last executing test programs: 1.6391069s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$notify(0xffffffffffffffff, 0x402, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000050000000200000000", 0x1a1}], 0x1) 1.603340565s ago: executing program 2 (id=3): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000000c0000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000001000000000240b182e9936299000000000000000000000000000000ffffffff010000000b00000020000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000020080000000000001404000000000000000000000a00000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000c06a330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000040000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de1f8f00000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a050000000000000000000000000000000000000000000000000000000000002f470e43ba7aa62a00000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c12554000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e61bf829de3481b50000000000000000000000000000000000008c7f8f1b44f000000000feffffff000000000000000000100000000000000000f4ff00000000000000000000000000e8b5520a0cd4af00000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000e9bfffff0000000000000000000000000000000000000000000000ffffffffffffffff0000000000200000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000f34700000000000000000000000000000000000000000000000000000000000000dbffd4d57f898f20b15a00000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e851000000000000000000000000000000000000000000000000006f670000001100000000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a54cc58ff5bc83d5e4066c770000000000000000000000004000"/2448]}, 0xa08) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) accept4(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000200)=0x80, 0x800) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000400000214000700fc0200000000000000000000000000000400120008000100", @ANYRES32=r5], 0x6c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket(0x2, 0x1, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000000c0000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000001000000000240b182e9936299000000000000000000000000000000ffffffff010000000b00000020000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000020080000000000001404000000000000000000000a00000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000c06a330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000040000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de1f8f00000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a050000000000000000000000000000000000000000000000000000000000002f470e43ba7aa62a00000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c12554000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e61bf829de3481b50000000000000000000000000000000000008c7f8f1b44f000000000feffffff000000000000000000100000000000000000f4ff00000000000000000000000000e8b5520a0cd4af00000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000e9bfffff0000000000000000000000000000000000000000000000ffffffffffffffff0000000000200000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000f34700000000000000000000000000000000000000000000000000000000000000dbffd4d57f898f20b15a00000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e851000000000000000000000000000000000000000000000000006f670000001100000000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a54cc58ff5bc83d5e4066c770000000000000000000000004000"/2448]}, 0xa08) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) (async) accept4(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000200)=0x80, 0x800) (async) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800e00010069703665727370616e00000038000280140006002001000000000000000000000400000214000700fc0200000000000000000000000000000400120008000100", @ANYRES32=r5], 0x6c}}, 0x0) (async) 774.192753ms ago: executing program 2 (id=6): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af0ff000000007ba100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8ff00000000bd000000000000000700000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r1, r0, 0x0, r0}, 0x10) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0x103801, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x1, [{0xe, 0x8, 0x100}]}, @float={0x2, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30]}}, &(0x7f00000000c0)=""/246, 0x42, 0xf6, 0x1, 0x3, 0x10000, @value=r2}, 0x28) 762.665002ms ago: executing program 0 (id=1): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e40)=0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1d9) recvmmsg(0xffffffffffffffff, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x7f000000, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) 582.872408ms ago: executing program 1 (id=7): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x151000, 0x0) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00010500020007000800aa0137495ee46960100451b5379625cc9b7efcfb1e0c7d9d3de0bab06bb11943ba5083ec2f774f03b7c669195a30c55c190b7ece097b25401e7b4c7d27adfb5f4fefa7718cf2ed7ae72c46ddfa2e04f7"], 0x2d) r4 = memfd_create(&(0x7f0000000e80)='prodM\xb0\xea\a\x06\xbe\xaeJ:]\xbb\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\xae\x00\x00\x00\x00\x00\xff\x04\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5U\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262-\x00\x00\x00\x00\xc8X\xdaNz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x00\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[R\xc36b\xa2]\xed\xe8\xb0\xfa\"\xa2\xd27)\xd5yQ\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x99\xc5{&\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\x061] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x00P\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8fC\x91W\xadi\x00\xf2k\xd5v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x1a\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\xf0V\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\xf6]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1n 