T30] vfs_open+0x3e/0x330 [ 238.282265][ T30] path_openat+0x2c84/0x3590 [ 238.286989][ T30] ? stack_depot_save_flags+0x37/0x940 [ 238.292465][ T30] ? __pfx_path_openat+0x10/0x10 [ 238.297542][ T30] ? __virt_addr_valid+0x183/0x530 [ 238.302671][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.307496][ T30] ? __virt_addr_valid+0x183/0x530 [ 238.312628][ T30] do_filp_open+0x27f/0x4e0 [ 238.317640][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 238.322671][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 238.327982][ T30] do_sys_openat2+0x13e/0x1d0 [ 238.332698][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.338033][ T30] __x64_sys_openat+0x247/0x2a0 [ 238.342899][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 238.348335][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.353135][ T30] ? rcu_is_watching+0x15/0xb0 [ 238.357979][ T30] do_syscall_64+0xf3/0x230 [ 238.362512][ T30] ? clear_bhb_loop+0x35/0x90 [ 238.367866][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.373788][ T30] RIP: 0033:0x7feb7e9169a4 [ 238.378318][ T30] RSP: 002b:00007ffe42ab9a10 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.386829][ T30] RAX: ffffffffffffffda RBX: 000055d49fce7500 RCX: 00007feb7e9169a4 [ 238.394938][ T30] RDX: 00000000000a0800 RSI: 000055d49fd000a0 RDI: 00000000ffffff9c [ 238.402924][ T30] RBP: 000055d49fd000a0 R08: 0000000000000001 R09: 7fffffffffffffff [ 238.410959][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 238.419051][ T30] R13: 000055d49fcf08a0 R14: 0000000000000001 R15: 000055d49fce7910 [ 238.427470][ T30] [ 238.430768][ T30] INFO: lockdep is turned off. [ 238.435660][ T30] NMI backtrace for cpu 0 [ 238.439993][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 238.450604][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.460660][ T30] Call Trace: [ 238.463926][ T30] [ 238.466876][ T30] dump_stack_lvl+0x241/0x360 [ 238.471565][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.476751][ T30] ? __pfx__printk+0x10/0x10 [ 238.481330][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 238.488253][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 238.493181][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 238.498635][ T30] ? _printk+0xd5/0x120 [ 238.502873][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 238.508847][ T30] ? __pfx__printk+0x10/0x10 [ 238.513425][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 238.519394][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 238.525371][ T30] watchdog+0xff6/0x1040 [ 238.529604][ T30] ? watchdog+0x1ea/0x1040 [ 238.534023][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.538692][ T30] kthread+0x2f0/0x390 [ 238.542749][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.547425][ T30] ? __pfx_kthread+0x10/0x10 [ 238.552021][ T30] ret_from_fork+0x4b/0x80 [ 238.556433][ T30] ? __pfx_kthread+0x10/0x10 [ 238.561018][ T30] ret_from_fork_asm+0x1a/0x30 [ 238.565780][ T30] [ 238.569933][ T30] Sending NMI from CPU 0 to CPUs 1: [ 238.575705][ C1] NMI backtrace for cpu 1 [ 238.575720][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 238.575740][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.575751][ C1] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 238.575777][ C1] RIP: 0010:__might_resched+0x18e/0x780 [ 238.575796][ C1] Code: 87 04 00 00 41 8b 45 00 c1 e0 08 01 d8 44 39 e0 0f 85 d6 00 00 00 44 89 64 24 1c 48 8d bc 24 a0 00 00 00 48 89 fb 48 c1 eb 03 <80> 3c 13 00 74 31 48 8d bc 24 a0 00 00 00 45 89 f4 4d 89 ee 49 89 [ 238.575809][ C1] RSP: 0018:ffffc900001f7a40 EFLAGS: 00000a06 [ 238.575822][ C1] RAX: 0000000000000000 RBX: 1ffff9200003ef5c RCX: dffffc0000000000 [ 238.575835][ C1] RDX: dffffc0000000000 