last executing test programs: 2.14436246s ago: executing program 2 (id=316): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) (async, rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) read(r0, &(0x7f0000000380)=""/127, 0x7f) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000200)=0x1, 0x4) (async, rerun: 32) sendmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71bcf300"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x222, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000140)) 2.083500009s ago: executing program 1 (id=318): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "e1198aac87b93210229686ab0cd2224d"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, 0x2f, 0x1, 0x0, 0x25dfdc00, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x104}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @pid}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 2.040378208s ago: executing program 1 (id=319): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0xfffffffa, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70200000a000000bfa3000000000000b7040000000000000000b7137c80a7ecd33c754cde60e0128a9d65f175c2765e48b65829cb1fbf5a62604758928854deeec57a6101068d47ebd8d3fa2dd744f741a5a705aa333dbb44"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x8482) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.942848011s ago: executing program 1 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010000000000000000020000040000000000000000050013000100000008000f00efd89f25f3f03e3194000000"], 0x2c}}, 0x0) getsockopt(r1, 0x0, 0xc, &(0x7f0000000100)=""/128, &(0x7f00000001c0)=0x80) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="a1", 0x1}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3], 0x30, 0x40400d1}}], 0x1, 0x10) (async) sendmmsg$unix(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="a1", 0x1}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000003b005000128009000100766c616e000000004000028006000100000000000c00020000000000000000000c00020000000000000000001c0004800c00060004000000000800000a0001"], 0x80}, 0x1, 0xba01}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff5, 0xfff3}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x7, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9b, 0x59}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x453, 0x100, 0x70bd28, 0x25dfdbfe, "7335b29b93df6b6c043965d9fe2f3d4f5f934a4a418f", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x453, 0x100, 0x70bd28, 0x25dfdbfe, "7335b29b93df6b6c043965d9fe2f3d4f5f934a4a418f", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="02b87add7000ffdbdf250e000000040001800800020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x48890) 1.913277043s ago: executing program 4 (id=323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r4, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x1, &(0x7f00000003c0)=@raw=[@alu={0x7, 0x1, 0x7, 0x5, 0x2, 0x10, 0x1}], &(0x7f0000000400)='GPL\x00', 0x5, 0x5, &(0x7f0000000440)=""/5, 0x40f00, 0x0, '\x00', r2, 0x1b, r3, 0x8, &(0x7f0000000540)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x9, 0x2}, 0x10, r4, 0x0, 0x1, 0x0, &(0x7f0000000640)=[{0x3, 0x2, 0xc, 0x3}], 0x10, 0x1}, 0x94) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000740)=0x401, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, &(0x7f0000000280), 0x10) bind$inet6(r5, &(0x7f0000000780)={0xa, 0x4e22, 0x6f41bcbb, @empty, 0x2}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x5) bind$inet6(r7, &(0x7f00000007c0)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) listen(0xffffffffffffffff, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0xa7ba) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x8) r13 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r13, &(0x7f0000000800)=[{&(0x7f0000000840)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r13) 1.843520482s ago: executing program 3 (id=324): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async) socket$kcm(0x29, 0x7, 0x0) 1.799836061s ago: executing program 3 (id=325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)={0x32, 0x2, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x38}]}, 0x18) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}}, 0x84) 1.621044828s ago: executing program 0 (id=326): r0 = socket(0x15, 0x5, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) (async) sendto$x25(r1, &(0x7f00000001c0)="abff2d6888851c97df0753e27ab59c86151ff071b9ca3752b6300b9287c3c45dc225f7cf874eed6ecbf8c119baed29c1e60f8df995fb5049e063e13046642345c2b9471e7cf9b386b8ba75410af562224adb9091e1de475807a495a632ee7f18ba9567c466e1539cb9eb0090dd7c114396802aa6d4c9fa43810fe12b20aa386cc0a318e592488463f8cbb4", 0x8b, 0x40044804, &(0x7f0000000180)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0xe) getsockopt(r0, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000000000d2a81e10dd52e25f0100626f6e64000c000863fdd9deabe5503d83"], 0x40}}, 0x0) 1.399560517s ago: executing program 0 (id=327): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e40), 0xfffffedf, 0x10, &(0x7f0000000e80), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r0, 0x0, 0x10, 0x0, &(0x7f0000000f40)="f0b9547ee7affa9daabd309a75d387db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000a824c0e4000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b0001007461726765740000140002800e00010049444c4554494d45520000000900020073797a3200000000140000001100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1.397997662s ago: executing program 3 (id=328): syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008b007179ffffffffffff00000c07000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x82200, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.397826511s ago: executing program 1 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x88c5, 0x44105}}, 0x20}}, 0x40040000) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000340)={0x11, 0x300, r2}, 0x14) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000380)=0x10001, 0x4) write(r3, &(0x7f00000003c0)='\x00', 0x1) 1.29001268s ago: executing program 3 (id=330): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000000c0)="4c00000011000e14000300020000000002000000200000", 0x17) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create1(0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0xfffffffffffffd5e}, 0x1, 0x0, 0x0, 0x24000885}, 0x4000004) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x24008811) 1.239095998s ago: executing program 0 (id=331): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340), 0x200002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000c40)=ANY=[@ANYBLOB="34000000b0430b404a055976646107b18a2c5fe290ceebc9e0625c78412d50c051a4fcb4c2322e97e00db800a27dc6790b49de83d9ff87b62695ac119fd2049ebbd4c69a70745604866bc6f85f8316379a9c3616217ae589283171e24a577f4388649dca166c8761a56b300ee4a3fa4f5af0d745de835e93887c9b7590b1a99123aa38a709a138f5c6973196778f1fae51cef5045e802d31ee99746fab78719a4837626e79f8e61fe4250c7aa8d1426b503cccb65a05e4786f35f4275948a2d001a8ed1b16dc7dc345a5d3a0030e54e6f517a96df263e1f92e1c6af474983246f51bab77", @ANYRES16=r3, @ANYBLOB="010029bd7000040000008900000008000300", @ANYRES32=r4, @ANYBLOB="18001d801400008006000500ca00000005000800ba000000"], 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc0000010000000000000000000000000000000000000009000000000000000100000003"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000980), 0x2, 0x0) socket$inet6(0xa, 0x1, 0x100) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) close(r5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000940)={@private=0xa010100, @remote, 0x4, "957b0a386101819797d7c1bd75f5fe54f049ddca5f0c5c9bc539d170cf2e21f5", 0xfd0, 0x3504, 0x4, 0x9}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8932, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) r8 = openat$cgroup_ro(r1, &(0x7f0000000380)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r8, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000300)=@buf={0xf4, &(0x7f0000000200)="f864a0041699598f83b6adc9ba473424129cc9cef2c0651eadf89de54cf1b74f7fc32144d53eef4cec927c07b71be9424a2f0c6173830fe6efb37a6553dc8209321fbf0b5d383804f46502131a060db155769493048927862ebdd7a96d94471ec914befa81d4648b450ad77f245a91b6e3337ab8b965e5a90ae3a6d41e3407c2562b04d4eccf5bdf3eb19eab2d4f0c9c05d052a6e7e14fadb89fc374da73ce58aa9b58af499cc91ae853ea0c5c409f5f88282cfc66d73539a439b42b83bf4a59aeab07b65d35ee46c33ba4cc5bc503bb73156db05998e5d7e0399f526266315fe41ae282ff462c6823629dab76b9067de4d9242a"}) socket$kcm(0x29, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000009c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="540104c714000500"/20, @ANYRES32=r10, @ANYBLOB="14000200fe8000000000000000000000000000aa14000100fe80000000000000000000000000003f140006000300000000000100b7e1a95a81000000"], 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000840)={'syztnl1\x00', &(0x7f0000000d80)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x0, 0x8, 0x4, @loopback, @private0, 0x1, 0x0, 0x6, 0x10001}}) 1.151704829s ago: executing program 2 (id=332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x68}}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xaf}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xf2e9}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}]}, 0x3c}}, 0x20000005) getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f0000000740)=0xc) sendmmsg(r1, &(0x7f0000000100), 0x4000000000001f2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x280, 0x138, 0x280, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x2, 0x0, 0x2829, 0xf097, 0x7, 0x9, 0x1}}, @common=@ah={{0x30}, {[0x3, 0x9], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x3cd, 0xd, [0x3, 0x4, 0x26, 0xb, 0x19, 0x32, 0x8, 0xc, 0x3c, 0x16, 0xa, 0x25, 0x14, 0x20, 0x1a, 0x28], 0x1, 0x1, 0xa3}}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x2}}, @common=@ttl={{0x28}, {0x2, 0x9}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="7026f19cb504", 0x2, 0x0, [0x9, 0x28, 0x3b, 0x2c, 0x1e, 0x3d, 0x1b, 0x3b, 