last executing test programs: 1m11.261921369s ago: executing program 0 (id=747): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0x10000}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000ffa6080009000d000000", 0x24) 1m11.132215462s ago: executing program 0 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000100000000000000", @ANYRES8, @ANYBLOB="000000f4ffffff00000000f4000000728c4ab871", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r3, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) (async) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000b40), 0x80000) recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/4076, 0xfec}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000380)=""/207, 0xcf}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000180)=""/202, 0xca}, {&(0x7f0000003080)=""/4073, 0xfe9}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40002042, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB=';\x00'], 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x40000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r5, 0x4) (async) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000bc0)=r5, 0x4) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB="37100001ffffffff1801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f00008500000006000000645304000400000018120000", @ANYRES32=r0, @ANYBLOB="0000000000550000b7032100e3ffffff5132804bdb5cfe9157850000000c000000b70000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180000000200000000000000ff030000850000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f00000006c0)='syzkaller\x00', 0x7, 0x6b, &(0x7f0000000700)=""/42, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xb, 0x0, 0xffff7c60}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f00000007c0)=[{0x5, 0x3, 0xf, 0xb}, {0x1, 0x3, 0xb, 0x7}, {0x4, 0x3, 0x3, 0x5}, {0x5, 0x5, 0x8, 0x3}, {0x4, 0x2, 0x3}, {0x5, 0x4, 0x7, 0x9}, {0x1, 0x3, 0xc, 0x8}], 0x10, 0x3}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r9, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x3}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB='+\x00\x00\x00! \x00\x00', @ANYRES32=r8, @ANYBLOB="83844f737b39b5d24ea9fc", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) syz_emit_ethernet(0x7e, &(0x7f0000000d80)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb81001d0086dd60dd69bf00442b00fc020000000000000000000000000001fe8000000000000000000000000000aa0420810000000002000800000086dd080088be00000000100000000100000000000000350022eb0000000020000000020000000000000000000000080065580000000000"], 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000180)={r6, &(0x7f0000000000)='cgroup\x00', 0x204000, 0x0, 0xfffffffe, 0x0, 0x0}) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000540)='cgroup.events\x00', 0x275a, 0x0) (async) r14 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r14, 0x89ee, &(0x7f0000000300)) preadv(r13, &(0x7f0000001a00)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0x9, 0x6c8) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x1, 0x81, r10, 0xc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="00689fee", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000b70400000000000085000000340000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) sendmsg$IPSET_CMD_DESTROY(r11, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x3, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) 1m10.959234148s ago: executing program 0 (id=752): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r1, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/51, 0x33}], 0x1}, 0x8}], 0x1, 0x20, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105000000886400001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3, 0xffffffffffffffff, 0x500}, 0x57) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000000300)={0x0, 0xb22c}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008001}, 0x4800) 1m10.593880127s ago: executing program 0 (id=759): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000006900)=[{{&(0x7f0000000340)=@nl, 0x80, &(0x7f0000007a80)=[{&(0x7f0000000400)=""/19, 0x13}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f0000000f80)=""/207, 0xcf}, {&(0x7f0000006a80)=""/4090, 0xffa}], 0x4, &(0x7f0000000780)=""/113, 0x71}, 0x8000}, {{&(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/13, 0xd}, {&(0x7f0000000440)=""/3, 0x3}, {&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000280)=""/27, 0x1b}], 0x4}, 0x9}, {{&(0x7f0000000840)=@qipcrtr, 0x80, &(0x7f0000004f00)=[{&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000000900)=""/10, 0xa}, {&(0x7f0000002dc0)=""/4096, 0xfffffffffffffcda}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/120, 0x78}, {&(0x7f0000000e80)=""/79, 0x4f}, {&(0x7f0000004e80)}, {&(0x7f00000004c0)=""/24, 0x18}], 0x8, &(0x7f0000004f80)=""/160, 0xa0}, 0x2}, {{&(0x7f0000005040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f00000050c0)=""/84, 0x54}, {&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f0000000d80)=""/209, 0xd1}, {&(0x7f0000000c00)=""/94, 0x5e}], 0x4, &(0x7f0000005180)=""/233, 0xe9}, 0x10200}, {{&(0x7f0000005280)=@qipcrtr, 0x80, &(0x7f0000005380)=[{&(0x7f0000005300)=""/110, 0x6e}], 0x1, &(0x7f0000000f00)=""/99, 0x63}, 0xf}, {{&(0x7f0000005440)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000005880)=[{&(0x7f00000054c0)=""/187, 0xbb}, {&(0x7f0000005700)=""/100, 0x64}, {&(0x7f0000000b00)=""/158, 0x9e}, {&(0x7f0000005780)=""/253, 0xfd}, {&(0x7f0000000940)=""/140, 0x8c}], 0x5, &(0x7f0000007ac0)=""/4110, 0x100e}, 0x7}], 0x6, 0x20, 0x0) 1m10.311571375s ago: executing program 0 (id=763): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="56dfbd18651400000076006331000000002e7100"], 0x14}], 0x1}, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000fcffffffffffffffd9983795a3f7dfb8e12d0008400000000d08000640ffffff00080003400000003908000c4000000000140000001000"], 0x7c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$kcm(0x28, 0x1, 0x0) close(r9) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14) connect$packet(r1, &(0x7f0000000500)={0x28}, 0x14) socket(0x10, 0x2, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1m10.138750537s ago: executing program 0 (id=767): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x40, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x25}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x20008014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10, {0x2, 0x4e22, @broadcast}, 'syzkaller0\x00'}) (async, rerun: 64) r5 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0xff, 0x6}}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) (async, rerun: 64) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x2, 0xf0, 0x3}, 0x1}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) (async, rerun: 64) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) 55.081183161s ago: executing program 32 (id=767): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0x20, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x40, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x25}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0x20008014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e657665000020000280080011"], 0x64}}, 0x20000000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x306) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10, {0x2, 0x4e22, @broadcast}, 'syzkaller0\x00'}) (async, rerun: 64) r5 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0xff, 0x6}}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) (async, rerun: 64) r7 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x2, 0xf0, 0x3}, 0x1}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64) sendmmsg(r7, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) (async, rerun: 64) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc) 33.455287822s ago: executing program 2 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80000) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x8810) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000300)={@null, 0x2, 'hsr0\x00'}) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x50}}, 0x0) 33.154027445s ago: executing program 1 (id=1227): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x8, 0x3}, 0x10) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x4301, 0x0, 0xfffffffe, 0x0, 0x0}, 0x1, &(0x7f00000006c0)=[{0x1, 0x9, 0x0, &(0x7f0000000400)="bfb41b1e919cd4a0b6572e45e0f50f2d06e7a34c8ae321eea21ca562c250d1968761f89525", 0x25, 0x8}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0xfffffffffffffffc, &(0x7f00000003c0)}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0001001a00010040010000000000001c0010000000fd0800200000"], 0x1c}}, 0x4000) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x20040001) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="91400300000000002000128008000100736974001400028008000300ac1e010106000d0009000000140003006e6963"], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071118200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r9 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, 0x0, 0x0) 33.004153832s ago: executing program 5 (id=1228): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2509000000080001000100000005000800000000001500070017000000080001000200000092158bb34e946fb3a8a5eace9aca25daf9b669b44d60b78ada1ebba6a10a92d6d22ecc46ac40c75a9b88b346fb94763f6d1d51457bb1f68b78"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 32.994015004s ago: executing program 1 (id=1229): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xc, 0x200, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="003c74020000000000000000000000000000000000001000"], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x1, 0x7fff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x1d, &(0x7f0000000000), 0x4) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000480)={0x1d, r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0xfffeffff, 0x29, {{0x22, 0x4, 0x3, 0x7, 0x88, 0x66, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@generic={0x44, 0x5, "d8f8e5"}, @timestamp={0x44, 0x8, 0x92, 0x0, 0x5, [0xfffff434]}, @ssrr={0x89, 0x7, 0x4, [@broadcast]}, @ssrr={0x89, 0xb, 0x82, [@dev={0xac, 0x14, 0x14, 0x28}, @remote]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xb, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @end, @lsrr={0x83, 0x2b, 0xbe, [@empty, @multicast1, @remote, @broadcast, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x8c, 0x1, 0xe, [{@private=0xa010102, 0xf8dd}, {@private=0xa010101, 0xfffffffb}]}]}}}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x8000, 0x7800, 0x3, 0x1, {{0x2c, 0x4, 0x1, 0x26, 0xb0, 0x67, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @local, {[@rr={0x7, 0x23, 0xcd, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @local, @multicast1, @rand_addr=0x64010102, @broadcast]}, @noop, @cipso={0x86, 0x36, 0x1, [{0x6, 0x6, "b090db77"}, {0x2, 0xd, "0bd4c434946d133eb41d63"}, {0x7, 0x7, "6054fa0c63"}, {0x7, 0x5, "94d70f"}, {0x7, 0x11, "48eadbc52906b4212462b191dbcd83"}]}, @timestamp_addr={0x44, 0x24, 0x3, 0x1, 0x0, [{@multicast1, 0x6}, {@broadcast, 0x401}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x9}]}, @generic={0x89, 0x12, "aedca5c4b0fb1ff99ad0109fd7909905"}, @rr={0x7, 0x7, 0xda, [@multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x124, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x14}, 0x8) 32.942813849s ago: executing program 5 (id=1231): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f00000001c0)={0x2, 0x4001, @multicast2}, 0x10, 0x0}, 0x30004081) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="5c00000012006bab9e3fe3d86e6c1d000014a10da6000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700b2b7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="0300ff04", 0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x10, 0x10}}]}}}]}, 0x40}}, 0x0) 32.844367818s ago: executing program 1 (id=1232): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xf, 0x7}, {}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x4) recvmmsg(r2, &(0x7f00000020c0), 0x0, 0x10041, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018100000000000000c0000000c00001402000000000000000000000d000000000000c67b"], 0x0, 0x26, 0x0, 0x1}, 0x19) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) 32.842674875s ago: executing program 3 (id=1233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r0, 0xc252d000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x7661, 0x6a, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x20, 0x80, 0x1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000017c0), r4) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="5ff52bbd7000fcdbdf000000000000aee484dd265741"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x8800) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRESHEX=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r2], 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c000000190000032bbd7000fcdbdf258020148afc04fd0b004a000008001000400000001800168014000500fe88000000000000000000000000000108000300", @ANYRES32=r1, @ANYBLOB="08000600f9ffffff08000500ac1414aa08000300", @ANYRES32=r7, @ANYBLOB="9a13fefd8a5ee4bd214d8acfd4f308e8a8aa8687269e7c1fb488e49195ed4df29420245d576538a79b9ab546626947344792b9b7f700f31ae1eab275e24dbed65a7e67a7d900a34d7308f21d653541ba1d87e5a3d3b55927ea7a5c47607bfa80799cff03d7a0c5d0b55866ad6fad68dca1949bae21c1f29e4398c4459f707e0b42ed1e"], 0x5c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000010) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f00000003c0)={r8, &(0x7f0000000000)='\x00', 0x101000, &(0x7f0000000080)={@align=0x6, {0xc, 0x0, 0x2, 0xa}}, 0x9, &(0x7f00000000c0), &(0x7f0000000140)=0x3fe}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r11, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r11}}, 0x1c) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={&(0x7f0000000600)="b1a77a7e96414464a4da24694cf905efab7f97e74ab930df2ce228cbd370dce73022d7a5827eab378e880e8aa61456ae03b40fcb0c756eec79dffa98c60ede68dd78226abd673373dead420a8cf5423df08be504d5a0ca5b4e57564284f721fc96e071340624b07c5c8aabd63055d301569493344f81af340be4e8faaf7bfb0251447ed7e7dd", &(0x7f0000000800)=""/173, &(0x7f00000008c0)="d4752badc22fe05e42ca829c8d1c0975a7e81c22402881cd2a0ea49f09182341e8358448799263f3dc7b3dcc631045abb0ceaa4e9ec3d0b2f4fa754ab5e2d473e6247bacba590db97e1243c8272f519248eefd05ed6020c5ecbfe84ad8c9e1ad3f86e6630aa41eb334778b3bc9ecb4c345c4c50b", &(0x7f0000000940)="f4148cd840b127cd30d56998005598187318968867a5675da135000088d9cde223ed83a3176aaf1ae93d4f3a011551e042c9bdf82130cd7240556916a3a6d547e5d0725f905226e3f55ffdaee880c88fbd20df537fc75bdef76e80d09e959a9325943a79dd88c33d6344df31afffd5d87c2bb7314669255975379680c6f21e7574529ed53ea54320d255634309adb9d7e709b719aa40fa7a790ce363ea95e254a4afefa6923c4fcba48978fcfe6d33", 0x55b, r0}, 0x38) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffb}, 0x11) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0x24, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r15 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r16, {0xb14681888c2dd212, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0x8, 0x6, 0x5, 0x2, 0x2, 0x4, 0x8, 0x2, 0xfe, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) accept4(r9, 0x0, &(0x7f0000000180), 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES64=r9, @ANYBLOB='<\x00l$', @ANYRES16=r12], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090) 32.762893714s ago: executing program 3 (id=1234): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x4004) 32.715050538s ago: executing program 3 (id=1235): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x14, r3, 0x603}, 0x14}}, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2a, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x2, {@ip4=@multicast1, 0x800}}}]}, 0x38}}, 0x0) 32.652345327s ago: executing program 5 (id=1236): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r0, 0x0, 0x840) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000240)={r2, &(0x7f0000000140)='GPL\x00', 0x101040, &(0x7f0000000180)={@align=0x8000000000000000, {0x30, 0x1ec, 0x80000001, 0x1}}, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x6}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd22, 0x0, 0x0, 0x0, 0xe972}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1be1, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x8f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0x2, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)={0x14, r6, 0xd5c15c672e322a81}, 0x14}}, 0x20000008) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140c, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 32.596647682s ago: executing program 4 (id=1237): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = epoll_create1(0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x10002, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0xfffffffe}, 0x28) ioctl$FICLONE(r1, 0x40049409, r2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="81", 0x1}], 0x1}}], 0x1, 0x40400cc) (async) sendmmsg$sock(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="010000040080000000000000000200000000", @ANYBLOB="e659afd52c69dab58b60253a4a61ca991c33f57ee14d32d8a3cb722c42678277afea6a57808f492cf2269bd313475af9aa2b31190dcb9abc2f2d149b23d064a5deb7f5c1669df09735131d3030c43c3b18cd1f852d2fd39e31d0b6da34c1cf8d20d52cd08f63058a19e32566b8c46750bb363efe59132f73ab3b362c3069a9ea890373640a946852c0ff199b07cd154cddc038e5a98cb57a", @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 32.522539626s ago: executing program 2 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000680)={0x3ac, r3, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="aa77ea7fea90"}, @NL80211_ATTR_IE={0x2e9, 0x2a, [@fast_bss_trans={0x37, 0x157, {0x40, 0x9, "720ed5918e528a181e01df4f1c50a4f1", "9f5e550f385269f0f07d9b34a9efa78c507ff1175a483f06461938ef047273ac", "7b7432fab2dda0c8fb9d57e3d17cc9f195438e0abf656d5ded712ff02a1cfcf1", [{0x3, 0x22, "0515fd4ca1eedff0103f16b69d99719116524b0651f908b9d4b9615a1644224cbc53"}, {0x4, 0x11, "0edff280cfb18541e40924b00823146d26"}, {0x4, 0x20, "43196d554e5bb1a5138f571898875dafbc5e3230cd3828e98a0ebc5ba2b68b13"}, {0x2, 0x24, "8ccdee738f0ffa1d3121cd28ea8e8d7683d01e5ab63d02ca9442457164b1f6b79b66af98"}, {0x1, 0x26, "2a7912cf6d287b10b8b19b7a302434357f179bd1f24f2485348db302fe4f340a107d4730a929"}, {0x2, 0x1f, "7e25f2dcc747e5c835f460dd362466b8d04beb919f767f334883e34c870d3e"}, {0x4, 0x4, "bb7a8d83"}, {0x2, 0x1d, "d2f230cd4a5aa6a639e5cd54493f20a34c1f304476a4e2a1e56d68a051"}, {0x4, 0x16, "57517ac95dcca1d6995d64aae7800adfcb7d9699cbce"}]}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @broadcast}}, @supported_rates={0x1, 0x4, [{0x24}, {0x48}, {0xb4, 0x1}, {0x60}]}, @random_vendor={0xdd, 0x90, "cd74222c63569bffeb3559369d731a87cc4d546bebc15e659abfb264801c625609a75b0a496da83dca7757a394f294a348b1e4a3a32d1c24c49a122a16880dd0d1356c48099c629747360e8b948481ca18656d0d77fc18654dbaeabcacc53d33006b5e35ff52ecff74634a552bbf85863c9fd7c8b60ef79fd93aabe12a38496c51ee6f8b74bdb19af7dd87c1f632ca80"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x1, @device_a, 0x0, @value=@broadcast, 0xf, 0x6, @device_b, 0x6}}, @measure_req={0x26, 0xa0, {0xc, 0x4, 0x7, "8af5a85e9bd996936cddec6f6a4dee67cd3dad87c4e8cbb88be76f299f1d077a2042f638108bec14c73eb8721c313134869e2e7cfc4dafb3454d8f31fa365a401b71768c540e5528546dcc372c4b03bbfe8397a9dfddb628e723b4ff90f1fe5c8f002e8433958173a2d8c200ea4cc1c95f98c859e2de06aebc2c79f152051017d37166440d4ea9cf86b93f98e4644b7dc0efb695c91fc2dc7a081491c4"}}, @dsss={0x3, 0x1, 0x34}, @link_id={0x65, 0x12, {@random="bbda077b7b36", @device_a, @broadcast}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="074532bc2218"}, @NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0xa1, 0xff}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xac, 0x8}}, @channel_switch={0x25, 0x3, {0x0, 0xa5, 0x1}}, @perr={0x84, 0x68, {0x3, 0x6, [{{0x0, 0x1}, @broadcast, 0xcb8, @value=@broadcast, 0x15}, {{0x0, 0x1}, @device_a, 0xb325, @value=@device_b, 0x1}, {{}, @device_a, 0xc79a, @void, 0x12}, {{0x0, 0x1}, @device_a, 0x6, @value=@device_b, 0x1c}, {{}, @device_a, 0x8, @void, 0x2c}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x34}]}}, @supported_rates={0x1, 0x1, [{0xb, 0x1}]}]}, @NL80211_ATTR_MAC={0xa}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="050029bd7000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="4c000e0080000000ffffffffffff080211000000ce99a8ba822800000000000000000000640001002d1a01001d00000000000000a60200080004000000000009000000037206030303030303080026006c09400008000c007f00000008000d000000000008007e000000000008173397c0e5e27948242afab415b053193e5985aded38f193d4f6c6d28b38872bd8473319736a1f9153b85ec825a7617f4c82a1c03528058c344a2cb1913c0acae6341caf9a3aa35a9cbe9f0f0c35527661c8ad5df398cdf8ad21fc7fb199ff7033d95946c4c624cf75013df2d000632bf65f9bda66a58839d3fce9c5217f0000000000"], 0x88}}, 