1\x8d \xc1\xaf\x19\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16\x00\x00\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xd2\a\aR\xba\xae-q\xe0\xe5a\xdd7\xb8\x1b\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xf2\xb5K\x03\x85\x92k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00KT\"0\x16=\x10\xd3\x9a\xf0\xb7\x00\x00\x00\x00\x00\x00\x00UXZ\xf4\xd1+\aO\xa7E\xee-=U\xa7\xa4D\xf9<]v\xe4~-o=\x04\xc0\xabs\x99\xc0\x96\xfe\"\x88\xf8S\x8eG\x0f\xfec\xd6\n\x8cN6\r\xbf[\f\xa3\f\x80\x99\x1f\xa1\xcd\xcd\x81\xe7\x97\xec\xa6\x14l[$qpG\xff\x93\xf6\x18\xf8\xdfy\x98\n/\x18S%\x02;\x13L\xc7A\xfb\xd6\x9c\xe2\xe4,\xdd\xf9E\xb8\xe5c\xc3\n\x97^b\xddL\xb7\xcf\x11\xfe\xa1\xd6\x9c\x1a\x103]/\xd8\xcc\xc9\xee2\x9aaI<\xfd\x80\x17\x1b\xe3IJ\x9f\xfa8\xe9\x99E\xa1\x10\x10FVj0\xdc\xbd\xd4@e.\xe6l\xda)\\\xcen\xbab\x9aJ\x802\xfb\xac@\x1b\x9d!\x1e\x95\xcd@\xda\xb2!\x90\x9b\xeay\xcd#\xae\x9a\xc2\r\xee\x0e\x13\x1fh', 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000016, 0x11, r4, 0x80000) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000000c0), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=ANY=[@ANYBLOB="6000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b00010069703667726500002800028006000300020c"], 0x60}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0x4}}, {0x8}, {0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r6 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000)) connect$netrom(r6, &(0x7f00000001c0)={{0x3, @null, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @default, @default]}, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000180)={{&(0x7f000041a000/0x4000)=nil, 0x4000}}) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x40c6c0, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000340)=0x7) 534.90393ms ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file3\x00', 0x102) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001480)}], 0x4) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = memfd_secret(0x80000) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setgid(0x0) r3 = getegid() stat(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000000700)='./file1\x00', 0x400, 0x800, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000000840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r8) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040001000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="5609000000011631", @ANYRES32=r8, @ANYBLOB="10000700000000002000020000000000"], 0x64, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa07aaaaaaaaaaaa000800450000200000000000889078000000000000000000000000000c907801000000"], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) r12 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$sndseq(r12, &(0x7f0000000040)=[{0x0, 0xf7, 0x58, 0x2e, @time={0x3222, 0xa}, {0xfe, 0xfe}, {0x1, 0x81}, @result={0xfffffffe}}], 0x1c) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 426.627473ms ago: executing program 2 (id=8): r0 = memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x0) fallocate(r0, 0x0, 0x4000, 0x400001) 362.924926ms ago: executing program 0 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x7) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x3, 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r4, 0x2000002, 0x20010, r0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2284, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0xfffffffa, 0x19e, 0xc, 0x8, 0x2, 0xff, 0x7f, 0x3, 0x5, 0xff, 0x2, 0xe, 0x5}, {0x3, 0x6, 0x6, 0xf, 0x0, 0x7, 0x7, 0x4, 0x4, 0x0, 0x99, 0x9, 0x5}, {0x80, 0x4, 0x0, 0x3, 0x8, 0x5, 0x2, 0x5, 0x7, 0x12, 0xf8, 0x95, 0x1}], 0x6ab7}) read$snddsp(r1, &(0x7f0000000740)=""/56, 0x38) syz_socket_connect_nvme_tcp() sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004801}, 0x4000000) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000480)={0x2, 0x0, {&(0x7f0000000000)=""/48, 0x30, &(0x7f0000000780)=""/4096, 0x1, 0x2}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000002740)={&(0x7f00000003c0)}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x43, 0x0, 0x3}, 0x10) 291.982784ms ago: executing program 4 (id=5): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="01000100000000000000010000000400048008000200010000000800010000000000800008801400076508000600fd00000008000500020000000c000780080006008c0000"], 0xc4}, 0x1, 0x0, 0x0, 0x24000804}, 0x20044414) 257.773728ms ago: executing program 3 (id=10): waitid(0x0, 0x0, &(0x7f0000000280), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000f6ff000000000000000000000200000a64000000060a0b04000008000000000002000004240004802037e447d500018007000100637411990b5456abd8000014000280080001400000000108000240000000021ddc7dabfbdbbf2e8d6e57281808000b40000000032400058008000140000000564be04c786cf18d62080001400000003b0a00000000000002140000"], 0x8c}}, 0x8001) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x1c, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000280)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r7) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x21, @remote, 'geneve0\x00'}}, 0x1e) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="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", 0x103}], 0x1}, 0x0) 19.033981ms ago: executing program 0 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080000000000000000006700000008000300eebc0bba8008b06a14176208f6e01c92083d2ce3e107022296e06bfc858a0af87e4941c56dd0b20a30029b4430c86fb23553f9d153e0476d1931e5f490338c4795421fdd1e388cb6000000000000000020000000000000d68b6a15cb881de42e14163e38b2acd5a70d45d22787a5b31f10f1ff2b5b06b3a2b9ee20fabf6da5cbee0ee5be8a892f2218dfd1ef2784294e734a1fa0d13b06778571cf97c1d744098533c19502b209000000ec49", @ANYRES32=r3, @ANYBLOB="0800c30074130000"], 0x24}}, 0x0) 0s ago: executing program 