last executing test programs: 42.601377979s ago: executing program 0 (id=891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff00000000711099000000000095000000000000008f1932d135684315a2f971a63ccea4dd75811f7c43d08f6c9923a4e74937bd3ac8a3a4f80fa1eb3c76c358dcc34ed6bc7f21fdbecf0bf8fb20a0933bcd1cf83dcc86b7d391683c71"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8502}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}]}, 0x3c}}, 0x8000084) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r2, 0x210, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x24002000) 42.320334422s ago: executing program 0 (id=897): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000240)={0x6, 'pim6reg1\x00', {}, 0x8}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10085) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}]}, 0x44}}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000240)={0x6, 'pim6reg1\x00', {}, 0x8}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x4}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10085) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}, @IFLA_IPOIB_UMCAST={0x6, 0x3, 0x1}]}}}]}, 0x44}}, 0x4008000) (async) 42.049672111s ago: executing program 0 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000680)="a609d1574c5a", 0x0}, 0x20) 41.914090409s ago: executing program 4 (id=906): r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcb, 0x0, 0x76e6) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="6bb4130a0edad587988fec2ef8c75f10f5a996874da3e534262d6227722716e1b64c9d92d4cf8c6624c0a91f542a5b3837ddfcaeca854c285b", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @remote}]}}}]}, 0x3c}}, 0x20004804) setsockopt$inet6_udp_encap(r2, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname$packet(r4, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r6, 0x701, 0x0, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0xc008}, 0x4008010) 41.825918458s ago: executing program 0 (id=908): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x44055) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x40000000015, 0x805, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8, 0x8, 0x2, 0xbe, 0x52a, 0x0, 0x3}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r7, 0x903, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 41.760403836s ago: executing program 2 (id=910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r1, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0xa, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, &(0x7f0000000040)) r3 = socket(0x400000000010, 0x5, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0xa4ff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000010000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}, 0x1, 0x0, 0x0, 0x2404c058}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000015f541a2ea1200f7001d0073907800000300e000000100000000fe9a90780200000000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x260580e9}, 0x810) 41.579346911s ago: executing program 4 (id=911): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) close(r1) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000000d0a030000000000000000000000000a0900020073797a31000000000900020073797a3000000004400000000208000440000000010900020073797a30000000000900010073797a3000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x40880}, 0x40800) r5 = socket(0xa, 0x3, 0x3a) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="1c00000020007fafb72d13b2a4a2719302000000030b43026c262369", 0x1c}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000ac0)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x200001, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0xb, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x101, 0x17f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "f4e66e076e0872418528fa7c68e560a633dfc61fb7ac3690ef5cfb5b190b1963277f710a"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002"], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r5) sendmsg$SMC_PNETID_ADD(r12, &(0x7f00000001c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r13, 0x300, 0x70bd28, 0xb30, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40010) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r14, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYBLOB="9923d5e4b96fb5f71feea9797bb2071230f7099158d2514882e516491e35f33e0dacf2b5e5b41236df797782ff95bb69039bfe49f645fda1af9109bd02881ee753202abb", @ANYRES32=r0, @ANYRESHEX=r6, @ANYBLOB="4c00238005001d0000000000060016002000000005000800090000000800150060"], 0x90}, 0x1, 0x0, 0x0, 0x85}, 0x44850) 41.292264423s ago: executing program 0 (id=913): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept$alg(r0, 0x0, 0x0) write(r8, 0x0, 0x0) recvmmsg(r8, &(0x7f0000007640)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003300)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/222, 0xde}, {&(0x7f0000001980)=""/3, 0x3}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x5, &(0x7f0000003380)=""/152, 0x98}, 0x800000}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000003440)=""/230, 0xe6}, {&(0x7f0000003540)=""/83, 0x53}, {&(0x7f00000035c0)=""/143, 0x8f}, {&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/29, 0x1d}], 0x5, &(0x7f0000004740)=""/233, 0xe9}, 0x5}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004840)=""/163, 0xa3}, {&(0x7f0000004900)=""/63, 0x3f}, {&(0x7f0000004940)=""/77, 0x4d}, {&(0x7f00000049c0)=""/148, 0x94}, {&(0x7f0000004a80)}], 0x5, &(0x7f0000004b40)=""/164, 0xa4}, 0x8001}, {{&(0x7f0000004c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004c80)=""/157, 0x9d}], 0x1, &(0x7f0000004d80)=""/253, 0xfd}, 0x7}, {{&(0x7f0000004e80)=@caif=@rfm, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f00)=""/124, 0x7c}, {&(0x7f0000004f80)=""/129, 0x81}, {&(0x7f0000005040)=""/160, 0xa0}, {&(0x7f0000005100)=""/128, 0x80}], 0x4, &(0x7f00000051c0)=""/5, 0x5}}, {{&(0x7f0000005200)=@caif=@util, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005280)=""/49, 0x31}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/206, 0xce}, {&(0x7f00000063c0)=""/113, 0x71}, {&(0x7f0000006440)=""/35, 0x23}, {&(0x7f0000006480)=""/171, 0xab}, {&(0x7f0000006540)=""/82, 0x52}], 0x7, &(0x7f0000006640)=""/4096, 0x1000}, 0x8}], 0x6, 0x40000000, &(0x7f00000077c0)={0x77359400}) recvmmsg(r8, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1}, 0x3}], 0x1, 0x2100, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x28, r11, 0xc4fc9e906872338b, 0x0, 0x25dfdc01, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x40, 0x3}}}}}, 0x28}}, 0x44000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r9, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1a8, r11, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}, @NL80211_ATTR_IE={0xf3, 0x2a, [@perr={0x84, 0x5c, {0x4, 0x6, [{{}, @device_a, 0xa, @void, 0x3d}, {{}, @device_a, 0xb, @void, 0x10}, {{}, @device_b, 0x1, @void, 0x1e}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x1a}, {{}, @broadcast, 0x0, @void, 0x2}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x31}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x88, 0x7}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x20}}, @mesh_chsw={0x76, 0x6, {0x3b, 0xff, 0x28, 0xa05}}, @peer_mgmt={0x75, 0x14, {0x1, 0x0, @void, @void, @val="d09c62e2199ac1420288286e6b346b51"}}, @preq={0x82, 0x62, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0xf5, 0x2, 0x8, @broadcast, 0x3d, @value=@device_b, 0x8, 0xb9, 0x6, [{{0x1, 0x0, 0x1}, @device_a, 0x4}, {{}, @device_b, 0x400000}, {{0x0, 0x0, 0x1}, @device_a, 0x100}, {{0x1}, @device_a, 0x80000000}, {{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @broadcast, 0x7f}]}}]}, @NL80211_ATTR_IE={0x59, 0x2a, [@perr={0x84, 0x2f, {0x10, 0x3, [{{0x0, 0x1}, @broadcast, 0x1, @value, 0x24}, {{}, @device_a, 0x800, @void, 0x1b}, {{}, @device_b, 0x3, @void, 0x18}]}}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4e4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0xaa4f, 0x5}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}]}, 0x1a8}, 0x1, 0x0, 0x0, 0xc1}, 0x44) 41.289021683s ago: executing program 2 (id=916): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x1000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r1 = socket(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r3, &(0x7f0000000300), 0x0}, 0x20) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x1}, 0x3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newtaction={0x24c, 0x30, 0x1, 0x0, 0x0, {}, [{0x238, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xe4}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x1b4, 0xc, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6211cb98, 0x0, 0x4, 0x5, 0x1ff}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xffff0000, 0x4, 0x2000000d, 0x6}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x0, 0x3, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x93, 0x4, 0x6, 0x8c42, 0x9f4}, @local, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x1, 0x9, 0xe}, @dev={0xac, 0x14, 0x14, 0x1a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7ff, 0xfff, 0x2, 0xe000, 0x2}, @multicast1, @rand_addr=0x64010100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x4, 0x2, 0x5}, @private=0xa010102, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x7, 0x6, 0x2}, @private=0xa010102, @loopback, 0xffffff00}}]}, {0x4b, 0x6, "dd1f9ce6c137f0f088e7e6baabc747eb6106674069132dc847dc69eb0c5d97fd2a86d03ab1ecf74f1d9773d617bce6cf1aa66b3f5330ba1465791b94d754d61a942057d76f3cd5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x24c}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0xa17, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) 41.115414716s ago: executing program 2 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 41.077402114s ago: executing program 1 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff8, 0x10}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) 41.001500643s ago: executing program 3 (id=919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) poll(&(0x7f0000000280)=[{r0, 0x82}], 0x1, 0xfffffffa) 40.980542843s ago: executing program 1 (id=920): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000400), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 40.95160002s ago: executing program 3 (id=921): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x2000000) (async) r1 = socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000"], 0x14}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r6, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) (async) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000002074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000001140)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}, 0xf5ffffff}], 0x1, 0x0) (async) close(r5) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="180000002f00090027bd70000000000004000000040040143a9150f819f94ed567cf1b4ca0b7f783ca920c1edbd159623dd1370000405d08478adae4e84a0aa476486101677dd1581d19e326b5e12a137cdea30c825179d687051988696d8b5426fb4a37ad61362a1af57bc7022a"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100001f7ffffff00000000000500000a44000000090a010400000000000000000a8e00040900010073797a31005fdc3541d2cf23d5a083a40008000540000000020900020073797a310000000008000a40fffffffc0800034000000130140000001100010000000000000007000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x68, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x10000004) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) 40.845131401s ago: executing program 2 (id=922): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) (async) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000001b0089fd0000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000000000000000000200206000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000c0008000826"], 0xcc}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r3) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r8, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x5, 0x4) syz_extract_tcp_res(&(0x7f0000000480), 0x0, 0x7) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYBLOB="865fffffffaaaaaaaaaabb88a814008100000008004c1800480064000004069078e00000017f000001861900000002000600479c0f070a91705fbed77a6c810203a30000004e204e2300", @ANYRES32=0x41424344, @ANYRES32=r9, @ANYBLOB="6180095e9078000203030400"], 0x0) syz_emit_ethernet(0x20e, &(0x7f00000008c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0xc}], @ipv4=@tipc={{0x34, 0x4, 0x3, 0x34, 0x1f4, 0x9fd, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @empty, {[@rr={0x7, 0xb, 0x6a, [@empty, @multicast2]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x9d, [@multicast1, @empty]}, @timestamp_prespec={0x44, 0x24, 0xe4, 0x3, 0x0, [{@private=0xa010100, 0xfffffffa}, {@broadcast, 0x3}, {@remote, 0x2}, {@rand_addr=0x64010102, 0x1}]}, @timestamp={0x44, 0x24, 0x62, 0x0, 0x0, [0x7932, 0x8, 0x0, 0x33e, 0x40, 0x4119, 0x3, 0x80000001]}, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x1, [{@loopback, 0x1000}, {@multicast2, 