0x20000014) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400f3ff2fd4354b4f77c7f4b0daac21d7ef0a2ec8ccd978e460332bb8d451e89aaa6c769083f4159df050b9e924cbb0bb27153066b36cc7002955d820ccc682e61ef89c8d4ef66564cbea47d4f70f3a070a12695e244100d5f6f663853a80e483820c69ff304558613de5c4788ac0e7e740362db5a0736650fa17baf609c8f92b8d1743b34b7de9a5eb4f9597a0b107e0c52f608df59b3647ce210fca8216edcfc358a0d717e90f994d452419d101265e11a52b133d3e594ebaa0903caf3024ed", @ANYRES16=r7, @ANYBLOB="00012abd7000fddbdf25050000000800090006000000050002000200000008000500f9ffffff0800050001010000"], 0x34}, 0x1, 0x0, 0x0, 0x8820}, 0x4004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 32.387451584s ago: executing program 4 (id=1239): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000840)) listen(r1, 0x2) r2 = socket$kcm(0x29, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000800)='wg2\x00', 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa8, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf0}]}]}, 0xa8}}, 0x4040010) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xd4041, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000300)={0x9, 0x100, 0x2, 0x5, 0x0, [0x66b5, 0x80, 0x40, 0x8]}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000e5480dc064c2aec77d935a8f4992db08dc6110bc8c29d53261f1085beba80080000000000000607cbce6b40b8ee573b736de000000003ab09e6e9ce46bf24bfffbc4d7b224e9c260b7728398", @ANYRES16=r3, @ANYBLOB="150b2abd7000fddbdf250100000008000100010000000c0006000300000000000000"], 0x28}}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5b372c9a591235311f32a68a6ec1fd97b9", @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250700000014000200fc02000000000000000000000000000114000300fc0000000000000000000000000000000800050000000000"], 0x44}, 0x1, 0x0, 0x0, 0x8c4}, 0x4) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="84030040", @ANYRES16=r5, @ANYBLOB="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"], 0x394}, 0x1, 0x0, 0x0, 0x408c0}, 0x2400c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 32.36500554s ago: executing program 3 (id=1240): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x80c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0x4243b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x7d}, 0x1, 0x2000000000000000}, 0x0) 32.110909245s ago: executing program 2 (id=1241): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2509000000080001000100000005000800000000001500070017000000080001000200000092158bb34e946fb3a8a5eace9aca25daf9b669b44d60b78ada1ebba6a10a92d6d22ecc46ac40c75a9b88b346fb94763f6d1d51457bb1f68b78"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 31.987800365s ago: executing program 3 (id=1242): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16=r5], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r7, 0x0, 0x3ffffffffffffa) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x8905, &(0x7f0000000200)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000) listen(0xffffffffffffffff, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 31.930254616s ago: executing program 1 (id=1243): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0xb, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x22, 0x1}, @struct={0x5, 0x6, 0x0, 0x4, 0x1, 0x2, [{0x8, 0x3, 0x1}, {0x0, 0x4, 0x401}, {0x1}, {0x0, 0x3, 0xf}, {0x9, 0x2, 0x3}, {0xa, 0x5, 0x8001}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x81}}, @enum={0xf, 0x9, 0x0, 0x6, 0x4, [{0x4, 0xd949}, {0xe, 0x4}, {0xd, 0x3}, {0x8, 0x2}, {0x6, 0xe}, {0xb, 0x9}, {0x8, 0x4}, {0x10, 0x7}, {0x5, 0x1ff}]}, @const={0x6, 0x0, 0x0, 0xa, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x25, 0x0, 0x49, 0x2}]}, {0x0, [0x5f, 0x0, 0x5f, 0x30, 0x61, 0x5f, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000240)=""/60, 0x10f, 0x3c, 0x0, 0xffffffff}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x485b, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, r0, 0xfffffffe}, 0x50) 31.875628209s ago: executing program 1 (id=1244): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x100000001, 0x2}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1411, 0x100, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7046b57d5400fddbdf25", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_audit(0x10, 0x3, 0x9) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="102a05f4ffffff000c001a8008000280040001"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @broadcast}, "00186371ae9b1c03"}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x1406, 0x400, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4094) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vlan1\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x2, 0x3, 0xd, 0x82, 0x200, 0x3, 0xffff, 0x4}}) 31.73137808s ago: executing program 4 (id=1245): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018240000002400000004000000000000000000000a02000000000000000000000d03000000020000000000000c0200000000006100"], 0x0, 0x40}, 0x28) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x1, @local}, 0x10) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000780)={r1, 0x1, 0x6, @local}, 0x10) sendmmsg(r0, &(0x7f00000033c0)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000840)="332ef583235f2a2e82628990954d43ca9c804ff6308229d80f912c4b4accdc4b196bbeaadb32c85d159b0520c79df1d887b2afd10b440bffa94de9b2eda19ef698949c1408eead76f00ec39d9811261e4a0ce6588f8a6f16f323919efdab67d7c9dd6afc6909273e411eb8f4a4606fae727f52b1a8218da159d07c9380a63d24f93301dec090e3c19afe9ef7271258ec8c4d9605a68a6b4f04fb11a6a20b3410e8bc98b07076b7b95ed347ae0003999fe6824ddfc53d1d8bfafd35111a560b16de595492808182294e0a7ef27d7d06b4a0fa5915e685864d534e5d9cdfef576fd66185281aaf7e47f19d7c3633490fba2af3f3136f12f2630f071d3e3551db145dd93e6dd73e12fb48a011ad7640d7705614ff7c167c01a9772fb492e2f9526088b72c6879407cc25b2c12c5008fab1c0a0492d10e94680d07892a3408f66318eeba794dfe165430add15cf38497505d5d12121787ef07c6db7014dd172accc0dbd27de6eae625791d6298098a1b040a36a4b622866d78d3a85eb7f164254a63bf6b864e55e8a47b3b09f996a01078060aee51baf46742577f9035babccde747e243510683d5359fe1dc6b03d20da08d68c358239cb33a3f2f28108ca560d4c364b79a90fe9e321c3e275d9eb2ee2ed2d38a362ad362e2cbc9ac33642a57f8165508c3bb93aa3c0af727beba47e60e99fecd935c441289f7c4a0f626cf56e61987cbf91c24b86da8575a441198bec6399307dada79226b9389f3f2f6ac6c73598424131c5bc8839fd1b65843396ed8135017ee5c20b9f93a53ecd6f6f8bd8f9e63619a57851d12dd6940149d68fa58b07720d5b8901d337904ba3fa3968be1838c53963577b21e89296400a92a5af469412bc8ad6813bf350b49aee2d566671e76f54f91554ecb8d6eae7e7f8e55fed2156e3c919361e84ec925bce6373f07119ba70259a9a2de3365432ecdcce3eb3153c89ce190f2ec28c2737b68ae39e5696ad2c0c12cc4f17b5de81cb4ec150f4742b66842b28b3f8bedbabade45ef132705d469f7bab7237cc967a35b7782438464eb0e6a45fef9410608ce60c57bf7f756977e04d3fccbe8cb0c4ff72968f6cc9bd5aabe5a414467a68d6b5f68a4d5a493e79a5a5bfb4bb99e07e57074b3201454dd3af9a2e115d6ed2e52383390ddaf75d53f090c9e01ebd7cf230a3f0777ba9157750a6a788122e4867e49ee440fb68ab58eacf7a2197b1a1568b6e46dfc37988bcfadb2785b95b9ddf7e3a37dba7c206d9442eee5d51a611e0eae718182712209c65e25be5cd21799e28775f26ded8c8fbc3ba8e89195202619407e889c6523adbe8a48b168b9a3792045f798a4c703d0af86c7b66c098b5b7c0584b3441b0e21f5462fa4979ada15da81da3778ceb2c805bd2b56077b95e6515befbef61e16578f5d5ffd0ea20dff2260285ec926c7b5f291407a9ddb1e710ca06e65085fbbafba1bb80d3bfb10dc98f458fe2c5a833666a85d8d5e828f042b1e4e9677a82fc9126dbd3dc71566d16c0fc76cc9751d1798cda4deec0cfeace89a1f422adc7c0932831b9596c58bcef6f3612521ff868a7499c2d721d87d29981608b57da2bd649007ce6336a26e0d0b142257c6805baba82b7536172c4b122130517b900a940ec9b4fbe81f28073814066b011fe6d3bc614c7b389bc5122b364b81cea3e50d62484c58db62954f5fc9afcb5f0c29b8bae3353c673a921ea4234b9fec02e5f3cc7e179987eb7852393e526cebd1bb115db24b95fa320548589469d6d9098e3cef5a981f13a5d0a051cd899af6cf91c518b039003d3073e53bcdee4414901dee649683842ca3604e99d9bada53ce73327c71e7dfa98999e42c91850a67456e11ec7818349d194b3d4ae2700e61be7d7d98c0cc25e0ba907c092de3920bf02e612b82ddcb9d1ff215cc0cad1516398174fa0e057fe77d61d1dac5205c57f2bcd53049cfdb073fc765e98900bbde59108a57bfeb031a1dd4aa547d7fc8426c1a5d96a54a0c8b0c055b9d4a54c12f2a06e0d318d652fcd3f6f82b43540ee3bcb13e48c7cbc4fd5b804c9075258f91842d9a9c0f3fee72577cabb816ae1cc796a4b5886795ae98fcf46f1687c6c85a692252870e6dfd6fa24c9761e8afd4ef5cf4c4d7bbd809f2cc499e2be00a5c44c6961ef82b0281b1a8c5f6ba924b11375bf23e83a3f9ea68f7d3ed0681c587e8db93ed9dea5e39f1352ebccb9f5e6e1e6fdc9428c2a08b774463aebead6bbc8236f83716aaa46f3b18ae318ea5d12e047fd4d40df620ca3383c7909e6a55425c31b8e353bdc25869783e63216d7b131e76f5302e15c613bbe38d3d69cf1d1e88b275f33bd9a65c398acfcc9007d797328689da9cc57c29ca2f83a6166345ec91b88932f6634928f9980bb144386996eb0ba70f1257346be8c25fc4ee1fa47a2fe3423bb2e28aa3e5d5d8a9e4a77eda0d3442912aa3dea32514c58ab6cd3805e348f2505db3ddcbc5c547069046d9425964fd311c3b0a561c98a985ab6753b1f3d630b125233711a5b7df75d57762d9ff29d4f8664484dee347f825c0695daa1e6113ad22b9df6025fb1578115120b189cdce606cb584e624698868fa1e0c4a40d9803a4774589abd7c8cbc43288445c51172e791afc9b8140cb900fe1740c8fd9544ed8446f65dfaa769035d8caf69d279201c7ad641effccac7d73ddc47cfe292a871a115f56f9c54c7baceeed98563f7c3616c540e437584c719af01153856b004219b69eb5ce35bac8dd3faf650dcbf19b5b5d42fe648ebaed8bef24d7fd06c7fa21d18d71be94a93398a0e7bfc6cecb8738581bd91e3ad3bc133e5635c341dbe9a5016a6f8c0fabe190836957a72fea588f5a7c069d8cb20e551e507086d5f44d149f38d07291390d5c80076376da4147878f0e7346c250370eafa06f35d2cc47008a633f63560f2b13b6e862541c2169b14b867785c196a2cffd81a7a1bac20566edab2f3887100e950aaf2fba6349e58f51f7e4a67071bb89c4d84c90c5c2f6b1394307a61d90373924a297823f0d4c7907e305f54ce957084221498446567be06d91032252a8693779b4b663fbe27d13442a16cb3000286683aab5cbb5b2eda0b10c3495c24b656bf812f19b72b841217bb331ee0abeb4bf8293c528194a36d72782c985f864ed04539056cf5c69daeb8e32b92fe7787fd09a72d04aee1dff44d2cddf71cb279ccc90a7c95e3bdf75b60cc3f712843a1d57d4d222732fb309cec3fd0b901e47c641dba7cf313146f57287d5f76c988d87ff46d7aa51ab0e0c65b0294cd0a45cfe81768d41427a0bdee14e649590afbeaa97e7374696d3312734ef2842c3da420fb72d81a73df18dd3d917930cf8b32f6ac51a45be6d1d7e5c47c2c302302467cf130fe2683f2e15595b0977213c15affc3ddf0f447d9369df68070de555a6a46a6c1a5d49d6513c5d4738bbf349cad9380b183e58b3fc0f86e468ddc5fe940bc45aeec80716d2d43bf8ad5c8d7551525b56e00492daffc1909580d182ec64aaf49d8a7920ecba1b01e44b3672863275e8cac8d08e7ff9e383ec4ad53c8e6c63156ece22c91fb72434b485b70537be4cb29cdde42d346e7de92c54b2923ccd5d075cf739dffe74cb1e5701b2518a4afbc3a566b3a4d6093b68d70ff9948c05dc2628e7069e691d32366471994777a460702cd7bc50831e63a0e05bbde0953c915f2e014eee66713bc081b0e5b5df85d8a71e17ae188d324e927301f8159e21c07bfadc7dbc98be54f5db464619d4906b767eb37f184afb6525d3be48da873b30b3a326315350af0d2b2afe7e93b6fc596457fdb1fef49866934ae267e48a59d96e32aa47f8cc0de18ee8ec4d7446605f9599332b58dcd9c995753bb4f2ab15989b7ff97786c1e83c4aa87896c6dfc5bba336bec3fd774335fb7f854e68c53e9bad627f8f347a626706c80651a07c9e84c9991973fe8ec294c4f5c0ca5cc78323a8baafcf8fafecaf9f64ef86a0acfb720c99e0cc61f938bb9235d9db4859ff37f02745cd83013fd416e719c9198bf485acb0abb7418c871c870922510b029f412d10d4a11a8c629429ada452c074df49f9340033c21e298afa847ebc85c4174c2a72c5d6df59c437b11a58f954ae2ba9bfc2c276cf6796bacab6049316ce319eeced0c04b19246da56743853d98a35e5d8aada6cd82691d6321a5331426e08fc1091e9a4ffe0727c3fbaedef60a7a9c4ae788868a5063a6a2951bbee8d98be2f62957b9b6a86e223249eec6cf1184b01c66a7f3df52a3bb7a451a66dfc7d742027cd93f89a5ea3a07d342b8898339e66a6c590d8432079f95b6f95dc40348862dfb861208ac1530e9d62424e4fbe29de7a88bf32aa7f718d45204662630547e01f870301a92c044aafed7c5c617acfd7f2c8f7c44d7cf4b3c061cc465775ff19e47ad374c708a0bbc11cc02798b94f51ddfb0501d578fa4bc07e50369f8dd1e6a6f07dd02236e937e1fc46d046d0cfeaf191367aacd8853d0ec113fd855a8a41c2a6c960efeca9cd2f3c4f4c0abb2eb1cbc4995c97dff5e7bab22228f9162b9513d9f9c8d359526267e3000900c846a01a28300222323f14ff41a2f37d827825bf7ae634f1536b30457f97d5c32e0424ae260493e665fc17f6e2d7c6f43c58fea4fcabd29e943766e292d03a24f8c6e888158f82fd32c546eb5fac1002f20d0ca9510d89a4410208d237ad1a22b0941dfc12e3c9fd649ae873d92744e95546c54e6400460482bbbc25bdc71d3238c0fb26ce4b0088ec520fca252be51190167d4a72582c4eafe3fb8bd6b36cc2e5fac8b30deed1f399ad65b181d71cff1becf80c7dca84b1c21899b0a00500e38b0fde7087bcdfd96ae27b7dbbc78f3a3608c002475ec97bdcac9c24188a2d7979d036f27e5e0aed66f920d6419d4a4ea9fc4bc29065a3d8fa742f956f04e2adc86014c9140dbbd70cd45ce6d6af85dd18147112dfff0f5be669e03f583af7a1a93c27e871f1b5ac981e25f64a02be93f4bce111aa2ab6362d30528c2f36a1413a1221a98f697409207a697135c412a82de4d77a71ba7f736fbef4f1d93f0cb7bcb6ab8521c9b29feeab2b5a8e263ab2e0dff6b377be4e50ef87bf776046185d34670d3fcda1f570404a500ddc2bc38ab658f8b8bac6e55f2c8ccf43e5bdc418b006cd32db5a9b5cb8993f6b11b303a14b48da71142e799356a83ad7f3d016cb28ea5770cbb06504234f5dc9f71278062b7b1f65839955fbdda58268ea08290a0a1e0b98fa1b9c4670906cfde06ed1936893c4a1d5e325138e12ca3d967926038e0bda46c7924b2cd336349df5a5a4707fbf070536f42fe2b034b6492db6e6569d031602594aabd7d12378b14345b0522beafedea1d2d1a246554d6235861d79c2b688b5baf6b2863c14fb04ae582fb77ccf35fb93583ccd6b82d25c813ec4eaeecdfeffaa73eca1a284be4694ccbc8f2fe276267b66cb160b1ee09af263e958b7058e1cc81b94a44cf78e925f273a44a6231c09dba03099a7a72ce2de1650bc519ee10e384db4281473782ee005c0b615ccb02e3064fedc6ec17b77183bd5b4356934fd54ee2bde3e3f2c13ff38c97c01ee38bb8101b4f7bfef651b810444a0d716a1edb08412425ded7fb794df29c91077588de1265a4c2a6c1c43b15d31b79e2146d290a7d6beb0e3d45c14a37831e0761848015c541d356cf6e4a2f6892f705e2f8ec216cd9ad53bb27210bce11c6f6d055d6112c688847d47913b60bf3a2262ed7d2cbcc0389b673b8", 0x1000}, {0xfffffffffffffffc}, {&(0x7f0000001840)="61e79292b6ecfad0a5bba5a1990f5f82781984a094f3f39a1b879b8fc071bed0f5fe0defea9cfc31b92b406719c7e65cb57caf8183103533431053aadb0f7ee15982728478e41c1e4af83bdd900786466c7dc9b634fa96114011862b6f0be7ea1290952c8b7c123d71975415deccd7d7cc141d1e7f304d", 0x77}, {&(0x7f00000018c0)="c099d42eeb6943c1cbcab933f0b65fdb68c5a1785fdd31f1df65d867205321fed4147449efb09cfdf6ca495d34ecf1d21656558e7e9dfedaa33e87c7312e569d73df6c4fe8d0078a26b011a4b3d66ebcbc83c3b7e912c37f6d4087650776c9326ee071b0ca4aa8fb3a3281812ab4067a4ac8a49b6eb3a7af60f690d593718f17b38001d0427cdf704b35051c04e5b65a4c208258352c3405540bb668ba2e33ef9aff", 0xa2}, {&(0x7f0000001980)="5a72e96cf3e3931ff7e5801a76fd26db8e025623a199", 0x16}], 0x5, &(0x7f0000001a40)=[{0xb8, 0x103, 0x7, "67cdae9d359b871934ab0bb2aca94ae4dd22efa147de6dfb4320608b7e5339cc37ff3901d04f3e66d99917bebad4ca028a3c6a56963a885500a1e1a7bed5fe2e7cd48a3091ffc78252e6d86ab95cc1258e4c830478c02f48015a3945c3c20ef18e9969e2029ac5ef2cb579800e089eade07ba68cdf7b2473c116b261efda6800bea98e758d1d450d0ef69dc8933e64565f7492cf8797c82ffcb00f5b7708f54f387e5c"}, {0xc8, 0x10e, 0x9, "c7d64273a5a6088b01f397bb402d7528308e725c34983a335352c8531d4a25914c9a56b371081322fb1c975706773d8db98669d0f83c10fda239ca678ed71b3d6bd58e60bc4172b20da126450fedd15f582d35cd013161e3e158f680b7c110d3e3763399b227eb0e40092ca8562a0d91dc76930fe971ec99129ddc2fbf0ef66cbd6cccf22d9bebd6d9f59a0bd68fb0d3d7f275d967875065c8bd1a68c7037452adb0ffe4c063d4101a2d2df6564c13de34a906309f"}], 0x180}}, {{&(0x7f0000001bc0)=@caif=@rfm={0x25, 0x2, "d8a7c394fff343ac4b1a9cc0616a2199"}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001c40)="c950127989a0e28a38bcef861f3ddadb4e06c006a7e2258832d6002f2019a88385e67230f59d296f38a9f9d5b510e67c290204412f5fc8146c5a39ab9120a0a79297dba158482539dd2b50cb6e163a8d63eed7a633bf173bed52afb7fdabfa664776cfde7edf4e41183abdfbf90ecfd86e05436c82ab7b32d98017779d570f8a7047edfcd545c1b3c29581bf4fbd0a6073c17896615ac6c334a0811f187b509d97dd465b608c84de835e12e5e72dfcc918a4db341198bc461a", 0xb9}, {&(0x7f0000001d00)="b1505f1124816bf150f3c1e6659106f7798b1ef376ef95a53d8138536c0f17ba7b5f9c195bebee44c538e0a20096f8bc5699a7777d8fbefc8b871de013c5fc76d7e1c5644e32a986e5325b7a363423237044c18ef352a6131b6b47a16037ea6b5aaa6e6bdb158912ec7f4ddee5f3fc8e7ba41d2143b52f748b2ee2ec31479a886f1ef2e816eff231f6a8e0d71d0b071a2638ac7f23b70b9cb70aa91413462c0e75fc8bc7aba8fce59dd087ab7952a90f2c8f7a82fd10a6cc8f8e3ac6490d8af67955e4b1dedc202eeba767396e8e47eeba10fcb593fc48e094", 0xd9}, {&(0x7f0000001e00)="29eac51032abf2a39aa615cb5eb47711e8c5ed1b75ccec58b1bad962f2b892fb1c1018994fb82638d9154714ff7927946157ebb567120ca084d78e0c179502afb8c4e9332c478d50545ad1ee9bbd38f9633ff38eed1411c3056a2bf7706e8f0aaf92726f506583186417a15bd9ba462bd77f836943c90e604f250c9f21f009eb2a090c15994aac49de591b642d84324b15b2e59b6a3f6ad140eb2fb63fe2d599f1c328a694ac4440e4fd1f5605edee6e1c7120424c031de62bc23b0dcdb70a4af8b63fe0861df176d03530953c9994e2d003cc4b4c50d8d9ce6baea4c8c259b9827a81ca29d412006970409b69b8fd", 0xef}, {&(0x7f0000001f00)="e23f065fd20eb4e21d4f8eb4bcd493a839d90e5bb78f4d6f9da029b9ca641a7ab633266c385591724d488a76f06563987deac7703334cf8199584241f9ab36da0b11", 0x42}, {&(0x7f0000001f80)="953d1c81c9bf7aab001578cf890c769c7de771d46452d949c5443a8438f137a70111cdf0324862806c9ae45e0b093db1a9a14cc68c84f54d1269c278599d4c2e9bbd404cb3f4950161abb75835b9a2db33e2bb165c92e2d76f7c310085a1b73d223873ff58e566d79e5b2d6c60fa0759c6bd2e30f5ef2084d62fea807e3f3c24c2cfa2f9abdd22ce013419e8f72411676c", 0x91}, {&(0x7f0000002040)="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", 0x1000}], 0x6, &(0x7f00000030c0)=[{0x88, 0x112, 0x0, "0df19d22015725fcbf467dcfc419e0629caae996ef34824d70dbf114177d48538ecb4f00f7632f4616a7b0908df25229539bfef76d5981730df48cc11922507a84923d01db7ddc0c8ff876e3e6b5ff81da7fe6dbcb25414dc6b0af6d98f101e24a01ae7b54cf5afb317d174d31929cacc3a9e2cae8"}, {0xb0, 0x1, 0x9, "0b93c18845d1c995ecf79b1bc1de6563239741e88248d7232f55c0d38d59c02c30cba3beaae13d5f2c0bc877993ec9c9f91f32880d27b9e5c4ccd8c8677a61eec7e0024a355b68b596f245fb1066b6935cb479069c76e339ba7c122b2ac69a04d8e133c21d1eb6719fa3a01ca5548083a6bfc644cffb708ce35d84891997909f99c78028bf1ce91d89b7fd3a4071e299ed4884db3158f1ab8d61d82fd2"}, {0xd0, 0x0, 0x2, "3506c66ea1c2199a0e644fc7595c0ebea4f0998839f4ac20b66f5dcfbb3be024af1787afd948e4722c835d6a93167fb312ef8d8309cda2f31609ef78b5b3976aaa064c68dced08e2a5bc544542405fe3eeebb10c832a99c1398c9c1d3e2a734318cd2362deb6224175ccd332deba94c41dc62964f72dbcbca90169ccb32c3bf1959b12b96ba9111719a710bd230e2d549258a38f5ff92fc7f1a9849a0ae6f052317b8bf618abeda9f2ad8325c9d06220192a3e4823b9936ae2f8db64b461"}, {0xc8, 0x114, 0x2, "6594202aa400fa3d4581815761399947309f69c2ccbe52a046b6f7dc22e522db372dc6c17d1ca2d342466f8e84ef73769ccc94fc7127a61a1408f35780cdace1ad63ea1eb7d68ad6392ae239a954a904574479451ef4bb984d4c70bef2497ba73af1803719d738b71c069cda644e25741f83f86a5c3039810a38eb4dca869c660cf76c8c229f49869e2c53bc43cd02205fed0fe310914156461e32c7b433bb26b38cb5efb93d22e09c9a4130576b783b64c54658c5"}, {0x28, 0x103, 0x5, "a271a982444b9a080617d6e9d8691a17aa"}], 0x2f8}}], 0x2, 0x48001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xd, 0x1, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000180)=""/198, 0x32, 0xc6, 0x1}, 0x20) 31.57435557s ago: executing program 2 (id=1246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, 0x0, 0x200008c0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100000004cf172dc0714000428bd3000"], 0x10}, 0x1, 0x0, 0x0, 0x4000880}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a010400000000000000000a0000010900010073797a3100000000400004803c0001800c0001007061796c6f6164002c000280080002400000000108000440000000fe080003400000002c080005400000001408000740000000010900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x20001}, 0x24000840) 31.561826328s ago: executing program 5 (id=1247): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8f}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x0, @private2, 0x6}}, [0x7, 0x2, 0x6, 0xb6, 0x8, 0xa68, 0x7, 0x4cfc, 0x6, 0x4, 0x80000001, 0x100000000, 0x7fffffffffffffff, 0x6, 0x30f1]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x2, 0x2, 0xb}, 0x10) 31.29163056s ago: executing program 2 (id=1248): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) epoll_create1(0xcd52dcdb6de9c7d3) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x1, 0x3], 0x2) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r4, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x4c}}, 0x884) 30.49743712s ago: executing program 5 (id=1249): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x3d, 0x3, 0xf0, 0xf2, 0x8, 0x6, 0x0, 0x40, 0xb, 0x6, 0x5, 0x7, 0x8}, 0xe) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x43c}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x5}, &(0x7f00000001c0)=0x8) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000200)=[0x657a, 0x9]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7ff}, 0x1c) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0x1}, &(0x7f0000000300)=0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000340)=0x2, 0x4) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f0000000740)={&(0x7f00000006c0)=[{&(0x7f0000000380)="bdcaf70ccad6ad813209ed35db831c11e41e762692240d2e43f21119c7cfdeec694b1388f28b651133504a80e89bf0a7f4946aac7deeb054539a0a50773c972b25397f34ab", 0x45}, {&(0x7f0000000400)="30d1e869491ca54de9e691b9830192b287d69d6b7c93cf5c8c2db6520b83275e08c0d42aa687f488acba1b445b1743c3e872190eb28557a4c366553515f1ccbc1d91f756492cd27a7ed333652bff4886f13627", 