last executing test programs: 5.947411483s ago: executing program 3 (id=831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="00000000000000000000008f1bb76d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000800)={0x0, 0xedf0, 0x2, 0x0, 0x2, 0xc3}, &(0x7f0000000840)=0x14) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000073010b000000000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(r6, 0x0, 0x1f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x4, 0x10001, 0x5902, 0x7f, 0x400, 0x800, 0x2, 0xffff294f}}}}]}, 0x58}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000480)={'tunl0\x00', r7, 0x80, 0x7800, 0x9, 0x7, {{0x35, 0x4, 0x2, 0x6, 0xd4, 0x66, 0x0, 0x9, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0xee, 0x0, 0x6, [0x3000000, 0xf, 0x0, 0x91]}, @timestamp={0x44, 0x2c, 0x28, 0x0, 0x9, [0x8, 0x7acf, 0xc1, 0xfffffffd, 0x5, 0x4, 0xd9, 0x5, 0xfa, 0x1]}, @timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x5, [{@private=0xa010101, 0x5}, {@private=0xa010102, 0x8f4}, {@loopback, 0x6}, {@multicast2, 0x5}, {@remote, 0x970}, {@local, 0x4}]}, @timestamp_addr={0x44, 0x4c, 0xf3, 0x1, 0x1, [{@rand_addr=0x64010102, 0xf}, {@rand_addr=0x64010101, 0xe}, {@loopback, 0xc3}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@remote, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@rand_addr=0x64010102, 0x4}, {@multicast1, 0x5}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x1}}}, 0x24}}, 0x44804) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000600)={r0, 0xfffffffffffffffb, 0x42f6, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000580)='mem_disconnect\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000340)={0x80000001, 0x2, 0x7, 0x0, 0x0, [{{r10}, 0x2}, {{r0}, 0x8000000000000001}, {{r2}, 0xe60b}, {{r2}}, {{r1}, 0xffffffffffff9893}, {{r0}, 0x2}, {{r2}, 0x6}]}) 4.974650421s ago: executing program 3 (id=841): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c050", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40040, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x40, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) write$cgroup_int(r5, &(0x7f00000001c0)=0x10000, 0x12) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00e5ffff7f0000000000000080c443539a3507", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/27], 0x50) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x741, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}]}, 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x44) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffbcca}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd0}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) 4.421287024s ago: executing program 3 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x18, 0x31, 0x107, 0xffffffff, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000130a01010000000000000000020000020900020073797a30000000"], 0x2c}}, 0x0) 4.143759871s ago: executing program 3 (id=846): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4c20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_80211_join_ibss(&(0x7f0000000380)='wlan1\x00', &(0x7f00000003c0)=@default_ap_ssid, 0x6, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 4.142882849s ago: executing program 1 (id=847): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f", 0x3) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x7, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@multicast, @random="024c301415bc", @val={@void, {0x8100, 0x1, 0x0, 0x3}}, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x2d, 0x1, 0x0, 0x0, "c219f3a153fdffdda7f34c919603ed5cc7acab5f61fa2997b5fd2760af147989ad8e222122db293ab8b70c888e0cba45f51dc5288236c7a3f2ad5c7d710f8d7d"}}}}, 0x0) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000080)="fc") 4.083211996s ago: executing program 2 (id=848): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x5d) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.965993267s ago: executing program 1 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2503000003000000000008"], 0x14}}, 0x0) 3.889941883s ago: executing program 4 (id=850): syz_emit_ethernet(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008000, &(0x7f00000000c0)={0xa, 0x5e24, 0x40, @remote, 0x13}, 0x1c) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty=0x300, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.852148777s ago: executing program 1 (id=851): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0x24, 0x25, 0x200, 0x0, 0x3}, 0x24}}, 0x0) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x14008041) 3.462125825s ago: executing program 0 (id=853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.359217423s ago: executing program 4 (id=854): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c050", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40040, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x40, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) write$cgroup_int(r5, &(0x7f00000001c0)=0x10000, 0x12) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00e5ffff7f0000000000000080c443539a3507", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/27], 0x50) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x741, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}]}, 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x44) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffbcca}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd0}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) 3.241377617s ago: executing program 0 (id=855): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffe, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x8000000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd700279dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r6) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r8}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5bf5, 0x0, r7, 0xc199, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=r6, 0x16, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup=r7, r5, 0x33, 0x0, r5, @void, @value=r8, @void, @void, r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r3, 0xffffffffffffffff, 0x10, 0x9, r3, @void, @value=r2, @void, @void, r9}, 0x20) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r13, 0x800, 0x55007}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x80) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8001}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x84}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@ifindex=r13, r1, 0x33, 0x2014, 0x0, @value, @void, @void, @void, r9}, 0x20) 3.145929667s ago: executing program 3 (id=856): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x20040054) 2.890995687s ago: executing program 3 (id=857): unshare(0x24040400) syz_init_net_socket$ax25(0x3, 0x5, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) 2.783870066s ago: executing program 0 (id=858): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 2.636258654s ago: executing program 4 (id=859): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.53058308s ago: executing program 0 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1a4}}, 0x0) unshare(0x62040200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000500050002000000050004000100000005000100060000000c00078008000640000000000900020073797a300000000010"], 0x54}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) close(0xffffffffffffffff) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 2.498764888s ago: executing program 2 (id=861): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x4001, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.445109707s ago: executing program 1 (id=862): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) ioctl$int_in(r1, 0x5452, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/3, 0x3}}], 0x1, 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='veth0_to_hsr\x00', 0x10) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4e}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1400c004) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x364}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r10, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2.365945166s ago: executing program 4 (id=863): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.215690499s ago: executing program 2 (id=864): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3, 0x2}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.95561585s ago: executing program 2 (id=865): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x8840) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value, @void, @void, @value}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x804) 1.74767005s ago: executing program 2 (id=866): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0xfff9, 0x7}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.540115027s ago: executing program 0 (id=867): setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="000a0000000000000730000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000200000470207200000000006004dee000000000000000000000000000000000104"], 0x60) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000680)=0x11, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x101, @none, 0x3, 0x1}, 0xe) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x41}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_ID={0x8}, @CTA_TIMEOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x60814}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x9c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_STATUS={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_SEQ_ADJ_REPLY={0x44, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x810}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x24, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, r8, 0x20581}, [@IFLA_XDP={0x4}]}, 0x24}, 0x1, 0xba01, 0x0, 0x801}, 0x810) sendmsg$tipc(r1, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)=""/116, 0x74}, {0x0}], 0x2, &(0x7f0000000100)=""/37, 0x25}, 0x40010000) 1.360976382s ago: executing program 1 (id=868): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) close(0x3) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 1.265409236s ago: executing program 4 (id=869): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c050", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendto$inet(r1, 0x0, 0x0, 0x40040, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x40, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) write$cgroup_int(r5, &(0x7f00000001c0)=0x10000, 0x12) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00e5ffff7f0000000000000080c443539a3507", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/27], 0x50) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x741, @empty, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6gre0\x00'}}]}]}, 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x44) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x1, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffbcca}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd0}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="1c00000008060103000000000000003b770000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) 149.761664ms ago: executing program 0 (id=870): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c0004801800018008000100647570000c00028008000140000000ff0900010073797a30000000000900020073797a32"], 0x70}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) 79.694693ms ago: executing program 1 (id=871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}}, 0x20}}, 0x44) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x30}}]}, 0x1c}}, 0x8080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 57.453338ms ago: executing program 2 (id=872): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010027bd"], 