0x1c, 0x36, 0xf, 0x1d, 0x3c, 0x2, 0x20, 0x38], 0x0, 0x9, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 1.087216245s ago: executing program 3 (id=333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b7277b6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa312}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf713}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fc0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a97}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1bf67083}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x68}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006d000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f00b15432d6706f273240fda0431d84463000b6e6f1505a534aefacca630000000000000000000000007bbb2724b2322cdcf49dea53066deb383775484f28dedc0e8292a086f0b4bc8740535b52beeba05bebb8f219708c9252a88efa93be35fa5c0bd8a9998cdac0b60b22e3da9d6306b075a7b544aeda842886439f3c24e8ad8b7b53d2e314fba3ce7a483fac82e4b491234793e122162eca7577b78bff4bec7725e360122f4d02f11748"], 0x28}}, 0x0) 1.038244523s ago: executing program 2 (id=334): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000140)="aa", 0x1, 0x4048084, &(0x7f0000000180)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x5, 0xffff) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r3, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003", @ANYBLOB="a2d9d3c58033b41de6e1e373deb462d60e3b2369ee9b9d061e04637a3a0a8905ebd6cb8a61370c3b1504c4a8e5d194db91f7edd168c8716ccc4c47522b18ced37123f00b75e38697350a6a3e123eccc241847251d5bb23e18d516ddf2ca44d5fb70e24dc8c6cc4e71688975b7e02fa442d8c0c344b1e6e5d022e0910b63c91", @ANYRES32=r1, @ANYRES32=r2], 0x50}}, 0x0) 939.767365ms ago: executing program 1 (id=335): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, r3, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4dabb91b40b8910ee5d25a094d44f96c757285cde32150f1"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x41000}, 0x48000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000200)="9ef0ed240b24a294cf3cb78a145c0a290349cfdef32851f6310d94c35fba283164c3d6774c866bdaf9ea2d5e3fe9c6db9c55146e580ef1dd6fd0fe3e805d24281b037b8286b4f516c4ae8c2251f016be09a570fd037557fe5d399ee40f3cdb64e9c0e788103ad4b345f7b74286e542af7ab8b8634180fa411e0a2aa14ecc3c242608d956379021ebdba87b93b67e4af1abaaf51a15dda56f9cdd2bbfabb44c720e9e9a7ba1d67b3a2114355cf6af7e7cb7ae80442859a7431973d6617c7076a92c5f109ca5db323351aa0914e122648cd9e6d653442897f2744bbf", &(0x7f0000000300)=@udp=r1, 0x1}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x3, 0x2d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000007c0], 0x0, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x69, 0x88be, 'veth0_to_bridge\x00', 'geneve0\x00', 'ipvlan0\x00', 'pim6reg\x00', @link_local, [0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0xa8, 0xf8, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xb091bd326963328f}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x8, {0x7fff}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0xa, 0x8884, 'ip6tnl0\x00', 'tunl0\x00', 'vlan1\x00', 'xfrm0\x00', @local, [], @local, [0x0, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}, {0x11, 0x2, 0x88fb, 'nr0\x00', 'syzkaller1\x00', 'veth0_vlan\x00', 'lo\x00', @random="03cc9ee7ba20", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @random="007899f2954f", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x4}}}}]}]}, 0x348) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000840)={0x2, 'macvlan0\x00', 0x1}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a3802a065113f3a3499000a7d2000000000000000000", @ANYRES16=r6, @ANYBLOB="ef0429bd7000fcdbdf251200000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000600ab000c000000"], 0x30}}, 0x0) 828.726998ms ago: executing program 4 (id=336): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x14d341, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xfffffff9}, 0x2, 0xa, 0x40, 0x4, 0x1, 'syz0\x00', "a8ade9db18a9e1d93ee4ab381d1f2d57bf24d5a049b3e40ba20d8b981ce6931f", "af7af1d3b3c3ad33171d5f3ebe5ecc5d874c3a06e44c3142a7af088e33b5cb39", [{0x5, 0xb, {0x0, 0x4d}}, {0x7, 0x5, {0x3, 0x8}}, {0x3, 0x6, {0x3, 0x7ff}}, {0x3, 0x1fa0, {0x0, 0xff}}, {0x401, 0x5, {0x0, 0x5}}, {0x2, 0xfffc, {0x0, 0x1}}, {0x4, 0x9dc, {0x2, 0x7}}, {0x5, 0x400, {0x2, 0xfffffff9}}, {0xfffc, 0x1, {0x0, 0x800}}, {0xfff7, 0x10, {0x3, 0x6}}, {0x7df, 0x7, {0x0, 0x2d}}, {0x6, 0x9, {0x0, 0xffffffff}}, {0x4, 0x0, {0x3, 0xfffff000}}, {0x400, 0x1, {0x3}}, {0x0, 0x9, {0x3, 0xe}}, {0x0, 0xf, {0x1, 0x565}}, {0x81c, 0x1, {0x1, 0x2c}}, {0x6072, 0x7fff, {0x1, 0x3}}, {0x5, 0x3, {0x2, 0x3}}, {0x5, 0x9, {0x2, 0x4}}, {0xb9, 0xfffb, {0x1, 0x7}}, {0x0, 0x5, {0x3, 0x81}}, {0x5, 0x5, {0x0, 0xd65}}, {0x9, 0x6c01, {0x0, 0x5}}, {0x7, 0xa, {0x1, 0x7bd6}}, {0x6, 0x2, {0x1, 0xc600000}}, {0xfffa, 0x2, {0x0, 0x8}}, {0x2, 0xbe}, {0x6, 0x8c, {0x4, 0x5}}, {0x5, 0x5, {0x3, 0x3}}, {0x3, 0x1, {0x3, 0x3}}, {0xd29e, 0x3, {0x3, 0x1ff}}, {0x1e70, 0x5, {0x3, 0xfffffbff}}, {0x7, 0x6, {0x2, 0xff}}, {0x3, 0xc6b, {0x0, 0xf}}, {0xc, 0x5, {0x3, 0x3}}, {0x2, 0x1, {0x1, 0x9}}, {0x3, 0x0, {0x1, 0x9}}, {0x0, 0x7a8, {0x0, 0x6}}, {0x0, 0xfffa, {0x3, 0xa8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000002c0)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c406b192"}, 0x28) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)={@val={0x1c, 0xf5}, @val, @mpls}, 0xe) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/129, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x6c}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x7c64}], 0x2, 0x0, 0x0) 759.959127ms ago: executing program 3 (id=337): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40ffffff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r2, 0x0) bind$bt_hci(r1, &(0x7f0000000640)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000007c0)="4a0000001100"/23, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x30}}, 0x240040c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$packet(r3, &(0x7f0000000680)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f00000006c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x0, @void}, 0x10) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000300)={'veth0_to_team\x00', &(0x7f0000000340)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 599.727445ms ago: executing program 0 (id=338): write(0xffffffffffffffff, &(0x7f0000000080)="ce7766b756aacfd28aedf3b7986c4a9eea7f235b5d7ff3c3953c61844fe36ca4008ea4b853eccce3b9a18430f023a7e72e4b0f5a64994d8fe040a7bbbc7b5c9650d294e8ed9abdaaaadda5a9", 0x4c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1811000000000000afe4000000000000630a00ff000000009500684000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x21) 599.309713ms ago: executing program 1 (id=339): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) poll(&(0x7f0000000000)=[{r1}, {r1}], 0x2, 0xf45) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x28) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0x270}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x54}}, 0x4040051) 563.537726ms ago: executing program 2 (id=340): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80c4) socket$inet_smc(0x2b, 0x1, 0x0) 444.777051ms ago: executing program 0 (id=341): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000100)=0x5, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0xb, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0x12, 0x1, 'memory.events\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x240480c9}, 0x300000c1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 363.685332ms ago: executing program 2 (id=342): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2d, 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000200)=0x22, 0x4) connect$netlink(r2, &(0x7f0000000180)=@proc={0x2d, 0x0, 0x25dfdbfc, 0x40000}, 0xc) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000000c0)={'macsec0\x00', {0x2, 0x0, @multicast1}}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES32=r1], 0x1c}}, 0x4011) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000240)={r2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000801}, 0x200408c4) 363.078768ms ago: executing program 4 (id=343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xfd90, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xfd90, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b70500000000000600000000000000000400000000000000950000000000000009f091a3782d561e3b53889992f021b69eac90f0084457fd6026e6ce7524194d7246d6c212834a1b5e6663b05e403cc9fce71c8f33f58b497ffb0432410259372eab94a87d98c7419ed9763847e1fd6b5f3b72a11400000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b70500000000000600000000000000000400000000000000950000000000000009f091a3782d561e3b53889992f021b69eac90f0084457fd6026e6ce7524194d7246d6c212834a1b5e6663b05e403cc9fce71c8f33f58b497ffb0432410259372eab94a87d98c7419ed9763847e1fd6b5f3b72a11400000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000200), &(0x7f00000004c0)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000004c0)=r1}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="400000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0800000000000000140012800b0001006772657461700000040002a00a0001"], 0x40}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000740)=@can, &(0x7f00000007c0)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000800)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r7, 0xe7d02281b1d40445, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x1c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000a00)={'veth0_to_team\x00', &(0x7f0000000a40)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) (async) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x34, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r2, 0x58, &(0x7f0000000540)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r2, 0x58, &(0x7f0000000540)}, 0x10) 264.972179ms ago: executing program 2 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) (rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x18}, 