0xe}, {@remote}]}, @timestamp_addr={0x44, 0x24, 0x79, 0x1, 0x0, [{@private=0xa010102, 0x1}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@multicast2, 0x4}]}, @generic={0x82, 0xc, "c2d01978758909aceebf"}, @noop, @ssrr={0x89, 0xb, 0xb7, [@rand_addr=0x64010100, @multicast1]}]}}, @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4e24, 0x4e24, 0x0, 0x582e8d67, 0x0, 0x0, 0x1}, [{0x6, 0x0, 0x66, 0x2, 0x4, 0x4, 0x0, 0x3}, {0x3, 0xc, 0x4, 0x80000000, 0x5, 0x6, 0x3, 0x4}, {0x4, 0x6ee, 0x6, 0x0, 0xc58a, 0x4, 0x3, 0x3}, {0xffffff95, 0x80000000, 0x6af, 0xf2, 0x4, 0x2, 0x9}, {0x2, 0x4, 0x80, 0x4, 0x6, 0xffffffff, 0x5, 0x4}, {0x27a0eac7, 0x4, 0x22c7, 0x1000, 0x70000, 0x7, 0x7, 0xffffffe}, {0xed47, 0x4, 0x7, 0x5, 0x6, 0x53, 0x7}, {0x955b, 0xfff, 0xffffffff, 0x5, 0x8, 0x5, 0x3, 0x101}, {0x9, 0x6, 0x74, 0x9, 0xfffffffe, 0x9, 0x7, 0x9}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x20e, &(0x7f00000008c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0xc}], @ipv4=@tipc={{0x34, 0x4, 0x3, 0x34, 0x1f4, 0x9fd, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @empty, {[@rr={0x7, 0xb, 0x6a, [@empty, @multicast2]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x9d, [@multicast1, @empty]}, @timestamp_prespec={0x44, 0x24, 0xe4, 0x3, 0x0, [{@private=0xa010100, 0xfffffffa}, {@broadcast, 0x3}, {@remote, 0x2}, {@rand_addr=0x64010102, 0x1}]}, @timestamp={0x44, 0x24, 0x62, 0x0, 0x0, [0x7932, 0x8, 0x0, 0x33e, 0x40, 0x4119, 0x3, 0x80000001]}, @timestamp_addr={0x44, 0x1c, 0xae, 0x1, 0x1, [{@loopback, 0x1000}, {@multicast2, 0xe}, {@remote}]}, @timestamp_addr={0x44, 0x24, 0x79, 0x1, 0x0, [{@private=0xa010102, 0x1}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}, {@multicast2, 0x4}]}, @generic={0x82, 0xc, "c2d01978758909aceebf"}, @noop, @ssrr={0x89, 0xb, 0xb7, [@rand_addr=0x64010100, @multicast1]}]}}, @name_distributor={{0x124, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4e24, 0x4e24, 0x0, 0x582e8d67, 0x0, 0x0, 0x1}, [{0x6, 0x0, 0x66, 0x2, 0x4, 0x4, 0x0, 0x3}, {0x3, 0xc, 0x4, 0x80000000, 0x5, 0x6, 0x3, 0x4}, {0x4, 0x6ee, 0x6, 0x0, 0xc58a, 0x4, 0x3, 0x3}, {0xffffff95, 0x80000000, 0x6af, 0xf2, 0x4, 0x2, 0x9}, {0x2, 0x4, 0x80, 0x4, 0x6, 0xffffffff, 0x5, 0x4}, {0x27a0eac7, 0x4, 0x22c7, 0x1000, 0x70000, 0x7, 0x7, 0xffffffe}, {0xed47, 0x4, 0x7, 0x5, 0x6, 0x53, 0x7}, {0x955b, 0xfff, 0xffffffff, 0x5, 0x8, 0x5, 0x3, 0x101}, {0x9, 0x6, 0x74, 0x9, 0xfffffffe, 0x9, 0x7, 0x9}]}}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 40.844852333s ago: executing program 3 (id=923): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0) listen(r0, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0), 0x69) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r3], 0x68}}, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r6, 0x0, 0xd0, 0x0, &(0x7f0000000080)) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24000094) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x4a, 0x0, &(0x7f0000000280)) r9 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r2, &(0x7f00000000c0)={0x20000000}) accept4(r2, &(0x7f0000000300)=@qipcrtr, &(0x7f0000000380)=0x80, 0x80800) 40.84063999s ago: executing program 1 (id=924): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000003000000000000ffff0000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 40.721098282s ago: executing program 1 (id=925): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102"], 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000080000000100000000000008010000000100000000000008030000000e0000000000000c030000000100000005000006e09e00000b000000ff01000004000000070000000f00000007000900000000000000ffff1000000000000000080000000000000905000000005f5f303f"], 0x0, 0x84}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r5}, 0x38) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfff, '\x00', r7, r8, 0x5, 0x1, 0x4}, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) setsockopt(r10, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000e3ffff3b0000003c0000000a000000000000000000000200000000000000000000000a000000000500000000000008000000000000000001000085000000000800000001000000000000000000003000615f005f00"], &(0x7f0000001400)=""/149, 0x5e, 0x95, 0x1}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) sendmsg$inet(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060200000800020011000000", 0x5c}], 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 40.621288239s ago: executing program 4 (id=926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async) r1 = accept$alg(r0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) (async) write$nbd(0xffffffffffffffff, &(0x7f00000006c0)={0x67446698, 0x1, 0x3, 0x3, 0x3, "95995c1e5da6c569282c0b3ac78f4fc7ad99d3cb80cee574ee8e396d7f422b797cc82630862f38c89c25d3ab6e7558f7df626aacf18c4d263ceb323799005ca80ae490df5332ac3cbdc7e62ed054cc3510003e2c0ac0b503ece89bbb401802535c57800dec783efc9abbc218d87b582d20064a50e9c7dcc8a733f2b6f81b121167195565950e964a73ee2a54f0a2f5fce22e6177e2dc4b56dd0ed3e8c9ba18"}, 0xaf) (async) accept4(r1, 0x0, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000480)={0x18}) r5 = socket$netlink(0x10, 0x3, 0x4) (async) epoll_wait(r4, &(0x7f0000000300)=[{}], 0x1, 0x7ffffffd) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r4], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4005) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef000000080002400000000009ed00007379c37a30000000000900020073797a3200000000f7ff05801400000011000100"/144], 0x90}}, 0x0) (async) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) (async) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)={0x4c, 0x13, 0x100, 0x70bd29, 0x25dfdbff, {0x1, 0x70, 0x6, 0x7, {0x4e22, 0x4e24, [0x4, 0xffffffff, 0xfff, 0x2], [0x7, 0x121, 0xabaf, 0x80000001], 0x0, [0x2a, 0x3]}, 0x3, 0x8}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 40.619881495s ago: executing program 3 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000002f0009002abd7000000000000400000045001180e796bd6dd42541498fc605baa5fe20e0f8a725f9f47392b70f555def59af68eb7e2248690a54f682de475186e591e23ad38a08862df02baf"], 0x5c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x43, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x6, "706883700ad4"}]}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x3}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001010500000000000000000000000000b2df2caafb63357941600ea90600124000000000"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6be}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettfilter={0x54, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xfff2}, {0xc, 0x1}}, [{0x8, 0xb, 0xff}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5a8f}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x4084) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x68, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) 40.50943279s ago: executing program 1 (id=928): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c746572ad50372615d30b1c00000000000000000000000000000000000004"], 0x68) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f00000003c0)="9e91d93a92dc7c8fff478bb539e2a1485d4c9223a7dfe538a2e2fea246c93b0b063c410ae0", 0x25}], 0x2}, 0x20008b88) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x5, 0x4, 0x9, 0x0, 0x0, [{{r0}, 0x8}, {{r0}, 0x8}, {{r0}, 0x28d000}, {{r0}, 0x6}, {{r6}, 0x2}, {{r4}, 0xd0a}, {{r4}, 0x1}, {{r0}, 0xfffffffffffffd6c}, {{r0}, 0x8}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000380)={r6, &(0x7f00000001c0)='({](\x00', 0x32040, &(0x7f0000000200)={@align=0x7, {0x1, 0x1, 0x4, 0x3d60}}, 0x2, &(0x7f0000000280), &(0x7f0000000340)=0x7}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r7, 0x4) 40.418930076s ago: executing program 4 (id=929): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5b5e26bd7000fcdbdf250100000008000800a71577756b0988c5f57443887f00000106000a004e230000"], 0x24}}, 0x90) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000006, 0x20, 0x10000000fffdf}, 0x2f) close(0x4) (async) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0xc000, r0}, 0x18) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0xb, 0x0, 0x100000, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) sendmsg$kcm(r8, &(0x7f00000009c0)={&(0x7f00000003c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)="583268da88ad0a663578d3e53b3efc7f76f5c7fc79f23eaf72ab910b8a948ea75d76f099403bd022a874ee1e1928f6d5a7c27d265843f5a8ef2b1ba3fccfed6394c59efd1f2c9aca69e36ad844c8f5ae15a2e26b2b779a29c71b451af83ad7699a8457921f6f20d6862cc2cde3ff8e5ea460a592a74abb8232c45c4b0768009d390220bbf7bc2bf43d2908146491da4a5a", 0x91}, {&(0x7f00000005c0)="d46dcf2c4dcf8522a808790f1e3501b8c309dcb6978dec9c4c59f35ff05fb3c7f76bf0847f5e155eaeebb744fdaad18961166abf5fcfeb6bf06f40ef3ffcaf40777810f273479bfb1d30e5e4f030f67c09ed23", 0x53}, {&(0x7f0000000640)="5ba5eaf2c6f50ea3b39d91791d910105ccca25bdeb6ea094fb2cec0d1e01d021d02010cc8e8c429677d0eb93c49d8f13c1b42062095ebb91d51d2b224bd45233c88ad496ca223155177ec10dcec8fb620cac2250636a94525effda1d6e76b2ecd0bb7dcd2d3b822a61e3f9326be94c9b539287da554efc0363b4c72a9f673d08181792fe7bb2c20a32f65c8a8a21d41c21bce0811ca250874eca1c542c3375c56a5f81b8ad731307e3b917f5b689ceb09c1e6ce1aeda0167d73279e8241763aaff7c73f401b094ff70f7605ad7b7", 0xce}], 0x3, &(0x7f0000000780)=[{0x60, 0x108, 0x9, "d91a0056610e3c9da9f3e15c6cf73e747c750ef672d8ae6206ccf5a544c580556b229d04bc132b149b66006ab3db6f3ee90c145688d285cef7ce8a627bfc84c380039963f23b84c785501d9afec8"}, {0x68, 0x111, 0x0, "9b3231b4d4d8db14ff65a7ff1c91ca008791e022638a631430e48e8342fe75b88866f236ebb9a4fc004bc85bf3db1514ac9b63cd4f521cec70ea63e02d27d490395e866deb05ea900398a16220818ed0835acc43"}, {0xc0, 0x111, 0xffff, "20a5d929b2a472322dad3396c33b3be4d656c364cdaea70d12fc1c5e9168662f6e1c4239b20402e6b1bf206c3988e0e7618fc47de3d203a91312eb33a9c5f7b64a5e9b35ec91906781315ee490b94ade6bc26297ccfc5c9c0a5c4cc5b3ac16a49d472ce47d28effa9f71b237ff863c3f3c51272a9c9799ee25976f6c8adfbc348daa85366b6c9f781ba0a4a143241edfc157bfe91543f3efb40482f87950ea6f7fc94ec76c882973f0af68"}, {0x68, 0x0, 0x2d8, "25f2d8ee9b18affae56c811019df9450374ea85ddfe7e8687f7e7495ea894a1e19914dce28be00d2001a3bf8c97b3f2a0a71bb85b14e38a11fc6a01de5bbf07d55a127b423d4a1f1dae2155d18e12bfff2da2c45"}, {0x40, 0x88, 0x8, "657f00f5a895a26f5e8b4841eb16c3cd88c57c88ae082e4de5345daa9f6d9a96fd34529b0cbbc0cb10bb3daf8bc7e098"}], 0x230}, 0x4010015) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x38, r12, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000a40)={&(0x7f0000000340), 0xc, &(0x7f0000000a00)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00032dbd7000fddbdf2519000000180001801400020069705f767469300000000000000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000164239dfbe1de73e593b70fb860ccb7c86ff5edca1989c72400000000", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020064756d6d7930000000000046ec9ea50000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44) (async) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r13, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) (async) connect$bt_l2cap(r13, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20004000) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) ioctl$sock_inet_tcp_SIOCINQ(r8, 0xff02, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r0, r4, 0x34, 0x9, r5, @void, @value=r8, @void, @void, r6}, 0x20) 40.341937748s ago: executing program 1 (id=930): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x8000, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 39.87593279s ago: executing program 4 (id=931): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7080005"], 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r7, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f03fc0e210000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 39.831869189s ago: executing program 2 (id=932): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x80000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x1000) recvmmsg(r4, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x24040000) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x40002102, 0x0) 38.505126185s ago: executing program 3 (id=933): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r1 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000440)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000003c0)=0x40a8a639, 0x4) 38.503742346s ago: executing program 2 (id=934): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r0, @ANYBLOB="1fe4e67007c0fd529828c0d2e3b01b993c44c70bafc092bad3fa6dc7580fa9e1278066b8237adcd112dc8ffefe8deea5e546f236", @ANYRESOCT=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc050}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x36, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 34.523311189s ago: executing program 0 (id=935): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x1) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r3, 0x7) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x100) (async) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) (async) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 