2 (id=12): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 57.468550][ T5807] cgroup: Unknown subsys name 'net' [ 57.576790][ T5807] cgroup: Unknown subsys name 'cpuset' [ 57.586427][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.873796][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.125620][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.131801][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.141353][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.149298][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.150042][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.157975][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.166715][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.172441][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.177521][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.186291][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.193645][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.199820][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.212670][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.221804][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.222957][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.237076][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.244400][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.252646][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.253084][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.266337][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.267201][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.274134][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.283726][ T5831] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.294304][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.295425][ T5831] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.308801][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.319288][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.334185][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.341406][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.349004][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.576094][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 61.758887][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.768198][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.776638][ T5817] bridge_slave_0: entered allmulticast mode [ 61.784121][ T5817] bridge_slave_0: entered promiscuous mode [ 61.836985][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.844654][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.851787][ T5817] bridge_slave_1: entered allmulticast mode [ 61.859159][ T5817] bridge_slave_1: entered promiscuous mode [ 61.888481][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 61.923014][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 61.949577][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.979275][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.017386][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 62.056697][ T5817] team0: Port device team_slave_0 added [ 62.062640][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 62.104065][ T5817] team0: Port device team_slave_1 added [ 62.138518][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.145876][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.153008][ T5821] bridge_slave_0: entered allmulticast mode [ 62.160174][ T5821] bridge_slave_0: entered promiscuous mode [ 62.181068][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.188320][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.198636][ T5818] bridge_slave_0: entered allmulticast mode [ 62.205625][ T5818] bridge_slave_0: entered promiscuous mode [ 62.216926][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.224310][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.231490][ T5821] bridge_slave_1: entered allmulticast mode [ 62.241945][ T5821] bridge_slave_1: entered promiscuous mode [ 62.258109][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.265184][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.291267][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.308402][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.315961][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.323105][ T5818] bridge_slave_1: entered allmulticast mode [ 62.330179][ T5818] bridge_slave_1: entered promiscuous mode [ 62.355725][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.362718][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.388772][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.431299][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.451470][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.460807][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.471064][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.479841][ T5830] bridge_slave_0: entered allmulticast mode [ 62.487069][ T5830] bridge_slave_0: entered promiscuous mode [ 62.495258][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.502370][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.509700][ T5830] bridge_slave_1: entered allmulticast mode [ 62.516714][ T5830] bridge_slave_1: entered promiscuous mode [ 62.526404][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.552583][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.590942][ T5821] team0: Port device team_slave_0 added [ 62.632179][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.644177][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.655777][ T5821] team0: Port device team_slave_1 added [ 62.661652][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.669253][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.676568][ T5827] bridge_slave_0: entered allmulticast mode [ 62.683120][ T5827] bridge_slave_0: entered promiscuous mode [ 62.691425][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.698587][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.705821][ T5827] bridge_slave_1: entered allmulticast mode [ 62.712358][ T5827] bridge_slave_1: entered promiscuous mode [ 62.735300][ T5818] team0: Port device team_slave_0 added [ 62.746493][ T5817] hsr_slave_0: entered promiscuous mode [ 62.753091][ T5817] hsr_slave_1: entered promiscuous mode [ 62.785416][ T5818] team0: Port device team_slave_1 added [ 62.802857][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.848568][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.868754][ T5830] team0: Port device team_slave_0 added [ 62.878581][ T5830] team0: Port device team_slave_1 added [ 62.885512][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.892516][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.918711][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.939719][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.946823][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.972979][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.986121][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.993106][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.019157][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.046920][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.054265][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.080692][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.107620][ T5827] team0: Port device team_slave_0 added [ 63.118605][ T5827] team0: Port device team_slave_1 added [ 63.131937][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.139104][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.165488][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.177900][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.188269][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.214515][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.299888][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.307299][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.333888][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.362727][ T5818] hsr_slave_0: entered promiscuous mode [ 63.369287][ T5818] hsr_slave_1: entered promiscuous mode [ 63.376836][ T5832] Bluetooth: hci1: command tx timeout [ 63.382413][ T54] Bluetooth: hci2: command tx timeout [ 63.382423][ T5831] Bluetooth: hci0: command tx timeout [ 63.394726][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.402520][ T5818] Cannot create hsr debugfs directory [ 63.414692][ T5821] hsr_slave_0: entered promiscuous mode [ 63.420966][ T5821] hsr_slave_1: entered promiscuous mode [ 63.427275][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.434927][ T5821] Cannot create hsr debugfs directory [ 63.440994][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.448191][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.454185][ T54] Bluetooth: hci3: command tx timeout [ 63.480080][ T54] Bluetooth: hci4: command tx timeout [ 63.480330][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.501777][ T5830] hsr_slave_0: entered promiscuous mode [ 63.508438][ T5830] hsr_slave_1: entered promiscuous mode [ 63.515074][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.522658][ T5830] Cannot create hsr debugfs directory [ 63.659319][ T5827] hsr_slave_0: entered promiscuous mode [ 63.667548][ T5827] hsr_slave_1: entered promiscuous mode [ 63.674163][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.681729][ T5827] Cannot create hsr debugfs directory [ 63.866838][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.891449][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.921315][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.943747][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.995955][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.009076][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.036795][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.045804][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.095629][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.105943][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.128554][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.138039][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.218308][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.229192][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.240150][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.250173][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.324158][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.348637][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.368826][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.378113][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.446674][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.457953][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.518445][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.539780][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.552418][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.579692][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.611322][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.618652][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.630897][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.638034][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.652049][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.659166][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.671443][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.704361][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.711498][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.720881][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.728016][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.737809][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.744933][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.779818][