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)={0x6c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe53}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa75e}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x72}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x5bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x5ad, 0x3, "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"}]}]}, 0x6c4}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 4 (id=873): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}, {&(0x7f0000000380)="53facf570590b766068717d4fc4627f4307f411a50c5396973ffb3de9060b91137fc9f1241de136c3cd19916820e5c4f944c74b2ab8b8a17ad80c961489ba551c7d25db8cc2d03079e29bfe8587edb3a0c279988172a4cff4f365430595240f032911e4550c4496963cffece4150c8767492", 0x72}, {&(0x7f0000000600)="574adeea61f171d6af3ab464610164dd1705b2b7dc60bf54793a9d19a64d9d3fa593310e029cf07ad1f18ed6a74af48ad3c83204d87067901b8abd34ef81368b8d66", 0x42}], 0x3}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x2}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e000100696d6d656469617465000000180002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000014000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4002840}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000), 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x9beeca1ede5b397a, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0x1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. [ 82.511002][ T5821] cgroup: Unknown subsys name 'net' [ 82.662865][ T5821] cgroup: Unknown subsys name 'cpuset' [ 82.671954][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.326038][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.369860][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.382694][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.391778][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.399928][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.407782][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.416563][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.424498][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.431847][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.439563][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.452124][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.458194][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.467284][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.489635][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.489684][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.513181][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.520296][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.520742][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.537178][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.540184][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.546542][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.551775][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.566827][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.576411][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.586524][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.633175][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.303811][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.361255][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 89.519599][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 89.536656][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.638739][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.646744][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.654745][ T5834] bridge_slave_0: entered allmulticast mode [ 89.662827][ T5834] bridge_slave_0: entered promiscuous mode [ 89.699874][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.707083][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.715635][ T5832] bridge_slave_0: entered allmulticast mode [ 89.723210][ T5832] bridge_slave_0: entered promiscuous mode [ 89.752700][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.760337][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.767538][ T5834] bridge_slave_1: entered allmulticast mode [ 89.776718][ T5834] bridge_slave_1: entered promiscuous mode [ 89.784337][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.802596][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.809829][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.817034][ T5832] bridge_slave_1: entered allmulticast mode [ 89.825822][ T5832] bridge_slave_1: entered promiscuous mode [ 89.914768][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.959334][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.972855][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.991401][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.036637][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.044109][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.052238][ T5835] bridge_slave_0: entered allmulticast mode [ 90.060949][ T5835] bridge_slave_0: entered promiscuous mode [ 90.123939][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.131698][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.139082][ T5835] bridge_slave_1: entered allmulticast mode [ 90.146570][ T5835] bridge_slave_1: entered promiscuous mode [ 90.245943][ T5834] team0: Port device team_slave_0 added [ 90.252701][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.260247][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.267623][ T5842] bridge_slave_0: entered allmulticast mode [ 90.275314][ T5842] bridge_slave_0: entered promiscuous mode [ 90.285238][ T5832] team0: Port device team_slave_0 added [ 90.309306][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.322898][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.334571][ T5834] team0: Port device team_slave_1 added [ 90.341340][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.348738][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.355934][ T5842] bridge_slave_1: entered allmulticast mode [ 90.364131][ T5842] bridge_slave_1: entered promiscuous mode [ 90.373597][ T5832] team0: Port device team_slave_1 added [ 90.380214][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.387388][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.394954][ T5847] bridge_slave_0: entered allmulticast mode [ 90.403055][ T5847] bridge_slave_0: entered promiscuous mode [ 90.477436][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.487617][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.498423][ T5847] bridge_slave_1: entered allmulticast mode [ 90.505757][ T5847] bridge_slave_1: entered promiscuous mode [ 90.527855][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.535157][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.561548][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.579279][ T5841] Bluetooth: hci2: command tx timeout [ 90.619876][ T5835] team0: Port device team_slave_0 added [ 90.640939][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.647927][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.648523][ T5841] Bluetooth: hci4: command tx timeout [ 90.678507][ T5840] Bluetooth: hci0: command tx timeout [ 90.679448][ T5852] Bluetooth: hci1: command tx timeout [ 90.686184][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.712795][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.725935][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.728518][ T5841] Bluetooth: hci3: command tx timeout [ 90.742102][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.749326][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.775322][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.788367][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.795371][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.822468][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.836176][ T5835] team0: Port device team_slave_1 added [ 90.846601][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.909288][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.937236][ T5842] team0: Port device team_slave_0 added [ 90.960181][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.967188][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.993557][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.051543][ T5842] team0: Port device team_slave_1 added [ 91.063878][ T5834] hsr_slave_0: entered promiscuous mode [ 91.072067][ T5834] hsr_slave_1: entered promiscuous mode [ 91.082062][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.089674][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.115957][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.130271][ T5847] team0: Port device team_slave_0 added [ 91.189408][ T5847] team0: Port device team_slave_1 added [ 91.239985][ T5832] hsr_slave_0: entered promiscuous mode [ 91.246716][ T5832] hsr_slave_1: entered promiscuous mode [ 91.253223][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.262286][ T5832] Cannot create hsr debugfs directory [ 91.307271][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.314749][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.341056][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.354023][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.361250][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.387922][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.421775][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.429297][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.455683][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.512510][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.520516][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.547366][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.629897][ T5842] hsr_slave_0: entered promiscuous mode [ 91.637834][ T5842] hsr_slave_1: entered promiscuous mode [ 91.645106][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.653318][ T5842] Cannot create hsr debugfs directory [ 91.665226][ T5835] hsr_slave_0: entered promiscuous mode [ 91.672500][ T5835] hsr_slave_1: entered promiscuous mode [ 91.679247][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.686930][ T5835] Cannot create hsr debugfs directory [ 91.872750][ T5847] hsr_slave_0: entered promiscuous mode [ 91.879704][ T5847] hsr_slave_1: entered promiscuous mode [ 91.886916][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.895026][ T5847] Cannot create hsr debugfs directory [ 91.931843][ T43] cfg80211: failed to load regulatory.db [ 92.412734][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.436791][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.462358][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.482957][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.532671][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.547168][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.567022][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.596683][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.649000][ T5841] Bluetooth: hci2: command tx timeout [ 92.723163][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.733152][ T5841] Bluetooth: hci4: command tx timeout [ 92.739030][ T5841] Bluetooth: hci1: command tx timeout [ 92.739189][ T5852] Bluetooth: hci0: command tx timeout [ 92.780946][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.793994][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.807838][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.815077][ T5852] Bluetooth: hci3: command tx timeout [ 