0x53}, {&(0x7f0000000480)="227c15f77f0a077f3dad8f83565a9e28d1c55043526c10e038dd81e34d073e3cee0739c9ef6d691b05326da37147806a33c745830db3234d64bb8ea8e2461345eda35dec6391016056ada1c72ffd2ae64ad5ba8a6202595255e1d59a60e8dbc09ffe75f383307e58d95ee0ef02a33d6d4becb48047a8f218492b1fa418fd42973d5cdf218dbd9a2f7357c32ca6a46a29c041121141c0b21aa1374a4c399323dadb44dee7ae6449bbd9ffba11a4", 0xad}, {&(0x7f0000000540)="4d86dbafc60818fc666067e4d1a99628b3d01b129ab4692844de4f6720446d4f13c6a76a24d21152fde5dec99c9974bdfaddc6e7d2b8682c83e1b44d232d83bfa6cb811fe043947631ddb8209c3f5d9cfb", 0x51}, {&(0x7f00000005c0)="62b0306280dd2a10dbf11e65d9280bda46d8e579b0697086968bf4a7fed5a5186b11539772ef90041b9b89546330d778a3acccc60c3823c9fc425ad22f10f24f911ba1ec4435e2f72639bc44655b40c203307ee5097ca40b2e0a103825eb8d2aa53849d638e755fe6248f96fb10ef394437870c90b031088b0302132fa9d5dafa32be51343c8055304ea", 0x8a}, {&(0x7f0000000680)="ddb881984868", 0x6}], 0x6, 0x7, 0x0, 0x4, 0xffffffffe725055e, 0x2, 0x7, 0x9}) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f00000007c0)={0x8ec, 0x401, 0x8, 0x6, 0x4, 0x0, 0xe}) r3 = accept$inet6(r0, &(0x7f0000000840)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000880)=0x1c) sendmsg(r0, &(0x7f0000000a00)={&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x3, 0x4, 0x4}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000940)="c12d515b0dd8b92944b13d13e830aa8fc05dc728975b5b61a913ce21e0f826962dadb99e99832aca1b1f466f2d4cade326b4bd1ae972356c09ca81e7dfc17a53bfcc0bafbc9299fffb66cd33e1fe762fdf96b61882", 0x55}], 0x1}, 0x54) sendto(r2, &(0x7f0000000a40)="63c7794acfd170e89a1730c4b863c91c1299a8bf47787a35da7e82b28dd8ed598f4f48a101db07c0107688b1f440452604fe3e81c7322fcb898f0a95a14c8b977caea828f19d3c82525c446b0e19b97b4fd35b4cce1ab37706eb11d58d4f8e537aa530feaeae7d6fbc6c", 0x6a, 0x40, &(0x7f0000000ac0)=@caif=@dbg={0x25, 0x9, 0xff}, 0x80) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) recvmmsg(r3, &(0x7f0000006740)=[{{&(0x7f0000000bc0)=@alg, 0x80, &(0x7f0000002080)=[{&(0x7f0000000c40)=""/233, 0xe9}, {&(0x7f0000000d40)=""/180, 0xb4}, {&(0x7f0000000e00)=""/122, 0x7a}, {&(0x7f0000000e80)=""/164, 0xa4}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/221, 0xdd}, {&(0x7f0000002040)=""/14, 0xe}], 0x7, &(0x7f0000002100)=""/98, 0x62}, 0x1}, {{&(0x7f0000002180)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002200)=""/122, 0x7a}, {&(0x7f0000002280)=""/112, 0x70}, {&(0x7f0000002300)=""/208, 0xd0}, {&(0x7f0000002400)=""/75, 0x4b}, {&(0x7f0000002480)=""/124, 0x7c}], 0x5, &(0x7f0000002580)=""/99, 0x63}, 0x53a}, {{&(0x7f0000002600)=@xdp, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000002680)=""/7, 0x7}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/132, 0x84}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/134, 0x86}, {&(0x7f0000004840)=""/49, 0x31}, {&(0x7f0000004880)=""/142, 0x8e}, {&(0x7f0000004940)=""/234, 0xea}, {&(0x7f0000004a40)=""/113, 0x71}], 0x9, &(0x7f0000004b80)=""/62, 0x3e}, 0x3}, {{&(0x7f0000004bc0)=@caif, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004c40)=""/31, 0x1f}, {&(0x7f0000004c80)=""/196, 0xc4}, {&(0x7f0000004d80)=""/202, 0xca}], 0x3, &(0x7f0000004ec0)=""/179, 0xb3}, 0xd}, {{&(0x7f0000004f80)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000005600)=[{&(0x7f0000005000)=""/205, 0xcd}, {&(0x7f0000005100)=""/126, 0x7e}, {&(0x7f0000005180)=""/235, 0xeb}, {&(0x7f0000005280)=""/64, 0x40}, {&(0x7f00000052c0)=""/168, 0xa8}, {&(0x7f0000005380)=""/3, 0x3}, {&(0x7f00000053c0)=""/217, 0xd9}, {&(0x7f00000054c0)=""/137, 0x89}, {&(0x7f0000005580)=""/105, 0x69}], 0x9, &(0x7f00000056c0)=""/57, 0x39}, 0x1}, {{&(0x7f0000005700)=@phonet, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005780)=""/252, 0xfc}, {&(0x7f0000005880)=""/4, 0x4}, {&(0x7f00000058c0)=""/252, 0xfc}, {&(0x7f00000059c0)=""/97, 0x61}, {&(0x7f0000005a40)=""/240, 0xf0}, {&(0x7f0000005b40)=""/65, 0x41}], 0x6, &(0x7f0000005c40)=""/74, 0x4a}, 0xffff}, {{&(0x7f0000005cc0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000006180)=[{&(0x7f0000005d40)=""/162, 0xa2}, {&(0x7f0000005e00)=""/132, 0x84}, {&(0x7f0000005ec0)=""/74, 0x4a}, {&(0x7f0000005f40)=""/55, 0x37}, {&(0x7f0000005f80)=""/213, 0xd5}, {&(0x7f0000006080)=""/206, 0xce}], 0x6, &(0x7f0000006200)=""/77, 0x4d}, 0x6}, {{&(0x7f0000006280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000006480)=[{&(0x7f0000006300)=""/242, 0xf2}, {&(0x7f0000006400)=""/91, 0x5b}], 0x2, &(0x7f00000064c0)=""/118, 0x76}, 0x5}, {{&(0x7f0000006540)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000006600)=[{&(0x7f00000065c0)=""/36, 0x24}], 0x1, &(0x7f0000006640)=""/198, 0xc6}, 0x1}], 0x9, 0x140, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_netdev_private(r5, 0x89f9, &(0x7f0000006980)="02e898f93225dbd64db67fcb50020c7b2b88a834a47a64c1a07fd7a8265d8d82ebf3bf5d195046d1d39a43a5dc4663ec621981a9e6d3eed2b55f70ed0eaf7c11352d68f7cb793a62ea34574f7849134470a0ed26f3ecba941709361d1172b9f2d8fc4d114b3be6ea7673ccb51ecdfa9948aa5cda3c54f9e00b8ef25e2598cad73533eac3c32c598b119700bc4554695ff63cac91bd60df8c59") r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000006a40)={0x3, 0x1, 0x2, 0x0, 0x0, [{{r2}, 0x80000000}, {{r0}, 0xd}]}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r7, 0x8932, &(0x7f0000006ac0)={'veth1_vlan\x00', @ifru_names}) ioctl$XFS_IOC_READLINK_BY_HANDLE(r7, 0xc038586c, &(0x7f0000006c00)={r3, &(0x7f0000006b00)='\x00', 0x2, &(0x7f0000006b40)={@align=0x1, {0x1, 0x8000, 0x3, 0x88a}}, 0x5, &(0x7f0000006b80)={@_ha_fsid}, &(0x7f0000006bc0)=0x9}) socket$netlink(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000006c40)=0x0, &(0x7f0000006c80)=0x4) sendmsg(r0, &(0x7f0000007f40)={&(0x7f0000006cc0)=@xdp={0x2c, 0x2, r8, 0x34}, 0x80, &(0x7f0000007dc0)=[{&(0x7f0000006d40)="5426ed5465fedf3217e095dfcc9e7cb3af8fea29903cb4c33a34b57efec93ee9660c51a45d5d74136bd26d45eba48359ad67eb849635cd1ffb3b377000750aad88135aa7a9d599e206d01eb5156265a9d407ef63aafa2c4287f701e3b5340e23d3df313e6a1eb4", 0x67}, {&(0x7f0000006dc0)="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", 0x1000}], 0x2, &(0x7f0000007e00)=[{0xa8, 0x84, 0x81, "3af197a5f685f39287446a5c09fdff595b2ccdaf8bbcffcb47ba78a81d9061aec4eadc7880275a2036f7d26ddcd8ab7ed1a7bc86d3634d3beae19b19239a212feabb515253fbf686ae0273b8a8bc9693162e1190e235866c54d72b770ceb373e1c3e3b39122dc7ad273b399e3c4796ba148c6b254a567bd5bf4aa0c0542c9f4c75d11104b3a5d302cd8702174aae9f18b78c87771c"}, {0x60, 0x117, 0x8, "466ed069b6918bc5ae57b9cea6657a1b243276393350293996b6d31c03f423fcb791e9cfeed56d98aac39d5c5486c30984f3ae63e9cc56a0edef32d029d782dc2384ca034ece8aef1b19fb"}, {0x30, 0x10a, 0x7fffffff, "c13639c723cb1f337ea3e9ff65b7defec6d57858e80b70ad5522b4"}], 0x138}, 0x4000000) ioctl$sock_ifreq(r0, 0x8926, &(0x7f0000007f80)={'macvtap0\x00', @ifru_map={0x8, 0x1000, 0x5, 0x7, 0x80, 0x81}}) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000007fc0)) connect$can_bcm(r4, &(0x7f0000008000), 0x10) 30.388861629s ago: executing program 4 (id=1250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000000000000000000000000001000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r2 = socket(0xa, 0x3, 0xff) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x1, 0xb5c, 0x5, 0x4, 0x7}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={r3, 0x1}, 0x8) (async) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000560000009500"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async, rerun: 64) recvmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x102, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000000206010006000006000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140000000000800064000000a0005000500020000000500010006000800"], 0x70}}, 0x0) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) 30.184856865s ago: executing program 4 (id=1251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '}'}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, 'ipip\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2080}, 0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000244012800900010069706970000000005400028005000a00010000000500050000000000"], 0x44}}, 0x0) 30.014066399s ago: executing program 3 (id=1252): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 29.944096871s ago: executing program 4 (id=1253): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4044800) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8850) socket$nl_route(0x10, 0x3, 0x0) close(r2) r4 = socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) 29.943497531s ago: executing program 2 (id=1254): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delroute={0x34, 0x19, 0x400, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x400}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_FLOW={0x8, 0xb, 0xfffffffe}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 29.94221354s ago: executing program 5 (id=1255): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000cc0)="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", 0x118) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) 29.677511977s ago: executing program 1 (id=1256): sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf2509000000080001000100000005000800000000001500070017000000080001000200000092158bb34e946fb3a8a5eace9aca25daf9b669b44d60b78ada1ebba6a10a92d6d22ecc46ac40c75a9b88b346fb94763f6d1d51457bb1f68b78"], 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000001c0)=@framed={{}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000004c0)='ns/uts\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 0s ago: executing program 33 (id=1255): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000cc0)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x5, @loopback, 0xa}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 71.221856][ T5606] cgroup: Unknown subsys name 'net' [ 71.332448][ T5606] cgroup: Unknown subsys name 'cpuset' [ 71.341440][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.605014][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.842411][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.850483][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.859715][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.868993][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.877931][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.886202][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.888025][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.889479][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.890167][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.916896][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.925674][ T4937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.926901][ T4937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.927298][ T4937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.928146][ T4937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.930752][ T4937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.950628][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.951678][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.958302][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.960003][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.961164][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.971111][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.973527][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.976043][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.987609][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.988361][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.654517][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.658910][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.659363][ T5630] bridge_slave_0: entered allmulticast mode [ 77.661154][ T5630] bridge_slave_0: entered promiscuous mode [ 77.687722][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.687838][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.687955][ T5621] bridge_slave_0: entered allmulticast mode [ 77.690868][ T5621] bridge_slave_0: entered promiscuous mode [ 77.724027][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.724134][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.724253][ T5630] bridge_slave_1: entered allmulticast mode [ 77.725938][ T5630] bridge_slave_1: entered promiscuous mode [ 77.756470][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.758791][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.758930][ T5621] bridge_slave_1: entered allmulticast mode [ 77.760637][ T5621] bridge_slave_1: entered promiscuous mode [ 77.778911][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.779007][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.779127][ T5617] bridge_slave_0: entered allmulticast mode [ 77.780789][ T5617] bridge_slave_0: entered promiscuous mode [ 77.831369][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.831553][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.831674][ T5617] bridge_slave_1: entered allmulticast mode [ 77.833257][ T5617] bridge_slave_1: entered promiscuous mode [ 77.839752][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.870282][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.902701][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.917360][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.959778][ T54] Bluetooth: hci2: command tx timeout [ 77.959782][ T4937] Bluetooth: hci0: command tx timeout [ 77.980078][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.980668][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.980811][ T5622] bridge_slave_0: entered allmulticast mode [ 77.982505][ T5622] bridge_slave_0: entered promiscuous mode [ 77.985502][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.985593][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.985704][ T5622] bridge_slave_1: entered allmulticast mode [ 77.987398][ T5622] bridge_slave_1: entered promiscuous mode [ 78.009292][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.012347][ T5630] team0: Port device team_slave_0 added [ 78.016221][ T5630] team0: Port device team_slave_1 added [ 78.022653][ T5621] team0: Port device team_slave_0 added [ 78.036272][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.036370][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.036484][ T5618] bridge_slave_0: entered allmulticast mode [ 78.038306][ T5618] bridge_slave_0: entered promiscuous mode [ 78.039014][ T4937] Bluetooth: hci1: command tx timeout [ 78.039183][ T4937] Bluetooth: hci4: command tx timeout [ 78.039656][ T4937] Bluetooth: hci3: command tx timeout [ 78.046059][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.097933][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.098040][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.098149][ T5618] bridge_slave_1: entered allmulticast mode [ 78.101578][ T5618] bridge_slave_1: entered promiscuous mode [ 78.132506][ T5621] team0: Port device team_slave_1 added [ 78.149010][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.163764][ T5617] team0: Port device team_slave_0 added [ 78.175531][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.175608][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.175631][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.180856][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.197329][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.200650][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.202697][ T5617] team0: Port device team_slave_1 added [ 78.230608][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.230623][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.230644][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.303760][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.303789][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.303811][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.307950][ T5622] team0: Port device team_slave_0 added [ 78.324125][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.324141][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.324162][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.327617][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.327631][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.327652][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.328715][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.328726][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.328746][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.364115][ T5622] team0: Port device team_slave_1 added [ 78.366377][ T5618] team0: Port device team_slave_0 added [ 78.494517][ T5618] team0: Port device team_slave_1 added [ 78.526034][ T5630] hsr_slave_0: entered promiscuous mode [ 78.527293][ T5630] hsr_slave_1: entered promiscuous mode [ 78.562711][ T5621] hsr_slave_0: entered promiscuous mode [ 78.563680][ T5621] hsr_slave_1: entered promiscuous mode [ 78.564320][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 78.564398][ T5621] Cannot create hsr debugfs directory [ 78.567617][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.567630][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.567651][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.568818][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.568829][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.568849][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.601364][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.601379][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.601401][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.612368][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.612384][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.612407][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.655520][ T5617] hsr_slave_0: entered promiscuous mode [ 78.659749][ T5617] hsr_slave_1: entered promiscuous mode [ 78.660464][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 78.660481][ T5617] Cannot create hsr debugfs directory [ 78.825964][ T5622] hsr_slave_0: entered promiscuous mode [ 78.826925][ T5622] hsr_slave_1: entered promiscuous mode [ 78.827542][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 78.827559][ T5622] Cannot create hsr debugfs directory [ 78.860065][ T5618] hsr_slave_0: entered promiscuous mode [ 78.867322][ T5618] hsr_slave_1: entered promiscuous mode [ 78.868410][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 78.868429][ T5618] Cannot create hsr debugfs directory [ 79.280665][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.294906][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.296749][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.306205][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.317823][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.328358][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.329300][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.340192][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.396923][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.408564][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.410762][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.420848][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.432243][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.441688][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.455114][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.464587][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.535625][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.549764][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.555065][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.566189][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.581279][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.590769][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.607348][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.616671][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.659353][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.720642][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.731573][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.732395][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.743940][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.746397][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.756665][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.760147][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.773277][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.821675][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.857782][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.858225][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.887968][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.888066][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.921512][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.933883][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.934681][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.945249][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.960535][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.970213][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.973204][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.981048][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.015613][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.039341][ T54] Bluetooth: hci0: command tx timeout [ 80.039385][ T54] Bluetooth: hci2: command tx timeout [ 80.089671][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.103347][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.114716][ T259] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.114813][ T259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.122460][ T4937] Bluetooth: hci3: command tx timeout [ 80.122495][ T4937] Bluetooth: hci1: command tx timeout [ 80.122495][ T54] Bluetooth: hci4: command tx timeout [ 80.174554][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.174688][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.234167][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.264229][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.264329][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.311406][ T259] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.311498][ T259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.316360][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.431839][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.463668][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.463759][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.497514][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.527635][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.527741][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.643566][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.669895][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.670020][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.710551][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.710651][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.115191][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.291190][ T5630] veth0_vlan: entered promiscuous mode [ 81.329806][ T5630] veth1_vlan: entered promiscuous mode [ 81.472747][ T5630] veth0_macvtap: entered promiscuous mode [ 81.513388][ T5630] veth1_macvtap: entered promiscuous mode [ 81.567388][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.603210][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.634010][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.731174][ T284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.760573][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.848883][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.849768][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.849806][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.859962][ T5617] veth0_vlan: entered promiscuous mode [ 81.895916][ T5617] veth1_vlan: entered promiscuous mode [ 81.916252][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.068250][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.107830][ T5617] veth0_macvtap: entered promiscuous mode [ 82.119265][ T54] Bluetooth: hci2: command tx timeout [ 82.124633][ T5623] Bluetooth: hci0: command tx timeout [ 82.137376][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.137419][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.169313][ T5617] veth1_macvtap: entered promiscuous mode [ 82.199478][ T54] Bluetooth: hci3: command tx timeout [ 82.209671][ T54] Bluetooth: hci4: command tx timeout [ 82.209683][ T5623] Bluetooth: hci1: command tx timeout [ 82.253490][ T5622] veth0_vlan: entered promiscuous mode [ 82.309212][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.309249][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.330817][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.348471][ T5622] veth1_vlan: entered promiscuous mode [ 82.385296][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.431762][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.508431][ T5618] veth0_vlan: entered promiscuous mode [ 82.561284][ T5808] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 82.575595][ T5618] veth1_vlan: entered promiscuous mode [ 82.599432][ T5622] veth0_macvtap: entered promiscuous mode [ 82.608909][ T284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.609769][ T284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.609811][ T284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.609848][ T284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.653618][ T5621] veth0_vlan: entered promiscuous mode [ 82.654627][ T5622] veth1_macvtap: entered promiscuous mode [ 82.715478][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.715524][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.725987][ T5621] veth1_vlan: entered promiscuous mode [ 82.814366][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.814401][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.834143][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.850744][ T5618] veth0_macvtap: entered promiscuous mode [ 82.866570][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.915105][ T5618] veth1_macvtap: entered promiscuous mode [ 82.946454][ T5812] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 82.964801][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.975317][ T5621] veth0_macvtap: entered promiscuous mode [ 82.997702][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.056724][ T5621] veth1_macvtap: entered promiscuous mode [ 83.094868][ T5815] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.109109][ T284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.258446][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.259294][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.260895][ T4353] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.260931][ T4353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.260962][ T4353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.260994][ T4353] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.261030][ T4353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.302513][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.340236][ T5821] netlink: 'syz.2.8': attribute type 4 has an invalid length. [ 83.351066][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.351111][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.432615][ T4353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.432720][ T4353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.432749][ T4353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.432780][ T4353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.432812][ T4353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.435500][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.435516][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.591677][ T5828] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 83.597677][ T259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.597694][ T259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.675311][ T284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.675348][ T284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.776144][ T259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.776184][ T259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.923798][ T5834] netlink: 512 bytes leftover after parsing attributes in process `syz.0.13'. [ 83.938268][ T5833] netlink: 512 bytes leftover after parsing attributes in process `syz.0.13'. [ 83.951259][ T284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.951300][ T284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.004316][ T5837] SET target dimension over the limit! [ 84.062050][ T5833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 84.062725][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13'. [ 84.156072][ T5839] veth1_to_bond: entered allmulticast mode [ 84.199761][ T54] Bluetooth: hci2: command tx timeout [ 84.205431][ T54] Bluetooth: hci0: command tx timeout [ 84.279098][ T5623] Bluetooth: hci4: command tx timeout [ 84.279146][ T5623] Bluetooth: hci3: command tx timeout [ 84.279209][ T54] Bluetooth: hci1: command tx timeout [ 84.417696][ T5847] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 84.470166][ T5852] sctp: [Deprecated]: syz.2.18 (pid 5852) Use of int in max_burst socket option. [ 84.470166][ T5852] Use struct sctp_assoc_value instead [ 84.489625][ T5847] bond1 (unregistering): Released all slaves [ 84.500004][ T5849] Zero length message leads to an empty skb [ 84.719413][ T5859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 84.881974][ T5866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.895305][ T5867] netlink: 88 bytes leftover after parsing attributes in process `syz.0.19'. [ 85.004459][ T5838] veth1_to_bond: left allmulticast mode [ 85.009246][ T5875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 85.391437][ T5884] netlink: 52 bytes leftover after parsing attributes in process `syz.1.29'. [ 85.391487][ T5884] netlink: 52 bytes leftover after parsing attributes in process `syz.1.29'. [ 85.741494][ T5900] Bluetooth: MGMT ver 1.23 [ 86.028564][ T5914] netlink: 'syz.4.39': attribute type 29 has an invalid length. [ 86.115934][ T30] audit: type=1800 audit(1788620796.244:2): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.41" name="memory.events" dev="tmpfs" ino=63 res=0 errno=0 [ 86.164427][ T30] audit: type=1804 audit(1788620796.294:3): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.41" name="/newroot/9/memory.events" dev="tmpfs" ino=63 res=1 errno=0 [ 86.217957][ T5930] ipt_REJECT: TCP_RESET invalid for non-tcp [ 86.347963][ T5917] bridge_slave_0: left allmulticast mode [ 86.348007][ T5917] bridge_slave_0: left promiscuous mode [ 86.348914][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.417336][ T5917] bridge_slave_1: left allmulticast mode [ 86.417386][ T5917] bridge_slave_1: left promiscuous mode [ 86.417905][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.453391][ T5917] bond0: (slave bond_slave_0): Releasing backup interface [ 86.480868][ T5917] bond0: (slave bond_slave_1): Releasing backup interface [ 86.510722][ T5917] team0: Port device team_slave_0 removed [ 86.525600][ T5917] team0: Port device team_slave_1 removed [ 86.532689][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.540524][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.552479][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.560874][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.573347][ T5917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 86.573501][ T5927] tipc: Started in network mode [ 86.573531][ T5927] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 86.575141][ T5927] tipc: Enabled bearer , priority 0 [ 86.585870][ T5926] team0: Port device xfrm0 added [ 86.593364][ T5939] netlink: 'syz.2.46': attribute type 4 has an invalid length. [ 86.647537][ T5937] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20004 [ 86.761213][ T50] cfg80211: failed to load regulatory.db [ 86.880166][ T5950] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 86.951127][ T5956] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 86.986781][ T5958] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 87.270762][ T5972] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 87.301083][ T5972] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 87.665232][ T5994] netlink: 'syz.1.60': attribute type 32 has an invalid length. [ 87.673643][ T44] tipc: Node number set to 11578026 [ 87.833949][ T6006] batman_adv: batadv0: Adding interface: veth0 [ 87.833981][ T6006] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.834006][ T6006] batman_adv: batadv0: Interface activated: veth0 [ 87.852766][ T6004] syzkaller0: entered promiscuous mode [ 87.852787][ T6004] syzkaller0: entered allmulticast mode [ 87.859336][ T6006] batman_adv: batadv0: Interface deactivated: veth0 [ 87.942289][ T6006] batman_adv: batadv0: Removing interface: veth0 [ 88.429728][ T6027] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 88.568187][ T6044] netlink: 'syz.4.74': attribute type 12 has an invalid length. [ 88.568231][ T6044] __nla_validate_parse: 86 callbacks suppressed [ 88.568777][ T6044] netlink: 132 bytes leftover after parsing attributes in process `syz.4.74'. [ 88.754888][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 88.772877][ T6057] bond0: entered allmulticast mode [ 88.772919][ T6057] bond_slave_0: entered allmulticast mode [ 88.772936][ T6057] bond_slave_1: entered allmulticast mode [ 88.851842][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 89.540844][ T6100] batman_adv: batadv0: Adding interface: veth0 [ 89.540882][ T6100] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.540913][ T6100] batman_adv: batadv0: Interface activated: veth0 [ 89.852129][ T6111] netlink: 'syz.1.88': attribute type 11 has an invalid length. [ 89.887297][ T6110] IPVS: persistence engine module ip_vs_pe_À not found [ 90.077410][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.94'. [ 90.112359][ T6126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.112686][ T6126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.112907][ T6126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.125099][ T6126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.125334][ T6126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.190803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.192153][ T6135] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 90.192267][ T6135] Cannot find add_set index 0 as target [ 90.317113][ T6124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.458072][ T6149] netlink: 240 bytes leftover after parsing attributes in process `syz.1.99'. [ 90.563772][ T6151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 90.682280][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.700820][ T6157] netlink: 28 bytes leftover after parsing attributes in process `syz.4.103'. [ 90.971237][ T6166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 91.017416][ T6172] netlink: 'syz.1.108': attribute type 33 has an invalid length. [ 91.584764][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 91.596201][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 91.596474][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 91.654561][ T6217] netlink: 'syz.0.118': attribute type 21 has an invalid length. [ 91.723461][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.795260][ T6222] netlink: 'syz.0.120': attribute type 2 has an invalid length. [ 91.866924][ T6224] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 91.928129][ T6225] x_tables: duplicate underflow at hook 1 [ 93.993823][ T6172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.121280][ T6227] ip6t_frag: unknown flags 6 [ 94.379398][ T6240] __nla_validate_parse: 34 callbacks suppressed [ 94.388944][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.127'. [ 94.777407][ T6263] netlink: 'syz.4.133': attribute type 2 has an invalid length. [ 95.005707][ T6278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.140'. [ 95.073923][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz.1.140'. [ 95.190512][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 95.201932][ T6286] block nbd0: Unsupported socket: should be TCP or UNIX. [ 95.256189][ T6289] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 95.288042][ T6290] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 95.310859][ T6290] netlink: 156 bytes leftover after parsing attributes in process `syz.0.142'. [ 95.349299][ T6289] 8021q: adding VLAN 0 to HW filter on device bond3 [ 95.420612][ T6289] bond3: (slave geneve2): making interface the new active one [ 95.434924][ T6289] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 95.724756][ T50] net_ratelimit: 93 callbacks suppressed [ 95.724816][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.815625][ T6324] netlink: 'syz.1.153': attribute type 21 has an invalid length. [ 95.823611][ T6324] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.842766][ T6324] macvtap1: entered promiscuous mode [ 95.843260][ T6324] macvtap1: entered allmulticast mode [ 95.843277][ T6324] veth1_vlan: entered allmulticast mode [ 95.945781][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 96.705368][ T6367] syz_tun: entered allmulticast mode [ 96.762009][ T6367] dvmrp8: entered allmulticast mode [ 96.768643][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.779308][ T6366] syz_tun: left allmulticast mode [ 96.888192][ T6370] syzkaller0: entered promiscuous mode [ 96.888234][ T6370] syzkaller0: entered allmulticast mode [ 96.900573][ T6374] netlink: 'syz.1.169': attribute type 1 has an invalid length. [ 97.258463][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 97.311408][ T6412] Cannot find add_set index 65532 as target [ 97.366386][ T6412] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 97.800023][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.840168][ T6436] netlink: 140 bytes leftover after parsing attributes in process `syz.0.185'. [ 98.014023][ T6440] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 98.717344][ T6479] netlink: 'syz.4.198': attribute type 83 has an invalid length. [ 98.720753][ T6482] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'. [ 98.724429][ T6482] netlink: 9152 bytes leftover after parsing attributes in process `syz.1.199'. [ 98.839384][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.896687][ T6496] Cannot find set identified by id 0 to match [ 98.901501][ T6492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 98.940715][ T6497] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 99.331802][ T6513] bond0: entered promiscuous mode [ 99.331847][ T6513] bond_slave_0: entered promiscuous mode [ 99.332039][ T6513] bond_slave_1: entered promiscuous mode [ 99.332193][ T6513] bond0: left allmulticast mode [ 99.332205][ T6513] bond_slave_0: left allmulticast mode [ 99.332217][ T6513] bond_slave_1: left allmulticast mode [ 99.597216][ T6520] openvswitch: netlink: Missing key (keys=40, expected=100) [ 99.856342][ T6529] syzkaller0: entered promiscuous mode [ 99.856386][ T6529] syzkaller0: entered allmulticast mode [ 99.880339][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.903554][ T6529] warning: `syz.4.