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.827024][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.848169][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.855270][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.887744][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.894874][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.921383][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.940981][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.980001][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.987180][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.038255][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.046034][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.136209][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.160235][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.215908][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.243131][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.296005][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.344601][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.444519][ T54] Bluetooth: hci1: command tx timeout [ 65.445824][ T5832] Bluetooth: hci0: command tx timeout [ 65.454938][ T54] Bluetooth: hci2: command tx timeout [ 65.489877][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.510866][ T5817] veth0_vlan: entered promiscuous mode [ 65.526061][ T5818] veth0_vlan: entered promiscuous mode [ 65.528783][ T54] Bluetooth: hci4: command tx timeout [ 65.531566][ T5832] Bluetooth: hci3: command tx timeout [ 65.572576][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.595892][ T5817] veth1_vlan: entered promiscuous mode [ 65.612779][ T5818] veth1_vlan: entered promiscuous mode [ 65.669675][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.738086][ T5827] veth0_vlan: entered promiscuous mode [ 65.745230][ T5817] veth0_macvtap: entered promiscuous mode [ 65.774841][ T5827] veth1_vlan: entered promiscuous mode [ 65.789411][ T5818] veth0_macvtap: entered promiscuous mode [ 65.800631][ T5817] veth1_macvtap: entered promiscuous mode [ 65.830383][ T5818] veth1_macvtap: entered promiscuous mode [ 65.857377][ T5821] veth0_vlan: entered promiscuous mode [ 65.876994][ T5821] veth1_vlan: entered promiscuous mode [ 65.889948][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.927203][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.938631][ T5827] veth0_macvtap: entered promiscuous mode [ 65.948511][ T5827] veth1_macvtap: entered promiscuous mode [ 65.956689][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.967884][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.979401][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.992309][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.001835][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.012470][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.021611][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.048366][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.062633][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.074595][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.110941][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.120780][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.130276][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.140520][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.157466][ T5830] veth0_vlan: entered promiscuous mode [ 66.173118][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.185780][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.197812][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.209345][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.220126][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.233284][ T5821] veth0_macvtap: entered promiscuous mode [ 66.256289][ T5821] veth1_macvtap: entered promiscuous mode [ 66.270963][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.281816][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.291815][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.302362][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.314358][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.349313][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.358484][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.368083][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.377179][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.408626][ T5830] veth1_vlan: entered promiscuous mode [ 66.420982][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.422239][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.442449][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.450145][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.452805][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.470424][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.481930][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.493734][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.505217][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.535054][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.545890][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.556226][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.568315][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.578386][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.588892][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.599977][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.657154][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.666986][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.676465][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.685305][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.701420][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.710461][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.730309][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.745975][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.800018][ T5830] veth0_macvtap: entered promiscuous mode [ 66.820863][ T5830] veth1_macvtap: entered promiscuous mode [ 66.842145][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.854568][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.867318][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.878050][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.888928][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.893155][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.899902][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.932923][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.945080][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.955076][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.965804][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.977473][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.026062][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.040021][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.058098][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.062950][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.076084][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.086617][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.096487][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.107062][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.117583][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.128408][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.139403][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.150135][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.159167][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.178512][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.187355][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.336317][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.339938][ T723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.357420][ T723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.433602][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.557249][ T5832] Bluetooth: hci0: command tx timeout [ 67.565921][ T5832] Bluetooth: hci2: command tx timeout [ 67.572085][ T5832] Bluetooth: hci1: command tx timeout [ 67.609402][ T5832] Bluetooth: hci3: command tx timeout [ 67.617825][ T5832] Bluetooth: hci4: command tx timeout [ 67.994852][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.014770][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.027037][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.068790][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.220569][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.232204][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.416061][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 68.670991][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.698947][ T5928] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5'. [ 68.777792][ C1] ------------[ cut here ]------------ [ 68.783478][ C1] refcount_t: underflow; use-after-free. [ 68.789592][ C1] WARNING: CPU: 1 PID: 5930 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 68.799119][ C1] Modules linked in: [ 68.803104][ C1] CPU: 1 UID: 0 PID: 5930 Comm: syz.3.10 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 68.813668][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 68.823814][ C1] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 68.830022][ C1] Code: a0 4b 5e 8c e8 c7 43 9e fc 90 0f 0b 90 90 eb 99 e8 fb 9c dd fc c6 05 c0 87 40 0b 01 90 48 c7 c7 00 4c 5e 8c e8 a7 43 9e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 d8 9c dd fc c6 05 9a 87 40 0b 01 90 [ 68.849711][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010246 [ 68.855856][ C1] RAX: 3a3c0809ac1fd800 RBX: ffff8880119ad9a4 RCX: ffff88803068da00 [ 68.863891][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.871898][ C1] RBP: 0000000000000003 R08: ffffffff81601b22 R09: 1ffff110170e519a [ 68.879940][ C1] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880227f1068 [ 68.887989][ C1] R13: ffff8880119ad9a4 R14: 1ffff110044fe218 R15: ffff8880227f1000 [ 68.896036][ C1] FS: 00007f8a2ed106c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 68.905051][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.911678][ C1] CR2: 000000002000b038 CR3: 0000000030d4e000 CR4: 00000000003526f0 [ 68.919720][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.927784][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.935802][ C1] Call Trace: [ 68.939079][ C1] [ 68.941919][ C1] ? __warn+0x165/0x4d0 [ 68.946139][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 68.951726][ C1] ? report_bug+0x2b3/0x500 [ 68.956318][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 68.957563][ T5935] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 68.961892][ C1] ? handle_bug+0x60/0x90 [ 68.961933][ C1] ? exc_invalid_op+0x1a/0x50 [ 68.978702][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 68.983780][ C1] ? __warn_printk+0x292/0x360 [ 68.988550][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 68.994164][ C1] j1939_session_put+0x1ed/0x440 [ 68.999140][ C1] j1939_tp_recv+0x7fe/0x1050 [ 69.003877][ C1] j1939_can_recv+0x732/0xb20 [ 69.008583][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 69.013847][ C1] ? __lock_acquire+0x1397/0x2100 [ 69.018914][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 69.024179][ C1] can_rcv_filter+0x359/0x7f0 [ 69.028903][ C1] can_receive+0x327/0x480 [ 69.033402][ C1] ? can_receive+0x1c9/0x480 [ 69.038037][ C1] can_rcv+0x144/0x260 [ 69.042140][ C1] ? __pfx_can_rcv+0x10/0x10 [ 69.046827][ C1] __netif_receive_skb+0x2e0/0x650 [ 69.051985][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 69.057101][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 69.062783][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.068860][ C1] ? __pfx_lock_release+0x10/0x10 [ 