0x18) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, &(0x7f0000000d00)='GPL\x00'}, 0x94) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000e40)='syzkaller\x00'}, 0x94) (async) pselect6(0x40, &(0x7f0000000e80), 0x0, 0xfffffffffffffffc, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000ec0)={'vlan0\x00', 0x0}) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f00)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r6, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001000)={0x0, 0x0}, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001040)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000001080)=r8, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0x0, 0x1000, 0x10}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a80)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ac0)=r9, 0x4) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00)={r10}, 0x8) read(r11, 0x0, 0x0) (async) read(r11, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1d2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) 261.091448ms ago: executing program 0 (id=345): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000380)=0x707987cd) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000cc0)={'tunl0\x00', 0x0, 0x10, 0x10, 0xbc4, 0xe57d, {{0x2c, 0x4, 0x3, 0x19, 0xb0, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast2, {[@lsrr={0x83, 0x1f, 0xec, [@remote, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @rand_addr=0x64010100, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x17}]}, @cipso={0x86, 0x23, 0x3, [{0x7, 0x2}, {0x5, 0xd, "30800a53ba6318e3158987"}, {0x7, 0x2}, {0x6, 0xc, "4450bf0f9013e0891cbb"}]}, @ssrr={0x89, 0x17, 0xf2, [@local, @multicast2, @private=0xa010102, @multicast1, @rand_addr=0x64010100]}, @end, @cipso={0x86, 0x3f, 0x3, [{0x1, 0x9, "07c6f0d19131c5"}, {0x7, 0x5, '\\Ik'}, {0x6, 0xf, "cd9ab231b3c170ff2c7b4b9a1b"}, {0x7, 0x6, "21538f07"}, {0x5, 0x8, "b318069ab906"}, {0x7, 0xe, "7cda4c747523d0b3a8b6e737"}]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000e00)={r1, 0xde, 0x4, 0x100000000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r3, @ANYBLOB="0101650eb651ec0e2f415bbd3f81000000000000000000000005000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000000030000000300"/28], 0x50) sendmsg$inet(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='>', 0x22fe0}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="80010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004555c46508001f0002000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0015000000000037000000"], 0x180}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@local, 0x0, 0x3c}, @in6=@private0, {0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x7, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x3, 0x34}, [@coaddr={0x14, 0xe, @in6=@private0}]}, 0x104}}, 0x0) sendmsg$nl_netfilter(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d"], 0xbc}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r11, &(0x7f0000000c00)={0x2, 0x6bb, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xd, 0x5, &(0x7f0000000140)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) listen(r11, 0x1) r12 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r12, &(0x7f0000000c40)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r12, &(0x7f0000000c80)={0x2, 0x6bb, @loopback}, 0x10) 208.296454ms ago: executing program 4 (id=346): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x80400}, &(0x7f0000000140)=0xc) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000480)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) (async) close(0x3) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x1, @in6={{0xa, 0x4e23, 0x16, @mcast2, 0x3}}, [0x9, 0xff, 0x8001, 0x20ac05df, 0x2, 0xa95, 0x7b4, 0x400, 0x5b, 0x8, 0x4, 0x9, 0x8745, 0x8000, 0x8000000000000001]}, &(0x7f0000000300)=0x100) (async) socket$netlink(0x10, 0x3, 0xf) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc004091) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={r2, 0x400}, 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, 0x54, r6}) 115.911644ms ago: executing program 4 (id=347): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x98}, 0x1, 0xba01}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="05000000000000007111b100000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000440)='GPL\x00', 0x5, 0x29e, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x21c, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 0s ago: executing program 4 (id=348): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000040000901feffffff00000000017c0000040042800c00018006000600800a00000c00028004"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x700f, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000040000901feffffff00000000017c0000040042800c00018006000600800a00000c00028004"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x700f, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 73.700339][ T5618] cgroup: Unknown subsys name 'net' [ 73.827756][ T5618] cgroup: Unknown subsys name 'cpuset' [ 73.836356][ T5618] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.234417][ T5618] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.273447][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.274764][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.275341][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.276187][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.276731][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.405916][ T4951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.408858][ T4951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.411823][ T4951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.413367][ T4951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.421367][ T4951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.508521][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.509633][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.512039][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.513146][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.536027][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.620606][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.622617][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.641335][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.649254][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.658387][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.658829][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.659573][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.691128][ T4951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.692206][ T4951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.692868][ T4951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.278481][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.293697][ T5629] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.301436][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.313377][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.529025][ T5640] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.548542][ T5645] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.804246][ T5647] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.827155][ T5635] infiniband rxe0: set active [ 78.829728][ T5635] infiniband rxe0: added rxe_eth0 [ 78.843497][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.887059][ T5635] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 78.887098][ T5635] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 78.887136][ T5635] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 78.947368][ T5635] RDS/IB: rxe0: added [ 78.953564][ T5635] smc: adding ib device rxe0 with port count 1 [ 78.953747][ T5635] smc: ib device rxe0 port 1 has no pnetid [ 78.995302][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.017915][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.314980][ T5630] Bluetooth: hci0: command tx timeout [ 79.403242][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.448169][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.475333][ T5630] Bluetooth: hci1: command tx timeout [ 79.515987][ T5647] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.553974][ T5630] Bluetooth: hci2: command tx timeout [ 79.590081][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.676212][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.676955][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.677120][ T5629] bridge_slave_0: entered allmulticast mode [ 79.679076][ T5629] bridge_slave_0: entered promiscuous mode [ 79.707062][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.707163][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.707292][ T5629] bridge_slave_1: entered allmulticast mode [ 79.709199][ T5629] bridge_slave_1: entered promiscuous mode [ 79.717181][ T5630] Bluetooth: hci4: command tx timeout [ 79.794524][ T5630] Bluetooth: hci3: command tx timeout [ 79.823545][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.850242][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.890500][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.958931][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.959103][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.959236][ T5645] bridge_slave_0: entered allmulticast mode [ 79.961431][ T5645] bridge_slave_0: entered promiscuous mode [ 79.964096][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.964196][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.964316][ T5640] bridge_slave_0: entered allmulticast mode [ 79.967071][ T5640] bridge_slave_0: entered promiscuous mode [ 79.972918][ T5629] team0: Port device team_slave_0 added [ 79.990047][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.990153][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.990287][ T5645] bridge_slave_1: entered allmulticast mode [ 79.993365][ T5645] bridge_slave_1: entered promiscuous mode [ 