last executing test programs: 6.673750762s ago: executing program 4 (id=134): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xf, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, [0x8, 0x9]}}) 6.101380722s ago: executing program 4 (id=137): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff010000060000000c0001007f0008000000000000000100ff000000010000000c000100ff0100000008000008000500", @ANYRES32=r2], 0x78}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00'}) getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010300000000000000000a800000000300070000001214000100fe8000000000000086"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffe0, 0xfff2}, {0x1, 0x10}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) 4.529430905s ago: executing program 2 (id=150): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x42, 0xb, 0x70ad23, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040084) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) unshare(0x22020600) unshare(0x20000400) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x90000002}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r8}, 0x18) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r11, 0x11, 0x0, 0x0, @void, @value=r10}, 0x20) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r11, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r12}, 0x20) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) 4.395405081s ago: executing program 4 (id=152): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) getsockopt$inet6_int(r2, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) unshare(0x22020600) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x17, 0x0, 0x0) unshare(0x2a020400) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x28840}, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) 4.05972119s ago: executing program 2 (id=153): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a000000060001003c"], 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ecb-blowfish-asm,tgr192)\x00'}, 0x58) r4 = socket(0xa, 0x3, 0x2) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@dstopts_2292={{0x18, 0x29, 0x3e, {0x2c}}}], 0x18}}], 0x2, 0x4004804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x7c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x54, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xc39}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x7c}}, 0x8000) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', 0x0}) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.678716168s ago: executing program 0 (id=157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000001b40)={&(0x7f00000001c0)={0x30, r1, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @void}}}, 0x30}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_rs}}}}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000002240)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbbbbbbbbbbbbb86dd6d002000000a29"], 0x91) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001b80)={@fallback, 0xffffffffffffffff, 0x34, 0x26}, 0x20) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e008d2a28bd7000ffdbdf250a0000", @ANYBLOB="00ffcd"], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) 2.591918645s ago: executing program 3 (id=158): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x5}, {{0x2, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.494046759s ago: executing program 3 (id=159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff000000000700000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f0000000000)=0xff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0d614455424d89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.370391341s ago: executing program 3 (id=160): socket$isdn(0x22, 0x3, 0x22) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, 0x0, 0x10) r4 = epoll_create1(0x80000) r5 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000480)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1}, 0x1, 0x0, 0x0, 0x8010}, 0xee) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r10, 0x0) ioctl$sock_TIOCINQ(r10, 0x541b, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x6e1e, @multicast1}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48020000", @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r13], 0x248}}, 0x0) 2.040316025s ago: executing program 3 (id=161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3104000000000000000000000800014000000000080002"], 0xfc}}, 0x0) epoll_create1(0x80000) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) 1.925911293s ago: executing program 0 (id=162): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x2000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000830000000000000000000000850000001800000004000000500000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r7) socket$netlink(0x10, 0x3, 0x0) preadv(r8, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r11 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r11, &(0x7f00000032c0)=[{&(0x7f0000000580)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x204, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @local}], 0x50}], 0x1, 0x0) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) socket(0x10, 0x803, 0x0) 1.760656769s ago: executing program 0 (id=163): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc0100001900869cae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce65351", @ANYRES16=r1, @ANYRESDEC=r2, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2000c000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) socket$netlink(0x10, 0x3, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r5}, 0x50) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x7, 0x2, 0xa72bcf73}, &(0x7f00000001c0)=0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r6}, 0x38) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x240, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_DESC={0x20c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x913}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x148, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf683}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa777}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6b5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x2b8}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="fdaf0000e706000000000000000000000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 1.432804835s ago: executing program 3 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_emit_ethernet(0x76, &(0x7f0000000080)={@empty, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004a915711f1f63d3200132bce0b0e02959dc7b3499871a6c86d95cbde513569a8ab635a02633aa253906e180e7f42fa1f2af58c5adf069b890908aa8834cbc90a4545b7f697bcce1f10c7542935e5f36d4ecb84296cb6e85d49de1d6ac6179ba233505d0387bbc00e279fa702192fbf1bd73b5e3ee6a7e76dda12ef86b48b12af984e23"], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0x14) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x6}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x6, 