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.357378][ T6549] syzkaller1: entered promiscuous mode [ 100.365409][ T6549] syzkaller1: entered allmulticast mode [ 100.672819][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 100.750517][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.225'. [ 100.841040][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.841239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.922288][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.013051][ T6583] ipvlan2: entered allmulticast mode [ 101.013095][ T6583] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 101.035185][ T6583] batman_adv: batadv0: Adding interface: ipvlan2 [ 101.044168][ T6583] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.044230][ T6583] batman_adv: batadv0: Interface activated: ipvlan2 [ 101.082558][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 101.082611][ T6589] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 101.082636][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 101.121498][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 101.121552][ T6589] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 101.121566][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 101.122156][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 101.122176][ T6589] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 101.122188][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 101.130331][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 101.130357][ T6589] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 101.130370][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'. [ 101.130941][ T6589] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 101.135662][ T6589] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 101.958917][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.009261][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.398985][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.399158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.831677][ T6579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.038842][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.790635][ T6650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.856757][ T6650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.964558][ T6668] xt_cgroup: no path or classid specified [ 105.062168][ T6677] netlink: 'syz.1.254': attribute type 4 has an invalid length. [ 105.222685][ T6682] netlink: 'syz.0.255': attribute type 16 has an invalid length. [ 105.419720][ T6690] tipc: Started in network mode [ 105.425658][ T6690] tipc: Node identity 080211, cluster identity 4711 [ 105.439943][ T6690] tipc: Enabled bearer , priority 0 [ 105.471752][ T6696] tipc: Enabling of bearer rejected, already enabled [ 105.591367][ T6688] raw_sendmsg: syz.4.257 forgot to set AF_INET. Fix it! [ 105.798431][ T6719] __nla_validate_parse: 8 callbacks suppressed [ 105.798478][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.263'. [ 106.002250][ T6730] netlink: 68 bytes leftover after parsing attributes in process `syz.0.266'. [ 106.069903][ T6733] ip6t_srh: unknown srh invflags 4000 [ 106.119109][ T3106] net_ratelimit: 72 callbacks suppressed [ 106.119157][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.313539][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.275'. [ 106.328263][ T6750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.328483][ T6750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.346289][ T6750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.346487][ T6750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.347150][ T6750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.347313][ T6750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.347468][ T6750] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 106.407505][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.409303][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.591874][ T5743] tipc: Node number set to 134353152 [ 106.700090][ T6771] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 107.078819][ T54] Bluetooth: hci0: command tx timeout [ 107.148260][ T6790] bond4: option all_slaves_active: invalid value (222) [ 107.159198][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.183059][ T6790] bond4 (unregistering): Released all slaves [ 107.250948][ T6795] bond4: option all_slaves_active: invalid value (222) [ 107.267726][ T6795] bond4 (unregistering): Released all slaves [ 107.409838][ T6798] netlink: 'syz.0.287': attribute type 2 has an invalid length. [ 107.433713][ T6814] netlink: 'syz.4.288': attribute type 2 has an invalid length. [ 107.453458][ T6818] netlink: 'syz.4.288': attribute type 2 has an invalid length. [ 107.522293][ T6798] : entered promiscuous mode [ 107.669997][ T6826] netlink: 'syz.0.291': attribute type 39 has an invalid length. [ 107.697667][ T30] audit: type=1800 audit(1788620817.824:4): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.292" name="memory.events" dev="tmpfs" ino=321 res=0 errno=0 [ 107.883963][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.884160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.199669][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.212128][ T6852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.214312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.374601][ T6860] tipc: Started in network mode [ 108.374635][ T6860] tipc: Node identity , cluster identity 4711 [ 108.374665][ T6860] tipc: Failed to obtain node identity [ 108.374696][ T6860] tipc: Enabling of bearer rejected, failed to enable media [ 108.529459][ T1167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.529816][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.635026][ T6860] syzkaller0: entered promiscuous mode [ 108.635068][ T6860] syzkaller0: entered allmulticast mode [ 110.763462][ T6906] tipc: Enabling of bearer rejected, failed to enable media [ 111.128907][ T6936] net_ratelimit: 7 callbacks suppressed [ 111.128952][ T6936] openvswitch: netlink: Flow key attribute not present in set flow. [ 111.166014][ T6934] Cannot find add_set index 4 as target [ 111.320234][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.458158][ T6950] batadv_slave_0: entered promiscuous mode [ 111.463405][ T6950] __nla_validate_parse: 62 callbacks suppressed [ 111.463422][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 111.553040][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.322'. [ 111.567681][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 111.636242][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.318'. [ 111.900481][ T6974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.327'. [ 111.949331][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 112.296781][ T6973] team0 (unregistering): Port device team_slave_0 removed [ 112.333241][ T6973] team0 (unregistering): Port device team_slave_1 removed [ 112.369131][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.411486][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 112.420800][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 112.427797][ T6993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.451827][ T6970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.731498][ T7004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.889366][ T7016] x_tables: duplicate underflow at hook 1 [ 113.106090][ T7023] openvswitch: netlink: Key type 6676 is out of range max 32 [ 113.206950][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 113.398924][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.554333][ T7048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.346'. [ 114.285221][ T284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.285614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.286257][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.820740][ T7095] xt_l2tp: missing protocol rule (udp|l2tpip) [ 115.029965][ T7106] syzkaller1: entered promiscuous mode [ 115.035559][ T7106] syzkaller1: entered allmulticast mode [ 115.309484][ T7110] xt_CT: No such helper "netbios-ns" [ 115.554685][ T7134] netlink: 'syz.1.370': attribute type 1 has an invalid length. [ 115.668126][ T7134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.813812][ T7134] bond1: (slave geneve2): making interface the new active one [ 115.830828][ T7134] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 116.519322][ T5741] net_ratelimit: 5 callbacks suppressed [ 116.519367][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.550217][ T7195] __nla_validate_parse: 10 callbacks suppressed [ 116.550264][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 116.799592][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 116.857675][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 116.957344][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 116.989519][ T61] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.990153][ T61] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.990187][ T61] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.990216][ T61] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.006060][ T7213] netlink: 64 bytes leftover after parsing attributes in process `syz.1.391'. [ 117.064240][ T7213] syzkaller1: entered promiscuous mode [ 117.064267][ T7213] syzkaller1: entered allmulticast mode [ 117.385025][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 117.395808][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 117.407565][ T7254] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 117.407608][ T7254] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 117.408418][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 117.408968][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 117.409130][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 117.480901][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.481084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.560547][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.268861][ T7303] netlink: 'syz.3.418': attribute type 21 has an invalid length. [ 118.390493][ T7299] bond4: entered promiscuous mode [ 118.398775][ T7299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.563937][ T7313] veth1: entered allmulticast mode [ 118.581142][ T7313] veth1: entered promiscuous mode [ 118.591368][ T7313] bond4: (slave veth1): Enslaving as an active interface with an up link [ 118.600248][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.682803][ T7311] veth3: entered allmulticast mode [ 118.687394][ T7311] veth3: entered promiscuous mode [ 118.688043][ T7311] bond4: (slave veth3): Enslaving as an active interface with an up link [ 118.696880][ T7304] syzkaller1: entered promiscuous mode [ 118.696898][ T7304] syzkaller1: entered allmulticast mode [ 118.926183][ T7328] openvswitch: netlink: Key type 6676 is out of range max 32 [ 119.020636][ T7338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.020862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.098242][ T4396] IPVS: starting estimator thread 0... [ 119.188713][ T7341] IPVS: using max 31 ests per chain, 74400 per kthread [ 119.191984][ T7349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.489371][ T7363] xt_socket: unknown flags 0x8 [ 119.638843][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.978434][ T7391] vlan3: entered allmulticast mode [ 119.984960][ T7391] bond0: entered allmulticast mode [ 119.990321][ T7391] bond_slave_0: entered allmulticast mode [ 119.996134][ T7391] bond_slave_1: entered allmulticast mode [ 121.191005][ T7461] xt_addrtype: ipv6 does not support BROADCAST matching [ 121.662744][ T7485] __nla_validate_parse: 28 callbacks suppressed [ 121.662788][ T7485] netlink: 108 bytes leftover after parsing attributes in process `syz.0.468'. [ 121.715123][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 121.726335][ T44] net_ratelimit: 7 callbacks suppressed [ 121.726378][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.769697][ T61] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.769760][ T61] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.769787][ T61] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.769811][ T61] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.889061][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 121.922475][ T7503] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 121.932549][ T7503] xt_l2tp: invalid flags combination: 8 [ 121.958901][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.959095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.133746][ T7508] openvswitch: netlink: Key type 6676 is out of range max 32 [ 122.466361][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 122.476288][ T7526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.503382][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 122.508117][ T7529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.486'. [ 122.556545][ T7530] netlink: zone id is out of range [ 122.556619][ T7530] netlink: zone id is out of range [ 122.556625][ T7530] netlink: zone id is out of range [ 122.556643][ T7530] netlink: zone id is out of range [ 122.556650][ T7530] netlink: zone id is out of range [ 122.702413][ T7528] syz.4.486 (7528) used greatest stack depth: 18312 bytes left [ 122.708067][ T7529] syz.4.486 (7529) used greatest stack depth: 18088 bytes left [ 123.407719][ T7539] netlink: 'syz.1.488': attribute type 29 has an invalid length. [ 123.407867][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 123.439432][ T7542] tipc: Can't bind to reserved service type 1 [ 123.441019][ T7539] netlink: 'syz.1.488': attribute type 3 has an invalid length. [ 123.575751][ T7542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.489'. [ 123.600296][ T7553] xt_recent: Unsupported userspace flags (000000b1) [ 123.639817][ T4937] Bluetooth: hci4: command 0x0405 tx timeout [ 124.017767][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 124.509270][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 125.099632][ T7634] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 125.239112][ T7634] bond1: entered promiscuous mode [ 125.239670][ T7634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.289983][ T7634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.300864][ T7634] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 125.301131][ T7634] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 125.322593][ T7634] bond1: (slave ip6gre1): making interface the new active one [ 125.322617][ T7634] ip6gre1: entered promiscuous mode [ 125.346162][ T7634] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 125.728879][ T7669] netlink: 'syz.4.525': attribute type 1 has an invalid length. [ 125.867703][ T7676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.639145][ T7706] netlink: 'syz.0.536': attribute type 1 has an invalid length. [ 126.861934][ T7717] __nla_validate_parse: 9 callbacks suppressed [ 126.870131][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 126.919248][ T5741] net_ratelimit: 34 callbacks suppressed [ 126.919296][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.996775][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 127.355569][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'. [ 127.450450][ T7737] tipc: Failed to remove unknown binding: 66,1,1/11578026:1229014523/1229014525 [ 127.961743][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.972714][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'. [ 127.972784][ T7753] netlink: 'syz.4.550': attribute type 7 has an invalid length. [ 127.972802][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.4.550'. [ 128.351009][ T7776] netlink: 'syz.2.556': attribute type 15 has an invalid length. [ 128.593352][ T7784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.742443][ T7791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 128.774188][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'. [ 129.014969][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.015169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.015474][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.127297][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'. [ 129.127356][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.564'. [ 129.209083][ T7805] dvmrp8: entered allmulticast mode [ 129.213024][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 129.692855][ T7832] FAULT_INJECTION: forcing a failure. [ 129.692855][ T7832] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.708405][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.3.570 Not tainted syzkaller #0 PREEMPT(full) [ 129.708429][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 129.708447][ T7832] Call Trace: [ 129.708457][ T7832] [ 129.708465][ T7832] dump_stack_lvl+0xe8/0x150 [ 129.708506][ T7832] should_fail_ex+0x410/0x560 [ 129.708539][ T7832] _copy_from_iter+0x1d3/0x1660 [ 129.708566][ T7832] ? rcu_is_watching+0x16/0xb0 [ 129.708585][ T7832] ? __kasan_check_byte+0x12/0x40 [ 129.708609][ T7832] ? __lock_acquire+0x6df/0x2e50 [ 129.708628][ T7832] ? __pfx__copy_from_iter+0x10/0x10 [ 129.708652][ T7832] ? check_path+0x21/0x40 [ 129.708671][ T7832] ? check_noncircular+0xdb/0x150 [ 129.708707][ T7832] tun_get_user+0x52f/0x44d0 [ 129.708747][ T7832] ? aa_file_perm+0x18b/0x15f0 [ 129.708772][ T7832] ? aa_file_perm+0x4ed/0x15f0 [ 129.708792][ T7832] ? __pfx_tun_get_user+0x10/0x10 [ 129.708820][ T7832] ? __lock_acquire+0x6df/0x2e50 [ 129.708840][ T7832] ? kstrtoull+0x137/0x1d0 [ 129.708872][ T7832] ? ref_tracker_alloc+0x341/0x4b0 [ 129.708889][ T7832] ? lock_acquire+0x115/0x350 [ 129.708907][ T7832] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.708928][ T7832] ? lock_acquire+0x115/0x350 [ 129.708946][ T7832] ? tun_get+0x1c/0x2f0 [ 129.708975][ T7832] ? tun_get+0x1c/0x2f0 [ 129.708999][ T7832] ? tun_get+0x1c/0x2f0 [ 129.709027][ T7832] tun_chr_write_iter+0x113/0x200 [ 129.709055][ T7832] vfs_write+0x612/0xba0 [ 129.709088][ T7832] ? __pfx_vfs_write+0x10/0x10 [ 129.709130][ T7832] ? __fget_files+0x2a/0x420 [ 129.709163][ T7832] ksys_write+0x150/0x270 [ 129.709190][ T7832] ? __pfx_ksys_write+0x10/0x10 [ 129.709226][ T7832] do_syscall_64+0x166/0x520 [ 129.709252][ T7832] ? trace_irq_disable+0x3b/0x140 [ 129.709269][ T7832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.709287][ T7832] ? clear_bhb_loop+0x70/0xc0 [ 129.709310][ T7832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.709328][ T7832] RIP: 0033:0x7f306559e159 [ 129.709351][ T7832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.709369][ T7832] RSP: 002b:00007f30663b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.709392][ T7832] RAX: ffffffffffffffda RBX: 00007f3065825fa0 RCX: 00007f306559e159 [ 129.709405][ T7832] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 129.709416][ T7832] RBP: 00007f30663b8090 R08: 0000000000000000 R09: 0000000000000000 [ 129.709428][ T7832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.709438][ T7832] R13: 00007f3065826038 R14: 00007f3065825fa0 R15: 00007ffd71d217e8 [ 129.709467][ T7832] [ 130.039243][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.445940][ T7867] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 130.709442][ T7878] geneve2: entered promiscuous mode [ 130.717577][ T7878] geneve2: entered allmulticast mode [ 130.728951][ T284] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 130.729635][ T284] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 130.729690][ T284] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 130.747438][ T206] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 130.872871][ T7888] veth0: entered promiscuous mode [ 130.919720][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.919982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.137343][ T7894] syzkaller1: entered promiscuous mode [ 131.137370][ T7894] syzkaller1: entered allmulticast mode [ 131.200621][ T7887] veth0: left promiscuous mode [ 131.445885][ T7967] macvtap2: entered promiscuous mode [ 131.445925][ T7967] macvtap2: entered allmulticast mode [ 132.054994][ T8017] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 132.120853][ T44] net_ratelimit: 3 callbacks suppressed [ 132.120897][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.134584][ T8017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.288249][ T8023] netlink: 'syz.0.602': attribute type 39 has an invalid length. [ 132.426645][ T8027] __nla_validate_parse: 6 callbacks suppressed [ 132.427097][ T8026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.427329][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 132.434858][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.603'. [ 132.434878][ T8027] netlink: 176 bytes leftover after parsing attributes in process `syz.3.603'. [ 132.434919][ T8027] netlink: 'syz.3.603': attribute type 5 has an invalid length. [ 132.846660][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.146665][ T8065] netlink: 'syz.2.614': attribute type 1 has an invalid length. [ 133.156038][ T8065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.614'. [ 133.156084][ T8065] netlink: 5 bytes leftover after parsing attributes in process `syz.2.614'. [ 133.170667][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.817951][ T7754] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 133.826271][ T8050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.930875][ T8077] netlink: 36 bytes leftover after parsing attributes in process `syz.1.617'. [ 133.930925][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.617'. [ 134.091098][ T284] IPVS: starting estimator thread 0... [ 134.135033][ T8086] netlink: 180 bytes leftover after parsing attributes in process `syz.4.618'. [ 134.189629][ T8085] IPVS: using max 36 ests per chain, 86400 per kthread [ 134.209120][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.443933][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.621'. [ 134.450471][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 135.145979][ T8114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.249116][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.399453][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.605197][ T8130] smc: net device team0 applied user defined pnetid SYZ2 [ 135.795285][ T8139] netlink: Only one type of NAT may be specified [ 135.795339][ T8139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.039549][ T3106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.112162][ T8158] netlink: 'syz.4.640': attribute type 2 has an invalid length. [ 136.724771][ T8187] tipc: Enabling of bearer rejected, failed to enable media [ 137.172000][ T8223] syzkaller0: entered promiscuous mode [ 137.172043][ T8223] syzkaller0: entered allmulticast mode [ 137.243498][ T8225] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 137.342108][ T8231] netlink: 'syz.2.667': attribute type 1 has an invalid length. [ 137.416704][ T8235] tipc: Enabling of bearer rejected, failed to enable media [ 137.466002][ T8231] __nla_validate_parse: 9 callbacks suppressed [ 137.466048][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 137.525051][ T8231] bond5: (slave geneve3): making interface the new active one [ 137.532717][ T8231] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 137.534353][ T8236] ip6gre0: entered promiscuous mode [ 137.537879][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 137.541499][ T8236] tipc: Enabling of bearer rejected, media not registered [ 137.543887][ T61] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 137.543926][ T61] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 137.543957][ T61] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 137.543988][ T61] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 137.709932][ T8248] netlink: 'syz.3.673': attribute type 34 has an invalid length. [ 137.717870][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 137.744748][ T8246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 137.755406][ T8246] net_ratelimit: 4 callbacks suppressed [ 137.763351][ T8246] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 137.768242][ T8248] bond2: option lacp_strict: invalid value (178) [ 137.772912][ T8248] bond2 (unregistering): Released all slaves [ 138.247637][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 138.703838][ T8311] sctp: [Deprecated]: syz.2.688 (pid 8311) Use of int in maxseg socket option. [ 138.703838][ T8311] Use struct sctp_assoc_value instead [ 138.720291][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 138.834403][ T8320] netlink: Failed to add  helper -22 [ 138.834474][ T8320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.988293][ T8333] netlink: 20 bytes leftover after parsing attributes in process `syz.0.694'. [ 139.464544][ T8361] netlink: 68 bytes leftover after parsing attributes in process `syz.3.703'. [ 139.501035][ T8364] netlink: 56 bytes leftover after parsing attributes in process `syz.2.704'. [ 139.527812][ T8364] bond6 (unregistering): Released all slaves [ 140.502103][ T8418] syzkaller0: entered promiscuous mode [ 140.502136][ T8418] syzkaller0: entered allmulticast mode [ 140.627126][ T8422] netlink: 'syz.4.719': attribute type 39 has an invalid length. [ 142.771386][ T8384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.093559][ T8440] netlink: 40 bytes leftover after parsing attributes in process `syz.1.722'. [ 143.111252][ T8429] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 143.125755][ T8439] bridge0: port 3(vlan0) entered blocking state [ 143.125864][ T8439] bridge0: port 3(vlan0) entered disabled state [ 143.125987][ T8439] vlan0: entered allmulticast mode [ 143.126000][ T8439] geneve0: entered allmulticast mode [ 143.131014][ T8439] vlan0: entered promiscuous mode [ 143.131032][ T8439] geneve0: entered promiscuous mode [ 143.176891][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.722'. [ 143.201859][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'. [ 143.373160][ T8450] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 143.615195][ T8453] veth5: entered allmulticast mode [ 143.615819][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.729'. [ 143.746997][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.732'. [ 143.756807][ T8463] x_tables: duplicate underflow at hook 1 [ 143.806173][ T8463] dvmrp0: entered allmulticast mode [ 143.852525][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 143.946058][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'. [ 143.957041][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 143.974241][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'. [ 143.974293][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 144.002059][ T8465] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 144.002104][ T8465] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 144.029029][ T8479] SET target dimension over the limit! [ 144.271679][ T8493] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 144.497582][ T8509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.687722][ T51] IPVS: starting estimator thread 0... [ 144.705102][ T8525] netlink: 'syz.4.750': attribute type 10 has an invalid length. [ 144.779523][ T8526] IPVS: using max 32 ests per chain, 76800 per kthread [ 145.258395][ T8554] nftables ruleset with unbound chain [ 145.674043][ T8577] TCP: TCP_TX_DELAY enabled [ 145.683701][ T8580] netlink: 'syz.0.767': attribute type 8 has an invalid length. [ 145.700435][ T30] audit: type=1800 audit(1788620855.834:5): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.766" name="memory.events" dev="tmpfs" ino=897 res=0 errno=0 [ 145.763549][ T30] audit: type=1804 audit(1788620855.884:6): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.766" name="/newroot/172/memory.events" dev="tmpfs" ino=897 res=1 errno=0 [ 146.004595][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801b694800: rx timeout, send abort [ 146.253823][ T8610] veth5: entered allmulticast mode [ 146.341626][ T8613] vlan2: entered promiscuous mode [ 146.346941][ T8613] bond0: entered promiscuous mode [ 146.352644][ T8613] bond_slave_0: entered promiscuous mode [ 146.360371][ T8613] bond_slave_1: entered promiscuous mode [ 146.505703][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801b694800: abort rx timeout. Force session deactivation [ 146.532744][ T8628] x_tables: duplicate underflow at hook 3 [ 146.738295][ T8642] netlink: 'syz.1.787': attribute type 21 has an invalid length. [ 146.769526][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805593a400: rx timeout, send abort [ 146.836608][ T8642] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 146.863903][ T8642] bond2 (unregistering): Released all slaves [ 146.980932][ T8658] netlink: 'syz.2.791': attribute type 4 has an invalid length. [ 147.077010][ T8663] netlink: 'syz.2.793': attribute type 12 has an invalid length. [ 147.268357][ T8674] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 147.275724][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805593a400: abort rx timeout. Force session deactivation [ 147.466351][ T8687] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 147.488010][ T8687] bond5: (slave lo): Enslaving as an active interface with an up link [ 147.501224][ T8687] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 147.539240][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad29000: rx timeout, send abort [ 147.664866][ T8693] xt_ecn: cannot match TCP bits for non-tcp packets [ 147.774099][ T8695] bond2: (slave vlan3): making interface the new active one [ 147.789238][ T8695] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 147.806493][ T8700] bond2: option mode: unable to set because the bond device has slaves [ 148.020634][ T8719] netlink: 'syz.4.806': attribute type 1 has an invalid length. [ 148.041585][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad29000: abort rx timeout. Force session deactivation [ 148.185680][ T8730] __nla_validate_parse: 22 callbacks suppressed [ 148.192327][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'. [ 148.275243][ T8737] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 148.302890][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad2a400: rx timeout, send abort [ 148.344681][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 148.391919][ T8738] bond6: entered promiscuous mode [ 148.500452][ T8747] syzkaller0: entered promiscuous mode [ 148.500498][ T8747] syzkaller0: entered allmulticast mode [ 148.546964][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.818'. [ 148.571930][ T8757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.818'. [ 148.738494][ T8763] sctp: [Deprecated]: syz.4.822 (pid 8763) Use of int in max_burst socket option deprecated. [ 148.738494][ T8763] Use struct sctp_assoc_value instead [ 148.741963][ T8763] Cannot find add_set index 65532 as target [ 148.767116][ T8765] x_tables: unsorted underflow at hook 3 [ 148.774837][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 148.784569][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 148.802961][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad2a400: abort rx timeout. Force session deactivation [ 148.863482][ T8773] tipc: Started in network mode [ 148.863526][ T8773] tipc: Node identity f6bba55c896c, cluster identity 4711 [ 148.863661][ T8773] tipc: Enabled bearer , priority 0 [ 148.903462][ T8773] syzkaller0: entered promiscuous mode [ 148.903517][ T8773] syzkaller0: entered allmulticast mode [ 148.904127][ T8773] tipc: Resetting bearer [ 148.909297][ T8773] ksmbd: Unknown IPC event: 1, ignore. [ 148.929834][ T8772] tipc: Resetting bearer [ 149.068160][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad2b400: rx timeout, send abort [ 149.138350][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'. [ 149.568236][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad2b400: abort rx timeout. Force session deactivation [ 149.836428][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad29c00: rx timeout, send abort [ 150.340345][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad29c00: abort rx timeout. Force session deactivation [ 150.604306][ T8772] tipc: Disabling bearer [ 150.610660][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad2a800: rx timeout, send abort [ 150.646921][ T44] tipc: Node number set to 2144839004 [ 150.800336][ T8803] netlink: 'syz.4.827': attribute type 29 has an invalid length. [ 151.078108][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 151.103540][ T8816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.833'. [ 151.112628][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad2a800: abort rx timeout. Force session deactivation [ 151.145928][ T8822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.834'. [ 151.262077][ T8827] netlink: 'syz.1.836': attribute type 21 has an invalid length. [ 151.262115][ T8827] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.380822][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad2a000: rx timeout, send abort [ 151.880897][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad2a000: abort rx timeout. Force session deactivation [ 152.148109][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803239e800: rx timeout, send abort [ 152.607387][ T8907] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 152.648185][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803239e800: abort rx timeout. Force session deactivation [ 152.830939][ T8912] ipvlan1: entered allmulticast mode [ 152.830976][ T8912] virt_wifi0: entered allmulticast mode [ 152.852690][ T8912] batman_adv: batadv0: Adding interface: ipvlan1 [ 152.852730][ T8912] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.852770][ T8912] batman_adv: batadv0: Interface activated: ipvlan1 [ 152.910428][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803239f000: rx timeout, send abort [ 152.916092][ T8912] ipvlan2: entered allmulticast mode [ 152.926331][ T8912] batman_adv: batadv0: Adding interface: ipvlan2 [ 152.926368][ T8912] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.926391][ T8912] batman_adv: The newly added mac address (be:53:8e:e8:aa:a5) already exists on: ipvlan1 [ 152.926402][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.926412][ T8912] batman_adv: batadv0: Interface activated: ipvlan2 [ 152.940820][ T8912] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 153.013343][ T8915] lo: entered allmulticast mode [ 153.024687][ T8915] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 153.071157][ T8912] ipvlan3: entered allmulticast mode [ 153.074769][ T8912] batman_adv: batadv0: Adding interface: ipvlan3 [ 153.074785][ T8912] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.074807][ T8912] batman_adv: The newly added mac address (be:53:8e:e8:aa:a5) already exists on: ipvlan1 [ 153.074820][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.074828][ T8912] batman_adv: The newly added mac address (be:53:8e:e8:aa:a5) already exists on: ipvlan2 [ 153.074839][ T8912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.074849][ T8912] batman_adv: batadv0: Interface activated: ipvlan3 [ 153.410496][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803239f000: abort rx timeout. Force session deactivation [ 153.503965][ T8942] __nla_validate_parse: 16 callbacks suppressed [ 153.510461][ T8942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.869'. [ 153.547797][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.869'. [ 153.547858][ T8942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.869'. [ 153.548258][ T8948] syz_tun: entered allmulticast mode [ 153.577086][ T8948] lo: entered allmulticast mode [ 153.659273][ T8950] xt_TCPMSS: Only works on TCP SYN packets [ 153.675692][ T8947] syz_tun: left allmulticast mode [ 153.675715][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803239d400: rx timeout, send abort [ 153.716772][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 153.725859][ T8952] openvswitch: netlink: Invalid VLAN frame [ 153.730729][ T8952] netlink: 9 bytes leftover after parsing attributes in process `syz.1.874'. [ 153.745316][ T8952] netlink: 9 bytes leftover after parsing attributes in process `syz.1.874'. [ 153.919828][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 153.960391][ T206] IPVS: starting estimator thread 0... [ 154.010019][ T8969] netlink: 44 bytes leftover after parsing attributes in process `syz.2.880'. [ 154.130602][ T8971] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 154.158505][ T4396] IPVS: starting estimator thread 0... [ 154.175767][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803239d400: abort rx timeout. Force session deactivation [ 154.258695][ T8975] IPVS: using max 26 ests per chain, 62400 per kthread [ 154.307508][ T8983] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 154.316550][ T8983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.362234][ T8966] netlink: 'syz.4.878': attribute type 2 has an invalid length. [ 154.362585][ T8965] IPVS: using max 30 ests per chain, 72000 per kthread [ 154.398383][ T8976] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 154.442963][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563ac400: rx timeout, send abort [ 154.631597][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 154.681645][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 154.694947][ T8991] pim6reg: entered allmulticast mode [ 154.890473][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 154.943031][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563ac400: abort rx timeout. Force session deactivation [ 155.207249][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563afc00: rx timeout, send abort [ 155.707659][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563afc00: abort rx timeout. Force session deactivation [ 155.722769][ T9018] netlink: 'syz.1.890': attribute type 1 has an invalid length. [ 155.968304][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563adc00: rx timeout, send abort [ 156.231749][ T9044] netlink: 'syz.1.896': attribute type 2 has an invalid length. [ 156.253729][ T9051] vlan1: entered promiscuous mode [ 156.259056][ T9051] geneve1: entered promiscuous mode [ 156.264667][ T9051] vlan1: entered allmulticast mode [ 156.269993][ T9051] geneve1: entered allmulticast mode [ 156.284662][ T9048] h: entered promiscuous mode [ 156.455815][ T9059] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 156.468383][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563adc00: abort rx timeout. Force session deactivation [ 156.741622][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563acc00: rx timeout, send abort [ 157.041497][ T9111] Cannot find map_set index 2 as target [ 157.241687][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563acc00: abort rx timeout. Force session deactivation [ 157.513927][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c986800: rx timeout, send abort [ 158.006161][ T9141] openvswitch: netlink: Flow key attr not present in new flow. [ 158.014193][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c986800: abort rx timeout. Force session deactivation [ 158.057301][ T9116] bond2 (unregistering): Released all slaves [ 158.083525][ T9143] netlink: 'syz.2.913': attribute type 1 has an invalid length. [ 158.126675][ T9112] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 158.190082][ T9143] 8021q: adding VLAN 0 to HW filter on device bond7 [ 158.222788][ T9150] vlan2: entered promiscuous mode [ 158.222836][ T9150] bond7: entered promiscuous mode [ 158.225954][ T9150] vlan2: entered allmulticast mode [ 158.225971][ T9150] bond7: entered allmulticast mode [ 158.277516][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c985800: rx timeout, send abort [ 158.306120][ T9143] bond7: (slave bridge4): making interface the new active one [ 158.306164][ T9143] bridge4: entered promiscuous mode [ 158.306340][ T9143] bridge4: entered allmulticast mode [ 158.313808][ T9143] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 158.407483][ T9157] ipvlan2: entered allmulticast mode [ 158.407527][ T9157] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 158.415551][ T9157] batman_adv: batadv0: Adding interface: ipvlan2 [ 158.415570][ T9157] batman_adv: batadv0: Interface activated: ipvlan2 [ 158.521266][ T9176] IPv6: sit1: Disabled Multicast RS [ 158.540209][ T9176] netlink: 'syz.2.920': attribute type 1 has an invalid length. [ 158.778083][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c985800: abort rx timeout. Force session deactivation [ 159.049701][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cce5c00: rx timeout, send abort [ 159.142391][ T9214] veth1: entered allmulticast mode [ 159.260096][ T9229] ieee802154 phy1 wpan1: encryption failed: -22 [ 159.354916][ T9233] netlink: 'syz.4.936': attribute type 4 has an invalid length. [ 159.374303][ T9234] netlink: 'syz.4.936': attribute type 4 has an invalid length. [ 159.426264][ T9237] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 159.444434][ T9237] netlink: NAT attribute has 4 unknown bytes [ 159.444488][ T9237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.480597][ T9231] __nla_validate_parse: 9 callbacks suppressed [ 159.480884][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 159.549776][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cce5c00: abort rx timeout. Force session deactivation [ 159.567711][ T9240] netlink: 32 bytes leftover after parsing attributes in process `syz.4.938'. [ 159.630239][ T9248] macvlan0: entered promiscuous mode [ 159.642376][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'. [ 159.781429][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.940'. [ 159.820076][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cce5000: rx timeout, send abort [ 159.887259][ T54] block nbd1: Receive control failed (result -32) [ 160.093004][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.102517][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 160.280638][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.948'. [ 160.320192][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cce5000: abort rx timeout. Force session deactivation [ 160.357591][ T9293] netlink: 'syz.1.951': attribute type 9 has an invalid length. [ 160.441336][ T9298] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 160.470902][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.950'. [ 160.471352][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.950'. [ 160.471526][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.4.950'. [ 160.594462][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031fea000: rx timeout, send abort [ 160.752258][ T9320] netlink: 'syz.1.959': attribute type 12 has an invalid length. [ 160.775499][ T9322] netlink: 'syz.1.959': attribute type 12 has an invalid length. [ 160.852371][ T4937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.861677][ T4937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.869863][ T4937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.872230][ T4937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.873352][ T4937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 161.094539][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031fea000: abort rx timeout. Force session deactivation [ 161.366349][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031fe9000: rx timeout, send abort [ 161.456538][ T9347] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 161.546869][ T9355] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.705178][ T9370] veth1_to_bond: entered allmulticast mode [ 161.712239][ T9370] veth1_to_bond: entered promiscuous mode [ 161.718799][ T9370] veth1_to_bond: left promiscuous mode [ 161.737951][ T9370] veth1_to_bond: left allmulticast mode [ 161.787683][ T9377] veth1_to_bond: entered promiscuous mode [ 161.836601][ T9368] veth1_to_bond: left promiscuous mode [ 161.869044][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031fe9000: abort rx timeout. Force session deactivation [ 162.010754][ T9385] netlink: 'syz.3.974': attribute type 1 has an invalid length. [ 162.139472][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559c0400: rx timeout, send abort [ 162.141417][ T9385] bond4: entered promiscuous mode [ 162.141779][ T9385] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.376799][ T9407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.387812][ T9390] syzkaller0: entered promiscuous mode [ 162.387853][ T9390] syzkaller0: entered allmulticast mode [ 162.639549][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559c0400: abort rx timeout. Force session deactivation [ 162.725156][ T9421] bond8: option arp_all_targets: invalid value (18446744073709551613) [ 162.747694][ T9421] bond8 (unregistering): Released all slaves [ 162.858842][ T9434] ieee802154 phy1 wpan1: encryption failed: -22 [ 162.865049][ T9411] bond2: entered allmulticast mode [ 162.865513][ T9411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.910354][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559c0000: rx timeout, send abort [ 162.936678][ T9434] bond7 (unregistering): Released all slaves [ 162.998732][ T54] Bluetooth: hci5: command tx timeout [ 163.122321][ T9442] xt_hashlimit: size too large, truncated to 1048576 [ 163.311859][ T9452] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 163.347667][ T9452] bond3 (unregistering): Released all slaves [ 163.368760][ T9456] netlink: 'syz.3.990': attribute type 10 has an invalid length. [ 163.410425][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880559c0000: abort rx timeout. Force session deactivation [ 163.466338][ T9456] dummy0: entered promiscuous mode [ 163.466387][ T9456] dummy0: entered allmulticast mode [ 163.466950][ T9456] bridge0: port 3(dummy0) entered blocking state [ 163.467049][ T9456] bridge0: port 3(dummy0) entered disabled state [ 163.517847][ T9459] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 163.531240][ T9459] bond5 (unregistering): Released all slaves [ 163.580707][ T9442] geneve3: entered promiscuous mode [ 163.593989][ T9325] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.594101][ T9325] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.594254][ T9325] bridge_slave_0: entered allmulticast mode [ 163.597846][ T9325] bridge_slave_0: entered promiscuous mode [ 163.600794][ T9325] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.602631][ T9325] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.602767][ T9325] bridge_slave_1: entered allmulticast mode [ 163.606549][ T9325] bridge_slave_1: entered promiscuous mode [ 163.683655][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330a2000: rx timeout, send abort [ 163.707511][ T9464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.741906][ T9325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.757832][ T9325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.845828][ T9325] team0: Port device team_slave_0 added [ 163.857861][ T9325] team0: Port device team_slave_1 added [ 163.900933][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.908008][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.908033][ T9325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.909388][ T9005] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 49156 - 0 [ 163.909425][ T9005] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 49156 - 0 [ 163.968484][ T9325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.977350][ T9325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.003737][ T9325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.165895][ T9325] hsr_slave_0: entered promiscuous mode [ 164.170993][ T9325] hsr_slave_1: entered promiscuous mode [ 164.171649][ T9325] debugfs: 'hsr0' already exists in 'hsr' [ 164.171667][ T9325] Cannot create hsr debugfs directory [ 164.184959][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330a2000: abort rx timeout. Force session deactivation [ 164.258764][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 49156 - 0 [ 164.260515][ T9005] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 49156 - 0 [ 164.447616][ T9485] bond8: option min_links: invalid value (18446744073709551614) [ 164.447661][ T9485] bond8: option min_links: allowed values 0 - 2147483647 [ 164.455412][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330a1c00: rx timeout, send abort [ 164.463935][ T9485] bond8 (unregistering): Released all slaves [ 164.510691][ T9493] bond7 (unregistering): Released all slaves [ 164.683252][ T9499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.955462][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330a1c00: abort rx timeout. Force session deactivation [ 165.033973][ T9325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 165.049827][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 165.053016][ T9325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 165.072529][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 165.075626][ T9325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 165.079847][ T54] Bluetooth: hci5: command tx timeout [ 165.115511][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 165.116382][ T9325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.148356][ T9325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 165.222711][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330a1000: rx timeout, send abort [ 165.334102][ T9325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.362012][ T9325] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.377487][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.377579][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.410740][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.410846][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.439839][ T9533] __nla_validate_parse: 82 callbacks suppressed [ 165.446273][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 165.455482][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1011'. [ 165.722777][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330a1000: abort rx timeout. Force session deactivation [ 165.983331][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4d8000: rx timeout, send abort [ 166.161095][ T9570] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 166.293871][ T9575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.357436][ T9575] team0 (unregistering): Port device team_slave_0 removed [ 166.390177][ T9575] team0 (unregistering): Port device team_slave_1 removed [ 166.483399][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4d8000: abort rx timeout. Force session deactivation [ 166.674684][ T9593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.706288][ T9591] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 166.706318][ T9591] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 166.750039][ T9597] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1026'. [ 166.759479][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4db000: rx timeout, send abort [ 166.793982][ T9325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.902031][ T9606] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1028'. [ 166.952260][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 166.952311][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 167.070593][ T9615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1030'. [ 167.160264][ T54] Bluetooth: hci5: command tx timeout [ 167.259526][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4db000: abort rx timeout. Force session deactivation [ 167.376278][ T9325] veth0_vlan: entered promiscuous mode [ 167.384807][ T9325] veth1_vlan: entered promiscuous mode [ 167.412088][ T9325] veth0_macvtap: entered promiscuous mode [ 167.421331][ T9325] veth1_macvtap: entered promiscuous mode [ 167.446168][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.450630][ T9325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.469914][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.479588][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.479628][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.479659][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.527743][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4db400: rx timeout, send abort [ 167.741351][ T259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.741391][ T259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.881782][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.881830][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.027821][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4db400: abort rx timeout. Force session deactivation [ 168.198268][ T9660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.290032][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563dc400: rx timeout, send abort [ 168.313846][ T9668] netlink: 68 bytes leftover after parsing attributes in process `syz.5.957'. [ 168.364007][ T9670] syzkaller1: entered promiscuous mode [ 168.372117][ T9670] syzkaller1: entered allmulticast mode [ 168.572002][ T9682] netlink: 'syz.3.1051': attribute type 4 has an invalid length. [ 168.603876][ T9685] netlink: 'syz.1.1053': attribute type 6 has an invalid length. [ 168.603919][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'. [ 168.790107][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563dc400: abort rx timeout. Force session deactivation [ 168.806333][ T9693] team0: entered promiscuous mode [ 168.806369][ T9693] team_slave_0: entered promiscuous mode [ 168.806566][ T9693] team_slave_1: entered promiscuous mode [ 168.811510][ T9692] team0: left promiscuous mode [ 168.811528][ T9692] team_slave_0: left promiscuous mode [ 168.811709][ T9692] team_slave_1: left promiscuous mode [ 168.931171][ T9695] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1056'. [ 169.052344][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563dfc00: rx timeout, send abort [ 169.406870][ T9714] syzkaller0: entered promiscuous mode [ 169.406914][ T9714] syzkaller0: entered allmulticast mode [ 169.553213][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563dfc00: abort rx timeout. Force session deactivation [ 169.822901][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563df400: rx timeout, send abort [ 170.323662][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880563df400: abort rx timeout. Force session deactivation [ 170.598226][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880322e5400: rx timeout, send abort [ 171.098321][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880322e5400: abort rx timeout. Force session deactivation [ 171.183543][ T9718] vlan4: entered promiscuous mode [ 171.195842][ T9723] ip6gre2: entered allmulticast mode [ 171.323070][ T9740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.364568][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880322e4c00: rx timeout, send abort [ 171.574008][ T9748] syzkaller0: entered promiscuous mode [ 171.574053][ T9748] syzkaller0: entered allmulticast mode [ 171.698988][ T9761] tls_set_device_offload_rx: netdev not found [ 171.760125][ T9759] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 171.819848][ T9766] netlink: 'syz.5.1079': attribute type 49 has an invalid length. [ 171.864644][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880322e4c00: abort rx timeout. Force session deactivation [ 171.902612][ T9774] netlink: 'syz.5.1079': attribute type 49 has an invalid length. [ 172.004680][ T9785] __nla_validate_parse: 4 callbacks suppressed [ 172.010604][ T9785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 172.046147][ T9788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.056099][ T9766] ip6gretap0: entered promiscuous mode [ 172.056138][ T9766] ip6gretap0: entered allmulticast mode [ 172.136027][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab0000: rx timeout, send abort [ 172.157168][ T9785] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 172.325829][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1089'. [ 172.393984][ T9797] hsr_slave_1 (unregistering): left promiscuous mode [ 172.506039][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 172.636095][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab0000: abort rx timeout. Force session deactivation [ 172.754126][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 172.767205][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1095'. [ 172.778840][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 172.779847][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1095'. [ 172.779869][ T9827] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1095'. [ 172.847288][ T9834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.897725][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab3c00: rx timeout, send abort [ 172.941898][ T9839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1098'. [ 172.951098][ T9839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1098'. [ 173.060741][ T9846] syzkaller0: entered promiscuous mode [ 173.060779][ T9846] syzkaller0: entered allmulticast mode [ 173.397798][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab3c00: abort rx timeout. Force session deactivation [ 173.561711][ T9868] syzkaller1: entered promiscuous mode [ 173.561756][ T9868] syzkaller1: entered allmulticast mode [ 173.661996][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab1c00: rx timeout, send abort [ 173.843495][ T9891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.969945][ T9882] hsr_slave_1 (unregistering): left promiscuous mode [ 174.162059][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab1c00: abort rx timeout. Force session deactivation [ 174.296937][ T9911] --map-set only usable from mangle table [ 174.297954][ T9914] netlink: 'syz.5.1114': attribute type 12 has an invalid length. [ 174.423495][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab2800: rx timeout, send abort [ 174.477511][ T9925] netlink: 'syz.4.1116': attribute type 1 has an invalid length. [ 174.923563][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab2800: abort rx timeout. Force session deactivation [ 175.008237][ T9952] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 175.023629][ T9952] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 175.030960][ T9952] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 175.032099][ T9952] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 175.043575][ T9952] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 175.043771][ T9952] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 175.043959][ T9952] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 175.044145][ T9952] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 175.187798][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab0800: rx timeout, send abort [ 175.281606][ T9967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.687874][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035ab0800: abort rx timeout. Force session deactivation [ 175.963110][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028dd2400: rx timeout, send abort [ 176.050771][T10028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.211241][T10034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.233365][T10034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.247075][T10034] bond0 (unregistering): Released all slaves [ 176.463175][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028dd2400: abort rx timeout. Force session deactivation [ 176.725582][T10060] IPv6: sit1: Disabled Multicast RS [ 176.727995][T10060] sit1: entered allmulticast mode [ 176.736059][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b9a4400: rx timeout, send abort [ 176.926085][T10076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.061968][T10084] __nla_validate_parse: 25 callbacks suppressed [ 177.068405][T10084] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1156'. [ 177.068505][T10084] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1156'. [ 177.092956][T10086] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1156'. [ 177.102429][T10086] netlink: 4552 bytes leftover after parsing attributes in process `syz.5.1156'. [ 177.236110][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b9a4400: abort rx timeout. Force session deactivation [ 177.278430][T10096] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1159'. [ 177.287375][T10097] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1160'. [ 177.365883][T10096] erspan1: entered allmulticast mode [ 177.467449][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 177.505328][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b9a6400: rx timeout, send abort [ 177.725007][T10129] netlink: 'syz.1.1168': attribute type 11 has an invalid length. [ 177.739509][T10129] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 177.747482][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 177.885440][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 177.993848][T10145] syzkaller1: entered promiscuous mode [ 177.999635][T10145] syzkaller1: entered allmulticast mode [ 178.006529][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b9a6400: abort rx timeout. Force session deactivation [ 178.219900][T10149] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1175'. [ 178.263549][T10151] xt_hashlimit: size too large, truncated to 1048576 [ 178.273276][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880767a5400: rx timeout, send abort [ 178.285005][T10151] xt_hashlimit: max too large, truncated to 1048576 [ 178.285130][T10151] xt_hashlimit: invalid rate [ 178.606377][T10173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.773326][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880767a5400: abort rx timeout. Force session deactivation [ 179.035479][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75d800: rx timeout, send abort [ 179.535561][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75d800: abort rx timeout. Force session deactivation [ 179.754977][T10220] validate_nla: 72 callbacks suppressed [ 179.755014][T10220] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 179.803489][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75f400: rx timeout, send abort [ 180.135920][T10238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.142216][T10239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.281979][ T54] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 180.303563][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75f400: abort rx timeout. Force session deactivation [ 180.572789][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75cc00: rx timeout, send abort [ 180.673662][T10266] netlink: 'syz.5.1210': attribute type 10 has an invalid length. [ 180.681860][T10264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.693531][T10266] syz_tun: entered promiscuous mode [ 180.712406][T10268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.060250][T10290] vlan4: entered promiscuous mode [ 181.060285][T10290] veth0_virt_wifi: entered promiscuous mode [ 181.060892][T10290] vlan4: entered allmulticast mode [ 181.061073][T10290] veth0_virt_wifi: entered allmulticast mode [ 181.073134][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75cc00: abort rx timeout. Force session deactivation [ 181.342375][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75d000: rx timeout, send abort [ 181.842443][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75d000: abort rx timeout. Force session deactivation [ 182.105611][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75d400: rx timeout, send abort [ 182.439595][T10332] IPv6: sit2: Disabled Multicast RS [ 182.605677][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75d400: abort rx timeout. Force session deactivation [ 182.720617][T10339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.877915][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75c000: rx timeout, send abort [ 183.044698][T10355] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 183.397806][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a75c000: abort rx timeout. Force session deactivation [ 183.699337][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b99e400: rx timeout, send abort [ 183.866372][T10381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.033044][T10387] __nla_validate_parse: 72 callbacks suppressed [ 184.043558][T10387] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1244'. [ 184.056577][T10383] veth1_vlan (unregistering): left allmulticast mode [ 184.210604][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b99e400: abort rx timeout. Force session deactivation [ 184.302931][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 184.495779][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055175800: rx timeout, send