92.917017][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.936376][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.960876][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.990406][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.010988][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.077544][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.095995][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.146623][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.154626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.166914][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.194122][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.207493][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.221838][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.241995][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.256086][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.263322][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.299561][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.306713][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.360178][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.367507][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.441820][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.549285][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.630863][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.637993][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.651073][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.658273][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.686237][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.735991][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.835264][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.875921][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.883179][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.895312][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.902502][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.015439][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.045304][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.134611][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.160957][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.205834][ T3123] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.213070][ T3123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.293183][ T3123] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.300389][ T3123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.406547][ T5834] veth0_vlan: entered promiscuous mode [ 94.486865][ T5832] veth0_vlan: entered promiscuous mode [ 94.501062][ T5834] veth1_vlan: entered promiscuous mode [ 94.562198][ T5832] veth1_vlan: entered promiscuous mode [ 94.615081][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.670537][ T5834] veth0_macvtap: entered promiscuous mode [ 94.710706][ T5832] veth0_macvtap: entered promiscuous mode [ 94.727758][ T5834] veth1_macvtap: entered promiscuous mode [ 94.735218][ T5852] Bluetooth: hci2: command tx timeout [ 94.755598][ T5832] veth1_macvtap: entered promiscuous mode [ 94.775708][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.812333][ T5852] Bluetooth: hci0: command tx timeout [ 94.817805][ T5852] Bluetooth: hci4: command tx timeout [ 94.823767][ T5852] Bluetooth: hci1: command tx timeout [ 94.877138][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.888426][ T5852] Bluetooth: hci3: command tx timeout [ 94.921039][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.945619][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.994044][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.037787][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.062886][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.072846][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.115203][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.127079][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.151442][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.169829][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.195930][ T5835] veth0_vlan: entered promiscuous mode [ 95.222648][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.244396][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.292996][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.313373][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.335665][ T5835] veth1_vlan: entered promiscuous mode [ 95.405959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.423476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.453147][ T5842] veth0_vlan: entered promiscuous mode [ 95.489957][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.497834][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.581789][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.594542][ T5847] veth0_vlan: entered promiscuous mode [ 95.607567][ T5842] veth1_vlan: entered promiscuous mode [ 95.621373][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.629724][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.637659][ T5847] veth1_vlan: entered promiscuous mode [ 95.688928][ T5835] veth0_macvtap: entered promiscuous mode [ 95.739457][ T5835] veth1_macvtap: entered promiscuous mode [ 95.829540][ T5842] veth0_macvtap: entered promiscuous mode [ 95.861450][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.891686][ T5956] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 95.895167][ T5847] veth0_macvtap: entered promiscuous mode [ 95.919451][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.954175][ T5842] veth1_macvtap: entered promiscuous mode [ 95.975093][ T5847] veth1_macvtap: entered promiscuous mode [ 96.026424][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.074999][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.085242][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.102135][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.110571][ T5960] warning: `syz.3.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.143171][ T5956] veth3: entered promiscuous mode [ 96.166582][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.191839][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.209636][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6'. [ 96.228250][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 96.239030][ T5958] bridge_slave_0: left allmulticast mode [ 96.243642][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6'. [ 96.245041][ T5958] bridge_slave_0: left promiscuous mode [ 96.257283][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6'. [ 96.269876][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.287179][ T5958] bridge_slave_1: left allmulticast mode [ 96.294482][ T5958] bridge_slave_1: left promiscuous mode [ 96.303163][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.316899][ T5958] bond0: (slave bond_slave_0): Releasing backup interface [ 96.334632][ T5958] bond0: (slave bond_slave_1): Releasing backup interface [ 96.355814][ T5958] team0: Port device team_slave_0 removed [ 96.371448][ T5958] team0: Port device team_slave_1 removed [ 96.377955][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.385976][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.399630][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.407374][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.480511][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.523828][ T5958] syz.1.2 (5958) used greatest stack depth: 19928 bytes left [ 96.537152][ T5962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.562508][ T5962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.585491][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.613254][ T5962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.637908][ T5962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.727321][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.772882][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.790254][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.808263][ T5852] Bluetooth: hci2: command tx timeout [ 96.839176][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.848880][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.856727][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.888748][ T5840] Bluetooth: hci0: command tx timeout [ 96.894329][ T5852] Bluetooth: hci4: command tx timeout [ 96.901776][ T5840] Bluetooth: hci1: command tx timeout [ 96.969083][ T5852] Bluetooth: hci3: command tx timeout [ 97.150152][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.158041][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.302716][ T5978] netlink: 'syz.1.9': attribute type 13 has an invalid length. [ 97.344548][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.354091][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.477701][ T5983] Zero length message leads to an empty skb [ 98.539052][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.548040][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.565127][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.619959][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.627843][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.723233][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.754077][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.787940][ T5993] vlan2: entered promiscuous mode [ 98.795041][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.798779][ T5993] vlan2: entered allmulticast mode [ 98.817872][ T5993] hsr_slave_1: entered allmulticast mode [ 98.982236][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.997995][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.110509][ T5998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.148829][ T5998] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.195519][ T6001] xt_bpf: check failed: parse error [ 99.222264][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 99.237072][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 99.293763][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 99.301851][ T6005] SET target dimension over the limit! [ 99.433405][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.884599][ T923] IPVS: starting estimator thread 0... [ 99.988809][ T6020] IPVS: using max 24 ests per chain, 57600 per kthread [ 100.030083][ T6008] team0 (unregistering): Port device team_slave_0 removed [ 100.047535][ T6008] team0 (unregistering): Port device team_slave_1 removed [ 100.391128][ T6026] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.555942][ T6030] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 100.638551][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.646851][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.956301][ T6042] netlink: 'syz.4.21': attribute type 6 has an invalid length. [ 100.989465][ T6042] netlink: 'syz.4.21': attribute type 5 has an invalid length. [ 101.027970][ T6042] netlink: 'syz.4.21': attribute type 16 has an invalid length. [ 101.051705][ T6042] netlink: 'syz.4.21': attribute type 17 has an invalid length. [ 101.194699][ T6056] Bluetooth: MGMT ver 1.23 [ 101.323903][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.332679][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.427007][ T5909] IPVS: starting estimator thread 0... [ 101.538412][ T6067] IPVS: using max 28 ests per chain, 67200 per kthread [ 101.787378][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.816649][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.011594][ T6056] IPVS: Error connecting to the multicast addr [ 102.554171][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.670191][ T6102] __nla_validate_parse: 6 callbacks suppressed [ 102.670212][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 102.707565][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.750578][ T6079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.288979][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.289963][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.477243][ T5962] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.494611][ T5962] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.548605][ T6090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.626692][ T6094] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.669316][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.677430][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.685088][ T6117] netlink: 32 bytes leftover after parsing attributes in process `syz.3.33'. [ 103.769604][ T5962] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.798443][ T5962] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.835624][ T5962] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.900698][ T6120] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 103.909900][ T5962] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.950962][ T5962] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.996052][ T5962] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.085721][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 104.133517][ T6128] netlink: 452 bytes leftover after parsing attributes in process `syz.2.37'. [ 104.525869][ T6127] team0 (unregistering): Port device team_slave_0 removed [ 104.566914][ T6127] team0 (unregistering): Port device team_slave_1 removed [ 104.623987][ T6131] tipc: Started in network mode [ 104.638287][ T6131] tipc: Node identity 4, cluster identity 4711 [ 104.671985][ T6131] tipc: Node number set to 4 [ 105.085264][ T6142] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 105.645491][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.653586][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.045457][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.093924][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.124305][ T6170] netlink: 'syz.3.47': attribute type 12 has an invalid length. [ 106.168826][ T6170] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.47'. [ 106.519371][ T6179] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 106.819485][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 106.858549][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.972119][ T6189] netlink: 76 bytes leftover after parsing attributes in process `syz.0.50'. [ 106.992081][ T6149] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.061877][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.116068][ T6187] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 107.148054][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.193122][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.393699][ T6149] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.660224][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.53'. [ 107.714735][ T6149] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.767809][ T6201] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 108.083849][ T6149] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.299454][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.345370][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.388250][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.452924][ T1097] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.124608][ T6226] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 109.233898][ T6221] delete_channel: no stack [ 109.277741][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.61'. [ 109.335007][ T6230] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 109.448581][ T6236] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 109.563591][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.61'. [ 109.773105][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.65'. [ 110.258001][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 110.276321][ T6268] netlink: 71 bytes leftover after parsing attributes in process `syz.2.72'. [ 110.409621][ T6261] veth1_to_team: entered promiscuous mode [ 110.415747][ T6261] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 110.523773][ T6273] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 110.691294][ T30] audit: type=1800 audit(1750616091.002:2): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.66" name="cgroup.controllers" dev="tmpfs" ino=75 res=0 errno=0 [ 111.146150][ T6294] openvswitch: netlink: Duplicate or invalid key (type 0). [ 111.169987][ T6294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.196313][ T6294] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.242371][ T6270] delete_channel: no stack [ 111.377294][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.430585][ T6286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.818417][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.848597][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.874003][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.940685][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.134181][ T6324] syz.3.85 uses obsolete (PF_INET,SOCK_PACKET) [ 112.785741][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 113.079800][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 113.276479][ T30] audit: type=1800 audit(1750616093.592:3): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="cgroup.controllers" dev="tmpfs" ino=83 res=0 errno=0 [ 113.405823][ T6355] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 113.889483][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 113.906996][ T6364] veth1_to_team: left promiscuous mode [ 113.918207][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 114.168224][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 114.215384][ T6378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.99'. [ 114.549014][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.103'. [ 114.631242][ T6391] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 114.954335][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.106'. [ 115.022664][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'. [ 115.073672][ T6409] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 115.141242][ T6406] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.153329][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 115.203740][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'. [ 115.725818][ T30] audit: type=1800 audit(1750616096.042:4): pid=6411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.104" name="cgroup.controllers" dev="tmpfs" ino=131 res=0 errno=0 [ 116.251935][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.120'. [ 116.363134][ T6458] netlink: 'syz.4.123': attribute type 27 has an invalid length. [ 116.373563][ T6453] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 117.129764][ T6486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.135'. [ 117.169191][ T6490] netlink: 60 bytes leftover after parsing attributes in process `syz.0.137'. [ 117.201521][ T6488] netlink: 60 bytes leftover after parsing attributes in process `syz.0.137'. [ 117.411305][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 117.469782][ T6497] team0: entered promiscuous mode [ 117.494024][ T6497] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.531841][ T6497] team0: left promiscuous mode [ 118.071335][ T6518] tipc: Started in network mode [ 118.076277][ T6518] tipc: Node identity 68a, cluster identity 3 [ 118.114409][ T6518] tipc: Node number set to 1674 [ 118.781353][ T6544] Driver unsupported XDP return value 0 on prog (id 62) dev N/A, expect packet loss! [ 118.962574][ T6524] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 119.270807][ T6560] syz.0.158: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 119.315875][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.0.158 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 119.315907][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.315927][ T6560] Call Trace: [ 119.315939][ T6560] [ 119.315949][ T6560] dump_stack_lvl+0x189/0x250 [ 119.316007][ T6560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.316041][ T6560] ? __pfx__printk+0x10/0x10 [ 119.316072][ T6560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.316096][ T6560] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.316121][ T6560] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 119.316148][ T6560] warn_alloc+0x214/0x310 [ 119.316172][ T6560] ? stack_depot_save_flags+0x40/0x900 [ 119.316204][ T6560] ? __pfx_warn_alloc+0x10/0x10 [ 119.316229][ T6560] ? kasan_save_track+0x4f/0x80 [ 119.316261][ T6560] ? xskq_create+0x56/0x170 [ 119.316279][ T6560] ? xsk_init_queue+0xb0/0x110 [ 119.316308][ T6560] ? xsk_setsockopt+0x43f/0x710 [ 119.316336][ T6560] ? do_sock_setsockopt+0x257/0x3e0 [ 119.316363][ T6560] ? __x64_sys_setsockopt+0x18b/0x220 [ 119.316390][ T6560] ? do_syscall_64+0xfa/0x3b0 [ 119.316410][ T6560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.316440][ T6560] __vmalloc_node_range_noprof+0x125/0x12f0 [ 119.316498][ T6560] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.316528][ T6560] ? __kasan_kmalloc+0x93/0xb0 [ 119.316551][ T6560] vmalloc_user_noprof+0xad/0xf0 [ 119.316574][ T6560] ? xskq_create+0xbf/0x170 [ 119.316594][ T6560] xskq_create+0xbf/0x170 [ 119.316617][ T6560] xsk_init_queue+0xb0/0x110 [ 119.316652][ T6560] xsk_setsockopt+0x43f/0x710 [ 119.316685][ T6560] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.316714][ T6560] ? __lock_acquire+0xab9/0xd20 [ 119.316753][ T6560] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 119.316779][ T6560] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.316811][ T6560] do_sock_setsockopt+0x257/0x3e0 [ 119.316845][ T6560] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 119.316881][ T6560] ? __fget_files+0x2a/0x420 [ 119.316913][ T6560] __x64_sys_setsockopt+0x18b/0x220 [ 119.316950][ T6560] do_syscall_64+0xfa/0x3b0 [ 119.316970][ T6560] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.316998][ T6560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.317018][ T6560] ? clear_bhb_loop+0x60/0xb0 [ 119.317043][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.317070][ T6560] RIP: 0033:0x7f58b958e929 [ 119.317095][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.317112][ T6560] RSP: 002b:00007f58b73d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.317136][ T6560] RAX: ffffffffffffffda RBX: 00007f58b97b6080 RCX: 00007f58b958e929 [ 119.317151][ T6560] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 119.317163][ T6560] RBP: 00007f58b9610b39 R08: 0000000000000004 R09: 0000000000000000 [ 119.317175][ T6560] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.317188][ T6560] R13: 0000000000000000 R14: 00007f58b97b6080 R15: 00007ffe90a38cd8 [ 119.317222][ T6560] [ 119.317234][ T6560] Mem-Info: [ 119.644551][ T6560] active_anon:5545 inactive_anon:0 isolated_anon:0 [ 119.644551][ T6560] active_file:1264 inactive_file:39830 isolated_file:0 [ 119.644551][ T6560] unevictable:768 dirty:366 writeback:25 [ 119.644551][ T6560] slab_reclaimable:10011 slab_unreclaimable:118091 [ 119.644551][ T6560] mapped:30484 shmem:1358 pagetables:1150 [ 119.644551][ T6560] sec_pagetables:0 bounce:0 [ 119.644551][ T6560] kernel_misc_reclaimable:0 [ 119.644551][ T6560] free:1301251 free_pcp:25048 free_cma:0 [ 119.690693][ T6560] Node 0 active_anon:22180kB inactive_anon:0kB active_file:5056kB inactive_file:159120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121936kB dirty:1464kB writeback:100kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12912kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.726030][ T6560] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.758269][ T6560] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 119.793671][ T6556] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 119.804420][ T6560] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 119.804659][ T6560] Node 0 [ 119.814468][ T6561] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 119.829228][ T6560] DMA32 free:1290420kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22132kB inactive_anon:0kB active_file:5056kB inactive_file:157300kB unevictable:1536kB writepending:1464kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:77976kB local_pcp:54108kB free_cma:0kB [ 119.874617][ T6560] lowmem_reserve[]: 0 0 1 1 1 [ 119.918288][ T6560] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 