0x3, &(0x7f0000000900)=ANY=[@ANYRES8=r3, @ANYBLOB="9e7b63cdcbe44c391c18d4aa7f7a9757069e21bdcd084b438175664e19558c52180b69f73f249b1ded1015941f3c3c3f2338dce67d5b13ac6d7dd7f201b88aa91cec2306c82606f6f42ab469c14cdf190e09620199bf046e9ff0279681e10e5f6380fff369dc3ef235ac7c54bcc87495d6c138655e5ee9976686f625b28811b9395f208d346b2775b219ef5921cb405667986235ce38d5432d47c0b1e6deb2", @ANYRES64=r4, @ANYRESDEC=r6], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x240080, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.328323851s ago: executing program 1 (id=165): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) 1.270714137s ago: executing program 0 (id=166): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) close(r2) 1.20471039s ago: executing program 2 (id=167): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f06050000000000000000000775437a5b40f9f9d49ada2aca83000008"], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 1.046493422s ago: executing program 1 (id=168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250700000008000400ac14141a140003000000000000000000000000000000000114000200000000cec8"], 0x44}}, 0x0) 955.166701ms ago: executing program 4 (id=169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2x', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois\x00', 0x9) shutdown(r0, 0x1) 928.228887ms ago: executing program 0 (id=170): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 775.878506ms ago: executing program 1 (id=171): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa880040"], 0x0) 768.984727ms ago: executing program 2 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x40) 743.658903ms ago: executing program 0 (id=173): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 636.166139ms ago: executing program 4 (id=174): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x24}}, 0x0) 623.317497ms ago: executing program 1 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e61740014"], 0xf0}}, 0x0) 539.108278ms ago: executing program 2 (id=176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x2, 0x25dfdbf9, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) 438.906669ms ago: executing program 1 (id=177): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8001) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 75.604604ms ago: executing program 1 (id=178): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0x5) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}, {&(0x7f00000002c0)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385", 0x74}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000006c0)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f68", 0x3d}, {0x0}], 0x2}}], 0x3, 0xc0) 75.285078ms ago: executing program 2 (id=179): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x80000000, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24010001}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x7, 0xe9, [@multicast2]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) 74.12272ms ago: executing program 4 (id=180): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x100, 0x7, 0x6361, 0x2, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "a8bd"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=181): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x7ff, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$l2tp6(r0, &(0x7f00000001c0)="3cf7069136", 0x5, 0x4840, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 83.509986][ T5852] cgroup: Unknown subsys name 'net' [ 83.658353][ T5852] cgroup: Unknown subsys name 'cpuset' [ 83.667813][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.432990][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.158198][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.166666][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.173556][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.177014][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.189787][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.190323][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.198078][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.205241][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.212877][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.231889][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.563697][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 89.631644][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 89.888274][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.897723][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.917253][ T5863] bridge_slave_0: entered allmulticast mode [ 89.947334][ T5863] bridge_slave_0: entered promiscuous mode [ 90.021778][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.054947][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.062226][ T5863] bridge_slave_1: entered allmulticast mode [ 90.096859][ T5863] bridge_slave_1: entered promiscuous mode [ 90.298778][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.315091][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.323405][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.325159][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.341490][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.342051][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.357674][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.359553][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.373417][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.385454][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.425629][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.432315][ T5869] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.436577][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.444022][ T5869] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.451837][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.458703][ T5869] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.467013][ T5862] bridge_slave_0: entered allmulticast mode [ 90.472736][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.481258][ T5862] bridge_slave_0: entered promiscuous mode [ 90.485965][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.501174][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.511559][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.519127][ T5862] bridge_slave_1: entered allmulticast mode [ 90.527407][ T5862] bridge_slave_1: entered promiscuous mode [ 90.537614][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.626205][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.639368][ T5863] team0: Port device team_slave_0 added [ 90.648916][ T5863] team0: Port device team_slave_1 added [ 90.678377][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.751825][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.758968][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.786060][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.827524][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.834514][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.860665][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.911994][ T5862] team0: Port device team_slave_0 added [ 90.921400][ T5862] team0: Port device team_slave_1 added [ 91.026895][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.033958][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.060424][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.107749][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.114918][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.141670][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.181925][ T5863] hsr_slave_0: entered promiscuous mode [ 91.188512][ T5863] hsr_slave_1: entered promiscuous mode [ 91.275726][ T5184] Bluetooth: hci1: command tx timeout [ 91.281666][ T5869] Bluetooth: hci0: command tx timeout [ 91.301954][ T5862] hsr_slave_0: entered promiscuous mode [ 91.309144][ T5862] hsr_slave_1: entered promiscuous mode [ 91.315628][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 91.321437][ T5862] Cannot create hsr debugfs directory [ 91.642857][ T5890] chnl_net:caif_netlink_parms(): no params data found [ 91.703077][ T5886] chnl_net:caif_netlink_parms(): no params data found [ 91.870277][ T5885] chnl_net:caif_netlink_parms(): no params data found [ 92.012039][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.019362][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.027107][ T5890] bridge_slave_0: entered allmulticast mode [ 92.034215][ T5890] bridge_slave_0: entered promiscuous mode [ 92.094066][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.102499][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.109766][ T5890] bridge_slave_1: entered allmulticast mode [ 92.118263][ T5890] bridge_slave_1: entered promiscuous mode [ 92.134948][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.147163][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.154707][ T5886] bridge_slave_0: entered allmulticast mode [ 92.162005][ T5886] bridge_slave_0: entered promiscuous mode [ 92.218979][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.231182][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.240228][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.247572][ T5886] bridge_slave_1: entered allmulticast mode [ 92.254831][ T5886] bridge_slave_1: entered promiscuous mode [ 92.294969][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.304177][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.357762][ T5885] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.365164][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.372397][ T5885] bridge_slave_0: entered allmulticast mode [ 92.380393][ T5885] bridge_slave_0: entered promiscuous mode [ 92.389950][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.399283][ T5869] Bluetooth: hci2: command tx timeout [ 92.405358][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.431123][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.445469][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.455653][ T5885] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.462840][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.470108][ T5885] bridge_slave_1: entered allmulticast mode [ 92.476346][ T5869] Bluetooth: hci3: command tx timeout [ 92.481551][ T5885] bridge_slave_1: entered promiscuous mode [ 92.503701][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.554788][ T5869] Bluetooth: hci4: command tx timeout [ 92.607596][ T5890] team0: Port device team_slave_0 added [ 92.625994][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.642805][ T5886] team0: Port device team_slave_0 added [ 92.651845][ T5885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.666171][ T5890] team0: Port device team_slave_1 added [ 92.674283][ T5885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.688633][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.701484][ T5886] team0: Port device team_slave_1 added [ 92.741324][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.786243][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.793255][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.820023][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.833321][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.840863][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.867576][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.896561][ T5885] team0: Port device team_slave_0 added [ 92.902612][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.934403][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.941791][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.968488][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.982373][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.989759][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.016821][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.033397][ T5885] team0: Port device team_slave_1 added [ 93.120094][ T5890] hsr_slave_0: entered promiscuous mode [ 93.127666][ T5890] hsr_slave_1: entered promiscuous mode [ 93.133743][ T5890] debugfs: 'hsr0' already exists in 'hsr' [ 93.139962][ T5890] Cannot create hsr debugfs directory [ 93.166498][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.173655][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.201199][ T5885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.266821][ T5885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.273879][ T5885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.300799][ T5885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.329655][ T5886] hsr_slave_0: entered promiscuous mode [ 93.336853][ T5886] hsr_slave_1: entered promiscuous mode [ 93.342975][ T5886] debugfs: 'hsr0' already exists in 'hsr' [ 93.349075][ T5886] Cannot create hsr debugfs directory [ 93.355162][ T5184] Bluetooth: hci1: command tx timeout [ 93.360700][ T5869] Bluetooth: hci0: command tx timeout [ 93.495998][ T5885] hsr_slave_0: entered promiscuous mode [ 93.502347][ T5885] hsr_slave_1: entered promiscuous mode [ 93.509509][ T5885] debugfs: 'hsr0' already exists in 'hsr' [ 93.515486][ T5885] Cannot create hsr debugfs directory [ 93.983726][ T5890] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.007821][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.016308][ T5890] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.028625][ T5890] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.040744][ T5890] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.079269][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.125195][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.158708][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.188270][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.195781][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.212593][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.219786][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.228209][ T5886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.243972][ T5886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.291318][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.298533][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.309151][ T5886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.337196][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.344361][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.370991][ T5886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.450262][ T5885] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.469561][ T5885] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.478494][ T5869] Bluetooth: hci2: command tx timeout [ 94.488937][ T5885] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.507083][ T5885] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.555320][ T5869] Bluetooth: hci3: command tx timeout [ 94.614584][ T5863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.635422][ T5869] Bluetooth: hci4: command tx timeout [ 94.867505][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.967833][ T5890] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.041090][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.048303][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.103343][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.114224][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.121449][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.163171][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.212762][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.220036][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.237313][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.244464][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.256671][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.301529][ T5885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.320811][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.379491][ T5885] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.408835][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.416082][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.435413][ T5869] Bluetooth: hci0: command tx timeout [ 95.439158][ T5886] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.440864][ T5869] Bluetooth: hci1: command tx timeout [ 95.451497][ T5886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.469970][ T5863] veth0_vlan: entered promiscuous mode [ 95.504864][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.512048][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.606059][ T5863] veth1_vlan: entered promiscuous mode [ 95.634346][ T5862] veth0_vlan: entered promiscuous mode [ 95.672625][ T5862] veth1_vlan: entered promiscuous mode [ 95.726925][ T5885] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.738246][ T5885] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.809219][ T5863] veth0_macvtap: entered promiscuous mode [ 95.861760][ T5863] veth1_macvtap: entered promiscuous mode [ 95.971357][ T5862] veth0_macvtap: entered promiscuous mode [ 96.008524][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.041693][ T5862] veth1_macvtap: entered promiscuous mode [ 96.070605][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.084145][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.136392][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.147274][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.180268][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.190777][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.211413][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.224070][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.308070][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.389544][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.429213][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.478578][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522023][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.549034][ T5886] veth0_vlan: entered promiscuous mode [ 96.549380][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.564964][ T5869] Bluetooth: hci2: command tx timeout [ 96.580620][ T5886] veth1_vlan: entered promiscuous mode [ 96.590691][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.593375][ T5885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.636092][ T5869] Bluetooth: hci3: command tx timeout [ 96.719248][ T5869] Bluetooth: hci4: command tx timeout [ 96.733299][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.762316][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.858897][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.859662][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.930330][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.946086][ T5886] veth0_macvtap: entered promiscuous mode [ 97.041485][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 97.047297][ T5886] veth1_macvtap: entered promiscuous mode [ 97.062580][ T5885] veth0_vlan: entered promiscuous mode [ 97.080883][ T5885] veth1_vlan: entered promiscuous mode [ 97.140733][ T5885] veth0_macvtap: entered promiscuous mode [ 97.176357][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.188383][ T5890] veth0_vlan: entered promiscuous mode [ 97.202368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.214088][ T5885] veth1_macvtap: entered promiscuous mode [ 97.286622][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.345039][ T5890] veth1_vlan: entered promiscuous mode [ 97.395693][ T5983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.412871][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.429934][ T3020] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.514872][ T5184] Bluetooth: hci0: command tx timeout [ 97.520511][ T5869] Bluetooth: hci1: command tx timeout [ 97.552623][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.588657][ T3020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.609120][ T5987] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 97.620047][ T5885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.651614][ T3020] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675787][ T3020] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.753993][ T3020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.827448][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.859701][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.938280][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.942399][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9'. [ 97.999742][ T983] cfg80211: failed to load regulatory.db [ 98.043686][ T5890] veth0_macvtap: entered promiscuous mode [ 98.150393][ T5890] veth1_macvtap: entered promiscuous mode [ 98.191431][ T6002] syzkaller1: entered promiscuous mode [ 98.199043][ T6002] syzkaller1: entered allmulticast mode [ 98.209374][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.254997][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.429890][ T6006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.446638][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.457017][ T45] IPVS: starting estimator thread 0... [ 98.485758][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.488083][ T6006] tipc: Failed to remove unknown binding: 66,1,1/0:2522593473/2522593475 [ 98.499624][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.517959][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.533672][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.542948][ T6006] tipc: Failed to remove unknown binding: 66,1,1/0:2522593473/2522593475 [ 98.567660][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.575551][ T6007] IPVS: using max 26 ests per chain, 62400 per kthread [ 98.576054][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.584860][ T6006] tipc: Failed to remove unknown binding: 66,1,1/0:2522593473/2522593475 [ 98.629938][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.642485][ T5869] Bluetooth: hci2: command tx timeout [ 98.705445][ T6006] netlink: 788 bytes leftover after parsing attributes in process `syz.0.11'. [ 98.715159][ T5869] Bluetooth: hci3: command tx timeout [ 98.737755][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.753205][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.794975][ T5869] Bluetooth: hci4: command tx timeout [ 98.814311][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.865241][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.190797][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.205023][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.275202][ T6017] IPv6: addrconf: prefix option has invalid lifetime [ 99.282410][ T6017] IPv6: addrconf: prefix option has invalid lifetime [ 99.289464][ T6017] IPv6: addrconf: prefix option has invalid lifetime [ 99.408771][ T6020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.462971][ T6021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.493889][ T6021] Zero length message leads to an empty skb [ 99.506300][ T6020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.513188][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.528209][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.537334][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.567324][ T6020] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 99.844519][ T6024] netlink: 'syz.4.5': attribute type 3 has an invalid length. [ 114.302485][ T6030] openvswitch: netlink: Duplicate or invalid key (type 0). [ 114.337328][ T6037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19'. [ 114.346430][ T6030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.505869][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 114.601517][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 114.884026][ T6057] IPv6: Can't replace route, no match found [ 114.921990][ T6052] netlink: 176 bytes leftover after parsing attributes in process `syz.1.22'. [ 115.925210][ T6102] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 115.935561][ T6101] IPVS: stopping backup sync thread 6102 ... [ 116.028546][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 116.048083][ T6101] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25'. [ 116.138245][ T6107] FAULT_INJECTION: forcing a failure. [ 116.138245][ T6107] name failslab, interval 1, probability 0, space 0, times 1 [ 116.216193][ T6107] CPU: 0 UID: 0 PID: 6107 Comm: syz.2.27 Not tainted syzkaller #0 PREEMPT(full) [ 116.216220][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.216231][ T6107] Call Trace: [ 116.216239][ T6107] [ 116.216247][ T6107] dump_stack_lvl+0x189/0x250 [ 116.216277][ T6107] ? __pfx____ratelimit+0x10/0x10 [ 116.216297][ T6107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.216320][ T6107] ? __pfx__printk+0x10/0x10 [ 116.216352][ T6107] ? __pfx___might_resched+0x10/0x10 [ 116.216370][ T6107] ? fs_reclaim_acquire+0x7d/0x100 [ 116.216404][ T6107] should_fail_ex+0x414/0x560 [ 116.216435][ T6107] should_failslab+0xa8/0x100 [ 116.216464][ T6107] __kmalloc_noprof+0xcb/0x4f0 [ 116.216488][ T6107] ? kfree+0x4d/0x440 [ 116.216507][ T6107] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 116.216539][ T6107] tomoyo_realpath_from_path+0xe3/0x5d0 [ 116.216560][ T6107] ? tomoyo_domain+0xd9/0x130 [ 116.216586][ T6107] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 116.216612][ T6107] tomoyo_path_number_perm+0x1e8/0x5a0 [ 116.216642][ T6107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.216687][ T6107] ? __lock_acquire+0xab9/0xd20 [ 116.216738][ T6107] ? __fget_files+0x2a/0x420 [ 116.216759][ T6107] ? __fget_files+0x2a/0x420 [ 116.216774][ T6107] ? __fget_files+0x3a0/0x420 [ 116.216789][ T6107] ? __fget_files+0x2a/0x420 [ 116.216811][ T6107] security_file_ioctl+0xcb/0x2d0 [ 116.216836][ T6107] __se_sys_ioctl+0x47/0x170 [ 116.216860][ T6107] do_syscall_64+0xfa/0x3b0 [ 116.216879][ T6107] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.216898][ T6107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.216916][ T6107] ? clear_bhb_loop+0x60/0xb0 [ 116.216939][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.216956][ T6107] RIP: 0033:0x7fc70e38ebe9 [ 116.216973][ T6107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.216988][ T6107] RSP: 002b:00007fc70f279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.217010][ T6107] RAX: ffffffffffffffda RBX: 00007fc70e5c5fa0 RCX: 00007fc70e38ebe9 [ 116.217023][ T6107] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000004 [ 116.217036][ T6107] RBP: 00007fc70f279090 R08: 0000000000000000 R09: 0000000000000000 [ 116.217047][ T6107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.217057][ T6107] R13: 00007fc70e5c6038 R14: 00007fc70e5c5fa0 R15: 00007ffc9ff26d08 [ 116.217099][ T6107] [ 116.218388][ T6107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.514004][ T6114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.531396][ T6112] netlink: 'syz.4.28': attribute type 1 has an invalid length. [ 116.563770][ T6112] netlink: 'syz.4.28': attribute type 2 has an invalid length. [ 116.812819][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33'. [ 116.857158][ T6123] openvswitch: netlink: Duplicate or invalid key (type 0). [ 116.865344][ T6123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.394036][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39'. [ 117.441277][ T6142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39'. [ 117.508083][ T6142] syz_tun: entered promiscuous mode [ 117.516805][ T6142] batadv_slave_1: entered promiscuous mode [ 117.611536][ T6153] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 117.643637][ T6153] syzkaller1: entered promiscuous mode [ 117.695098][ T6153] syzkaller1: entered allmulticast mode [ 118.702093][ T6195] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 118.885609][ T6203] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 118.896366][ T6204] netlink: 'syz.2.47': attribute type 13 has an invalid length. [ 118.960964][ T6203] netlink: 128 bytes leftover after parsing attributes in process `syz.4.50'. [ 119.025088][ T6200] FAULT_INJECTION: forcing a failure. [ 119.025088][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 119.050784][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.1.49 Not tainted syzkaller #0 PREEMPT(full) [ 