80.030288][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.030464][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.030591][ T5640] bridge_slave_1: entered allmulticast mode [ 80.035669][ T5640] bridge_slave_1: entered promiscuous mode [ 80.073012][ T5629] team0: Port device team_slave_1 added [ 80.146374][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.146391][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.146416][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.204523][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.207215][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.207885][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.207897][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.207922][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.210486][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.216238][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.236524][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.372955][ T5640] team0: Port device team_slave_0 added [ 80.390351][ T5645] team0: Port device team_slave_0 added [ 80.415882][ T5640] team0: Port device team_slave_1 added [ 80.418422][ T5645] team0: Port device team_slave_1 added [ 80.428038][ T5629] hsr_slave_0: entered promiscuous mode [ 80.429250][ T5629] hsr_slave_1: entered promiscuous mode [ 80.537290][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.537307][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.537329][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.546391][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.546406][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.546430][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.549249][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.549263][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.549287][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.603245][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.603263][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.603286][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.688887][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.875477][ T5640] hsr_slave_0: entered promiscuous mode [ 80.876642][ T5640] hsr_slave_1: entered promiscuous mode [ 80.877428][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 80.877528][ T5640] Cannot create hsr debugfs directory [ 80.927023][ T5645] hsr_slave_0: entered promiscuous mode [ 80.928081][ T5645] hsr_slave_1: entered promiscuous mode [ 80.928843][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 80.928861][ T5645] Cannot create hsr debugfs directory [ 81.196242][ T5647] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.196339][ T5647] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.196450][ T5647] bridge_slave_0: entered allmulticast mode [ 81.197813][ T5647] bridge_slave_0: entered promiscuous mode [ 81.241267][ T5647] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.241367][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.241482][ T5647] bridge_slave_1: entered allmulticast mode [ 81.242867][ T5647] bridge_slave_1: entered promiscuous mode [ 81.316507][ T5647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.319547][ T5647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.346551][ T5629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.351573][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.352726][ T5629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.358163][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.394427][ T5630] Bluetooth: hci0: command tx timeout [ 81.399224][ T5629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.402079][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.405763][ T5647] team0: Port device team_slave_0 added [ 81.413059][ T5647] team0: Port device team_slave_1 added [ 81.431497][ T5629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.442641][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.490022][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.490038][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.490060][ T5647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.507452][ T5647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.507468][ T5647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.507492][ T5647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.572390][ T5630] Bluetooth: hci1: command tx timeout [ 81.634076][ T5630] Bluetooth: hci2: command tx timeout [ 81.649266][ T5647] hsr_slave_0: entered promiscuous mode [ 81.650325][ T5647] hsr_slave_1: entered promiscuous mode [ 81.651153][ T5647] debugfs: 'hsr0' already exists in 'hsr' [ 81.651171][ T5647] Cannot create hsr debugfs directory [ 81.653153][ T5645] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.686575][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.687511][ T5645] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.691652][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.726023][ T5645] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.730935][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.731927][ T5645] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.745609][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.794663][ T5630] Bluetooth: hci4: command tx timeout [ 81.874311][ T5630] Bluetooth: hci3: command tx timeout [ 82.019123][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.019234][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.019641][ T5635] bridge_slave_0: entered allmulticast mode [ 82.022028][ T5635] bridge_slave_0: entered promiscuous mode [ 82.073438][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.073601][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.073705][ T5635] bridge_slave_1: entered allmulticast mode [ 82.076335][ T5635] bridge_slave_1: entered promiscuous mode [ 82.101860][ T5640] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.108422][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.134795][ T5640] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.137462][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.150916][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.176031][ T5640] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.180278][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.183395][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.193249][ T5640] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.202060][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.236081][ T5635] team0: Port device team_slave_0 added [ 82.239357][ T5635] team0: Port device team_slave_1 added [ 82.309542][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.309558][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.309579][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.318381][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.318397][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.318421][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.408876][ T5635] hsr_slave_0: entered promiscuous mode [ 82.409506][ T5635] hsr_slave_1: entered promiscuous mode [ 82.409909][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 82.409927][ T5635] Cannot create hsr debugfs directory [ 82.434771][ T5647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.440394][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.461348][ T5647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.465495][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.500059][ T5647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.503046][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.520855][ T5647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.523668][ T5647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.535813][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.661351][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.680792][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.707338][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.707442][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.749142][ T5635] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.752099][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.756279][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.756405][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.765347][ T5635] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.775289][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.776138][ T5635] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.811435][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.812343][ T5635] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.816851][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.848659][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.897246][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.897323][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.903345][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.903405][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.945339][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.028880][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.046509][ T5647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.089587][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.089694][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.128002][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.128098][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.143094][ T5647] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.170130][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.170233][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.172373][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.172486][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.377057][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.475624][ T5630] Bluetooth: hci0: command tx timeout [ 