120.014063][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 120.032360][ T6560] Node 1 Normal free:3899208kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22016kB local_pcp:11712kB free_cma:0kB [ 120.043017][ T6555] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 120.217439][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 120.264764][ T6560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.327879][ T6560] Node 0 DMA32: 1448*4kB (UME) 963*8kB (UME) 532*16kB (UME) 834*32kB (UME) 101*64kB (UME) 42*128kB (UME) 27*256kB (UM) 22*512kB (UME) 4*1024kB (ME) 2*2048kB (M) 295*4096kB (UM) = 1295224kB [ 120.388297][ T6560] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 120.405849][ T6560] Node 1 Normal: 218*4kB (UME) 60*8kB (UME) 56*16kB (UME) 70*32kB (UME) 27*64kB (UME) 2*128kB (UM) 2*256kB (M) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3899208kB [ 120.427272][ T6560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.446108][ T6560] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.475291][ T6560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.497210][ T6560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.516762][ T6560] 42450 total pagecache pages [ 120.545855][ T6560] 0 pages in swap cache [ 120.554387][ T6560] Free swap = 124996kB [ 120.567667][ T6580] pim6reg: entered allmulticast mode [ 120.603839][ T6560] Total swap = 124996kB [ 120.626289][ T6560] 2097051 pages RAM [ 120.630756][ T6560] 0 pages HighMem/MovableOnly [ 120.635473][ T6560] 424693 pages reserved [ 120.681229][ T6560] 0 pages cma reserved [ 120.831559][ T6594] __nla_validate_parse: 3 callbacks suppressed [ 120.831578][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 120.892446][ T6594] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 120.944987][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.170'. [ 121.034982][ T6599] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 121.193507][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 121.330587][ T6608] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 121.600665][ T6618] tipc: Failed to obtain node identity [ 121.606353][ T6618] tipc: Enabling of bearer rejected, failed to enable media [ 121.740961][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'. [ 121.778359][ T6622] netlink: 'syz.2.176': attribute type 9 has an invalid length. [ 122.042123][ T6622] macvlan2: entered allmulticast mode [ 122.047561][ T6622] veth1_vlan: entered allmulticast mode [ 122.184026][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 122.415583][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 122.461757][ T6641] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 123.566093][ T6664] bond0: option miimon: invalid value (18446744073709551614) [ 123.603587][ T6664] bond0: option miimon: allowed values 0 - 2147483647 [ 124.562342][ T6695] tipc: Enabled bearer , priority 10 [ 124.745279][ T6700] netlink: 'syz.3.198': attribute type 25 has an invalid length. [ 125.010880][ T6707] openvswitch: netlink: Duplicate or invalid key (type 0). [ 125.034665][ T6707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.508565][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 125.802775][ T30] audit: type=1800 audit(1750616106.122:5): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.203" name="cgroup.controllers" dev="tmpfs" ino=211 res=0 errno=0 [ 125.901822][ T6732] openvswitch: netlink: Duplicate or invalid key (type 0). [ 125.935274][ T6732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.707004][ T6756] openvswitch: netlink: Duplicate or invalid key (type 0). [ 126.750819][ T6756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.347765][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 127.401427][ T6780] openvswitch: netlink: Duplicate or invalid key (type 0). [ 127.447422][ T6780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.268633][ T6806] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.331395][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.747024][ T6826] openvswitch: netlink: Duplicate or invalid key (type 0). [ 128.754667][ T6826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.789174][ T6823] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 128.796886][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 129.221741][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.239'. [ 129.298769][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.239'. [ 129.477500][ T6819] delete_channel: no stack [ 130.017415][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 130.026282][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 130.322898][ T6872] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 130.356572][ T6881] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 130.660012][ T6892] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 130.987851][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 131.118838][ T6905] net_ratelimit: 2 callbacks suppressed [ 131.118860][ T6905] openvswitch: netlink: Duplicate or invalid key (type 0). [ 131.147039][ T6905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.210462][ T30] audit: type=1800 audit(1750616111.532:6): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.259" name="cgroup.controllers" dev="tmpfs" ino=258 res=0 errno=0 [ 131.360606][ T6888] delete_channel: no stack [ 131.473880][ T6916] netlink: 16 bytes leftover after parsing attributes in process `syz.1.265'. [ 131.510930][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 132.753234][ T6916] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 132.767171][ T6919] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 132.893403][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907633][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.587950][ T6949] openvswitch: netlink: Duplicate or invalid key (type 0). [ 133.596147][ T6949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.291543][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.279'. [ 134.304204][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 134.340740][ T6960] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 134.381502][ T6967] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 134.520711][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 134.800354][ T30] audit: type=1800 audit(1750616115.122:7): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.277" name="cgroup.controllers" dev="tmpfs" ino=276 res=0 errno=0 [ 134.912919][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 135.046261][ T6981] openvswitch: netlink: Duplicate or invalid key (type 0). [ 135.054918][ T6981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.090380][ T6957] delete_channel: no stack [ 135.277580][ T6985] netlink: 48 bytes leftover after parsing attributes in process `syz.1.287'. [ 135.396533][ T6994] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 136.064672][ T7019] macvlan2: left allmulticast mode [ 136.099572][ T7019] veth1_vlan: left allmulticast mode [ 136.523441][ T7027] netlink: 48 bytes leftover after parsing attributes in process `syz.0.297'. [ 136.636522][ T7031] syzkaller1: entered promiscuous mode [ 136.659581][ T7031] syzkaller1: entered allmulticast mode [ 136.715740][ T7036] openvswitch: netlink: Duplicate or invalid key (type 0). [ 136.738544][ T7036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.932365][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 137.349671][ T7053] xt_CT: No such helper "syz0" [ 137.455978][ T7041] team0 (unregistering): Port device team_slave_0 removed [ 137.467135][ T7041] team0 (unregistering): Port device team_slave_1 removed [ 137.506134][ T7061] tipc: Resetting bearer [ 137.527898][ T7061] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 138.017637][ T7076] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.897212][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 138.936047][ T7111] dummy0: entered promiscuous mode [ 139.025649][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 139.505960][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 139.530035][ T7128] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.195503][ T7153] bridge0: port 3(syz_tun) entered blocking state [ 140.203518][ T7153] bridge0: port 3(syz_tun) entered disabled state [ 140.213564][ T7153] syz_tun: entered allmulticast mode [ 140.235568][ T7153] syz_tun: entered promiscuous mode [ 140.476772][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'. [ 140.509543][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'. [ 140.709184][ T7170] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 140.778349][ T7176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.341'. [ 140.835232][ T7179] openvswitch: netlink: Duplicate or invalid key (type 0). [ 140.867083][ T7179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.876172][ T7176] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 141.407035][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 141.543303][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 141.842547][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.350'. [ 141.914373][ T7221] netlink: 'syz.3.350': attribute type 10 has an invalid length. [ 141.940689][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 142.077424][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 142.161263][ T7228] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 142.371024][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.359'. [ 143.948385][ T7273] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 144.084518][ T7286] netlink: 'syz.4.374': attribute type 10 has an invalid length. [ 144.148378][ T7286] bridge0: port 3(team0) entered blocking state [ 144.154813][ T7286] bridge0: port 3(team0) entered disabled state [ 144.207580][ T7286] team0: entered allmulticast mode [ 144.225305][ T7286] team_slave_0: entered allmulticast mode [ 144.234691][ T7286] team_slave_1: entered allmulticast mode [ 144.250274][ T7286] team0: entered promiscuous mode [ 144.255365][ T7286] team_slave_0: entered promiscuous mode [ 144.268007][ T7286] team_slave_1: entered promiscuous mode [ 144.611409][ T7301] __nla_validate_parse: 8 callbacks suppressed [ 144.611428][ T7301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 144.629817][ T7271] delete_channel: no stack [ 144.923328][ T7307] netlink: del zone limit has 4 unknown bytes [ 144.970285][ T7316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.380'. [ 145.436681][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 145.640746][ T30] audit: type=1800 audit(1750616125.962:8): pid=7318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.384" name="cgroup.controllers" dev="tmpfs" ino=418 res=0 errno=0 [ 146.361115][ T7356] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 146.437296][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.393'. [ 146.462483][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'. [ 146.508159][ T7361] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 147.092028][ T7353] delete_channel: no stack [ 147.142489][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.397'. [ 147.369748][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.400'. [ 147.548495][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.400'. [ 147.925653][ T7402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.403'. [ 148.924719][ T7422] !: renamed from dummy0 [ 148.989969][ T7420] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 149.062492][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 149.378575][ T7429] netlink: 'syz.2.411': attribute type 10 has an invalid length. [ 149.825330][ T7425] team0 (unregistering): left allmulticast mode [ 149.858232][ T7425] team_slave_0: left allmulticast mode [ 149.874108][ T7425] team_slave_1: left allmulticast mode [ 149.884242][ T7425] team0 (unregistering): left promiscuous mode [ 149.899734][ T7425] team_slave_0: left promiscuous mode [ 149.911498][ T7425] team_slave_1: left promiscuous mode [ 149.927661][ T7425] bridge0: port 3(team0) entered disabled state [ 149.962751][ T7425] team0 (unregistering): Port device team_slave_0 removed [ 149.989806][ T7425] team0 (unregistering): Port device team_slave_1 removed [ 150.021673][ T7444] __nla_validate_parse: 2 callbacks suppressed [ 150.021694][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 150.252397][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 150.734941][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 150.866717][ T7474] macsec2: entered promiscuous mode [ 150.888704][ T7474] ip6gretap0: entered promiscuous mode [ 150.977956][ T7474] ip6gretap0: left promiscuous mode [ 151.756926][ T7488] tipc: Enabled bearer , priority 10 [ 151.764621][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 152.303302][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 153.072463][ T7507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.394330][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 153.413264][ T7510] Can't find ip_set type has [ 154.607327][ T7537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.443'. [ 154.626223][ T7537] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 155.107434][ T7547] netlink: 68 bytes leftover after parsing attributes in process `syz.4.446'. [ 155.178013][ T7541] syzkaller0: entered promiscuous mode [ 155.187408][ T7541] syzkaller0: entered allmulticast mode [ 155.221329][ T7546] bond0: entered promiscuous mode [ 155.229838][ T7546] bond_slave_0: entered promiscuous mode [ 155.259881][ T7546] bond_slave_1: entered promiscuous mode [ 155.299384][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.502398][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 155.783639][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 157.217123][ T7567] netlink: 'syz.3.450': attribute type 4 has an invalid length. [ 157.514032][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.452'. [ 157.538259][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.454'. [ 157.751649][ T7598] tipc: Failed to obtain node identity [ 157.777699][ T7598] tipc: Enabling of bearer rejected, failed to enable media [ 157.999858][ T7614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.457'. [ 158.153147][ T7620] netlink: 'syz.2.458': attribute type 33 has an invalid length. [ 158.174610][ T7620] netlink: 152 bytes leftover after parsing attributes in process `syz.2.458'. [ 158.239690][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.457'. [ 158.270677][ T7625] bond0: entered promiscuous mode [ 158.290182][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.458'. [ 158.296841][ T7625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.678911][ T7632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.460'. [ 158.745961][ T7635] vlan2: entered promiscuous mode [ 158.762417][ T7635] batadv0: entered promiscuous mode [ 159.188366][ T7640] syzkaller0: entered promiscuous mode [ 159.193903][ T7640] syzkaller0: entered allmulticast mode [ 159.607442][ T5840] Bluetooth: hci4: link tx timeout [ 159.613359][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.262511][ T7674] __nla_validate_parse: 2 callbacks suppressed [ 160.262531][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.466'. [ 160.907492][ T7690] netlink: 'syz.1.469': attribute type 10 has an invalid length. [ 161.691798][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 161.780167][ T7674] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 161.802486][ T7680] syz_tun: left allmulticast mode [ 161.807585][ T7680] syz_tun: left promiscuous mode [ 161.819474][ T7680] bridge0: port 3(syz_tun) entered disabled state [ 161.880005][ T7680] bridge_slave_0: left allmulticast mode [ 161.885770][ T7680] bridge_slave_0: left promiscuous mode [ 161.908085][ T7680] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.933167][ T7680] bridge_slave_1: left allmulticast mode [ 161.939163][ T7680] bridge_slave_1: left promiscuous mode [ 161.944993][ T7680] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.963299][ T7680] bond0: (slave bond_slave_0): Releasing backup interface [ 161.973551][ T7680] bond0: (slave bond_slave_1): Releasing backup interface [ 161.986564][ T7680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.005888][ T7680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.092642][ T7682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.126885][ T7682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.626570][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.476'. [ 162.962543][ T7737] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 163.005585][ T7735] delete_channel: no stack [ 163.165494][ T30] audit: type=1800 audit(1750616143.482:9): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.476" name="cgroup.controllers" dev="tmpfs" ino=497 res=0 errno=0 [ 163.721442][ T7754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 164.030597][ T7768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.485'. [ 164.153119][ T7771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.289613][ T7768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.606655][ T7786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.486'. [ 165.096293][ T7808] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 165.515775][ T7822] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20003 [ 165.861321][ T7805] delete_channel: no stack [ 166.020426][ T7836] tipc: Failed to obtain node identity [ 166.025988][ T7836] tipc: Enabling of bearer rejected, failed to enable media [ 166.083002][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 166.154153][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 166.266525][ T7840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.363850][ T7851] vlan2: entered allmulticast mode [ 166.380854][ T30] audit: type=1800 audit(1750616146.702:10): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.495" name="cgroup.controllers" dev="tmpfs" ino=513 res=0 errno=0 [ 166.414784][ T7851] veth1: entered allmulticast mode [ 166.434850][ T7851] bond1: (slave vlan2): Error -34 calling dev_set_mtu [ 166.632577][ T7847] bond1: (slave veth3): Enslaving as an active interface with an up link [ 166.663233][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.500'. [ 167.188007][ T7864] syzkaller0: entered promiscuous mode [ 167.203707][ T7864] syzkaller0: entered allmulticast mode [ 167.251267][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'. [ 167.271151][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.502'. [ 168.200482][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 168.986664][ T7896] openvswitch: netlink: Duplicate or invalid key (type 0). [ 168.994534][ T7896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.377940][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.512'. [ 169.478982][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 169.641190][ T30] audit: type=1800 audit(1750616149.962:11): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.511" name="cgroup.controllers" dev="tmpfs" ino=501 res=0 errno=0 [ 170.453051][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 170.462106][ T7885] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 170.520582][ T7886] dummy0: left promiscuous mode [ 171.153693][ T7930] openvswitch: netlink: Duplicate or invalid key (type 0). [ 171.162421][ T7930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.526327][ T7939] netlink: 'syz.3.522': attribute type 13 has an invalid length. [ 171.794434][ T7954] __nla_validate_parse: 2 callbacks suppressed [ 171.794453][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 172.063579][ T7963] netlink: 172 bytes leftover after parsing attributes in process `syz.1.528'. [ 172.082860][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 172.289968][ T30] audit: type=1800 audit(1750616152.602:12): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.525" name="cgroup.controllers" dev="tmpfs" ino=572 res=0 errno=0 [ 172.537756][ T7975] openvswitch: netlink: Duplicate or invalid key (type 0). [ 172.576432][ T7975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.872204][ T7986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.909949][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 172.987548][ T7986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.060340][ T7987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.227567][ T7991] bond0: left promiscuous mode [ 173.234387][ T7991] bond_slave_0: left promiscuous mode [ 173.244832][ T7991] bond_slave_1: left promiscuous mode [ 173.274329][ T7991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.342544][ T7993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.356886][ T7993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.393143][ T7997] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 173.411428][ T8002] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 173.504962][ T7991] syz.2.540 (7991) used greatest stack depth: 18880 bytes left [ 174.709572][ T8031] openvswitch: netlink: Duplicate or invalid key (type 0). [ 174.720723][ T8031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.897272][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 175.312500][ T30] audit: type=1800 audit(1750616155.622:13): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.545" name="cgroup.controllers" dev="tmpfs" ino=582 res=0 errno=0 [ 175.425648][ T8050] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 175.478496][ T8049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.580336][ T8049] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 175.852283][ T8069] tipc: Started in network mode [ 175.872955][ T8069] tipc: Node identity ac14140f, cluster identity 4711 [ 175.892604][ T8069] tipc: New replicast peer: 255.255.255.255 [ 175.901277][ T8069] tipc: Enabled bearer , priority 10 [ 176.094056][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 176.126868][ T8045] delete_channel: no stack [ 177.019277][ T6085] tipc: Node number set to 2886997007 [ 177.096184][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.176881][ T8090] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.392842][ T8091] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 178.155711][ T8118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.220053][ T8119] tipc: Started in network mode [ 178.239177][ T8119] tipc: Node identity ac14140f, cluster identity 4711 [ 178.246247][ T8119] tipc: New replicast peer: 255.255.255.255 [ 178.280642][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.575'. [ 178.289847][ T8129] netlink: 'syz.1.575': attribute type 7 has an invalid length. [ 178.297618][ T8129] netlink: 'syz.1.575': attribute type 8 has an invalid length. [ 178.319515][ T8119] tipc: Enabled bearer , priority 10 [ 178.325347][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 178.338146][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 178.349075][ T8118] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 178.434728][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 179.011597][ T8151] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 179.099000][ T8161] tipc: Enabling of bearer rejected, already enabled [ 179.120299][ T8159] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 179.227810][ T8165] openvswitch: netlink: Duplicate or invalid key (type 0). [ 179.248345][ T8165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.439258][ T6085] tipc: Node number set to 2886997007 [ 179.624446][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 179.791255][ T8184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.876224][ T8184] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.019494][ T8194] bond0: left promiscuous mode [ 180.098230][ T8194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.152272][ T8195] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 