34.522664607s ago: executing program 4 (id=936): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000002d0013000000000000007a7ce9c1779045ec4d9731000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040040) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000580)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000040)=0x10001, 0x4) readv(r4, &(0x7f0000000440)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1) (async) readv(r4, &(0x7f0000000440)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') gettid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)) (async) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000180)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b40)={r6, 0x8, 0x0, [0xffffffff, 0x10001, 0x9, 0xcb09, 0x8], [0x5, 0x9, 0x8, 0x57, 0x4, 0x4, 0x5, 0x9, 0x7, 0x3, 0x0, 0x8001, 0x7fffffff, 0x5, 0x8, 0x7fffffff, 0x40, 0x9, 0xdd5b, 0x2, 0x5, 0x0, 0x10000000, 0x944, 0x2, 0xf7c, 0x800, 0x9, 0x7fffffffffffffff, 0x4, 0xfffffffffffffffc, 0x682, 0x1, 0x3, 0x9, 0x7, 0x6, 0x2, 0x7b, 0x100000001, 0x0, 0x1ff, 0x8, 0x5, 0xffffffffffff7fff, 0xe3d, 0x3, 0x8, 0x1, 0x100000000, 0xeb70, 0x278, 0x1, 0x1ff, 0x9, 0x1, 0x3e, 0x7fffffffffffffff, 0xf, 0x7, 0x7e40800000000, 0x1000, 0x10, 0x6, 0x5, 0x9, 0x4, 0x3ff, 0xffffffffffffffff, 0x640, 0x3, 0x4, 0x9, 0x979, 0x101, 0x408cba0f, 0xfff, 0x401, 0x83c, 0x3ff, 0x0, 0x6, 0x4e, 0x3, 0x3, 0x9, 0x5, 0x6, 0x2, 0x265295a6, 0x5b2, 0x1, 0x1, 0x9, 0x0, 0xffff, 0x9, 0xfff, 0x5, 0x6, 0x0, 0xea4, 0xc, 0x9, 0x7, 0x7fff, 0x6, 0xfffffffffffffffb, 0xe48, 0x8, 0x1, 0x9, 0xfffffffffffffffe, 0x3, 0x3, 0xd36, 0x5, 0xf, 0x6, 0x8001]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b40)={r6, 0x8, 0x0, [0xffffffff, 0x10001, 0x9, 0xcb09, 0x8], [0x5, 0x9, 0x8, 0x57, 0x4, 0x4, 0x5, 0x9, 0x7, 0x3, 0x0, 0x8001, 0x7fffffff, 0x5, 0x8, 0x7fffffff, 0x40, 0x9, 0xdd5b, 0x2, 0x5, 0x0, 0x10000000, 0x944, 0x2, 0xf7c, 0x800, 0x9, 0x7fffffffffffffff, 0x4, 0xfffffffffffffffc, 0x682, 0x1, 0x3, 0x9, 0x7, 0x6, 0x2, 0x7b, 0x100000001, 0x0, 0x1ff, 0x8, 0x5, 0xffffffffffff7fff, 0xe3d, 0x3, 0x8, 0x1, 0x100000000, 0xeb70, 0x278, 0x1, 0x1ff, 0x9, 0x1, 0x3e, 0x7fffffffffffffff, 0xf, 0x7, 0x7e40800000000, 0x1000, 0x10, 0x6, 0x5, 0x9, 0x4, 0x3ff, 0xffffffffffffffff, 0x640, 0x3, 0x4, 0x9, 0x979, 0x101, 0x408cba0f, 0xfff, 0x401, 0x83c, 0x3ff, 0x0, 0x6, 0x4e, 0x3, 0x3, 0x9, 0x5, 0x6, 0x2, 0x265295a6, 0x5b2, 0x1, 0x1, 0x9, 0x0, 0xffff, 0x9, 0xfff, 0x5, 0x6, 0x0, 0xea4, 0xc, 0x9, 0x7, 0x7fff, 0x6, 0xfffffffffffffffb, 0xe48, 0x8, 0x1, 0x9, 0xfffffffffffffffe, 0x3, 0x3, 0xd36, 0x5, 0xf, 0x6, 0x8001]}) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_getvlan={0x38, 0x72, 0x8, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x38}}, 0x2000c800) sendmsg$nl_generic(r1, &(0x7f0000001440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000f80)={0x3e8, 0x18, 0x200, 0x70bd28, 0x25dfdbff, {0x12}, [@generic="bc5e26bb96659b046d8b27e8e6b0e26912f7456d62477249cffa018140aae6e49a998f3b8c2121b2bd1d5da32c71c05d72de3c4e4ecf6df1035169cd0359620ac28e4ba3e0c7335c23cfe2b1f3c53d99bb75775ef29d9bfd9054f5e31f45d9a167c57bf8495a7c4a135aa5306da544760256db80cb3a1a0e8b57650e7bff5c82e90732003a29bfb9d3d53dfe698d729a75d052a8f3a70536d941f7a50aaad4c1ff710d01319bfd8b05c34c", @typed={0xc1, 0x11f, 0x0, 0x0, @binary="d7e33261438e164bb7bc0839dd2abbb9a563e4d98613f16b90f4c3aeb609a33ecf9102eea1697e7c5e7a80060233cfe341598e002603ef6d7229c3bff798c5a582bb4e9b1cd34e685f12cce896c9ab9d9623478bed8216cf3a210df8016e2564d064ebef2bae00ff76d371b3fe7a746e8670ed78febf5d7db9157297650541a9081bf42de265f8c2f5234d355ed1f9887438ca781007bb15ab8b8a1661153cca497caba3f1ade0e78d3555641df04721d5c84f880e81839bd497faa247"}, @nested={0x1a2, 0xe9, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @u32=0x5}, @generic="c9331f421bc1780dee13c184f06d04b34de78fdff69ca0b182769814b060a5356e7c45cf5ae5816dbdf786f9967b891268e543e9ecd5d6bb60b4fe9d6f09bbc4f2cc00b83c170badb89402c7edd2902dfd8705c41e7a9febbc4e129e79d455f17cdac62fdcac47c0eaa57774a14876b17f62f5f3aac0e6f1ca52e88ab3535ca9fc508b261a7fe5be1c326f63666c600ead024eedea4fd1e589077c99adbda2f9eb25d928a5a240d1365785db5f049e7436bd0386b88e2d20fcf23f6d3c0c791e964d795d3032cdc6c0bde272ce5647e83c1daca1664eea37cbd99390caf6484daa8a", @nested={0x4, 0x153}, @generic="83964ce3ccacc5b26347f692733f2bf10e303dfb95cd5ae939e32537ecff2c2e6c13e67677e447f0a00686c18a297a2bac", @generic="f42df5a76695ddee52c76bb167c69f4ba4f9dc12ed642c3d0c7de0ede9b17e04fa602d206f2ffdfaf2f3c3f7f2072977f5eae1eab6fe8f398748607fa57bacc95554e1e26158bc723bd4c6ff7d0c622c67b10b0dc2c64722c7531e84a21fcdd7dc212a80e09e9f47bb8d3ad4b809318aff596bd20d9eff582a1a17", @nested={0x4, 0x121}]}, @generic="081a8233a266d425c5f80522c4960cfc628642062a49f44a5b9e8009f50fe742eb108078bdba48d68c1c94dc4f495762817c06523d16e5cbd90a643caa47c71ef9d8ff81979609e60e7b42f4509799732c9e67d8fa8f2baa253c19dfa89dfdea97a476c50ddd61a44e8eb0c10260416a375d63211bd6f5d18794bc16ef466a72ceb0f5ca7c3c762a016a74e8f40f75db28df8ff3f9b9f697bf7af88bc13dc15b7754470c7acd0ded44113998d4bcf7163422eaef03d9f4ab3aeffd", @typed={0x4, 0xaa}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x20008884}, 0x10) 34.521878379s ago: executing program 3 (id=937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302005902141280ff002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 0s ago: executing program 32 (id=930): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x8000, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 68.780813][ T5612] cgroup: Unknown subsys name 'net' [ 68.912182][ T5612] cgroup: Unknown subsys name 'cpuset' [ 68.921519][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.375811][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.400438][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.407249][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.463965][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.475097][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.485107][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.486442][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.501835][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.509243][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.519819][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.527979][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.539120][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.547682][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.555249][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.564981][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.570915][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.582724][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.584301][ T4944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.593956][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.604796][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.605003][ T5631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.620975][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.629693][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.641809][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.650873][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.659279][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.666823][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.674836][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.310555][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.317824][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.325232][ T5635] bridge_slave_0: entered allmulticast mode [ 74.332444][ T5635] bridge_slave_0: entered promiscuous mode [ 74.380838][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.388096][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.395271][ T5635] bridge_slave_1: entered allmulticast mode [ 74.402644][ T5635] bridge_slave_1: entered promiscuous mode [ 74.460455][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.467628][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.475010][ T5625] bridge_slave_0: entered allmulticast mode [ 74.482055][ T5625] bridge_slave_0: entered promiscuous mode [ 74.514989][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.522309][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.529898][ T5625] bridge_slave_1: entered allmulticast mode [ 74.536828][ T5625] bridge_slave_1: entered promiscuous mode [ 74.560971][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.600906][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.610690][ T5636] Bluetooth: hci0: command tx timeout [ 74.651107][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.659293][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.666466][ T5624] bridge_slave_0: entered allmulticast mode [ 74.673739][ T5624] bridge_slave_0: entered promiscuous mode [ 74.680253][ T5636] Bluetooth: hci2: command tx timeout [ 74.688162][ T5636] Bluetooth: hci1: command tx timeout [ 74.709219][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.728030][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.735291][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.742679][ T5624] bridge_slave_1: entered allmulticast mode [ 74.749691][ T5624] bridge_slave_1: entered promiscuous mode [ 74.758542][ T50] Bluetooth: hci4: command tx timeout [ 74.759172][ T5635] team0: Port device team_slave_0 added [ 74.764738][ T5636] Bluetooth: hci3: command tx timeout [ 74.769795][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.782389][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.789685][ T5640] bridge_slave_0: entered allmulticast mode [ 74.796962][ T5640] bridge_slave_0: entered promiscuous mode [ 74.806146][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.824559][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.832175][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.839674][ T5634] bridge_slave_0: entered allmulticast mode [ 74.846657][ T5634] bridge_slave_0: entered promiscuous mode [ 74.864445][ T5635] team0: Port device team_slave_1 added [ 74.870360][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.877443][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.885953][ T5640] bridge_slave_1: entered allmulticast mode [ 74.893216][ T5640] bridge_slave_1: entered promiscuous mode [ 74.910505][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.917773][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.925173][ T5634] bridge_slave_1: entered allmulticast mode [ 74.932322][ T5634] bridge_slave_1: entered promiscuous mode [ 74.966856][ T5625] team0: Port device team_slave_0 added [ 74.986459][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.016828][ T5625] team0: Port device team_slave_1 added [ 75.033509][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.043540][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.050542][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.076470][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.091187][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.112819][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.124523][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.144491][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.151675][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.177796][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.190455][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.252714][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.259882][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.286728][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.308905][ T5624] team0: Port device team_slave_0 added [ 75.318866][ T5640] team0: Port device team_slave_0 added [ 75.325180][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.332287][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.358519][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.372228][ T5634] team0: Port device team_slave_0 added [ 75.380178][ T5624] team0: Port device team_slave_1 added [ 75.396482][ T5640] team0: Port device team_slave_1 added [ 75.411229][ T5634] team0: Port device team_slave_1 added [ 75.479875][ T5635] hsr_slave_0: entered promiscuous mode [ 75.486326][ T5635] hsr_slave_1: entered promiscuous mode [ 75.494161][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.501175][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.527117][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.549251][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.556262][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.582534][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.595185][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.602443][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.628886][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.649041][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.656025][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.681932][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.693390][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.700614][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.726548][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.770460][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.777451][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.803777][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.835814][ T5625] hsr_slave_0: entered promiscuous mode [ 75.842402][ T5625] hsr_slave_1: entered promiscuous mode [ 75.848967][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 75.855220][ T5625] Cannot create hsr debugfs directory [ 75.955477][ T5640] hsr_slave_0: entered promiscuous mode [ 75.962866][ T5640] hsr_slave_1: entered promiscuous mode [ 75.968991][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 75.974718][ T5640] Cannot create hsr debugfs directory [ 75.997993][ T5624] hsr_slave_0: entered promiscuous mode [ 76.004315][ T5624] hsr_slave_1: entered promiscuous mode [ 76.010714][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 76.016444][ T5624] Cannot create hsr debugfs directory [ 76.036161][ T5634] hsr_slave_0: entered promiscuous mode [ 76.042838][ T5634] hsr_slave_1: entered promiscuous mode [ 76.049630][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 76.055369][ T5634] Cannot create hsr debugfs directory [ 76.521986][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.534013][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.542594][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.553729][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.565990][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.575284][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.604771][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.615415][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.676487][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.679113][ T5636] Bluetooth: hci0: command tx timeout [ 76.692227][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.703235][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.712805][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.721067][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.732296][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.753979][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.758302][ T5636] Bluetooth: hci1: command tx timeout [ 76.762591][ T50] Bluetooth: hci2: command tx timeout [ 76.773713][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.839653][ T50] Bluetooth: hci3: command tx timeout [ 76.839830][ T5636] Bluetooth: hci4: command tx timeout [ 76.854983][ T5640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.865505][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.881349][ T5640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.891721][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.899577][ T5640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.909493][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.917414][ T5640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.927872][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.024297][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.034414][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.043629][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.054052][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.065072][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.076838][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.085071][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.094126][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.170939][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.226330][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.236439][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.246260][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.256286][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.265412][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.274759][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.283417][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.294762][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.346458][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.381451][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.389165][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.414674][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.424355][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.431528][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.487954][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.514478][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.544975][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.552128][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.585442][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.592614][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.627283][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.663829][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.671086][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.713649][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.720876][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.740829][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.785254][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.838949][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.866136][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.873311][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.893259][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.906463][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.913666][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.960342][ T3376] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.967542][ T3376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.022108][ T3376] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.029324][ T3376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.535103][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.758331][ T5636] Bluetooth: hci0: command tx timeout [ 78.841366][ T5636] Bluetooth: hci2: command tx timeout [ 78.846710][ T50] Bluetooth: hci1: command tx timeout [ 78.918653][ T50] Bluetooth: hci3: command tx timeout [ 78.920776][ T5636] Bluetooth: hci4: command tx timeout [ 78.987522][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.116201][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.222517][ T5625] veth0_vlan: entered promiscuous mode [ 79.293354][ T5625] veth1_vlan: entered promiscuous mode [ 79.341648][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.354598][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.405966][ T5640] veth0_vlan: entered promiscuous mode [ 79.427671][ T5640] veth1_vlan: entered promiscuous mode [ 79.436537][ T5625] veth0_macvtap: entered promiscuous mode [ 79.465658][ T5625] veth1_macvtap: entered promiscuous mode [ 79.491865][ T5635] veth0_vlan: entered promiscuous mode [ 79.543958][ T5634] veth0_vlan: entered promiscuous mode [ 79.550881][ T5635] veth1_vlan: entered promiscuous mode [ 79.562455][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.570526][ T5624] veth0_vlan: entered promiscuous mode [ 79.592533][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.612814][ T5640] veth0_macvtap: entered promiscuous mode [ 79.622666][ T5634] veth1_vlan: entered promiscuous mode [ 79.642499][ T5640] veth1_macvtap: entered promiscuous mode [ 79.651626][ T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.661642][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.671862][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.691240][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.701640][ T5624] veth1_vlan: entered promiscuous mode [ 79.768448][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.784849][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.805105][ T5635] veth0_macvtap: entered promiscuous mode [ 79.826229][ T5635] veth1_macvtap: entered promiscuous mode [ 79.860171][ T1130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.870154][ T1130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.893608][ T1130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.902767][ T1130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.923644][ T5634] veth0_macvtap: entered promiscuous mode [ 79.924847][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.942499][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.970345][ T5634] veth1_macvtap: entered promiscuous mode [ 79.996625][ T5624] veth0_macvtap: entered promiscuous mode [ 80.006458][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.030835][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.042227][ T5624] veth1_macvtap: entered promiscuous mode [ 80.052809][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.061922][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.095660][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.110836][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.139432][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.150082][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.161888][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.167802][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.176520][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.213010][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.233291][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.284285][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.305786][ T1130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.306495][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.337170][ T1130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.347360][ T1130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.362301][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.412290][ T1130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.431987][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447630][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.500994][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.512298][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.526430][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.547899][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.568790][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.630186][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.647314][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.810383][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.831571][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.838264][ T5636] Bluetooth: hci0: command tx timeout [ 80.902052][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.918011][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.918485][ T5636] Bluetooth: hci1: command tx timeout [ 80.919767][ T50] Bluetooth: hci2: command tx timeout [ 80.994035][ T3376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.003642][ T50] Bluetooth: hci4: command tx timeout [ 81.003664][ T5636] Bluetooth: hci3: command tx timeout [ 81.019885][ T3376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.120308][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.145175][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.923411][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 81.957293][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 82.002567][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 82.034608][ T5880] netlink: 'syz.1.16': attribute type 21 has an invalid length. [ 82.044737][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15'. [ 82.294149][ T5884] netlink: 'syz.3.17': attribute type 14 has an invalid length. [ 82.647539][ T5891] sctp: [Deprecated]: syz.1.19 (pid 5891) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.647539][ T5891] Use struct sctp_sack_info instead [ 82.910962][ T5902] syz.4.22 uses obsolete (PF_INET,SOCK_PACKET) [ 82.982119][ T5910] IPVS: set_ctl: invalid protocol: 12079 0.0.0.0:0 [ 82.991851][ T5904] Zero length message leads to an empty skb [ 83.204140][ T5914] netlink: 100 bytes leftover after parsing attributes in process `syz.1.26'. [ 83.770481][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'. [ 84.881030][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 84.893584][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 85.009769][ T6020] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 85.043347][ T6030] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 85.255386][ T6040] syzkaller0: entered promiscuous mode [ 85.275971][ T6040] syzkaller0: entered allmulticast mode [ 85.291067][ T6035] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 85.332571][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 85.354611][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 86.104738][ T6083] Cannot find add_set index 34 as target [ 86.514117][ T6106] netlink: 'syz.4.82': attribute type 21 has an invalid length. [ 86.582484][ T6102] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 86.737990][ T6119] : renamed from bond_slave_0 (while UP) [ 86.763884][ T808] cfg80211: failed to load regulatory.db [ 87.131326][ T6134] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 87.190493][ T46] IPVS: starting estimator thread 0... [ 87.261532][ T6128] team0: No ports can be present during mode change [ 87.309494][ T6137] IPVS: using max 33 ests per chain, 79200 per kthread [ 87.413313][ T6148] __nla_validate_parse: 8 callbacks suppressed [ 87.413329][ T6148] netlink: 32 bytes leftover after parsing attributes in process `syz.4.100'. [ 87.512302][ T6157] netlink: 32 bytes leftover after parsing attributes in process `syz.4.100'. [ 88.653789][ T6216] warning: `syz.4.