83.486409][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.530720][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.530824][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.586622][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.586730][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.634151][ T5630] Bluetooth: hci1: command tx timeout [ 83.717412][ T5630] Bluetooth: hci2: command tx timeout [ 83.880787][ T5630] Bluetooth: hci4: command tx timeout [ 83.956347][ T5630] Bluetooth: hci3: command tx timeout [ 84.028171][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.259634][ T5629] veth0_vlan: entered promiscuous mode [ 84.313256][ T5629] veth1_vlan: entered promiscuous mode [ 84.427777][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.480105][ T5629] veth0_macvtap: entered promiscuous mode [ 84.497493][ T5629] veth1_macvtap: entered promiscuous mode [ 84.576991][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.581928][ T5647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.590813][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.629350][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.682304][ T5645] veth0_vlan: entered promiscuous mode [ 84.744950][ T5645] veth1_vlan: entered promiscuous mode [ 84.815209][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.815377][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.815413][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.815448][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.819879][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.831780][ T5647] veth0_vlan: entered promiscuous mode [ 84.883178][ T5640] veth0_vlan: entered promiscuous mode [ 84.922596][ T5647] veth1_vlan: entered promiscuous mode [ 84.958355][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.958380][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.982403][ T5640] veth1_vlan: entered promiscuous mode [ 85.000726][ T5645] veth0_macvtap: entered promiscuous mode [ 85.028646][ T5645] veth1_macvtap: entered promiscuous mode [ 85.058138][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.058160][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.148942][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.151248][ T5647] veth0_macvtap: entered promiscuous mode [ 85.180830][ T5647] veth1_macvtap: entered promiscuous mode [ 85.183376][ T5640] veth0_macvtap: entered promiscuous mode [ 85.199833][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.230631][ T5640] veth1_macvtap: entered promiscuous mode [ 85.254278][ T1004] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.254342][ T1004] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.293572][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.332826][ T5647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.346909][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.368148][ T5629] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.406706][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.490075][ T5842] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 85.509406][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.509427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.556713][ T5630] Bluetooth: hci0: command tx timeout [ 85.642091][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.642111][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.647054][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.647600][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.647750][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.647916][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.648106][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.714159][ T5630] Bluetooth: hci1: command tx timeout [ 85.736914][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.736933][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.777607][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.777628][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.782219][ T5635] veth0_vlan: entered promiscuous mode [ 85.796856][ T5630] Bluetooth: hci2: command tx timeout [ 85.813610][ T5844] syzkaller0: entered promiscuous mode [ 85.813627][ T5844] syzkaller0: entered allmulticast mode [ 85.844368][ T1012] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.844415][ T1012] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.844449][ T1012] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.844484][ T1012] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.844518][ T1012] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.850380][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.850399][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.882884][ T5635] veth1_vlan: entered promiscuous mode [ 85.955156][ T5630] Bluetooth: hci4: command tx timeout [ 85.971047][ T5844] netlink: 'syz.0.6': attribute type 9 has an invalid length. [ 85.971130][ T5844] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.6'. [ 86.013814][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.013835][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.034496][ T5630] Bluetooth: hci3: command tx timeout [ 86.067322][ T5858] netlink: 'syz.0.6': attribute type 9 has an invalid length. [ 86.067342][ T5858] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.6'. [ 86.277067][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.320272][ T5635] veth0_macvtap: entered promiscuous mode [ 86.371271][ T5635] veth1_macvtap: entered promiscuous mode [ 86.443987][ T5873] netlink: 'syz.0.7': attribute type 25 has an invalid length. [ 86.460774][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.506840][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.577423][ T1012] IPVS: starting estimator thread 0... [ 86.663993][ T5881] IPVS: using max 30 ests per chain, 72000 per kthread [ 86.664281][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.667645][ T1012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.667967][ T1012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.668154][ T1012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.785830][ T5891] Zero length message leads to an empty skb [ 86.846908][ T192] cfg80211: failed to load regulatory.db [ 87.022207][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.022228][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.117673][ T5904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 87.138066][ T5903] netlink: 'syz.0.16': attribute type 2 has an invalid length. [ 87.139900][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.139917][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.170291][ T5906] netlink: 'syz.1.17': attribute type 12 has an invalid length. [ 87.290524][ T5906] bond1: option primary_reselect: invalid value (255) [ 87.295118][ T5906] bond1 (unregistering): Released all slaves [ 87.355987][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 87.396867][ T5913] erspan0: entered promiscuous mode [ 87.396892][ T5913] erspan0: entered allmulticast mode [ 87.533073][ T5920] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 87.542363][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 87.542384][ T5920] netlink: 80 bytes leftover after parsing attributes in process `syz.2.22'. [ 87.542412][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 87.695409][ T5928] Bluetooth: MGMT ver 1.23 [ 87.720473][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 87.776212][ T5925] sit0: entered promiscuous mode [ 87.791779][ T5925] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 87.791800][ T5925] netlink: 1 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.918530][ T5939] Bluetooth: MGMT ver 1.23 [ 88.453682][ T5974] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 88.722961][ T5989] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 88.755562][ T5989] team0: Port device veth0_to_bond added [ 88.759257][ T5989] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 89.158600][ T6023] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 89.279830][ T6027] syzkaller0: entered promiscuous mode [ 89.279882][ T6027] syzkaller0: entered allmulticast mode [ 89.485996][ T6036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.491583][ T6036] bond0: (slave bond1): Enslaving as an active interface with an up link [ 90.626168][ T6108] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 90.688478][ T6101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.707325][ T6101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.710453][ T6101] bond0 (unregistering): Released all slaves [ 90.876778][ T6120] ksmbd: Unknown IPC event: 0, ignore. [ 91.018262][ T5783] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.019160][ T6130] __nla_validate_parse: 19 callbacks suppressed [ 91.019175][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 91.191277][ T6142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.77'. [ 91.266517][ T6148] validate_nla: 2 callbacks suppressed [ 91.266537][ T6148] netlink: 'syz.0.78': attribute type 1 has an invalid length. [ 91.865480][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.88'. [ 91.866753][ T6181] netlink: 228 bytes leftover after parsing attributes in process `syz.4.87'. [ 92.420099][ T6207] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 92.839384][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 92.849832][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 92.858098][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 92.872589][ T6235] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 92.955394][ T6242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.068875][ T6251] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.105'. [ 93.429323][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 93.514415][ T6280] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 93.563207][ T6280] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.591353][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 93.747747][ T6290] openvswitch: netlink: Duplicate key (type 16). [ 93.865685][ T4951] Bluetooth: hci1: connection err: -111 [ 94.055746][ T6305] ip_tables: iptables: counters copy to