abort [ 185.004000][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055175800: abort rx timeout. Force session deactivation [ 185.166419][T10385] veth0: entered promiscuous mode [ 185.182734][T10386] veth0: left promiscuous mode [ 185.197067][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.197458][T10387] bridge0: port 1(1¾x9ÿ) entered disabled state [ 185.213877][T10387] bridge0: entered allmulticast mode [ 185.280194][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055175c00: rx timeout, send abort [ 185.361840][T10418] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1250'. [ 185.560209][T10421] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1251'. [ 185.788448][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055175c00: abort rx timeout. Force session deactivation [ 186.067999][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035556400: rx timeout, send abort [ 186.576553][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035556400: abort rx timeout. Force session deactivation [ 186.873760][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805662c800: rx timeout, send abort [ 187.384448][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805662c800: abort rx timeout. Force session deactivation [ 187.672254][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a76d800: rx timeout, send abort [ 188.180143][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a76d800: abort rx timeout. Force session deactivation [ 188.454843][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ea49800: rx timeout, send abort [ 188.968711][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ea49800: abort rx timeout. Force session deactivation [ 189.252604][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803526ec00: rx timeout, send abort [ 189.765235][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803526ec00: abort rx timeout. Force session deactivation [ 190.061211][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803526f000: rx timeout, send abort [ 190.572155][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803526f000: abort rx timeout. Force session deactivation [ 190.859475][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803526d800: rx timeout, send abort [ 191.258564][ C1] sched: DL replenish lagged too much [ 191.370779][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803526d800: abort rx timeout. Force session deactivation [ 191.661229][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ea5d400: rx timeout, send abort [ 192.171213][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ea5d400: abort rx timeout. Force session deactivation [ 192.452935][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ea5cc00: rx timeout, send abort [ 192.963598][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ea5cc00: abort rx timeout. Force session deactivation [ 193.258257][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562d0800: rx timeout, send abort [ 193.768367][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562d0800: abort rx timeout. Force session deactivation [ 194.062978][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562d3800: rx timeout, send abort [ 194.571027][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562d3800: abort rx timeout. Force session deactivation [ 194.600754][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.857679][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562d0c00: rx timeout, send abort [ 195.368814][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562d0c00: abort rx timeout. Force session deactivation [ 195.658834][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056193800: rx timeout, send abort [ 196.168039][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056193800: abort rx timeout. Force session deactivation [ 202.220295][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 202.237037][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 244.276671][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 255.981003][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 308.162705][ T5629] Bluetooth: hci5: command 0x0405 tx timeout [ 310.433654][ T5634] Bluetooth: hci5: command 0x0405 tx timeout [ 318.164311][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.728476][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 371.735452][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10431/1:b..l P5621/1:b..l [ 371.744600][ C1] rcu: (detected by 1, t=10503 jiffies, g=35481, q=1764 ncpus=2) [ 371.752423][ C1] task:syz-executor state:R running task stack:21184 pid:5621 tgid:5621 ppid:5616 task_flags:0x400140 flags:0x00080000 [ 371.765944][ C1] Call Trace: [ 371.769240][ C1] [ 371.772187][ C1] __schedule+0x17db/0x58f0 [ 371.776732][ C1] ? __lock_acquire+0x6df/0x2e50 [ 371.781678][ C1] ? __pfx___schedule+0x10/0x10 [ 371.786545][ C1] ? __lock_acquire+0x6df/0x2e50 [ 371.791501][ C1] preempt_schedule_irq+0x4b/0x90 [ 371.796546][ C1] irqentry_exit+0x14f/0x910 [ 371.801152][ C1] ? trace_irq_disable+0x3b/0x140 [ 371.806202][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.812189][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 371.817475][ C1] Code: ff ff ff e8 20 29 41 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 54 f1 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 cf 2c 44 0a cc 48 8d 3d f7 34 da [ 371.837092][ C1] RSP: 0018:ffffc90003ee74c0 EFLAGS: 00000296 [ 371.843176][ C1] RAX: 8df5fc580b6f1900 RBX: 0000000000000000 RCX: 0000000000000046 [ 371.851158][ C1] RDX: 000000005acdab19 RSI: ffffffff8e6fd63b RDI: ffffffff8c6d9480 [ 371.859141][ C1] RBP: ffff88807e8f9f40 R08: 4400000000000000 R09: 0000000000000000 [ 371.867132][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 371.875114][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 371.883114][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.889198][ C1] ? unwind_next_frame+0x8f/0x2550 [ 371.894324][ C1] unwind_next_frame+0xac/0x2550 [ 371.899284][ C1] ? unwind_next_frame+0x8f/0x2550 [ 371.904410][ C1] ? do_syscall_64+0x166/0x520 [ 371.909276][ C1] ? unwind_next_frame+0x8f/0x2550 [ 371.914398][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 371.920571][ C1] arch_stack_walk+0x11b/0x150 [ 371.925355][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.931431][ C1] stack_trace_save+0xa9/0x100 [ 371.936215][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 371.941600][ C1] ? __lock_acquire+0x6df/0x2e50 [ 371.946548][ C1] ? stack_depot_save_flags+0x33/0x7f0 [ 371.952029][ C1] save_stack+0x122/0x230 [ 371.956371][ C1] ? __pfx_save_stack+0x10/0x10 [ 371.961238][ C1] ? __free_frozen_pages+0xc93/0xd90 [ 371.966537][ C1] ? __slab_free+0x274/0x2c0 [ 371.971130][ C1] ? qlist_free_all+0x99/0x100 [ 371.975909][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 371.981557][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 371.987200][ C1] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 371.992844][ C1] ? alloc_empty_file+0x5b/0x1d0 [ 371.997788][ C1] ? path_openat+0xa2/0x1d60 [ 372.002393][ C1] ? do_file_open+0x23e/0x4a0 [ 372.007084][ C1] ? do_sys_openat2+0x115/0x200 [ 372.011939][ C1] ? __x64_sys_openat+0x138/0x170 [ 372.016968][ C1] ? do_syscall_64+0x166/0x520 [ 372.021748][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.027828][ C1] ? page_ext_put+0x97/0xc0 [ 372.032342][ C1] __reset_page_owner+0x71/0x1f0 [ 372.037295][ C1] __free_frozen_pages+0xc93/0xd90 [ 372.042437][ C1] __slab_free+0x274/0x2c0 [ 372.046865][ C1] ? lock_acquire+0x115/0x350 [ 372.051555][ C1] ? qlist_free_all+0x8e/0x100 [ 372.056325][ C1] qlist_free_all+0x99/0x100 [ 372.060918][ C1] ? alloc_empty_file+0x5b/0x1d0 [ 372.065862][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 372.071513][ C1] kasan_quarantine_reduce+0x148/0x160 [ 372.076997][ C1] __kasan_slab_alloc+0x22/0x80 [ 372.081857][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 372.087330][ C1] ? alloc_empty_file+0x5b/0x1d0 [ 372.092272][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 372.097922][ C1] ? alloc_empty_file+0x5b/0x1d0 [ 372.102875][ C1] alloc_empty_file+0x5b/0x1d0 [ 372.107653][ C1] path_openat+0xa2/0x1d60 [ 372.112186][ C1] ? __lock_acquire+0x6df/0x2e50 [ 372.117152][ C1] do_file_open+0x23e/0x4a0 [ 372.121686][ C1] ? __pfx_do_file_open+0x10/0x10 [ 372.126758][ C1] ? _raw_spin_unlock+0x28/0x50 [ 372.131624][ C1] ? alloc_fd+0x651/0x6c0 [ 372.135984][ C1] do_sys_openat2+0x115/0x200 [ 372.140685][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 372.145899][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 372.151640][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 372.157761][ C1] __x64_sys_openat+0x138/0x170 [ 372.162634][ C1] do_syscall_64+0x166/0x520 [ 372.167249][ C1] ? trace_irq_disable+0x3b/0x140 [ 372.172312][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.178394][ C1] ? clear_bhb_loop+0x70/0xc0 [ 372.183085][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.188994][ C1] RIP: 0033:0x7f0fd1d9d47c [ 372.193394][ C1] RSP: 002b:00007fff08981ec0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 372.201783][ C1] RAX: ffffffffffffffda RBX: 00000000000002d5 RCX: 00007f0fd1d9d47c [ 372.209742][ C1] RDX: 0000000000090800 RSI: 00007f0fd1e34966 RDI: 00000000ffffff9c [ 372.217705][ C1] RBP: 00007fff08981f6c R08: 0000000000000000 R09: 0000000000000000 [ 372.225665][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000f0 [ 372.233624][ C1] R13: 0000000000000000 R14: 000000000002d6a4 R15: 00007fff08981fc0 [ 372.241687][ C1] [ 372.244686][ C1] task:syz.4.1253 state:R running task stack:25608 pid:10431 tgid:10431 ppid:5621 task_flags:0x40044c flags:0x00080002 [ 372.258163][ C1] Call Trace: [ 372.261433][ C1] [ 372.264349][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 372.270923][ C1] ? irqentry_exit+0x218/0x910 [ 372.275695][ C1] ? do_raw_spin_lock+0x26c/0x2f0 [ 372.280719][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 372.286081][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.291094][ C1] ? __pfx___schedule+0x10/0x10 [ 372.295932][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x20f/0xb90 [ 372.302511][ C1] ? rcu_is_watching+0x16/0xb0 [ 372.307258][ C1] ? trace_irq_disable+0x3b/0x140 [ 372.312275][ C1] ? rcu_read_unlock_special+0x33/0x470 [ 372.317814][ C1] ? __rcu_read_unlock+0x83/0xe0 [ 372.322822][ C1] ? __zap_vma_range+0x4162/0x4f80 [ 372.327927][ C1] ? __zap_vma_range+0x4176/0x4f80 [ 372.333065][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 372.338771][ C1] ? mas_find+0x6d6/0xcb0 [ 372.343097][ C1] ? unmap_vmas+0x390/0x550 [ 372.347578][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 372.352407][ C1] ? mas_next_slot+0xc91/0xd70 [ 372.357168][ C1] ? exit_mmap+0x293/0x9f0 [ 372.361569][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 372.366326][ C1] ? __pfx_exit_aio+0x10/0x10 [ 372.370994][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 372.376177][ C1] ? __mmput+0x118/0x420 [ 372.380403][ C1] ? exit_mm+0x221/0x2d0 [ 372.384625][ C1] ? do_exit+0x6cd/0x2360 [ 372.388945][ C1] ? __pfx_do_exit+0x10/0x10 [ 372.393510][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 372.398517][ C1] ? do_group_exit+0x22d/0x2f0 [ 372.403257][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.408435][ C1] ? get_signal+0x121b/0x12c0 [ 372.413100][ C1] ? arch_do_signal_or_restart+0xbb/0x860 [ 372.418807][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 372.424947][ C1] ? exit_to_user_mode_loop+0x10e/0x770 [ 372.430469][ C1] ? rcu_is_watching+0x16/0xb0 [ 372.435213][ C1] ? do_syscall_64+0x328/0x520 [ 372.439957][ C1] ? trace_irq_disable+0x3b/0x140 [ 372.444955][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.450999][ C1] ? clear_bhb_loop+0x70/0xc0 [ 372.455668][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.461719][ C1] [ 372.464835][ C1] rcu: rcu_preempt kthread starved for 1246 jiffies! g35481 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 372.475763][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 372.485742][ C1] rcu: RCU grace-period kthread stack dump: [ 372.491632][ C1] task:rcu_preempt state:R running task stack:28104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 372.505144][ C1] Call Trace: [ 372.508430][ C1] [ 372.511367][ C1] __schedule+0x17db/0x58f0 [ 372.515894][ C1] ? __lock_acquire+0x6df/0x2e50 [ 372.520855][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 372.525993][ C1] ? __pfx___schedule+0x10/0x10 [ 372.530854][ C1] ? lock_acquire+0x115/0x350 [ 372.535551][ C1] ? schedule+0x90/0x2b0 [ 372.539812][ C1] schedule+0x164/0x2b0 [ 372.543982][ C1] schedule_timeout+0x152/0x2c0 [ 372.548841][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 372.554221][ C1] ? __pfx_process_timeout+0x10/0x10 [ 372.559537][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 372.565363][ C1] ? prepare_to_swait_event+0x322/0x350 [ 372.570929][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 372.575800][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 372.581968][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 372.587260][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 372.592476][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.598304][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 372.602910][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 372.608118][ C1] ? __kthread_parkme+0x71/0x1f0 [ 372.613076][ C1] ? __kthread_parkme+0x199/0x1f0 [ 372.618125][ C1] kthread+0x38b/0x480 [ 372.622204][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 372.627409][ C1] ? __pfx_kthread+0x10/0x10 [ 372.632004][ C1] ret_from_fork+0x514/0xb70 [ 372.636602][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 372.641732][ C1] ? __switch_to+0xc89/0x1420 [ 372.646423][ C1] ? __pfx_kthread+0x10/0x10 [ 372.651020][ C1] ret_from_fork_asm+0x1a/0x30 [ 372.655826][ C1] [ 372.658844][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 372.665168][ C1] Sending NMI from CPU 1 to CPUs 0: [ 372.670395][ C0] NMI backtrace for cpu 0 [ 372.670418][ C0] CPU: 0 UID: 0 PID: 5618 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 372.670439][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.670451][ C0] RIP: 0010:trace_hardirqs_off+0x0/0x40 [ 372.670476][ C0] Code: e9 de fe ff ff 90 0f 0b 90 e9 3f ff ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 53 48 8b 5c 24 08 48 89 df e8 7e 43 14 0a 65 8b 05 cf [ 372.670492][ C0] RSP: 0018:ffffc90000007740 EFLAGS: 00000006 [ 372.670508][ C0] RAX: 0000000000000202 RBX: 0000000000000200 RCX: dffffc0000000000 [ 372.670521][ C0] RDX: 8000000000000300 RSI: 0000000000000200 RDI: ffffffff8aa51641 [ 372.670534][ C0] RBP: ffffc90000007950 R08: 0000000000000100 R09: 0000000000000000 [ 372.670546][ C0] R10: ffffc900000078b0 R11: fffff52000000f1a R12: ffff888078f3a040 [ 372.670560][ C0] R13: dffffc0000000000 R14: ffffffff8aa51641 R15: ffffffff907bb8c0 [ 372.670575][ C0] FS: 000055558ec71500(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 372.670590][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.670603][ C0] CR2: 00007f3278f09ff8 CR3: 0000000074826000 CR4: 00000000003526f0 [ 372.670619][ C0] Call Trace: [ 372.670626][ C0] [ 372.670633][ C0] __local_bh_enable_ip+0x72/0x140 [ 372.670665][ C0] ip6t_do_table+0x13c4/0x15b0 [ 372.670705][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 372.670732][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 372.670766][ C0] ip6table_mangle_hook+0x2b8/0x730 [ 372.670796][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 372.670823][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 372.670846][ C0] ? __netif_receive_skb_core+0x2a10/0x30c0 [ 372.670873][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 372.670907][ C0] ? ipv6_defrag+0xab/0x3b0 [ 372.670924][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 372.670954][ C0] nf_hook_slow+0xc5/0x220 [ 372.670983][ C0] NF_HOOK+0x21f/0x3c0 [ 372.671003][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 372.671021][ C0] ? NF_HOOK+0x9e/0x3c0 [ 372.671038][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 372.671057][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 372.671083][ C0] process_backlog+0x795/0x18b0 [ 372.671112][ C0] ? call_timer_fn+0xd5/0x5f0 [ 372.671134][ C0] ? process_backlog+0x3de/0x18b0 [ 372.671168][ C0] __napi_poll+0xaa/0x330 [ 372.671195][ C0] net_rx_action+0x61d/0xf50 [ 372.671229][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 372.671267][ C0] ? lapic_next_event+0x11/0x20 [ 372.671293][ C0] handle_softirqs+0x226/0x860 [ 372.671318][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 372.671346][ C0] __irq_exit_rcu+0xcb/0x220 [ 372.671371][ C0] irq_exit_rcu+0x9/0x30 [ 372.671393][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 372.671420][ C0] [ 372.671426][ C0] [ 372.671433][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.671453][ C0] RIP: 0010:lock_release+0x2e1/0x3c0 [ 372.671472][ C0] Code: 66 f1 11 00 00 00 00 eb b5 e8 1b f6 40 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 73 21 f1 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 d0 f9 43 0a cc 48 8d 3d 68 05 da [ 372.671488][ C0] RSP: 0018:ffffc90003ec73e8 EFLAGS: 00000286 [ 372.671504][ C0] RAX: e713228ab3f55c00 RBX: 0000000000000206 RCX: 0000000000000046 [ 372.671517][ C0] RDX: ffffc90003ec7501 RSI: ffffffff8e6fd63b RDI: ffffffff8c6d9480 [ 372.671531][ C0] RBP: ffff888036700c50 R08: ffffc90003ec79f8 R09: 0000000000000000 [ 372.671544][ C0] R10: ffffc90003ec7518 R11: fffff520007d8ea5 R12: 0000000000000004 [ 372.671557][ C0] R13: 0000000000000004 R14: ffffffff8ed5c6e0 R15: ffff888036700000 [ 372.671582][ C0] ? unwind_next_frame+0x8f/0x2550 [ 372.671604][ C0] unwind_next_frame+0x1baa/0x2550 [ 372.671629][ C0] ? tomoyo_encode+0x2ad/0x570 [ 372.671649][ C0] ? unwind_next_frame+0x8f/0x2550 [ 372.671676][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 372.671706][ C0] arch_stack_walk+0x11b/0x150 [ 372.671730][ C0] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 372.671755][ C0] stack_trace_save+0xa9/0x100 [ 372.671782][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 372.671817][ C0] save_stack+0x122/0x230 [ 372.671837][ C0] ? __pfx_save_stack+0x10/0x10 [ 372.671855][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 372.671882][ C0] ? __slab_free+0x274/0x2c0 [ 372.671898][ C0] ? qlist_free_all+0x99/0x100 [ 372.671913][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 372.671942][ C0] ? __kasan_kmalloc+0x22/0xb0 [ 372.671960][ C0] ? __kmalloc_noprof+0x36b/0x720 [ 372.671987][ C0] ? tomoyo_encode+0x2ad/0x570 [ 372.672011][ C0] ? page_ext_put+0x97/0xc0 [ 372.672033][ C0] __reset_page_owner+0x71/0x1f0 [ 372.672053][ C0] __free_frozen_pages+0xc93/0xd90 [ 372.672086][ C0] __slab_free+0x274/0x2c0 [ 372.672111][ C0] qlist_free_all+0x99/0x100 [ 372.672129][ C0] kasan_quarantine_reduce+0x148/0x160 [ 372.672160][ C0] __kasan_kmalloc+0x22/0xb0 [ 372.672180][ C0] __kmalloc_noprof+0x36b/0x720 [ 372.672208][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 372.672234][ C0] ? tomoyo_encode+0x2ad/0x570 [ 372.672253][ C0] ? tomoyo_encode+0x2ad/0x570 [ 372.672277][ C0] tomoyo_encode+0x2ad/0x570 [ 372.672300][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 372.672329][ C0] tomoyo_path_perm+0x283/0x560 [ 372.672356][ C0] ? tomoyo_path_perm+0x251/0x560 [ 372.672384][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 372.672416][ C0] ? __lock_acquire+0x6df/0x2e50 [ 372.672446][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 372.672467][ C0] ? __d_lookup+0x66/0x790 [ 372.672497][ C0] ? __d_lookup+0x6f3/0x790 [ 372.672526][ C0] tomoyo_path_rmdir+0xaa/0xf0 [ 372.672549][ C0] ? __pfx_tomoyo_path_rmdir+0x10/0x10 [ 372.672576][ C0] ? d_lookup+0x80/0xa0 [ 372.672605][ C0] security_path_rmdir+0x15f/0x330 [ 372.672628][ C0] filename_rmdir+0x20d/0x520 [ 372.672650][ C0] ? __pfx_filename_rmdir+0x10/0x10 [ 372.672677][ C0] ? do_getname+0x151/0x250 [ 372.672700][ C0] __se_sys_unlinkat+0x71/0x1a0 [ 372.672721][ C0] do_syscall_64+0x166/0x520 [ 372.672748][ C0] ? trace_irq_disable+0x3b/0x140 [ 372.672765][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.672784][ C0] ? clear_bhb_loop+0x70/0xc0 [ 372.672805][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.672823][ C0] RIP: 0033:0x7f306559d277 [ 372.672840][ C0] Code: 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.672856][ C0] RSP: 002b:00007ffd71d20a58 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 372.672874][ C0] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f306559d277 [ 372.672887][ C0] RDX: 0000000000000200 RSI: 00007ffd71d21ba0 RDI: 00000000ffffff9c [ 372.672900][ C0] RBP: 00007f3065634474 R08: 00000000000065d0 R09: 00000000ffffffff [ 372.672912][ C0] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd71d21ba0 [ 372.672925][ C0] R13: 00007f3065634474 R14: 000000000002d977 R15: 00007ffd71d21be0 [ 372.672948][ C0]