RSI: ffff88801d2f9e00 RDI: ffffc900001f7ae0 [ 238.575847][ C1] RBP: ffffc900001f7b58 R08: ffffffff8f437563 R09: 1ffffffff1e86eac [ 238.575859][ C1] R10: dffffc0000000000 R11: fffffbfff1e86ead R12: 0000000000000000 [ 238.575871][ C1] R13: ffff88801d2fa244 R14: 000000000000004e R15: 1ffff9200003ef50 [ 238.575883][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 238.575897][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.575908][ C1] CR2: 000055d4a0522018 CR3: 0000000034256000 CR4: 00000000003526f0 [ 238.575923][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.575957][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.575968][ C1] Call Trace: [ 238.575975][ C1] [ 238.575981][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 238.576003][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 238.576022][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 238.576048][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 238.576063][ C1] ? nmi_handle+0x14f/0x5a0 [ 238.576081][ C1] ? nmi_handle+0x2a/0x5a0 [ 238.576098][ C1] ? __might_resched+0x18e/0x780 [ 238.576113][ C1] ? default_do_nmi+0x63/0x160 [ 238.576133][ C1] ? exc_nmi+0x123/0x1f0 [ 238.576151][ C1] ? end_repeat_nmi+0xf/0x53 [ 238.576173][ C1] ? __might_resched+0x18e/0x780 [ 238.576189][ C1] ? __might_resched+0x18e/0x780 [ 238.576204][ C1] ? __might_resched+0x18e/0x780 [ 238.576220][ C1] [ 238.576226][ C1] [ 238.576234][ C1] ? __pfx___might_resched+0x10/0x10 [ 238.576258][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 238.576276][ C1] wg_ratelimiter_gc_entries+0x3cd/0x470 [ 238.576295][ C1] ? process_scheduled_works+0x976/0x1840 [ 238.576312][ C1] process_scheduled_works+0xa66/0x1840 [ 238.576337][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.576354][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 238.576376][ C1] ? assign_work+0x364/0x3d0 [ 238.576392][ C1] worker_thread+0x870/0xd30 [ 238.576414][ C1] ? __kthread_parkme+0x169/0x1d0 [ 238.576432][ C1] ? __pfx_worker_thread+0x10/0x10 [ 238.576447][ C1] kthread+0x2f0/0x390 [ 238.576464][ C1] ? __pfx_worker_thread+0x10/0x10 [ 238.576480][ C1] ? __pfx_kthread+0x10/0x10 [ 238.576497][ C1] ret_from_fork+0x4b/0x80 [ 238.576512][ C1] ? __pfx_kthread+0x10/0x10 [ 238.576529][ C1] ret_from_fork_asm+0x1a/0x30 [ 238.576549][ C1] [ 238.577481][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 238.890753][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 238.901253][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.911307][ T30] Call Trace: [ 238.914585][ T30] [ 238.917515][ T30] dump_stack_lvl+0x241/0x360 [ 238.922197][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.927419][ T30] ? __pfx__printk+0x10/0x10 [ 238.932009][ T30] ? vscnprintf+0x5d/0x90 [ 238.936337][ T30] panic+0x349/0x880 [ 238.940231][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 238.946412][ T30] ? __pfx_panic+0x10/0x10 [ 238.950833][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 238.956225][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 238.962378][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 238.968541][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 238.974697][ T30] watchdog+0x1035/0x1040 [ 238.979059][ T30] ? watchdog+0x1ea/0x1040 [ 238.983502][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.988179][ T30] kthread+0x2f0/0x390 [ 238.992251][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.996924][ T30] ? __pfx_kthread+0x10/0x10 [ 239.001536][ T30] ret_from_fork+0x4b/0x80 [ 239.005960][ T30] ? __pfx_kthread+0x10/0x10 [ 239.010639][ T30] ret_from_fork_asm+0x1a/0x30 [ 239.015430][ T30] [ 239.018795][ T30] Kernel Offset: disabled [ 239.023125][ T30] Rebooting in 86400 seconds..