user failed while replacing table [ 94.056076][ T6305] ip_tables: iptables: counters copy to user failed while replacing table [ 94.056370][ T6305] ip_tables: iptables: counters copy to user failed while replacing table [ 94.056672][ T6305] ip_tables: iptables: counters copy to user failed while replacing table [ 94.056980][ T6305] ip_tables: iptables: counters copy to user failed while replacing table [ 94.057294][ T6305] ip_tables: iptables: counters copy to user failed while replacing table [ 94.065796][ T6305] ip_tables: iptables: counters copy to user failed while replacing table [ 94.066147][ T6305] ip_tables: iptables: counters copy to user failed while replacing table [ 94.674549][ T4951] Bluetooth: hci3: command 0x0405 tx timeout [ 96.425977][ T6273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.473167][ T6272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.628695][ T6337] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 96.760568][ T1004] IPVS: starting estimator thread 0... [ 96.837161][ T6358] __nla_validate_parse: 2 callbacks suppressed [ 96.837182][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.128'. [ 96.850750][ T6356] IPVS: using max 34 ests per chain, 81600 per kthread [ 96.964263][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 97.191659][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 97.231676][ T6380] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.135'. [ 97.542316][ T6409] h: entered promiscuous mode [ 97.561652][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.144'. [ 97.570980][ T6410] netlink: 132 bytes leftover after parsing attributes in process `syz.4.145'. [ 97.619801][ T6410] batman_adv: batadv0: Adding interface: syz_tun [ 97.619903][ T6410] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.619934][ T6410] batman_adv: batadv0: Interface activated: syz_tun [ 97.661590][ T6414] syzkaller1: entered promiscuous mode [ 97.661613][ T6414] syzkaller1: entered allmulticast mode [ 97.852499][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 98.034932][ T5738] net_ratelimit: 26 callbacks suppressed [ 98.034952][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.081163][ T6448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.081396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.200487][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 98.439275][ T6478] Bluetooth: hci0: unsupported parameter 5135 [ 98.439299][ T6478] Bluetooth: hci0: unsupported parameter 8192 [ 98.439316][ T6478] Bluetooth: hci0: unsupported parameter 5135 [ 98.439329][ T6478] Bluetooth: hci0: unsupported parameter 8192 [ 98.453255][ T6478] veth1_to_bond: entered allmulticast mode [ 98.459944][ T6477] batman_adv: batadv0: Adding interface: syz_tun [ 98.459960][ T6477] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.459988][ T6477] batman_adv: batadv0: Interface activated: syz_tun [ 98.753739][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 98.852856][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 98.996916][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.003936][ T6329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.075957][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.102414][ T6509] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 99.107270][ T6509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.121503][ T6509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.155336][ T6509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.243268][ T6474] veth1_to_bond: left allmulticast mode [ 99.638999][ T6329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.644407][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.645898][ T6521] syzkaller0: entered promiscuous mode [ 99.647561][ T6521] syzkaller0: entered allmulticast mode [ 100.407940][ T6573] xt_hashlimit: overflow, try lower: 3/0 [ 100.877764][ T6603] batman_adv: batadv0: Adding interface: syz_tun [ 100.877782][ T6603] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.877812][ T6603] batman_adv: batadv0: Interface activated: syz_tun [ 101.127723][ T6611] x_tables: duplicate underflow at hook 2 [ 103.234083][ T5738] net_ratelimit: 5 callbacks suppressed [ 103.234098][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.377530][ T6590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.611382][ T6625] __nla_validate_parse: 3 callbacks suppressed [ 103.611403][ T6625] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.195'. [ 103.611509][ T6625] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.195'. [ 103.708041][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.708061][ T6632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.708286][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.708298][ T6632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.708491][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.708504][ T6632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.708701][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.708714][ T6632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.708906][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.708919][ T6632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.709106][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.709118][ T6632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.709307][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.709319][ T6632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.719773][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.719792][ T6632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.196'. [ 103.720038][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.720232][ T6632] netlink: 'syz.4.196': attribute type 1 has an invalid length. [ 103.914940][ T6652] bridge_slave_0: left allmulticast mode [ 103.914969][ T6652] bridge_slave_0: left promiscuous mode [ 103.916682][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.079568][ T6652] bridge_slave_1: left allmulticast mode [ 104.079595][ T6652] bridge_slave_1: left promiscuous mode [ 104.079898][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.112956][ T6652] bond0: (slave bond_slave_0): Releasing backup interface [ 104.136114][ T6652] bond0: (slave bond_slave_1): Releasing backup interface [ 104.171265][ T6652] team0: Port device team_slave_0 removed [ 104.180888][ T6652] team0: Port device team_slave_1 removed [ 104.182308][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.182328][ T6652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.187401][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.187420][ T6652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.227546][ T6652] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.257920][ T6654] team0: Refused to change device type [ 104.274587][ T6659] tipc: Started in network mode [ 104.274622][ T6659] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 104.275515][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.275624][ T6659] tipc: Enabled bearer , priority 0 [ 104.281761][ T145] tipc: Resetting bearer [ 104.402414][ T6673] Bluetooth: MGMT ver 1.23 [ 104.464312][ T6678] bond3: entered promiscuous mode [ 104.464372][ T6678] bond3: entered allmulticast mode [ 104.465269][ T6678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.685049][ T6694] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20004 [ 104.972906][ T6709] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.997196][ T6713] bond1: (slave erspan1): making interface the new active one [ 104.998608][ T6713] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 105.285403][ T9] tipc: Node number set to 11578026 [ 105.318047][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.349389][ T6735] gretap0: entered promiscuous mode [ 105.365688][ T6735] 0ªî{X¹¦: renamed from gretap0 [ 105.407736][ T6735] 0ªî{X¹¦: left promiscuous mode [ 105.407759][ T6735] 0ªî{X¹¦: entered allmulticast mode [ 105.419092][ T6735] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 105.492824][ T6741] macsec1: entered allmulticast mode [ 105.501733][ T6741] batman_adv: batadv0: Adding interface: macsec1 [ 105.501750][ T6741] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.501778][ T6741] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 105.638013][ T6745] bond1: entered promiscuous mode [ 105.638427][ T6745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.667349][ T6745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.668067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.708563][ T6745] bond1: (slave bridge2): making interface the new active one [ 105.708586][ T6745] bridge2: entered promiscuous mode [ 105.710853][ T6745] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 105.714566][ T6329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.920413][ T6764] xt_cgroup: path and classid specified [ 105.920652][ T6764] xt_cgroup: path and classid specified [ 105.920755][ T6764] xt_cgroup: path and classid specified [ 105.920846][ T6764] xt_cgroup: path and classid specified [ 105.920946][ T6764] xt_cgroup: path and classid specified [ 105.921820][ T6764] xt_cgroup: path and classid specified [ 105.921926][ T6764] xt_cgroup: path and classid specified [ 105.922030][ T6764] xt_cgroup: path and classid specified [ 105.955261][ T6764] xt_cgroup: path and classid specified [ 105.955434][ T6764] xt_cgroup: path and classid specified [ 106.355946][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.743841][ T6808] syzkaller0: entered promiscuous mode [ 106.745066][ T6808] syzkaller0: entered allmulticast mode [ 106.882513][ T6819] ip_tables: iptables: counters copy to user failed while replacing table [ 107.355594][ T6832] bridge_slave_1: left allmulticast mode [ 107.355621][ T6832] bridge_slave_1: left promiscuous mode [ 107.355857][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.362407][ T6832] bridge_slave_0: left allmulticast mode [ 107.362430][ T6832] bridge_slave_0: left promiscuous mode [ 107.362637][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.435546][ T29] net_ratelimit: 7 callbacks suppressed [ 108.435566][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.617064][ T6915] __nla_validate_parse: 84 callbacks suppressed [ 108.617085][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.617328][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.617567][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.617827][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.618075][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.619892][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.620183][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.620427][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.620708][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.620938][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.2.278'. [ 108.697548][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.754891][ T6329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.033197][ T6927] vlan3: entered allmulticast mode [ 109.033217][ T6927] bond0: entered allmulticast mode [ 109.033229][ T6927] bond_slave_0: entered allmulticast mode [ 109.033244][ T6927] bond_slave_1: entered allmulticast mode [ 109.236922][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.474383][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.523358][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.523924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.714144][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.714361][ T6329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.803461][ T6982] openvswitch: netlink: Key type 327 is out of range max 32 [ 110.466014][ T7019] sctp: [Deprecated]: syz.2.298 (pid 7019) Use of int in max_burst socket option deprecated. [ 110.466014][ T7019] Use struct sctp_assoc_value instead [ 112.293789][ T7140] Bluetooth: hci0: unsupported parameter 5134 [ 112.293814][ T7140] Bluetooth: hci0: unsupported parameter 8192 [ 112.293827][ T7140] Bluetooth: hci0: unsupported parameter 5134 [ 112.293838][ T7140] Bluetooth: hci0: unsupported parameter 8192 [ 112.783632][ T7165] IPVS: Unknown mcast interface: macvlan0 [ 113.368100][ T7173] validate_nla: 60 callbacks suppressed [ 113.368129][ T7173] netlink: 'syz.3.337': attribute type 5 has an invalid length. [ 113.452039][ T7207] net_ratelimit: 14 callbacks suppressed [ 113.452059][ T7207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.453399][ C1] ------------[ cut here ]------------ [ 113.453410][ C1] !(ct != NULL && (ctinfo == IP_CT_NEW || ctinfo == IP_CT_RELATED)) [ 113.453424][ C1] WARNING: net/netfilter/xt_nat.c:154 at xt_dnat_target_v2+0x97/0xc0, CPU#1: syz.0.345/7207 [ 113.490945][ C1] Modules linked in: [ 113.494950][ C1] CPU: 1 UID: 0 PID: 7207 Comm: syz.0.345 Not tainted syzkaller #0 PREEMPT(full) [ 113.504262][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.513356][ T7220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.519928][ T7220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.532131][ C1] RIP: 0010:xt_dnat_target_v2+0x97/0xc0 [ 113.537750][ C1] Code: 74 22 41 83 e7 07 41 83 c7 fd bf fe ff ff ff 44 89 fe e8 fc 2b 90 f7 41 83 ff fe 72 25 e8 e1 26 90 f7 eb 09 e8 da 26 90 f7 90 <0f> 0b 90 4c 89 f7 48 89 de ba 01 00 00 00 5b 41 5e 41 5f e9 21 17 [ 113.557420][ C1] RSP: 0018:ffffc90000a07de0 EFLAGS: 00010246 [ 113.563498][ C1] RAX: ffffffff8a38ef14 RBX: ffff888075cf1218 RCX: ffff8880682dddc0 [ 113.571512][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 00000000fffffffe [ 113.579529][ C1] RBP: ffffc90000a07ed0 R08: 0000000000000100 R09: 0000000000000000 [ 113.587555][ C1] R10: ffffc90000a080b0 R11: ffffffff8a38ee60 R12: ffffffff919e5238 [ 113.595579][ C1] R13: 1ffff92000140fc4 R14: ffff88807c1cd500 R15: 0000000000000001 [ 113.603548][ C1] FS: 00007f5ebd27f6c0(0000) GS:ffff88812371f000(0000) knlGS:0000000000000000 [ 113.612529][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.619156][ C1] CR2: 000000110c28ff29 CR3: 000000007b9dc000 CR4: 00000000003526f0 [ 113.627218][ C1] Call Trace: [ 113.630500][ C1] [ 113.633343][ C1] nft_target_eval_xt+0x1ad/0x2b0 [ 113.638450][ C1] ? __pfx_nft_target_eval_xt+0x10/0x10 [ 113.644044][ C1] ? __pfx___skb_flow_dissect+0x10/0x10 [ 113.649617][ C1] nft_do_chain+0x48d/0x1b10 [ 113.654288][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 113.659368][ C1] ? l3mdev_update_flow+0x26/0x610 [ 113.664540][ C1] nft_nat_do_chain+0x360/0x4b0 [ 113.669412][ C1] ? __pfx_nft_nat_do_chain+0x10/0x10 [ 113.674858][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 113.680074][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 113.684905][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 113.690218][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 113.695580][ C1] ? __pfx_nft_nat_do_chain+0x10/0x10 [ 113.700986][ C1] nf_nat_inet_fn+0x5de/0xb50 [ 113.705741][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 113.710954][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 113.716020][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 113.720796][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 113.725960][ C1] nf_nat_ipv4_local_fn+0x18c/0x570 [ 113.731193][ C1] ? __pfx_nf_nat_ipv4_local_fn+0x10/0x10 [ 113.736993][ C1] nf_hook_slow+0xc5/0x220 [ 113.741424][ C1] ? __pfx_dst_output+0x10/0x10 [ 113.746315][ C1] nf_hook+0x22a/0x3a0 [ 113.750392][ C1] ? nf_hook+0xa1/0x3a0 [ 113.754593][ C1] ? __pfx_nf_hook+0x10/0x10 [ 113.759195][ C1] ? __pfx_dst_output+0x10/0x10 [ 113.764110][ C1] ? __ip_local_out+0x152/0x6a0 [ 113.768968][ C1] __ip_local_out+0x558/0x6a0 [ 113.773636][ C1] ? __pfx_dst_output+0x10/0x10 [ 113.778550][ C1] ip_local_out+0x2a/0x190 [ 113.782998][ C1] nf_send_reset+0xd8d/0x1530 [ 113.787767][ C1] ? __pfx_nf_send_reset+0x10/0x10 [ 113.792902][ C1] ? handle_softirqs+0x265/0x8d0 [ 113.797929][ C1] ? ip_finish_output2+0xbda/0x10b0 [ 113.803149][ C1] ? ip_output+0x29f/0x450 [ 113.807637][ C1] ? __ip_queue_xmit+0x10df/0x1b10 [ 113.812758][ C1] ? __tcp_transmit_skb+0x2d06/0x47b0 [ 113.818212][ C1] ? tcp_connect+0x1a7e/0x4990 [ 113.822997][ C1] ? __inet_stream_connect+0x28c/0xf50 [ 113.828530][ C1] ? inet_stream_connect+0x66/0xa0 [ 113.833656][ C1] ? __sys_connect+0x316/0x450 [ 113.838512][ C1] ? __x64_sys_connect+0x7a/0x90 [ 113.843466][ C1] ? do_syscall_64+0x166/0x520 [ 113.848295][ C1] nft_reject_ipv4_eval+0xf6/0x230 [ 113.853419][ C1] nft_do_chain+0x48d/0x1b10 [ 113.858094][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 113.863139][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 113.868499][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 113.873725][ C1] ? nf_nat_inet_fn+0x90c/0xb50 [ 113.878662][ C1] nft_do_chain_ipv4+0x195/0x290 [ 113.883645][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 113.888465][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 113.893992][ C1] ? nf_nat_ipv4_pre_routing+0x230/0x3a0 [ 113.899686][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 113.905211][ C1] nf_hook_slow+0xc5/0x220 [ 113.909641][ C1] NF_HOOK+0x21f/0x3c0 [ 113.913710][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 113.918859][ C1] ? NF_HOOK+0x9e/0x3c0 [ 113.923035][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 113.927682][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 113.932809][ C1] ? ip_rcv_core+0x88d/0xd50 [ 113.937446][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 113.941962][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 113.946508][ C1] process_backlog+0xa6b/0x18b0 [ 113.951386][ C1] ? process_backlog+0x3de/0x18b0 [ 113.956480][ C1] __napi_poll+0xaa/0x330 [ 113.960825][ C1] net_rx_action+0x61d/0xf50 [ 113.965472][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 113.970600][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 113.975868][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 113.981162][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 113.986421][ C1] ? sched_clock+0x41/0x60 [ 113.990854][ C1] handle_softirqs+0x265/0x8d0 [ 113.995688][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 114.000816][ C1] do_softirq+0x77/0xd0 [ 114.005009][ C1] [ 114.007959][ C1] [ 114.010877][ C1] __local_bh_enable_ip+0x100/0x140 [ 114.016137][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 114.021263][ C1] __dev_queue_xmit+0x1efb/0x3920 [ 114.026335][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 114.031463][ C1] ? __lock_acquire+0x747/0x2de0 [ 114.036438][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 114.041820][ C1] ? __pfx_nf_confirm+0x10/0x10 [ 114.046768][ C1] ? ip_finish_output2+0x972/0x10b0 [ 114.051982][ C1] ip_finish_output2+0xbda/0x10b0 [ 114.057057][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 114.062305][ C1] ip_output+0x29f/0x450 [ 114.066600][ C1] ? ip_output+0x5a/0x450 [ 114.070936][ C1] ? __ip_queue_xmit+0x65/0x1b10 [ 114.075934][ C1] __ip_queue_xmit+0x10df/0x1b10 [ 114.080885][ C1] ? __ip_queue_xmit+0x65/0x1b10 [ 114.085862][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 114.090979][ C1] __tcp_transmit_skb+0x2d06/0x47b0 [ 114.096229][ C1] ? __alloc_skb+0x27a/0x7a0 [ 114.100840][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 114.106432][ C1] ? ktime_get+0x45/0x220 [ 114.110782][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 114.117002][ C1] tcp_connect+0x1a7e/0x4990 [ 114.121640][ C1] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 114.127455][ C1] tcp_v4_connect+0x1264/0x1b20 [ 114.132349][ C1] ? __pfx_tcp_v4_connect+0x10/0x10 [ 114.137598][ C1] __inet_stream_connect+0x28c/0xf50 [ 114.142899][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.147967][ C1] ? __pfx___inet_stream_connect+0x10/0x10 [ 114.153786][ C1] ? inet_stream_connect+0x51/0xa0 [ 114.158935][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 114.164268][ C1] inet_stream_connect+0x66/0xa0 [ 114.169197][ C1] __sys_connect+0x316/0x450 [ 114.173782][ C1] ? __pfx___sys_connect+0x10/0x10 [ 114.178946][ C1] ? rcu_is_watching+0x16/0xb0 [ 114.183752][ C1] __x64_sys_connect+0x7a/0x90 [ 114.188561][ C1] do_syscall_64+0x166/0x520 [ 114.193160][ C1] ? trace_irq_disable+0x3b/0x140 [ 114.198220][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.204338][ C1] ? clear_bhb_loop+0x70/0xc0 [ 114.204808][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.217116][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.223022][ C1] RIP: 0033:0x7f5ebc39f559 [ 114.227489][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.247142][ C1] RSP: 002b:00007f5ebd27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 114.255591][ C1] RAX: ffffffffffffffda RBX: 00007f5ebc625fa0 RCX: 00007f5ebc39f559 [ 114.263571][ C1] RDX: 0000000000000010 RSI: 0000200000000c80 RDI: 000000000000000b [ 114.271595][ C1] RBP: 00007f5ebc436b50 R08: 0000000000000000 R09: 0000000000000000 [ 114.279596][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.287596][ C1] R13: 00007f5ebc626038 R14: 00007f5ebc625fa0 R15: 00007fff6aaf0848 [ 114.295621][ C1] [ 114.298631][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.305893][ C1] CPU: 1 UID: 0 PID: 7207 Comm: syz.0.345 Not tainted syzkaller #0 PREEMPT(full) [ 114.315070][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 114.325125][ C1] Call Trace: [ 114.328391][ C1] [ 114.331219][ C1] vpanic+0x26f/0x710 [ 114.335192][ C1] panic+0xc5/0xd0 [ 114.338902][ C1] ? __pfx_panic+0x10/0x10 [ 114.343328][ C1] __warn+0x315/0x4c0 [ 114.347301][ C1] ? xt_dnat_target_v2+0x97/0xc0 [ 114.352259][ C1] ? xt_dnat_target_v2+0x97/0xc0 [ 114.357208][ C1] __report_bug+0x276/0x570 [ 114.361705][ C1] ? kasan_save_track+0x4f/0x80 [ 114.366544][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 114.371557][ C1] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 114.377616][ C1] ? xt_dnat_target_v2+0x97/0xc0 [ 114.382548][ C1] ? __pfx___report_bug+0x10/0x10 [ 114.387571][ C1] ? lock_acquire+0x115/0x350 [ 114.392261][ C1] ? __skb_flow_dissect+0x286f/0x6da0 [ 114.397633][ C1] ? xt_dnat_target_v2+0x97/0xc0 [ 114.402556][ C1] report_bug+0x16b/0x220 [ 114.406874][ C1] ? xt_dnat_target_v2+0x97/0xc0 [ 114.411802][ C1] ? xt_dnat_target_v2+0x99/0xc0 [ 114.416732][ C1] handle_bug+0x9c/0x200 [ 114.421000][ C1] exc_invalid_op+0x1a/0x50 [ 114.425492][ C1] asm_exc_invalid_op+0x1a/0x20 [ 114.430348][ C1] RIP: 0010:xt_dnat_target_v2+0x97/0xc0 [ 114.435881][ C1] Code: 74 22 41 83 e7 07 41 83 c7 fd bf fe ff ff ff 44 89 fe e8 fc 2b 90 f7 41 83 ff fe 72 25 e8 e1 26 90 f7 eb 09 e8 da 26 90 f7 90 <0f> 0b 90 4c 89 f7 48 89 de ba 01 00 00 00 5b 41 5e 41 5f e9 21 17 [ 114.455468][ C1] RSP: 0018:ffffc90000a07de0 EFLAGS: 00010246 [ 114.461521][ C1] RAX: ffffffff8a38ef14 RBX: ffff888075cf1218 RCX: ffff8880682dddc0 [ 114.469476][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 00000000fffffffe [ 114.477434][ C1] RBP: ffffc90000a07ed0 R08: 0000000000000100 R09: 0000000000000000 [ 114.485409][ C1] R10: ffffc90000a080b0 R11: ffffffff8a38ee60 R12: ffffffff919e5238 [ 114.493384][ C1] R13: 1ffff92000140fc4 R14: ffff88807c1cd500 R15: 0000000000000001 [ 114.501346][ C1] ? __pfx_xt_dnat_target_v2+0x10/0x10 [ 114.506795][ C1] ? xt_dnat_target_v2+0xb4/0xc0 [ 114.511734][ C1] nft_target_eval_xt+0x1ad/0x2b0 [ 114.516747][ C1] ? __pfx_nft_target_eval_xt+0x10/0x10 [ 114.522282][ C1] ? __pfx___skb_flow_dissect+0x10/0x10 [ 114.527817][ C1] nft_do_chain+0x48d/0x1b10 [ 114.532425][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 114.537453][ C1] ? l3mdev_update_flow+0x26/0x610 [ 114.542560][ C1] nft_nat_do_chain+0x360/0x4b0 [ 114.547426][ C1] ? __pfx_nft_nat_do_chain+0x10/0x10 [ 114.552794][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 114.557980][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 114.562765][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 114.568042][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 114.573322][ C1] ? __pfx_nft_nat_do_chain+0x10/0x10 [ 114.578699][ C1] nf_nat_inet_fn+0x5de/0xb50 [ 114.583399][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 114.588596][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 114.593632][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 114.598396][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 114.603420][ C1] nf_nat_ipv4_local_fn+0x18c/0x570 [ 114.608618][ C1] ? __pfx_nf_nat_ipv4_local_fn+0x10/0x10 [ 114.614340][ C1] nf_hook_slow+0xc5/0x220 [ 114.618750][ C1] ? __pfx_dst_output+0x10/0x10 [ 114.623606][ C1] nf_hook+0x22a/0x3a0 [ 114.627670][ C1] ? nf_hook+0xa1/0x3a0 [ 114.631818][ C1] ? __pfx_nf_hook+0x10/0x10 [ 114.636394][ C1] ? __pfx_dst_output+0x10/0x10 [ 114.641235][ C1] ? __ip_local_out+0x152/0x6a0 [ 114.646095][ C1] __ip_local_out+0x558/0x6a0 [ 114.650779][ C1] ? __pfx_dst_output+0x10/0x10 [ 114.655619][ C1] ip_local_out+0x2a/0x190 [ 114.660040][ C1] nf_send_reset+0xd8d/0x1530 [ 114.664736][ C1] ? __pfx_nf_send_reset+0x10/0x10 [ 114.669832][ C1] ? handle_softirqs+0x265/0x8d0 [ 114.674781][ C1] ? ip_finish_output2+0xbda/0x10b0 [ 114.679966][ C1] ? ip_output+0x29f/0x450 [ 114.684367][ C1] ? __ip_queue_xmit+0x10df/0x1b10 [ 114.689486][ C1] ? __tcp_transmit_skb+0x2d06/0x47b0 [ 114.694845][ C1] ? tcp_connect+0x1a7e/0x4990 [ 114.699613][ C1] ? __inet_stream_connect+0x28c/0xf50 [ 114.705073][ C1] ? inet_stream_connect+0x66/0xa0 [ 114.710171][ C1] ? __sys_connect+0x316/0x450 [ 114.714924][ C1] ? __x64_sys_connect+0x7a/0x90 [ 114.719855][ C1] ? do_syscall_64+0x166/0x520 [ 114.724629][ C1] nft_reject_ipv4_eval+0xf6/0x230 [ 114.729752][ C1] nft_do_chain+0x48d/0x1b10 [ 114.734346][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 114.739376][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 114.744651][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 114.749850][ C1] ? nf_nat_inet_fn+0x90c/0xb50 [ 114.754720][ C1] nft_do_chain_ipv4+0x195/0x290 [ 114.759678][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 114.764433][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 114.769884][ C1] ? nf_nat_ipv4_pre_routing+0x230/0x3a0 [ 114.775509][ C1] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 114.780960][ C1] nf_hook_slow+0xc5/0x220 [ 114.785366][ C1] NF_HOOK+0x21f/0x3c0 [ 114.789424][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 114.794524][ C1] ? NF_HOOK+0x9e/0x3c0 [ 114.798673][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 114.803250][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 114.808347][ C1] ? ip_rcv_core+0x88d/0xd50 [ 114.812931][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 114.817447][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 114.821942][ C1] process_backlog+0xa6b/0x18b0 [ 114.826793][ C1] ? process_backlog+0x3de/0x18b0 [ 114.831817][ C1] __napi_poll+0xaa/0x330 [ 114.836142][ C1] net_rx_action+0x61d/0xf50 [ 114.840735][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 114.845841][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 114.851036][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 114.856310][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 114.861507][ C1] ? sched_clock+0x41/0x60 [ 114.865935][ C1] handle_softirqs+0x265/0x8d0 [ 114.870696][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 114.875796][ C1] do_softirq+0x77/0xd0 [ 114.879942][ C1] [ 114.882856][ C1] [ 114.885770][ C1] __local_bh_enable_ip+0x100/0x140 [ 114.890956][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 114.896053][ C1] __dev_queue_xmit+0x1efb/0x3920 [ 114.901070][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 114.906187][ C1] ? __lock_acquire+0x747/0x2de0 [ 114.911136][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 114.916501][ C1] ? __pfx_nf_confirm+0x10/0x10 [ 114.921365][ C1] ? ip_finish_output2+0x972/0x10b0 [ 114.926581][ C1] ip_finish_output2+0xbda/0x10b0 [ 114.931597][ C1] ? ip_finish_output2+0x3de/0x10b0 [ 114.936804][ C1] ip_output+0x29f/0x450 [ 114.941051][ C1] ? ip_output+0x5a/0x450 [ 114.945496][ C1] ? __ip_queue_xmit+0x65/0x1b10 [ 114.950440][ C1] __ip_queue_xmit+0x10df/0x1b10 [ 114.955373][ C1] ? __ip_queue_xmit+0x65/0x1b10 [ 114.960407][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 114.965503][ C1] __tcp_transmit_skb+0x2d06/0x47b0 [ 114.970695][ C1] ? __alloc_skb+0x27a/0x7a0 [ 114.975288][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 114.980839][ C1] ? ktime_get+0x45/0x220 [ 114.985159][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 114.991307][ C1] tcp_connect+0x1a7e/0x4990 [ 114.995904][ C1] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 115.001641][ C1] tcp_v4_connect+0x1264/0x1b20 [ 115.006492][ C1] ? __pfx_tcp_v4_connect+0x10/0x10 [ 115.011689][ C1] __inet_stream_connect+0x28c/0xf50 [ 115.016984][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.021997][ C1] ? __pfx___inet_stream_connect+0x10/0x10 [ 115.027793][ C1] ? inet_stream_connect+0x51/0xa0 [ 115.032910][ C1] ? __local_bh_enable_ip+0xd6/0x140 [ 115.038193][ C1] inet_stream_connect+0x66/0xa0 [ 115.043127][ C1] __sys_connect+0x316/0x450 [ 115.047714][ C1] ? __pfx___sys_connect+0x10/0x10 [ 115.052858][ C1] ? rcu_is_watching+0x16/0xb0 [ 115.057648][ C1] __x64_sys_connect+0x7a/0x90 [ 115.062405][ C1] do_syscall_64+0x166/0x520 [ 115.066986][ C1] ? trace_irq_disable+0x3b/0x140 [ 115.072012][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.078069][ C1] ? clear_bhb_loop+0x70/0xc0 [ 115.082762][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.088644][ C1] RIP: 0033:0x7f5ebc39f559 [ 115.093068][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.112746][ C1] RSP: 002b:00007f5ebd27f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 115.121160][ C1] RAX: ffffffffffffffda RBX: 00007f5ebc625fa0 RCX: 00007f5ebc39f559 [ 115.129138][ C1] RDX: 0000000000000010 RSI: 0000200000000c80 RDI: 000000000000000b [ 115.137096][ C1] RBP: 00007f5ebc436b50 R08: 0000000000000000 R09: 0000000000000000 [ 115.145057][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.153028][ C1] R13: 00007f5ebc626038 R14: 00007f5ebc625fa0 R15: 00007fff6aaf0848 [ 115.161019][ C1] [ 115.164309][ C1] Kernel Offset: disabled [ 115.168631][ C1] Rebooting in 86400 seconds..