119.050812][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.050823][ T6200] Call Trace: [ 119.050830][ T6200] [ 119.050839][ T6200] dump_stack_lvl+0x189/0x250 [ 119.050867][ T6200] ? __pfx____ratelimit+0x10/0x10 [ 119.050885][ T6200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.050905][ T6200] ? __pfx__printk+0x10/0x10 [ 119.050933][ T6200] ? __lock_acquire+0xab9/0xd20 [ 119.050971][ T6200] should_fail_ex+0x414/0x560 [ 119.051002][ T6200] should_failslab+0xa8/0x100 [ 119.051030][ T6200] kmem_cache_alloc_noprof+0x73/0x3c0 [ 119.051052][ T6200] ? skb_clone+0x212/0x3a0 [ 119.051079][ T6200] skb_clone+0x212/0x3a0 [ 119.051104][ T6200] __netlink_deliver_tap+0x404/0x850 [ 119.051149][ T6200] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.051171][ T6200] netlink_deliver_tap+0x19c/0x1b0 [ 119.051191][ T6200] netlink_unicast+0x7fa/0x9e0 [ 119.051228][ T6200] ? __pfx_netlink_unicast+0x10/0x10 [ 119.051257][ T6200] ? netlink_sendmsg+0x642/0xb30 [ 119.051273][ T6200] ? skb_put+0x11b/0x210 [ 119.051298][ T6200] netlink_sendmsg+0x805/0xb30 [ 119.051327][ T6200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.051350][ T6200] ? aa_sock_msg_perm+0xf1/0x1d0 [ 119.051371][ T6200] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.051389][ T6200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.051409][ T6200] __sock_sendmsg+0x21c/0x270 [ 119.051438][ T6200] ____sys_sendmsg+0x505/0x830 [ 119.051467][ T6200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.051500][ T6200] ? import_iovec+0x74/0xa0 [ 119.051527][ T6200] ___sys_sendmsg+0x21f/0x2a0 [ 119.051553][ T6200] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.051584][ T6200] ? rcu_read_lock_any_held+0xb3/0x120 [ 119.051620][ T6200] ? sb_end_write+0xe9/0x1c0 [ 119.051655][ T6200] ? __pfx_vfs_write+0x10/0x10 [ 119.051693][ T6200] __x64_sys_sendmsg+0x19b/0x260 [ 119.051715][ T6200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.051744][ T6200] ? __pfx_ksys_write+0x10/0x10 [ 119.051761][ T6200] ? rcu_is_watching+0x15/0xb0 [ 119.051782][ T6200] ? do_syscall_64+0xbe/0x3b0 [ 119.051828][ T6200] do_syscall_64+0xfa/0x3b0 [ 119.051843][ T6200] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.051858][ T6200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.051874][ T6200] ? clear_bhb_loop+0x60/0xb0 [ 119.051895][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.051910][ T6200] RIP: 0033:0x7f85f0d8ebe9 [ 119.051925][ T6200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.051938][ T6200] RSP: 002b:00007f85f1c80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.051956][ T6200] RAX: ffffffffffffffda RBX: 00007f85f0fc5fa0 RCX: 00007f85f0d8ebe9 [ 119.051968][ T6200] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 119.051977][ T6200] RBP: 00007f85f1c80090 R08: 0000000000000000 R09: 0000000000000000 [ 119.051988][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.051999][ T6200] R13: 00007f85f0fc6038 R14: 00007f85f0fc5fa0 R15: 00007ffefaa788b8 [ 119.052032][ T6200] [ 119.528975][ T6200] syz_tun: entered promiscuous mode [ 119.540083][ T6200] batadv_slave_1: entered promiscuous mode [ 119.547454][ T6200] debugfs: 'hsr1' already exists in 'hsr' [ 119.553304][ T6200] Cannot create hsr debugfs directory [ 119.578948][ T6212] openvswitch: netlink: Duplicate or invalid key (type 0). [ 119.600426][ T6212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.741799][ T6215] __nla_validate_parse: 2 callbacks suppressed [ 119.741830][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.53'. [ 120.110501][ T6228] openvswitch: netlink: Flow actions attr not present in new flow. [ 120.194846][ T6228] netlink: 96 bytes leftover after parsing attributes in process `syz.0.55'. [ 121.144321][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 121.218560][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 121.557712][ T6267] dvmrp1: entered allmulticast mode [ 121.612257][ T6268] dvmrp1: entered allmulticast mode [ 122.337761][ T6305] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 122.473086][ T6314] openvswitch: netlink: IP tunnel dst address not specified [ 122.556780][ T6311] can: request_module (can-proto-0) failed. [ 122.581721][ T6311] openvswitch: netlink: IP tunnel dst address not specified [ 122.649362][ T6314] can: request_module (can-proto-0) failed. [ 122.690375][ T6314] openvswitch: netlink: IP tunnel dst address not specified [ 122.759824][ T6311] can: request_module (can-proto-0) failed. [ 123.069226][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 123.129924][ T6340] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 123.155050][ T6337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 123.249412][ T6345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.291146][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'. [ 123.382463][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.79'. [ 123.713057][ T6359] netlink: 116 bytes leftover after parsing attributes in process `syz.1.85'. [ 123.819862][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.828813][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.376008][ T6377] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.86'. [ 124.391302][ T6377] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 124.399270][ T6377] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 124.436903][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.466534][ T6335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.931815][ T3529] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.062297][ T6389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.070500][ T3529] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.092565][ T3529] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.109642][ T3529] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.122949][ T6425] netlink: 228 bytes leftover after parsing attributes in process `syz.4.95'. [ 126.611668][ T6433] netlink: 248 bytes leftover after parsing attributes in process `syz.2.99'. [ 126.951731][ T6442] netlink: 292 bytes leftover after parsing attributes in process `syz.4.100'. [ 127.389735][ T6449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.767359][ T6463] team0: No ports can be present during mode change [ 127.856414][ T6465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.919437][ T6467] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 127.962929][ T6467] netlink: 3 bytes leftover after parsing attributes in process `syz.1.106'. [ 128.029798][ T6472] netlink: 'syz.1.106': attribute type 3 has an invalid length. [ 128.214796][ T6476] netlink: 228 bytes leftover after parsing attributes in process `syz.4.108'. [ 128.365924][ T6480] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.373330][ T6480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.859330][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.111'. [ 128.896877][ T6488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 128.975297][ T6488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.111'. [ 129.009978][ T6498] netlink: 