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.937451][ T6181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.132431][ T6241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.122'. [ 91.141760][ T6242] netlink: 44 bytes leftover after parsing attributes in process `syz.4.124'. [ 91.211205][ T6250] bridge_slave_1: left allmulticast mode [ 91.236990][ T6250] bridge_slave_1: left promiscuous mode [ 91.295648][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.370158][ T6250] bridge_slave_0: left allmulticast mode [ 91.382202][ T6250] bridge_slave_0: left promiscuous mode [ 91.388177][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.617569][ T6276] x_tables: duplicate underflow at hook 1 [ 91.801952][ T6285] ip6t_srh: unknown srh invflags 4000 [ 91.849940][ T6279] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 91.863616][ T5636] block nbd0: Receive control failed (result -32) [ 91.887576][ T6279] netlink: 224 bytes leftover after parsing attributes in process `syz.0.132'. [ 92.034410][ T6296] netlink: 'syz.4.139': attribute type 1 has an invalid length. [ 92.236306][ T6304] netlink: 'syz.0.142': attribute type 3 has an invalid length. [ 92.255923][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 92.540754][ T6319] netlink: 'syz.0.149': attribute type 2 has an invalid length. [ 92.556891][ T6322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.625053][ T6324] Bluetooth: MGMT ver 1.23 [ 92.648100][ T6324] Cannot find add_set index 0 as target [ 92.659248][ T6327] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 92.883378][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.4.156'. [ 92.925387][ T6342] netlink: 84 bytes leftover after parsing attributes in process `syz.4.156'. [ 93.105703][ T6348] syzkaller0: entered promiscuous mode [ 93.125651][ T6348] syzkaller0: entered allmulticast mode [ 93.187748][ T6348] netlink: 244 bytes leftover after parsing attributes in process `syz.1.158'. [ 93.446838][ T6367] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 93.565916][ T24] IPVS: starting estimator thread 0... [ 93.583931][ T6373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.168'. [ 93.670174][ T6375] IPVS: using max 34 ests per chain, 81600 per kthread [ 93.984584][ T6403] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 94.020235][ T6403] xt_hashlimit: size too large, truncated to 1048576 [ 94.051879][ T6407] geneve2: entered promiscuous mode [ 94.068536][ T6414] netlink: 176 bytes leftover after parsing attributes in process `syz.1.178'. [ 94.091948][ T6414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.178'. [ 94.124694][ T6412] netlink: 176 bytes leftover after parsing attributes in process `syz.1.178'. [ 94.142118][ T6412] netlink: 32 bytes leftover after parsing attributes in process `syz.1.178'. [ 94.159764][ T6410] geneve2: entered promiscuous mode [ 94.290508][ T6413] bond1: Unable to set down delay as MII monitoring is disabled [ 94.300985][ T6413] bond1 (unregistering): Released all slaves [ 94.535094][ T6437] IPVS: Unknown mcast interface: dvmrp1 [ 94.706884][ T6447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 94.818946][ T6456] netlink: 'syz.4.190': attribute type 12 has an invalid length. [ 94.945318][ T6468] netlink: 340 bytes leftover after parsing attributes in process `syz.4.190'. [ 94.966740][ T6462] Cannot find set identified by id 0 to match [ 95.176623][ T6478] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.196565][ T6478] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 95.775927][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.792296][ T6495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.981256][ T29] audit: type=1804 audit(1783869855.181:2): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.205" name="/newroot/37/cgroup.controllers" dev="tmpfs" ino=207 res=1 errno=0 [ 96.019014][ T29] audit: type=1800 audit(1783869855.181:3): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.205" name="cgroup.controllers" dev="tmpfs" ino=207 res=0 errno=0 [ 96.194267][ T3376] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.227986][ T3376] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.375246][ T3376] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.404856][ T3376] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.714599][ T6554] netlink: 'syz.4.215': attribute type 9 has an invalid length. [ 96.742386][ T6554] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 96.770883][ T6559] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 97.356838][ T6575] team0: Port device vlan0 added [ 97.663763][ T6582] netlink: 'syz.4.223': attribute type 8 has an invalid length. [ 97.691791][ T6583] xt_cluster: node mask cannot exceed total number of nodes [ 97.962031][ T6587] netlink: 'syz.3.225': attribute type 24 has an invalid length. [ 97.985183][ T6586] netlink: 'syz.3.225': attribute type 24 has an invalid length. [ 99.985413][ T6550] Set syz1 is full, maxelem 65536 reached [ 100.661822][ T6600] x_tables: duplicate underflow at hook 2 [ 100.664678][ T6603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.676759][ T6603] IPv6: NLM_F_CREATE should be set when creating new route [ 100.684152][ T6603] IPv6: NLM_F_CREATE should be set when creating new route [ 100.691460][ T6603] IPv6: NLM_F_CREATE should be set when creating new route [ 100.703149][ T6607] __nla_validate_parse: 2 callbacks suppressed [ 100.703166][ T6607] netlink: 45 bytes leftover after parsing attributes in process `syz.0.232'. [ 100.765425][ T6610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.010196][ T6623] vlan1: entered allmulticast mode [ 101.041571][ T6623] veth0_vlan: entered allmulticast mode [ 101.150735][ T6633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.238'. [ 101.315926][ T6639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.323269][ T6639] IPv6: NLM_F_CREATE should be set when creating new route [ 101.430945][ T6639] syz_tun: entered promiscuous mode [ 101.468586][ T6639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.241'. [ 101.541838][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 101.577788][ T6653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 101.676333][ T6644] syz.2.242 (6644) used greatest stack depth: 17216 bytes left [ 101.899611][ T6663] netlink: 256 bytes leftover after parsing attributes in process `syz.2.248'. [ 101.936489][ T6663] netlink: 'syz.2.248': attribute type 9 has an invalid length. [ 101.976512][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 102.106004][ T6678] netlink: 'syz.1.251': attribute type 12 has an invalid length. [ 102.147953][ T6678] netlink: 132 bytes leftover after parsing attributes in process `syz.1.251'. [ 102.363392][ T6689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'. [ 103.082747][ T6704] syzkaller0: entered promiscuous mode [ 103.100142][ T6704] syzkaller0: entered allmulticast mode [ 103.119918][ T6727] netlink: 54 bytes leftover after parsing attributes in process `syz.3.269'. [ 103.243508][ T6742] netlink: 'syz.1.273': attribute type 5 has an invalid length. [ 104.720346][ T6742] geneve2: entered promiscuous mode [ 104.742983][ T6742] geneve2: entered allmulticast mode [ 104.746093][ T6750] netlink: 'syz.3.275': attribute type 39 has an invalid length. [ 104.842479][ T3376] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 104.871907][ T3376] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 104.911218][ T3376] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 104.942289][ T3376] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 105.257242][ T6777] IPv6: sit1: Disabled Multicast RS [ 105.269834][ T6777] sit1: entered allmulticast mode [ 105.395424][ T6777] IPv6: sit1: Disabled Multicast RS [ 105.434843][ T6777] sit1: entered allmulticast mode [ 105.544482][ T6777] IPv6: sit1: Disabled Multicast RS [ 105.559864][ T6777] sit1: entered allmulticast mode [ 105.624272][ T6786] syzkaller0: entered promiscuous mode [ 105.640729][ T6786] syzkaller0: entered allmulticast mode [ 105.671256][ T6777] IPv6: sit1: Disabled Multicast RS [ 105.677975][ T6777] sit1: entered allmulticast mode [ 105.720593][ T6786] tipc: Started in network mode [ 105.727331][ T6786] tipc: Node identity 36a8afe42606, cluster identity 4711 [ 105.747824][ T6786] tipc: Enabled bearer , priority 0 [ 105.795450][ T6777] IPv6: sit1: Disabled Multicast RS [ 105.817660][ T6777] sit1: entered allmulticast mode [ 105.901680][ T6783] tipc: Resetting bearer [ 105.934254][ T6808] __nla_validate_parse: 4 callbacks suppressed [ 105.934273][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 105.935256][ T6783] tipc: Disabling bearer [ 105.990340][ T6777] IPv6: sit1: Disabled Multicast RS [ 106.001137][ T6777] sit1: entered allmulticast mode [ 106.105474][ T6777] IPv6: sit1: Disabled Multicast RS [ 106.133661][ T6777] sit1: entered allmulticast mode [ 106.143115][ T6823] netlink: 'syz.2.291': attribute type 9 has an invalid length. [ 106.226324][ T6827] netlink: 'syz.1.296': attribute type 2 has an invalid length. [ 106.605939][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 106.623176][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 106.651206][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 106.760704][ T6854] netlink: 'syz.2.306': attribute type 2 has an invalid length. [ 106.851888][ T6863] Bluetooth: MGMT ver 1.23 [ 107.087602][ T6874] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 107.789853][ T6915] bond1: option min_links: invalid value (18446744073709551614) [ 107.811605][ T6915] bond1: option min_links: allowed values 0 - 2147483647 [ 107.838186][ T6915] bond1 (unregistering): Released all slaves [ 108.393156][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 108.556076][ T6957] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 108.593179][ T6957] netlink: 84 bytes leftover after parsing attributes in process `syz.1.335'. [ 108.625679][ T6957] netlink: 'syz.1.335': attribute type 2 has an invalid length. [ 108.645652][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 108.673821][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 108.688298][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 108.699496][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 108.964575][ T6982] ksmbd: Unknown IPC event: 1, ignore. [ 109.141463][ T6985] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 109.206894][ T6985] bond1 (unregistering): Released all slaves [ 109.661008][ T7026] syzkaller0: entered promiscuous mode [ 109.669706][ T7026] syzkaller0: entered allmulticast mode [ 109.756115][ T7032] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 109.949487][ T7047] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 109.962051][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.971812][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.010700][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.018992][ T7050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.026633][ T7050] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.033854][ T7050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.045419][ T7050] bridge0: entered promiscuous mode [ 110.052176][ T7050] bridge0: entered allmulticast mode [ 110.072207][ T7053] netlink: 'syz.0.364': attribute type 29 has an invalid length. [ 110.105968][ T7049] syzkaller0: entered promiscuous mode [ 110.128139][ T7049] syzkaller0: entered allmulticast mode [ 110.342918][ T7063] team1: entered promiscuous mode [ 110.348382][ T7063] team1: entered allmulticast mode [ 110.584624][ T7078] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 110.624986][ T7075] syzkaller0: entered promiscuous mode [ 110.639632][ T7075] syzkaller0: entered allmulticast mode [ 110.720373][ T7085] tipc: Enabled bearer , priority 0 [ 110.785291][ T7075] tipc: Resetting bearer [ 110.927827][ T7074] tipc: Resetting bearer [ 110.959973][ T7074] tipc: Disabling bearer [ 111.149500][ T7110] xt_hashlimit: max too large, truncated to 1048576 [ 111.171471][ T7110] No such timeout policy "syz1" [ 111.532043][ T7131] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 111.587777][ T7137] IPv6: Can't replace route, no match found [ 111.620799][ T7133] __nla_validate_parse: 11 callbacks suppressed [ 111.620816][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 111.622998][ T7137] IPv6: Can't replace route, no match