180.199694][ T8202] tipc: Enabling of bearer rejected, already enabled [ 180.348707][ T8206] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 180.393057][ T8205] delete_channel: no stack [ 180.419187][ T8208] veth1_to_team: entered promiscuous mode [ 180.452886][ T8208] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 180.981167][ T8228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.224109][ T8230] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 181.562597][ T8247] tipc: New replicast peer: 255.255.255.255 [ 181.584843][ T8247] tipc: Enabled bearer , priority 10 [ 181.766628][ T8252] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 182.198624][ T8258] tipc: Resetting bearer [ 182.716565][ T8273] openvswitch: netlink: Duplicate or invalid key (type 0). [ 182.744563][ T8273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.064581][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.625'. [ 183.800799][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'. [ 183.896934][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'. [ 184.213187][ T8303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.228991][ T8303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.266260][ T8305] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 184.299906][ T8307] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 184.601116][ T8316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.683123][ T8320] openvswitch: netlink: Duplicate or invalid key (type 0). [ 184.717827][ T8320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.747472][ T8316] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 184.989427][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.640'. [ 185.027261][ T8331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.640'. [ 185.523910][ T8353] netlink: 'syz.4.645': attribute type 12 has an invalid length. [ 185.533197][ T8353] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.645'. [ 185.575827][ T8350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.765069][ T8359] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.306730][ T8374] openvswitch: netlink: Duplicate or invalid key (type 0). [ 186.331296][ T8366] "syz.0.647" (8366) uses obsolete ecb(arc4) skcipher [ 186.338653][ T8374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.406741][ T8375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.562423][ T8375] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.916194][ T8401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.661'. [ 187.439327][ T8423] openvswitch: netlink: Duplicate or invalid key (type 0). [ 187.447032][ T8423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.963347][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 188.109000][ T8440] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.111340][ T8444] vcan0: tx drop: invalid da for name 0x2000000000000001 [ 188.377807][ T8454] openvswitch: netlink: Duplicate or invalid key (type 0). [ 188.380812][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 188.396800][ T8454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.548675][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.680'. [ 188.557600][ T8462] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 188.716780][ T8465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.680'. [ 188.767127][ T30] audit: type=1800 audit(1750616169.072:14): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.671" name="cgroup.controllers" dev="tmpfs" ino=753 res=0 errno=0 [ 188.849181][ T8462] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 190.333031][ T8516] openvswitch: netlink: Duplicate or invalid key (type 0). [ 190.971461][ T8528] net_ratelimit: 1 callbacks suppressed [ 190.971474][ T8528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.100552][ T8528] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 191.681060][ T8551] openvswitch: netlink: Duplicate or invalid key (type 0). [ 191.701762][ T8551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.052668][ T8561] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 192.090462][ T8559] delete_channel: no stack [ 192.327309][ T8568] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 192.356063][ T8567] delete_channel: no stack [ 192.688920][ T8573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.733936][ T8576] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 192.961969][ T8579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.987863][ T8579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.015665][ T8582] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 193.107491][ T8588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.713'. [ 193.157450][ T8581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.713'. [ 193.229032][ T8591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.713'. [ 193.353789][ T8602] openvswitch: netlink: Duplicate or invalid key (type 0). [ 193.397795][ T8602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.490705][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 193.969699][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.724'. [ 193.994510][ T8621] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 194.096754][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.724'. [ 194.333121][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341925][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.396087][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'. [ 194.431014][ T8633] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 194.488988][ T8633] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 194.571541][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.727'. [ 195.196798][ T8653] tipc: Failed to obtain node identity [ 195.220468][ T8653] tipc: Enabling of bearer rejected, failed to enable media [ 195.416151][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'. [ 195.479735][ T8662] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 195.579935][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.736'. [ 197.156855][ T8679] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.563175][ T8700] tipc: Enabled bearer , priority 10 [ 198.596524][ T8704] __nla_validate_parse: 1 callbacks suppressed [ 198.596543][ T8704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.753'. [ 198.863085][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.753'. [ 199.989476][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 200.322019][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 200.741941][ T8752] syz_tun: entered allmulticast mode [ 200.799024][ T8751] syz_tun: left allmulticast mode [ 201.098238][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 201.186110][ T8759] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 201.204388][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.766'. [ 201.344195][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.770'. [ 201.439107][ T8766] netlink: 20 bytes leftover after parsing attributes in process `syz.4.770'. [ 201.797571][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 201.890107][ T8767] tipc: Resetting bearer [ 201.999735][ T8767] veth1_to_team: left promiscuous mode [ 202.013619][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.775'. [ 202.172378][ T8790] macvlan0: entered allmulticast mode [ 202.277680][ T8794] xt_hashlimit: size too large, truncated to 1048576 [ 202.321991][ T8790] macvlan0 (unregistering): left allmulticast mode [ 202.416952][ T30] audit: type=1800 audit(1750616182.732:15): pid=8786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.775" name="cgroup.controllers" dev="tmpfs" ino=821 res=0 errno=0 [ 202.443962][ T8796] pim6reg1: entered promiscuous mode [ 202.489311][ T8796] pim6reg1: entered allmulticast mode [ 203.050576][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.121326][ T8806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.190977][ T8812] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 203.251235][ T8817] IPVS: Scheduler module ip_vs_sip not found [ 203.261144][ T8819] IPVS: length: 24 != 16106127384 [ 204.106378][ T8841] __nla_validate_parse: 4 callbacks suppressed [ 204.106400][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 204.182486][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.792'. [ 204.492391][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 204.615487][ T8857] tipc: Enabling of bearer rejected, already enabled [ 204.685886][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'. [ 204.791271][ T8862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 204.829552][ T30] audit: type=1800 audit(1750616185.152:16): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.791" name="cgroup.controllers" dev="tmpfs" ino=750 res=0 errno=0 [ 204.899140][ T8862] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 205.000537][ T30] audit: type=1800 audit(1750616185.322:17): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.795" name="cgroup.controllers" dev="tmpfs" ino=879 res=0 errno=0 [ 205.569447][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.804'. [ 205.617315][ T8875] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 205.621780][ T8874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.804'. [ 206.378682][ T8903] netlink: 28 bytes leftover after parsing attributes in process `syz.0.812'. [ 206.424536][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'. [ 206.619155][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 206.620203][ T8905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.811'. [ 207.034365][ T8924] tipc: Failed to obtain node identity [ 207.046910][ T8924] tipc: Enabling of bearer rejected, failed to enable media [ 208.754333][ T8971] tipc: Failed to obtain node identity [ 208.760541][ T8971] tipc: Enabling of bearer rejected, failed to enable media [ 208.797771][ T8972] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 209.259954][ T8986] __nla_validate_parse: 5 callbacks suppressed [ 209.259977][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.834'. [ 209.558147][ T8968] delete_channel: no stack [ 209.842080][ T9001] bond0: entered promiscuous mode [ 209.899117][ T9001] bond_slave_0: entered promiscuous mode [ 209.948802][ T9001] bond_slave_1: entered promiscuous mode [ 210.066255][ T9006] tipc: Failed to obtain node identity [ 210.099067][ T9006] tipc: Enabling of bearer rejected, failed to enable media [ 210.446475][ T9009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.842'. [ 210.505702][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.844'. [ 210.821195][ T9029] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 210.846404][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 211.168473][ T9029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.235398][ T9034] bond1: (slave geneve0): making interface the new active one [ 211.245345][ T9034] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 211.265301][ T9037] bond1: entered promiscuous mode [ 211.270728][ T9037] geneve0: entered promiscuous mode [ 211.322174][ T5962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.340910][ T5962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.385647][ T5962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.406433][ T5962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.677129][ T9052] tipc: Enabling of bearer rejected, already enabled [ 211.735512][ T9055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.758018][ T9057] netlink: del zone limit has 4 unknown bytes [ 211.771382][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 211.777516][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 211.778371][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 211.937402][ T9055] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 212.274637][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 212.484623][ T9070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.861'. [ 