'syz.4.111': attribute type 16 has an invalid length. [ 129.020930][ T6488] netlink: 16 bytes leftover after parsing attributes in process `syz.4.111'. [ 129.079371][ T6488] netlink: 5 bytes leftover after parsing attributes in process `syz.4.111'. [ 129.597337][ T6515] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 130.576310][ T6536] IPVS: stopping backup sync thread 6539 ... [ 131.345687][ T6552] syzkaller1: entered promiscuous mode [ 131.360240][ T6552] syzkaller1: entered allmulticast mode [ 131.452431][ T6552] netlink: 'syz.2.129': attribute type 13 has an invalid length. [ 132.012959][ T6567] dvmrp1: entered allmulticast mode [ 132.110308][ T6569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.152942][ T6569] bridge0: port 3(bond2) entered blocking state [ 132.179687][ T6569] bridge0: port 3(bond2) entered disabled state [ 132.222297][ T6569] bond2: entered allmulticast mode [ 132.239279][ T6569] bond2: entered promiscuous mode [ 132.259851][ T6569] bridge0: port 3(bond2) entered blocking state [ 132.266564][ T6569] bridge0: port 3(bond2) entered forwarding state [ 132.286662][ T6577] __nla_validate_parse: 2 callbacks suppressed [ 132.286683][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 132.353134][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 132.679927][ T6584] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 132.740175][ T6086] bridge0: port 3(bond2) entered disabled state [ 132.875664][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.137'. [ 133.559406][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 133.601304][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 133.723151][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 133.845345][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.903480][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.145'. [ 133.977040][ T6633] netlink: 176 bytes leftover after parsing attributes in process `syz.3.147'. [ 134.063402][ T6635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 134.101374][ T6635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.149'. [ 135.589074][ T6642] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.708923][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.744918][ T6681] veth0_virt_wifi: entered allmulticast mode [ 135.868466][ T6642] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.092529][ T6642] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.402708][ T6642] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.929615][ T6725] IPVS: stopping backup sync thread 6340 ... [ 137.102986][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.133137][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.231624][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.460081][ T6729] __nla_validate_parse: 5 callbacks suppressed [ 137.460101][ T6729] netlink: 14 bytes leftover after parsing attributes in process `syz.3.164'. [ 137.476526][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.562316][ T6735] netlink: 'syz.3.164': attribute type 13 has an invalid length. [ 138.243439][ T6729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.264017][ T6729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.286830][ T6729] bond0 (unregistering): Released all slaves [ 138.366615][ T6732] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 138.375005][ T6732] syzkaller1: entered promiscuous mode [ 138.380798][ T6732] syzkaller1: entered allmulticast mode [ 138.608620][ T6778] ------------[ cut here ]------------ [ 138.614465][ T6778] WARNING: CPU: 0 PID: 6778 at net/ipv4/route.c:1270 ip_rt_bug+0x2c/0x110 [ 138.623089][ T6778] Modules linked in: [ 138.627224][ T6778] CPU: 0 UID: 0 PID: 6778 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(full) [ 138.636672][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.646810][ T6778] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 138.652582][ T6778] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 eb 03 d5 f7 66 90 e8 e4 03 d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 a5 5c 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 51 73 92 01 cc f3 0f [ 138.672371][ T6778] RSP: 0018:ffffc9000aeb7180 EFLAGS: 00010286 [ 138.678611][ T6778] RAX: c40133b9639c7700 RBX: ffff88807709cdc0 RCX: c40133b9639c7700 [ 138.686795][ T6778] RDX: 0000000000000002 RSI: ffffffff8d9b9102 RDI: ffffffff8be33800 [ 138.694839][ T6778] RBP: 0000000000000001 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166 [ 138.702846][ T6778] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: dffffc0000000000 [ 138.710910][ T6778] R13: dffffc0000000000 R14: ffff88807709cdc0 R15: ffff88801bb31e00 [ 138.719060][ T6778] FS: 00007fc70f2796c0(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 138.728160][ T6778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.734813][ T6778] CR2: 0000001b33522ff8 CR3: 000000003326e000 CR4: 00000000003526f0 [ 138.742842][ T6778] Call Trace: [ 138.746191][ T6778] [ 138.749159][ T6778] ip_push_pending_frames+0xbe/0x150 [ 138.754496][ T6778] __icmp_send+0xf87/0x12d0 [ 138.759168][ T6778] ? __icmp_send+0x1b9/0x12d0 [ 138.763891][ T6778] ? __pfx___icmp_send+0x10/0x10 [ 138.769035][ T6778] ? ip_route_input_noref+0x98/0x250 [ 138.774376][ T6778] ? __pfx_ip_route_input_noref+0x10/0x10 [ 138.780182][ T6778] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 138.785456][ T6778] ip_options_compile+0x80/0xb0 [ 138.790346][ T6778] ip_rcv_finish_core+0xaa2/0x1c00 [ 138.795722][ T6778] ip_rcv_finish+0x14c/0x2f0 [ 138.800361][ T6778] NF_HOOK+0x309/0x3a0 [ 138.804474][ T6778] ? __pfx_ip_rcv_finish+0x10/0x10 [ 138.810097][ T6778] ? NF_HOOK+0x9a/0x3a0 [ 138.814293][ T6778] ? __pfx_NF_HOOK+0x10/0x10 [ 138.818966][ T6778] ? ip_rcv_core+0x7f7/0xd00 [ 138.823593][ T6778] ? __pfx_ip_rcv_finish+0x10/0x10 [ 138.828798][ T6778] ? __pfx_ip_rcv+0x10/0x10 [ 138.833339][ T6778] __netif_receive_skb+0x143/0x380 [ 138.838675][ T6778] ? netif_receive_skb+0x115/0x790 [ 138.844032][ T6778] netif_receive_skb+0x1cb/0x790 [ 138.849169][ T6778] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 138.855223][ T6778] ? __pfx_netif_receive_skb+0x10/0x10 [ 138.860735][ T6778] ? tun_rx_batched+0x160/0x730 [ 138.865662][ T6778] tun_rx_batched+0x1b9/0x730 [ 138.870376][ T6778] ? __lock_acquire+0xab9/0xd20 [ 138.875425][ T6778] ? __pfx_tun_rx_batched+0x10/0x10 [ 138.880681][ T6778] ? tun_get_user+0x266c/0x3e20 [ 138.885627][ T6778] tun_get_user+0x2aa2/0x3e20 [ 138.890437][ T6778] ? tun_get_user+0x6f6/0x3e20 [ 138.895287][ T6778] ? tun_get_user+0x266c/0x3e20 [ 138.900799][ T6778] ? aa_file_perm+0x44d/0x1550 [ 138.905642][ T6778] ? __pfx_tun_get_user+0x10/0x10 [ 138.910705][ T6778] ? __futex_wait+0x34f/0x3e0 [ 138.915468][ T6778] ? __pfx___futex_wait+0x10/0x10 [ 138.920545][ T6778] ? ref_tracker_alloc+0x318/0x460 [ 138.925734][ T6778] ? __lock_acquire+0xab9/0xd20 [ 138.930632][ T6778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 138.936190][ T6778] ? tun_get+0x1c/0x2f0 [ 138.940394][ T6778] ? tun_get+0x1c/0x2f0 [ 138.944624][ T6778] ? tun_get+0x1c/0x2f0 [ 138.948819][ T6778] tun_chr_write_iter+0x113/0x200 [ 138.953892][ T6778] vfs_write+0x5c6/0xb30 [ 138.958310][ T6778] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 138.963892][ T6778] ? __pfx_vfs_write+0x10/0x10 [ 138.968745][ T6778] ? __fget_files+0x2a/0x420 [ 138.973393][ T6778] ksys_write+0x145/0x250 [ 138.977803][ T6778] ? __pfx_ksys_write+0x10/0x10 [ 138.982693][ T6778] ? rcu_is_watching+0x15/0xb0 [ 138.987540][ T6778] ? do_syscall_64+0xbe/0x3b0 [ 138.992260][ T6778] do_syscall_64+0xfa/0x3b0 [ 138.996834][ T6778] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.002066][ T6778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.008687][ T6778] ? clear_bhb_loop+0x60/0xb0 [ 139.013492][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.019449][ T6778] RIP: 0033:0x7fc70e38d69f [ 139.023983][ T6778] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 139.043671][ T6778] RSP: 002b:00007fc70f279000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 139.052451][ T6778] RAX: ffffffffffffffda RBX: 00007fc70e5c5fa0 RCX: 00007fc70e38d69f [ 139.060768][ T6778] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 139.068993][ T6778] RBP: 00007fc70e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 139.077145][ T6778] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 139.085187][ T6778] R13: 00007fc70e5c6038 R14: 00007fc70e5c5fa0 R15: 00007ffc9ff26d08 [ 139.093299][ T6778] [ 139.096391][ T6778] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.103707][ T6778] CPU: 0 UID: 0 PID: 6778 Comm: syz.2.179 Not tainted syzkaller #0 PREEMPT(full) [ 139.113030][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.123289][ T6778] Call Trace: [ 139.126601][ T6778] [ 139.129560][ T6778] dump_stack_lvl+0x99/0x250 [ 139.134273][ T6778] ? __asan_memcpy+0x40/0x70 [ 139.138903][ T6778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.144272][ T6778] ? __pfx__printk+0x10/0x10 [ 139.149008][ T6778] vpanic+0x281/0x750 [ 139.153121][ T6778] ? __pfx__printk+0x10/0x10 [ 139.157753][ T6778] ? __pfx_vpanic+0x10/0x10 [ 139.162299][ T6778] ? is_bpf_text_address+0x26/0x2b0 [ 139.167552][ T6778] panic+0xb9/0xc0 [ 139.171312][ T6778] ? __pfx_panic+0x10/0x10 [ 139.175795][ T6778] __warn+0x31b/0x4b0 [ 139.179898][ T6778] ? ip_rt_bug+0x2c/0x110 [ 139.184363][ T6778] ? ip_rt_bug+0x2c/0x110 [ 139.188731][ T6778] report_bug+0x2be/0x4f0 [ 139.193118][ T6778] ? ip_rt_bug+0x2c/0x110 [ 139.197486][ T6778] ? ip_rt_bug+0x2c/0x110 [ 139.201858][ T6778] ? ip_rt_bug+0x2e/0x110 [ 139.206227][ T6778] handle_bug+0x84/0x160 [ 139.210682][ T6778] exc_invalid_op+0x1a/0x50 [ 139.215223][ T6778] asm_exc_invalid_op+0x1a/0x20 [ 139.220104][ T6778] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 139.225093][ T6778] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 eb 03 d5 f7 66 90 e8 e4 03 d5 f7 31 ff 48 89 de ba 02 00 00 00 e8 a5 5c 70 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 51 73 92 01 cc f3 0f [ 139.244730][ T6778] RSP: 0018:ffffc9000aeb7180 EFLAGS: 00010286 [ 139.258643][ T6778] RAX: c40133b9639c7700 RBX: ffff88807709cdc0 RCX: c40133b9639c7700 [ 139.266652][ T6778] RDX: 0000000000000002 RSI: ffffffff8d9b9102 RDI: ffffffff8be33800 [ 139.274662][ T6778] RBP: 0000000000000001 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166 [ 139.282756][ T6778] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: dffffc0000000000 [ 139.290765][ T6778] R13: dffffc0000000000 R14: ffff88807709cdc0 R15: ffff88801bb31e00 [ 139.299419][ T6778] ip_push_pending_frames+0xbe/0x150 [ 139.304757][ T6778] __icmp_send+0xf87/0x12d0 [ 139.309394][ T6778] ? __icmp_send+0x1b9/0x12d0 [ 139.314115][ T6778] ? __pfx___icmp_send+0x10/0x10 [ 139.319123][ T6778] ? ip_route_input_noref+0x98/0x250 [ 139.324460][ T6778] ? __pfx_ip_route_input_noref+0x10/0x10 [ 139.330314][ T6778] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 139.335639][ T6778] ip_options_compile+0x80/0xb0 [ 139.340528][ T6778] ip_rcv_finish_core+0xaa2/0x1c00 [ 139.345684][ T6778] ip_rcv_finish+0x14c/0x2f0 [ 139.350311][ T6778] NF_HOOK+0x309/0x3a0 [ 139.354456][ T6778] ? __pfx_ip_rcv_finish+0x10/0x10 [ 139.359595][ T6778] ? NF_HOOK+0x9a/0x3a0 [ 139.363784][ T6778] ? __pfx_NF_HOOK+0x10/0x10 [ 139.368400][ T6778] ? ip_rcv_core+0x7f7/0xd00 [ 139.373026][ T6778] ? __pfx_ip_rcv_finish+0x10/0x10 [ 139.378178][ T6778] ? __pfx_ip_rcv+0x10/0x10 [ 139.382713][ T6778] __netif_receive_skb+0x143/0x380 [ 139.387869][ T6778] ? netif_receive_skb+0x115/0x790 [ 139.393038][ T6778] netif_receive_skb+0x1cb/0x790 [ 139.398019][ T6778] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 139.403850][ T6778] ? __pfx_netif_receive_skb+0x10/0x10 [ 139.409349][ T6778] ? tun_rx_batched+0x160/0x730 [ 139.414234][ T6778] tun_rx_batched+0x1b9/0x730 [ 139.418943][ T6778] ? __lock_acquire+0xab9/0xd20 [ 139.423839][ T6778] ? __pfx_tun_rx_batched+0x10/0x10 [ 139.429158][ T6778] ? tun_get_user+0x266c/0x3e20 [ 139.434368][ T6778] tun_get_user+0x2aa2/0x3e20 [ 139.439087][ T6778] ? tun_get_user+0x6f6/0x3e20 [ 139.443983][ T6778] ? tun_get_user+0x266c/0x3e20 [ 139.448887][ T6778] ? aa_file_perm+0x44d/0x1550 [ 139.453690][ T6778] ? __pfx_tun_get_user+0x10/0x10 [ 139.458746][ T6778] ? __futex_wait+0x34f/0x3e0 [ 139.463479][ T6778] ? __pfx___futex_wait+0x10/0x10 [ 139.468561][ T6778] ? ref_tracker_alloc+0x318/0x460 [ 139.473716][ T6778] ? __lock_acquire+0xab9/0xd20 [ 139.478610][ T6778] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 139.484120][ T6778] ? tun_get+0x1c/0x2f0 [ 139.488319][ T6778] ? tun_get+0x1c/0x2f0 [ 139.492502][ T6778] ? tun_get+0x1c/0x2f0 [ 139.496696][ T6778] tun_chr_write_iter+0x113/0x200 [ 139.501759][ T6778] vfs_write+0x5c6/0xb30 [ 139.506132][ T6778] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 139.511795][ T6778] ? __pfx_vfs_write+0x10/0x10 [ 139.516611][ T6778] ? __fget_files+0x2a/0x420 [ 139.521245][ T6778] ksys_write+0x145/0x250 [ 139.525614][ T6778] ? __pfx_ksys_write+0x10/0x10 [ 139.530499][ T6778] ? rcu_is_watching+0x15/0xb0 [ 139.535304][ T6778] ? do_syscall_64+0xbe/0x3b0 [ 139.540045][ T6778] do_syscall_64+0xfa/0x3b0 [ 139.544581][ T6778] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.549815][ T6778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.555919][ T6778] ? clear_bhb_loop+0x60/0xb0 [ 139.560639][ T6778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.566571][ T6778] RIP: 0033:0x7fc70e38d69f [ 139.571029][ T6778] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 139.591191][ T6778] RSP: 002b:00007fc70f279000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 139.599660][ T6778] RAX: ffffffffffffffda RBX: 00007fc70e5c5fa0 RCX: 00007fc70e38d69f [ 139.607664][ T6778] RDX: 0000000000000042 RSI: 0000200000000000 RDI: 00000000000000c8 [ 139.615667][ T6778] RBP: 00007fc70e411e19 R08: 0000000000000000 R09: 0000000000000000 [ 139.623762][ T6778] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 139.631746][ T6778] R13: 00007fc70e5c6038 R14: 00007fc70e5c5fa0 R15: 00007ffc9ff26d08 [ 139.639985][ T6778] [ 139.643434][ T6778] Kernel Offset: disabled [ 139.647853][ T6778] Rebooting in 86400 seconds..