found [ 111.664318][ T7137] netlink: 'syz.4.389': attribute type 12 has an invalid length. [ 111.667008][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 111.773909][ T7141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.390'. [ 111.793556][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 111.804767][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 111.842705][ T7141] bridge0: left promiscuous mode [ 111.866723][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 111.979005][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.987896][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.132886][ T7148] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 112.181766][ T7148] bond1 (unregistering): Released all slaves [ 112.216959][ T7163] netlink: 277 bytes leftover after parsing attributes in process `syz.3.398'. [ 112.234923][ T7163] netlink: 'syz.3.398': attribute type 39 has an invalid length. [ 112.272517][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.374372][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 112.427624][ T7179] netlink: 20 bytes leftover after parsing attributes in process `syz.4.401'. [ 112.448970][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.473449][ T7180] bond0: (slave gre0): refused to change device type [ 112.524604][ T7163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.527312][ T7184] veth0: entered promiscuous mode [ 112.556781][ T7183] veth0: left promiscuous mode [ 113.246498][ T7179] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 113.469972][ T7221] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 113.508678][ T7221] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 113.589494][ T7228] pim6reg527: entered allmulticast mode [ 113.613622][ T7224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.838283][ T7248] netlink: 'syz.4.422': attribute type 2 has an invalid length. [ 113.838388][ T7249] netlink: 104 bytes leftover after parsing attributes in process `syz.4.422'. [ 114.121372][ T7266] bond0: option ad_select: unable to set because the bond device is up [ 114.452347][ T7289] netlink: 'syz.4.431': attribute type 3 has an invalid length. [ 114.776746][ T7299] vlan2: entered allmulticast mode [ 114.788990][ T7299] bond0: entered allmulticast mode [ 114.803397][ T7299] bond_slave_0: entered allmulticast mode [ 114.817469][ T7299] bond_slave_1: entered allmulticast mode [ 114.864125][ T7308] block nbd1: Unsupported socket: should be TCP or UNIX. [ 115.364281][ T7347] netlink: 'syz.2.446': attribute type 2 has an invalid length. [ 115.377953][ T7349] netlink: 'syz.0.448': attribute type 1 has an invalid length. [ 115.395831][ T7350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.423835][ T7353] netlink: 'syz.2.446': attribute type 2 has an invalid length. [ 115.432769][ T7349] netlink: 'syz.0.448': attribute type 2 has an invalid length. [ 115.593725][ T7347] : entered promiscuous mode [ 115.785529][ T7371] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 115.849846][ T7371] syzkaller0: entered promiscuous mode [ 115.860167][ T7371] syzkaller0: entered allmulticast mode [ 116.217864][ T7386] bond1: entered promiscuous mode [ 116.287211][ T7386] bond1: entered allmulticast mode [ 116.304139][ T7395] syzkaller0: entered promiscuous mode [ 116.326987][ T7395] syzkaller0: entered allmulticast mode [ 116.447323][ T7386] TC_ACT_REPEAT abuse ? [ 116.632402][ T7412] : renamed from bond0 (while UP) [ 116.703929][ T7416] __nla_validate_parse: 4 callbacks suppressed [ 116.703948][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 116.705245][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 116.764658][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 116.790432][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 116.819051][ T7416] vlan0: entered promiscuous mode [ 117.059519][ T7436] netlink: 'syz.2.473': attribute type 21 has an invalid length. [ 117.080496][ T7436] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.102164][ T7436] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 117.208586][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 117.514480][ T24] IPVS: starting estimator thread 0... [ 117.608577][ T7466] IPVS: using max 40 ests per chain, 96000 per kthread [ 117.665814][ T7471] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 117.715517][ T7476] netlink: 128 bytes leftover after parsing attributes in process `syz.0.484'. [ 117.731879][ T7476] netlink: 128 bytes leftover after parsing attributes in process `syz.0.484'. [ 117.768194][ T7475] netlink: 'syz.0.484': attribute type 12 has an invalid length. [ 117.792876][ T7475] netlink: 'syz.0.484': attribute type 29 has an invalid length. [ 117.802847][ T7475] netlink: 148 bytes leftover after parsing attributes in process `syz.0.484'. [ 117.813416][ T7475] netlink: 11 bytes leftover after parsing attributes in process `syz.0.484'. [ 117.916876][ T7486] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 117.975023][ T7482] bridge_slave_0: left allmulticast mode [ 117.988304][ T7482] bridge_slave_0: left promiscuous mode [ 118.005770][ T7482] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.043392][ T7482] bridge_slave_1: left allmulticast mode [ 118.049241][ T7482] bridge_slave_1: left promiscuous mode [ 118.058276][ T7482] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.077954][ T7482] bond0: (slave bond_slave_0): Releasing backup interface [ 118.101053][ T7482] bond0: (slave bond_slave_1): Releasing backup interface [ 118.143012][ T7482] team0: Port device team_slave_0 removed [ 118.161727][ T7482] team0: Port device team_slave_1 removed [ 118.181240][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.189503][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.202938][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.218192][ T7482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.227756][ T7482] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.434502][ T7508] netlink: 5 bytes leftover after parsing attributes in process `syz.0.492'. [ 118.843619][ T7538] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 119.273545][ T7561] validate_nla: 3 callbacks suppressed [ 119.273562][ T7561] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 119.736739][ T7584] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 120.368282][ T7600] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.565347][ T7608] x9: renamed from bridge_slave_0 (while UP) [ 121.749803][ T7673] netlink: 'syz.4.539': attribute type 11 has an invalid length. [ 121.758309][ T7673] __nla_validate_parse: 6 callbacks suppressed [ 121.758327][ T7673] netlink: 224 bytes leftover after parsing attributes in process `syz.4.539'. [ 122.421286][ T7693] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 122.435710][ T7695] x_tables: duplicate underflow at hook 1 [ 122.580591][ T7698] netlink: 140 bytes leftover after parsing attributes in process `syz.2.547'. [ 123.120237][ T7712] vlan1 (unregistering): left allmulticast mode [ 123.142578][ T7712] veth0_vlan (unregistering): left allmulticast mode [ 123.544383][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 123.670582][ T7767] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 124.210522][ T7784] syzkaller0: entered promiscuous mode [ 124.219774][ T7784] syzkaller0: entered allmulticast mode [ 124.715456][ T7820] netlink: 'syz.4.580': attribute type 39 has an invalid length. [ 126.223065][ T7803] syzkaller0: entered promiscuous mode [ 126.229188][ T7803] syzkaller0: entered allmulticast mode [ 126.243560][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.251339][ T7809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.261523][ T7809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.271812][ T7809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.679879][ T7841] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 128.145148][ T7841] bond0: (slave bond_slave_1): Releasing backup interface [ 128.178271][ T7841] bond_slave_1: left allmulticast mode [ 128.379606][ T7845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.586'. [ 128.576294][ T7863] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 128.576294][ T7863] Please contact the netfilter-devel mailing list or update your nftables rules. [ 128.918500][ T7884] netlink: 6 bytes leftover after parsing attributes in process `syz.1.599'. [ 129.175189][ T7901] netlink: 6212 bytes leftover after parsing attributes in process `syz.1.605'. [ 129.187000][ T7901] netlink: 'syz.1.605': attribute type 21 has an invalid length. [ 129.323278][ T7887] bond2: entered allmulticast mode [ 129.348613][ T7887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.650033][ T7906] bond1: (slave gre0): Device is not bonding slave [ 129.687973][ T7906] bond1: option active_slave: invalid value (gre0) [ 129.711515][ T7906] bond1 (unregistering): Released all slaves [ 129.866305][ T7925] syzkaller0: entered promiscuous mode [ 129.873237][ T7925] syzkaller0: entered allmulticast mode [ 129.880433][ T7935] netlink: 44 bytes leftover after parsing attributes in process `syz.4.613'. [ 129.914797][ T7935] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 130.387055][ T7958] netlink: 'syz.3.619': attribute type 39 has an invalid length. [ 132.029312][ T7958] hsr_slave_0: left promiscuous mode [ 132.035967][ T7958] hsr_slave_1: left promiscuous mode [ 132.181096][ T7976] netlink: 244 bytes leftover after parsing attributes in process `syz.3.624'. [ 132.217580][ T7982] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 132.236898][ T7977] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 132.245185][ T7981] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 132.843057][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.979397][ T8021] netlink: 'syz.3.634': attribute type 21 has an invalid length. [ 133.000933][ T8022] netlink: 180 bytes leftover after parsing attributes in process `syz.4.633'. [ 133.051051][ T8022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.633'. [ 133.233071][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 133.545032][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 134.292106][ T8087] syzkaller0: entered promiscuous mode [ 134.322677][ T8087] syzkaller0: entered allmulticast mode [ 134.497180][ T8095] bridge3: entered promiscuous mode [ 134.504739][ T8095] bridge3: entered allmulticast mode [ 134.696898][ T8106] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 135.054294][ T8126] syzkaller0: entered promiscuous mode [ 135.074046][ T8126] syzkaller0: entered allmulticast mode [ 135.171427][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.663'. [ 135.184122][ T8139] netlink: 'syz.1.667': attribute type 11 has an invalid length. [ 135.255829][ T8126] netlink: 'syz.0.663': attribute type 2 has an invalid length. [ 135.265375][ T8126] netlink: 244 bytes leftover after parsing attributes in process `syz.0.663'. [ 135.361912][ T8144] syzkaller1: entered promiscuous mode [ 135.374450][ T8144] syzkaller1: entered allmulticast mode [ 135.845137][ T8177] netlink: 3080 bytes leftover after parsing attributes in process `syz.0.678'. [ 135.865722][ T8177] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.678'. [ 135.865803][ T8175] gre1: entered promiscuous mode [ 135.902426][ T8175] gre1: entered allmulticast mode [ 135.917968][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 136.103519][ T8186] netlink: 'syz.2.680': attribute type 8 has an invalid length. [ 136.160371][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 136.182169][ T8194] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 136.198586][ T8189] netlink: 'syz.0.682': attribute type 26 has an invalid length. [ 136.216691][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 136.264918][ T8183] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.311832][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.685'. [ 136.375111][ T8204] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 136.444183][ T8194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.456059][ T8189] netlink: 'syz.0.682': attribute type 26 has an invalid length. [ 136.464208][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 136.523037][ T8204] bond2: entered promiscuous mode [ 136.531874][ T8204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.633571][ T8183] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.815066][ T8183] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.840561][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.975844][ T8183] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.032259][ T8236] netlink: 'syz.1.694': attribute type 13 has an invalid length. [ 137.314374][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.375911][ T1024] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.530321][ T1024] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.547176][ T8258] syzkaller0: entered promiscuous mode [ 137.557145][ T8258] syzkaller0: entered allmulticast mode [ 