212.738395][ T9082] tipc: Failed to remove unknown binding: 66,3,3/1674:3471044450/3471044451 [ 212.969174][ T49] wlan1: Trigger new scan to find an IBSS to join [ 214.497352][ T9100] tipc: Enabling of bearer rejected, already enabled [ 214.775187][ T9106] syz_tun: entered allmulticast mode [ 214.809614][ C0] ------------[ cut here ]------------ [ 214.815557][ C0] WARNING: CPU: 0 PID: 9062 at net/ipv4/ipmr.c:2302 ip_mr_output+0xbb1/0xe70 [ 214.824442][ C0] Modules linked in: [ 214.828662][ C0] CPU: 0 UID: 0 PID: 9062 Comm: syz.3.857 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 214.840752][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.850873][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 214.856215][ C0] Code: df e9 63 f6 ff ff e8 2e 16 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 7a 0b 4c ff e9 45 f6 ff ff e8 10 16 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 02 16 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 214.876031][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 214.882189][ C0] RAX: ffffffff89fa4640 RBX: ffff888077b8e500 RCX: ffff88803d8fbc00 [ 214.890240][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 214.898288][ C0] RBP: ffffc90000007a10 R08: ffff88803d8fbc00 R09: 0000000000000004 [ 214.906308][ C0] R10: 0000000000000003 R11: ffffffff89fa3a90 R12: 0000000000000010 [ 214.914381][ C0] R13: dffffc0000000000 R14: ffff88803d1ec900 R15: 0000000000000000 [ 214.922417][ C0] FS: 00007effa93a76c0(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 214.931482][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 214.938132][ C0] CR2: 0000200000b36000 CR3: 0000000026320000 CR4: 00000000003526f0 [ 214.946169][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.954206][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.962252][ C0] Call Trace: [ 214.965569][ C0] [ 214.968473][ C0] ? __pfx_dst_output+0x10/0x10 [ 214.973376][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 214.978811][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 214.984936][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 214.990139][ C0] ? skb_dst+0x4f/0xd0 [ 214.994263][ C0] ? dst_output+0x177/0x1c0 [ 214.998894][ C0] igmp_send_report+0x89e/0xdb0 [ 215.000120][ T9114] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 215.003796][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 215.017044][ C0] ? igmp_start_timer+0x211/0x2b0 [ 215.022161][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 215.027412][ C0] igmp_timer_expire+0x204/0x510 [ 215.032437][ C0] call_timer_fn+0x17e/0x5f0 [ 215.037076][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 215.042624][ C0] ? call_timer_fn+0xbe/0x5f0 [ 215.047351][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 215.052566][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.057819][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.063107][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 215.068642][ C0] __run_timer_base+0x61a/0x860 [ 215.073638][ C0] ? ktime_get+0x3e/0x1f0 [ 215.078091][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 215.083504][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 215.089867][ C0] run_timer_softirq+0xb7/0x180 [ 215.094756][ C0] handle_softirqs+0x286/0x870 [ 215.099616][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 215.104531][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 215.109932][ C0] __irq_exit_rcu+0xca/0x1f0 [ 215.114675][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.120024][ C0] irq_exit_rcu+0x9/0x30 [ 215.124319][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 215.130061][ C0] [ 215.133040][ C0] [ 215.136023][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.142097][ C0] RIP: 0010:lock_is_held_type+0x137/0x190 [ 215.147959][ C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 89 93 36 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 215.167793][ C0] RSP: 0018:ffffc90003377ad8 EFLAGS: 00000206 [ 215.173952][ C0] RAX: 7b91bdf9d9929600 RBX: 0000000000000000 RCX: 7b91bdf9d9929600 [ 215.181999][ C0] RDX: 0000000000000000 RSI: ffffffff8db71adc RDI: ffffffff8be28b80 [ 215.190072][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff820c5120 [ 215.198144][ C0] R10: dffffc0000000000 R11: ffffed100f49f00d R12: 0000000000000246 [ 215.206159][ C0] R13: ffff88803d8fbc00 R14: ffffffff8e13ee60 R15: 0000000000000000 [ 215.214323][ C0] ? __might_fault+0xb0/0x130 [ 215.219260][ C0] __might_resched+0xf5/0x610 [ 215.224014][ C0] ? __might_fault+0xb0/0x130 [ 215.228784][ C0] ? __pfx___might_resched+0x10/0x10 [ 215.234136][ C0] ? __might_fault+0xb0/0x130 [ 215.238905][ C0] do_recvmmsg+0x4d9/0x770 [ 215.243429][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 215.248474][ C0] ? __pfx_do_futex+0x10/0x10 [ 215.253214][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 215.258338][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 215.263927][ C0] ? rcu_is_watching+0x15/0xb0 [ 215.268876][ C0] ? do_syscall_64+0xbe/0x3b0 [ 215.273603][ C0] do_syscall_64+0xfa/0x3b0 [ 215.278208][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.283463][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.289890][ C0] ? clear_bhb_loop+0x60/0xb0 [ 215.294617][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.300598][ C0] RIP: 0033:0x7effa858e929 [ 215.305048][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.324749][ C0] RSP: 002b:00007effa93a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 215.333255][ C0] RAX: ffffffffffffffda RBX: 00007effa87b5fa0 RCX: 00007effa858e929 [ 215.341314][ C0] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 215.349349][ C0] RBP: 00007effa8610b39 R08: 0000000000000000 R09: 0000000000000000 [ 215.357473][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.365529][ C0] R13: 0000000000000000 R14: 00007effa87b5fa0 R15: 00007ffde3658428 [ 215.373596][ C0] [ 215.376668][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.383969][ C0] CPU: 0 UID: 0 PID: 9062 Comm: syz.3.857 Not tainted 6.16.0-rc2-syzkaller-00623-g14966a8df77e #0 PREEMPT(full) [ 215.395871][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.405931][ C0] Call Trace: [ 215.409227][ C0] [ 215.412074][ C0] dump_stack_lvl+0x99/0x250 [ 215.416677][ C0] ? __asan_memcpy+0x40/0x70 [ 215.421278][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.426487][ C0] ? __pfx__printk+0x10/0x10 [ 215.431093][ C0] panic+0x2db/0x790 [ 215.435003][ C0] ? __pfx_panic+0x10/0x10 [ 215.439427][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 215.444653][ C0] __warn+0x31b/0x4b0 [ 215.448649][ C0] ? ip_mr_output+0xbb1/0xe70 [ 215.453356][ C0] ? ip_mr_output+0xbb1/0xe70 [ 215.458044][ C0] report_bug+0x2be/0x4f0 [ 215.462393][ C0] ? ip_mr_output+0xbb1/0xe70 [ 215.467096][ C0] ? ip_mr_output+0xbb1/0xe70 [ 215.471811][ C0] ? ip_mr_output+0xbb3/0xe70 [ 215.476517][ C0] handle_bug+0x84/0x160 [ 215.480784][ C0] exc_invalid_op+0x1a/0x50 [ 215.485301][ C0] asm_exc_invalid_op+0x1a/0x20 [ 215.490161][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 215.495462][ C0] Code: df e9 63 f6 ff ff e8 2e 16 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 7a 0b 4c ff e9 45 f6 ff ff e8 10 16 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 02 16 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 215.515076][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 215.521171][ C0] RAX: ffffffff89fa4640 RBX: ffff888077b8e500 RCX: ffff88803d8fbc00 [ 215.529163][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.537152][ C0] RBP: ffffc90000007a10 R08: ffff88803d8fbc00 R09: 0000000000000004 [ 215.545135][ C0] R10: 0000000000000003 R11: ffffffff89fa3a90 R12: 0000000000000010 [ 215.553117][ C0] R13: dffffc0000000000 R14: ffff88803d1ec900 R15: 0000000000000000 [ 215.561104][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 215.566147][ C0] ? ip_mr_output+0xbb0/0xe70 [ 215.570841][ C0] ? __pfx_dst_output+0x10/0x10 [ 215.575723][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 215.581105][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 215.587179][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 215.592215][ C0] ? skb_dst+0x4f/0xd0 [ 215.596302][ C0] ? dst_output+0x177/0x1c0 [ 215.600819][ C0] igmp_send_report+0x89e/0xdb0 [ 215.605717][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 215.611101][ C0] ? igmp_start_timer+0x211/0x2b0 [ 215.616157][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 215.621363][ C0] igmp_timer_expire+0x204/0x510 [ 215.626330][ C0] call_timer_fn+0x17e/0x5f0 [ 215.630937][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 215.636407][ C0] ? call_timer_fn+0xbe/0x5f0 [ 215.641095][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 215.646227][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.651438][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.656639][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 215.662120][ C0] __run_timer_base+0x61a/0x860 [ 215.666995][ C0] ? ktime_get+0x3e/0x1f0 [ 215.671340][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 215.676720][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 215.682981][ C0] run_timer_softirq+0xb7/0x180 [ 215.687850][ C0] handle_softirqs+0x286/0x870 [ 215.692630][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 215.697453][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 215.702761][ C0] __irq_exit_rcu+0xca/0x1f0 [ 215.707364][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 215.712584][ C0] irq_exit_rcu+0x9/0x30 [ 215.716838][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 215.722487][ C0] [ 215.725428][ C0] [ 215.728363][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.734351][ C0] RIP: 0010:lock_is_held_type+0x137/0x190 [ 215.740074][ C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 89 93 36 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 215.759719][ C0] RSP: 0018:ffffc90003377ad8 EFLAGS: 00000206 [ 215.765795][ C0] RAX: 7b91bdf9d9929600 RBX: 0000000000000000 RCX: 7b91bdf9d9929600 [ 215.773783][ C0] RDX: 0000000000000000 RSI: ffffffff8db71adc RDI: ffffffff8be28b80 [ 215.781771][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff820c5120 [ 215.789759][ C0] R10: dffffc0000000000 R11: ffffed100f49f00d R12: 0000000000000246 [ 215.797749][ C0] R13: ffff88803d8fbc00 R14: ffffffff8e13ee60 R15: 0000000000000000 [ 215.805745][ C0] ? __might_fault+0xb0/0x130 [ 215.810453][ C0] __might_resched+0xf5/0x610 [ 215.815152][ C0] ? __might_fault+0xb0/0x130 [ 215.819832][ C0] ? __pfx___might_resched+0x10/0x10 [ 215.825144][ C0] ? __might_fault+0xb0/0x130 [ 215.829835][ C0] do_recvmmsg+0x4d9/0x770 [ 215.834267][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 215.839231][ C0] ? __pfx_do_futex+0x10/0x10 [ 215.843930][ C0] __x64_sys_recvmmsg+0x190/0x240 [ 215.849018][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 215.854596][ C0] ? rcu_is_watching+0x15/0xb0 [ 215.859413][ C0] ? do_syscall_64+0xbe/0x3b0 [ 215.864122][ C0] do_syscall_64+0xfa/0x3b0 [ 215.868657][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.873885][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.879986][ C0] ? clear_bhb_loop+0x60/0xb0 [ 215.884696][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.890612][ C0] RIP: 0033:0x7effa858e929 [ 215.895052][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.914689][ C0] RSP: 002b:00007effa93a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 215.923135][ C0] RAX: ffffffffffffffda RBX: 00007effa87b5fa0 RCX: 00007effa858e929 [ 215.931125][ C0] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 215.939118][ C0] RBP: 00007effa8610b39 R08: 0000000000000000 R09: 0000000000000000 [ 215.947100][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.955078][ C0] R13: 0000000000000000 R14: 00007effa87b5fa0 R15: 00007ffde3658428 [ 215.963073][ C0] [ 215.966447][ C0] Kernel Offset: disabled [ 215.970778][ C0] Rebooting in 86400 seconds..