137.587664][ T8256] tipc: Started in network mode [ 137.600766][ T8256] tipc: Node identity 2eac6633bcd3, cluster identity 4711 [ 137.616607][ T8256] tipc: Enabled bearer , priority 0 [ 137.649664][ T1024] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.676968][ T8256] tipc: Resetting bearer [ 137.714260][ T8256] tipc: Disabling bearer [ 138.171687][ T8305] netlink: 'syz.0.715': attribute type 21 has an invalid length. [ 138.232585][ T8313] netlink: 'syz.2.717': attribute type 26 has an invalid length. [ 138.233941][ T8308] syzkaller0: entered promiscuous mode [ 138.302373][ T8308] syzkaller0: entered allmulticast mode [ 138.492831][ T8324] sctp: [Deprecated]: syz.3.723 (pid 8324) Use of int in maxseg socket option. [ 138.492831][ T8324] Use struct sctp_assoc_value instead [ 138.635115][ T8330] netlink: 'syz.1.724': attribute type 8 has an invalid length. [ 138.670025][ T8332] __nla_validate_parse: 6 callbacks suppressed [ 138.670041][ T8332] netlink: 524 bytes leftover after parsing attributes in process `syz.4.726'. [ 138.915977][ T8347] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 138.931435][ T8347] bond3 (unregistering): Released all slaves [ 138.931539][ T8352] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 138.997942][ T8351] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 139.063722][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.731'. [ 139.098424][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.3.731'. [ 139.396020][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.526976][ T24] IPVS: starting estimator thread 0... [ 139.543564][ T8388] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 139.628774][ T8390] IPVS: using max 38 ests per chain, 91200 per kthread [ 139.669649][ T8394] netlink: 216 bytes leftover after parsing attributes in process `syz.3.741'. [ 139.690326][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.741'. [ 139.883503][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.223595][ T8425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.748'. [ 140.311067][ T8429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 140.344856][ T8431] netlink: 80 bytes leftover after parsing attributes in process `syz.3.750'. [ 140.596438][ T8450] xt_TCPMSS: Only works on TCP SYN packets [ 140.660593][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 140.691988][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 141.051114][ T8465] syzkaller0: entered promiscuous mode [ 141.066985][ T8465] syzkaller0: entered allmulticast mode [ 141.798811][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.825147][ T8511] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 143.275615][ T8511] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 143.488819][ T8523] netlink: 'syz.3.775': attribute type 3 has an invalid length. [ 143.649641][ T8529] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 143.734440][ T8529] __nla_validate_parse: 2 callbacks suppressed [ 143.734456][ T8529] netlink: 224 bytes leftover after parsing attributes in process `syz.2.777'. [ 143.760471][ T8533] netlink: 808 bytes leftover after parsing attributes in process `syz.0.778'. [ 143.779784][ T8538] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 143.908505][ T8543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.961470][ T8557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.983340][ T8556] netlink: 'syz.0.784': attribute type 39 has an invalid length. [ 144.214327][ T8562] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 144.387353][ T8571] netlink: 'syz.3.790': attribute type 1 has an invalid length. [ 144.429688][ T8587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.454963][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 144.511440][ T8592] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 144.727643][ T8592] netlink: 72 bytes leftover after parsing attributes in process `syz.1.794'. [ 144.825805][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'. [ 144.838629][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.878416][ T8596] bond3: (slave geneve3): making interface the new active one [ 144.903670][ T8596] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 144.932164][ T8611] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 144.946821][ T8572] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 145.086873][ T8572] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 145.124148][ T8572] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 145.143541][ T8622] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 145.164919][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 145.190220][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 145.237842][ T8572] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 145.317115][ T8630] bond2: (slave gretap1): making interface the new active one [ 145.360396][ T8630] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 145.546946][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.809'. [ 145.776301][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 145.816419][ T8664] netlink: 80 bytes leftover after parsing attributes in process `syz.0.814'. [ 146.048773][ T8678] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 146.057865][ T8677] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 146.088721][ T8677] xt_TCPMSS: Only works on TCP SYN packets [ 146.102526][ T8682] hsr_slave_0: left promiscuous mode [ 146.115209][ T8683] tipc: Trying to set illegal importance in message [ 146.126795][ T8682] hsr_slave_1: left promiscuous mode [ 146.289637][ T8689] bond1: option lp_interval: invalid value (0) [ 146.296008][ T8689] bond1: option lp_interval: allowed values 1 - 2147483647 [ 146.311045][ T8689] bond1 (unregistering): Released all slaves [ 146.525388][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.532856][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.844347][ T8725] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 146.909805][ T8732] Cannot find add_set index 0 as target [ 147.004599][ T8742] Cannot find add_set index 0 as target [ 147.305563][ T8753] gtp0: entered allmulticast mode [ 147.342550][ T8753] team0: Device gtp0 is of different type [ 147.454399][ T8757] gtp0: entered allmulticast mode [ 147.467020][ T8757] team0: Device gtp0 is of different type [ 147.567969][ T8769] can: request_module (can-proto-0) failed. [ 147.726435][ T5636] Bluetooth: hci4: link tx timeout [ 147.733911][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.749154][ T50] Bluetooth: hci4: link tx timeout [ 147.755533][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.786023][ T50] Bluetooth: hci4: link tx timeout [ 147.791438][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.801650][ T50] Bluetooth: hci4: link tx timeout [ 147.806836][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.815101][ T50] Bluetooth: hci4: link tx timeout [ 147.820443][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.829747][ T50] Bluetooth: hci4: link tx timeout [ 147.834916][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.842641][ T50] Bluetooth: hci4: link tx timeout [ 147.847772][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.855475][ T50] Bluetooth: hci4: link tx timeout [ 147.860644][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.868439][ T50] Bluetooth: hci4: link tx timeout [ 147.873600][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.881758][ T50] Bluetooth: hci4: link tx timeout [ 147.882238][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.887895][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.910448][ T50] Bluetooth: hci4: link tx timeout [ 147.915646][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.924117][ T50] Bluetooth: hci4: link tx timeout [ 147.929705][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.938116][ T50] Bluetooth: hci4: link tx timeout [ 147.943304][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.951236][ T50] Bluetooth: hci4: link tx timeout [ 147.959146][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.967255][ T50] Bluetooth: hci4: link tx timeout [ 147.972761][ T50] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.182591][ T8801] validate_nla: 7 callbacks suppressed [ 148.182611][ T8801] netlink: 'syz.0.847': attribute type 26 has an invalid length. [ 148.319786][ T8806] 8021q: VLANs not supported on ip_vti0 [ 148.684816][ T5289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 148.734951][ T8828] netlink: 'syz.0.857': attribute type 12 has an invalid length. [ 148.778624][ T8828] bond3: option primary_reselect: invalid value (255) [ 148.810928][ T8828] bond3 (unregistering): Released all slaves [ 149.063288][ T8841] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 149.189359][ T8852] __nla_validate_parse: 11 callbacks suppressed [ 149.189378][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.863'. [ 149.252811][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 149.303171][ T8851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.862'. [ 149.560672][ T8876] x_tables: duplicate underflow at hook 1 [ 149.798176][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 150.928564][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.400078][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.091283][ T8845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.307679][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 152.486511][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 152.520515][ T8900] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 152.550689][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 152.560450][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.875'. [ 152.627828][ T8900] geneve2: entered promiscuous mode [ 152.650787][ T8900] geneve2: entered allmulticast mode [ 152.809825][ T8914] netlink: 40 bytes leftover after parsing attributes in process `syz.0.882'. [ 153.154900][ T8939] netlink: 11 bytes leftover after parsing attributes in process `syz.0.889'. [ 153.174827][ T8939] netlink: 11 bytes leftover after parsing attributes in process `syz.0.889'. [ 153.249243][ T8946] netlink: 'syz.4.890': attribute type 1 has an invalid length. [ 153.375380][ T8948] macvlan0: entered promiscuous mode [ 153.693932][ T8970] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 153.717986][ T8968] netlink: 'syz.2.900': attribute type 1 has an invalid length. [ 153.797525][ T8976] xt_policy: output policy not valid in PREROUTING and INPUT [ 154.124256][ T8990] bond3 (unregistering): Released all slaves [ 154.180657][ T8994] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 154.219957][ T8994] bond2 (unregistering): Released all slaves [ 154.438903][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.509099][ T9016] syzkaller0: entered promiscuous mode [ 154.529288][ T9016] syzkaller0: entered allmulticast mode [ 154.574659][ T9020] __nla_validate_parse: 2 callbacks suppressed [ 154.574678][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 154.609519][ T9019] syzkaller1: entered promiscuous mode [ 154.615174][ T9019] syzkaller1: entered allmulticast mode [ 154.622097][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'. [ 155.067618][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 155.110218][ T9048] trusted_key: syz.2.922 sent an empty control message without MSG_MORE. [ 155.186182][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.925'. [ 155.270228][ T9062] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AI %sU]Yh [ 155.375231][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 155.629872][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 155.949946][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.878511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.887101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.896468][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.996727][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.015903][ T9086] openvswitch: netlink: IP tunnel dst address not specified [ 161.051660][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.087501][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.099684][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.130409][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.166859][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.058220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.669142][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.689664][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.698251][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.706546][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.724547][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.733680][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.742100][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.743858][ C1] sched: DL replenish lagged too much [ 170.755817][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.764103][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.772348][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.118218][ C0] net_ratelimit: 496 callbacks suppressed [ 189.118240][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.784514][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.793096][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.801258][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.814203][ T9096] netlink: 'syz.4.936': attribute type 1 has an invalid length. [ 195.826083][ T9097] netlink: 'syz.4.936': attribute type 1 has an invalid length. [ 258.710933][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.725054][ T1024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.737962][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 300.745004][ C0] rcu: 1-....: (2 ticks this GP) idle=0a4c/1/0x4000000000000000 softirq=30033/30033 fqs=3 [ 300.755788][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9093/1:b..l [ 300.763722][ C0] rcu: (detected by 0, t=10502 jiffies, g=31677, q=1541 ncpus=2) [ 300.771533][ C0] Sending NMI from CPU 0 to CPUs 1: [ 300.771577][ C1] NMI backtrace for cpu 1 [ 300.771606][ C1] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 300.771625][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.771635][ C1] RIP: 0010:__lock_acquire+0x80a/0x2cf0 [ 300.771668][ C1] Code: 6d 03 eb c3 89 e8 25 ff 1f 00 00 c1 ed 03 81 e5 00 60 00 00 09 c5 48 89 d8 48 c1 e8 20 29 c5 89 c1 c1 c1 04 31 e9 01 d8 29 cb <89> ca c1 c2 06 31 da 01 c1 29 d0 89 d6 c1 c6 08 31 c6 01 ca 29 f1 [ 300.771682][ C1] RSP: 0018:ffffc90000a08b20 EFLAGS: 00000887 [ 300.771696][ C1] RAX: 000000002f227b48 RBX: 00000000f02421e1 RCX: 0000000082ee3bcd [ 300.771708][ C1] RDX: 0000000000000008 RSI: ffff88802b41e8c8 RDI: ffff88802b41dd00 [ 300.771719][ C1] RBP: 0000000043efe266 R08: ffffffff84de04e7 R09: 0000000000080000 [ 300.771731][ C1] R10: 0000000000000000 R11: ffffffff9aa3edc0 R12: ffff88802b41e8c8 [ 300.771742][ C1] R13: ffff88802b41e8c8 R14: ffff88802b41dd00 R15: 0000000000000001 [ 300.771754][ C1] FS: 0000555569c8f500(0000) GS:ffff888125058000(0000) knlGS:0000000000000000 [ 300.771768][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.771779][ C1] CR2: 00007fc43976612d CR3: 000000005c256000 CR4: 00000000003526f0 [ 300.771797][ C1] Call Trace: [ 300.771805][ C1] [ 300.771815][ C1] ? __lock_acquire+0x683/0x2cf0 [ 300.771840][ C1] ? __lock_acquire+0x683/0x2cf0 [ 300.771864][ C1] ? debug_object_activate+0xb7/0x420 [ 300.771885][ C1] lock_acquire+0x106/0x350 [ 300.771905][ C1] ? debug_object_activate+0xb7/0x420 [ 300.771931][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 300.771952][ C1] ? debug_object_activate+0xb7/0x420 [ 300.771972][ C1] debug_object_activate+0xb7/0x420 [ 300.772003][ C1] enqueue_hrtimer+0xa9/0x2c0 [ 300.772023][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 300.772046][ C1] hrtimer_interrupt+0x448/0x910 [ 300.772073][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 300.772091][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 300.772114][ C1] [ 300.772120][ C1] [ 300.772126][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.772144][ C1] RIP: 0010:finish_task_switch+0x417/0xc60 [ 300.772162][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 63 ca 3c 0a e8 fe ab 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 f8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 300.772175][ C1] RSP: 0018:ffffc900046b7980 EFLAGS: 00000206 [ 300.772189][ C1] RAX: 00000000000c508b RBX: ffff8880b873bf20 RCX: 0000000080000001 [ 300.772200][ C1] RDX: 0000000000000000 RSI: ffffffff8e22a5a0 RDI: ffffffff8c4bd380 [ 300.772211][ C1] RBP: ffffc900046b79d0 R08: ffffffff905775f7 R09: 1ffffffff20aeebe [ 300.772223][ C1] R10: dffffc0000000000 R11: fffffbfff20aeebf R12: ffff88802b41dd00 [ 300.772235][ C1] R13: ffff88802b41dd00 R14: dffffc0000000000 R15: 1ffff110170e77e4 [ 300.772258][ C1] __schedule+0x17e1/0x56c0 [ 300.772280][ C1] ? __lock_acquire+0x683/0x2cf0 [ 300.772304][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 300.772327][ C1] ? __pfx___schedule+0x10/0x10 [ 300.772351][ C1] ? schedule+0x90/0x2b0 [ 300.772372][ C1] schedule+0x164/0x2b0 [ 300.772393][ C1] do_nanosleep+0x21e/0x6a0 [ 300.772411][ C1] ? do_nanosleep+0x7e/0x6a0 [ 300.772429][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 300.772447][ C1] ? __asan_memset+0x22/0x50 [ 300.772466][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 300.772481][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 300.772500][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 300.772518][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 300.772538][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 300.772561][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 300.772580][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 300.772602][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.772619][ C1] do_syscall_64+0x174/0x580 [ 300.772642][ C1] ? trace_irq_disable+0x3b/0x140 [ 300.772662][ C1] ? clear_bhb_loop+0x40/0x90 [ 300.772681][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.772697][ C1] RIP: 0033:0x7f6aaff5e68e [ 300.772717][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.772730][ C1] RSP: 002b:00007fff499c4a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 300.772745][ C1] RAX: ffffffffffffffda RBX: 0000555569c8f500 RCX: 00007f6aaff5e68e [ 300.772758][ C1] RDX: 00007fff499c4ad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.772768][ C1] RBP: 00007fff499c4b3c R08: 0000000000000000 R09: 0000000000000000 [ 300.772778][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000b4 [ 300.772788][ C1] R13: 0000000000000062 R14: 0000000000029a8c R15: 00007fff499c4b90 [ 300.772806][ C1] [ 300.773563][ C0] task:syz.0.935 state:R running task stack:26312 pid:9093 tgid:9093 ppid:5624 task_flags:0x400040 flags:0x00080003 [ 301.251585][ C0] Call Trace: [ 301.254861][ C0] [ 301.257796][ C0] __schedule+0x17d9/0x56c0 [ 301.262338][ C0] ? pfn_valid+0xba/0x480 [ 301.266672][ C0] ? __pfx___schedule+0x10/0x10 [ 301.271529][ C0] ? lock_acquire+0x106/0x350 [ 301.276220][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 301.281595][ C0] preempt_schedule_common+0x82/0xd0 [ 301.286890][ C0] preempt_schedule_thunk+0x16/0x40 [ 301.292106][ C0] _raw_spin_unlock+0x3f/0x50 [ 301.296793][ C0] do_wp_page+0x3ec0/0x4c70 [ 301.301302][ C0] ? do_wp_page+0x375f/0x4c70 [ 301.305989][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 301.310836][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.315865][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 301.321256][ C0] handle_mm_fault+0x1490/0x3080 [ 301.326208][ C0] ? handle_mm_fault+0xec/0x3080 [ 301.331154][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 301.336440][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 301.341641][ C0] ? __pfx_do_futex+0x10/0x10 [ 301.346351][ C0] do_user_addr_fault+0xa4d/0x1340 [ 301.351481][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 301.356862][ C0] exc_page_fault+0x6a/0xc0 [ 301.361381][ C0] asm_exc_page_fault+0x26/0x30 [ 301.366231][ C0] RIP: 0033:0x7ff9e22671b5 [ 301.370645][ C0] RSP: 002b:00007ffcfe81ea00 EFLAGS: 00010206 [ 301.376715][ C0] RAX: 0000000000000003 RBX: 0000000000029ad4 RCX: 00007ff9e26220c0 [ 301.384685][ C0] RDX: 00007ff9e26220c0 RSI: 0000000000000080 RDI: 00007ff9e2625fa0 [ 301.392654][ C0] RBP: 0000000000000032 R08: 00007ff9e2625fa0 R09: 0000000000000000 [ 301.400619][ C0] R10: 00007ffcfe81eb50 R11: 0000000000000246 R12: 00007ff9e2625fa0 [ 301.408586][ C0] R13: 00007ff9e2625fac R14: 0000000000029b06 R15: 00007ff9e2625fa0 [ 301.416574][ C0] [ 301.419591][ C0] rcu: rcu_preempt kthread starved for 4210 jiffies! g31677 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 301.430716][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 301.440679][ C0] rcu: RCU grace-period kthread stack dump: [ 301.446560][ C0] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 301.460052][ C0] Call Trace: [ 301.463349][ C0] [ 301.466281][ C0] __schedule+0x17d9/0x56c0 [ 301.470800][ C0] ? __lock_acquire+0x683/0x2cf0 [ 301.475765][ C0] ? __pfx___schedule+0x10/0x10 [ 301.480628][ C0] ? schedule+0x90/0x2b0 [ 301.484885][ C0] schedule+0x164/0x2b0 [ 301.489049][ C0] schedule_timeout+0x152/0x2c0 [ 301.493915][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 301.499290][ C0] ? __pfx_process_timeout+0x10/0x10 [ 301.504604][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 301.510415][ C0] ? prepare_to_swait_event+0x322/0x350 [ 301.515967][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 301.520843][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 301.527010][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 301.532314][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 301.537522][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 301.543339][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 301.547939][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 301.553143][ C0] ? __kthread_parkme+0x71/0x1f0 [ 301.558087][ C0] ? __kthread_parkme+0x196/0x1f0 [ 301.563121][ C0] kthread+0x388/0x470 [ 301.567286][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 301.572492][ C0] ? __pfx_kthread+0x10/0x10 [ 301.577096][ C0] ret_from_fork+0x514/0xb70 [ 301.581699][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 301.586816][ C0] ? __switch_to+0xc89/0x1420 [ 301.591500][ C0] ? __pfx_kthread+0x10/0x10 [ 301.596096][ C0] ret_from_fork_asm+0x1a/0x30 [ 301.600879][ C0] [ 301.603900][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 301.610226][ C0] CPU: 0 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 301.619688][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.629737][ C0] RIP: 0010:smp_call_function_many_cond+0x10b5/0x14b0 [ 301.636505][ C0] Code: 1e 89 de 83 e6 01 31 ff e8 d8 1e 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1a 0c 00 eb 37 f3 90 41 0f b6 04 1c <84> c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1a 0c 00 eb e5 44 89 [ 301.656106][ C0] RSP: 0018:ffffc900039775a0 EFLAGS: 00000293 [ 301.662176][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888036050000 [ 301.670142][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 301.678109][ C0] RBP: ffffc900039776c8 R08: ffff888035b318c7 R09: 1ffff11006b66318 [ 301.686082][ C0] R10: dffffc0000000000 R11: ffffed1006b66319 R12: 1ffff110170e81d1 [ 301.694049][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 301.702019][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 301.710952][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.717531][ C0] CR2: 00007f34ae35da08 CR3: 00000000775aa000 CR4: 00000000003526f0 [ 301.725507][ C0] Call Trace: [ 301.728786][ C0] [ 301.731721][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 301.736932][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 301.743270][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 301.748561][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 301.753682][ C0] flush_tlb_mm_range+0x5c4/0x1090 [ 301.758810][ C0] tlb_flush_mmu+0x1af/0xa30 [ 301.763417][ C0] tlb_finish_mmu+0xf4/0x220 [ 301.768015][ C0] exit_mmap+0x4b2/0x9f0 [ 301.772261][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 301.777053][ C0] ? __pfx_exit_aio+0x10/0x10 [ 301.781746][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 301.787394][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 301.792598][ C0] __mmput+0x118/0x420 [ 301.796672][ C0] exit_mm+0x221/0x2d0 [ 301.800751][ C0] do_exit+0x6cd/0x2360 [ 301.804922][ C0] ? __pfx_do_exit+0x10/0x10 [ 301.809524][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.814556][ C0] do_group_exit+0x22d/0x2f0 [ 301.819152][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.824356][ C0] get_signal+0x121b/0x12c0 [ 301.828883][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 301.834434][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 301.839729][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.844929][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 301.851112][ C0] exit_to_user_mode_loop+0x104/0x730 [ 301.856488][ C0] ? rcu_is_watching+0x15/0xb0 [ 301.861261][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.867330][ C0] do_syscall_64+0x353/0x580 [ 301.871929][ C0] ? trace_irq_disable+0x3b/0x140 [ 301.876956][ C0] ? clear_bhb_loop+0x40/0x90 [ 301.881636][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.887526][ C0] RIP: 0033:0x7ff9e2358fd7 [ 301.891941][ C0] Code: Unable to access opcode bytes at 0x7ff9e2358fad. [ 301.898955][ C0] RSP: 002b:00007ffcfe81edd0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 301.907368][ C0] RAX: fffffffffffffe00 RBX: 000055558121b500 RCX: 00007ff9e2358fd7 [ 301.915336][ C0] RDX: 0000000040000000 RSI: 00007ffcfe81ee2c RDI: ffffffffffffffff [ 301.923304][ C0] RBP: 00007ffcfe81ee2c R08: 0000000000000000 R09: 0000000000000000 [ 301.931277][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 301.939245][ C0] R13: 0000000000000003 R14: 00007ffcfe81f088 R15: 0000000000000000 [ 301.947229][ C0]