69.073961][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 69.079125][ C1] process_backlog+0x662/0x15b0 [ 69.084089][ C1] ? process_backlog+0x33b/0x15b0 [ 69.089170][ C1] ? __pfx_process_backlog+0x10/0x10 [ 69.094554][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.100580][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.107003][ C1] __napi_poll+0xcb/0x490 [ 69.111388][ C1] net_rx_action+0x89b/0x1240 [ 69.116180][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 69.121347][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.127449][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.133855][ C1] handle_softirqs+0x2d4/0x9b0 [ 69.138675][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 69.143538][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 69.148867][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 69.154177][ C1] __irq_exit_rcu+0xf7/0x220 [ 69.158825][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 69.164137][ C1] irq_exit_rcu+0x9/0x30 [ 69.168429][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 69.174167][ C1] [ 69.177137][ C1] [ 69.180098][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.186176][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 69.192731][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 5e 9e 3c f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 f4 a2 f5 65 8b 05 f4 44 39 74 85 c0 74 43 48 c7 04 24 0e 36 [ 69.212431][ C1] RSP: 0018:ffffc9000455f620 EFLAGS: 00000206 [ 69.218580][ C1] RAX: 3a3c0809ac1fd800 RBX: 1ffff920008abec8 RCX: ffffffff817b241a [ 69.226641][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9680 RDI: 0000000000000001 [ 69.234686][ C1] RBP: ffffc9000455f6b0 R08: ffffffff94282997 R09: 1ffffffff2850532 [ 69.242700][ C1] R10: dffffc0000000000 R11: fffffbfff2850533 R12: dffffc0000000000 [ 69.251276][ C1] R13: 1ffff920008abec4 R14: ffffc9000455f640 R15: 0000000000000246 [ 69.259356][ C1] ? mark_lock+0x9a/0x360 [ 69.263797][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.270229][ C1] j1939_sk_sendmsg+0xe01/0x14c0 [ 69.275293][ C1] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 69.281089][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 69.286573][ C1] ? __import_iovec+0x590/0x870 [ 69.291483][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 69.296942][ C1] __sock_sendmsg+0x221/0x270 [ 69.301678][ C1] ____sys_sendmsg+0x52a/0x7e0 [ 69.306550][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.311889][ C1] ? __sys_sendmmsg+0x392/0x720 [ 69.316859][ C1] ? __might_fault+0xaa/0x120 [ 69.321592][ C1] __sys_sendmmsg+0x36a/0x720 [ 69.326394][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 69.331668][ C1] ? wake_up_q+0xdc/0x120 [ 69.336111][ C1] ? futex_wait+0x285/0x360 [ 69.340660][ C1] ? __pfx_futex_wait+0x10/0x10 [ 69.345623][ C1] ? j1939_sk_connect+0x442/0x5c0 [ 69.350684][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 69.356509][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 69.361767][ C1] ? do_futex+0x33b/0x560 [ 69.366215][ C1] ? __sys_connect+0x119/0x2d0 [ 69.371031][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.377121][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.383516][ C1] ? do_syscall_64+0x100/0x230 [ 69.388331][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 69.393295][ C1] do_syscall_64+0xf3/0x230 [ 69.397855][ C1] ? clear_bhb_loop+0x35/0x90 [ 69.402594][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.408605][ C1] RIP: 0033:0x7f8a2df7ff19 [ 69.413072][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.432779][ C1] RSP: 002b:00007f8a2ed10058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.441271][ C1] RAX: ffffffffffffffda RBX: 00007f8a2e145fa0 RCX: 00007f8a2df7ff19 [ 69.449349][ C1] RDX: 03ffffffffffff06 RSI: 00000000200038c0 RDI: 0000000000000007 [ 69.457393][ C1] RBP: 00007f8a2dff3986 R08: 0000000000000000 R09: 0000000000000000 [ 69.465459][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.473499][ C1] R13: 0000000000000000 R14: 00007f8a2e145fa0 R15: 00007ffda73ee208 [ 69.481532][ C1] [ 69.484627][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.491937][ C1] CPU: 1 UID: 0 PID: 5930 Comm: syz.3.10 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 69.502469][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.512549][ C1] Call Trace: [ 69.515855][ C1] [ 69.518728][ C1] dump_stack_lvl+0x241/0x360 [ 69.523446][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.528675][ C1] ? __pfx__printk+0x10/0x10 [ 69.533300][ C1] ? _printk+0xd5/0x120 [ 69.537512][ C1] ? __init_begin+0x41000/0x41000 [ 69.542564][ C1] ? vscnprintf+0x5d/0x90 [ 69.546926][ C1] panic+0x349/0x880 [ 69.550852][ C1] ? __warn+0x174/0x4d0 [ 69.555035][ C1] ? __pfx_panic+0x10/0x10 [ 69.559501][ C1] __warn+0x344/0x4d0 [ 69.563506][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 69.569074][ C1] report_bug+0x2b3/0x500 [ 69.573429][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 69.579010][ C1] handle_bug+0x60/0x90 [ 69.583197][ C1] exc_invalid_op+0x1a/0x50 [ 69.587727][ C1] asm_exc_invalid_op+0x1a/0x20 [ 69.592608][ C1] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 69.598793][ C1] Code: a0 4b 5e 8c e8 c7 43 9e fc 90 0f 0b 90 90 eb 99 e8 fb 9c dd fc c6 05 c0 87 40 0b 01 90 48 c7 c7 00 4c 5e 8c e8 a7 43 9e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 d8 9c dd fc c6 05 9a 87 40 0b 01 90 [ 69.618429][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010246 [ 69.624533][ C1] RAX: 3a3c0809ac1fd800 RBX: ffff8880119ad9a4 RCX: ffff88803068da00 [ 69.632533][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.640527][ C1] RBP: 0000000000000003 R08: ffffffff81601b22 R09: 1ffff110170e519a [ 69.648530][ C1] R10: dffffc0000000000 R11: ffffed10170e519b R12: ffff8880227f1068 [ 69.656532][ C1] R13: ffff8880119ad9a4 R14: 1ffff110044fe218 R15: ffff8880227f1000 [ 69.664538][ C1] ? __warn_printk+0x292/0x360 [ 69.669350][ C1] j1939_session_put+0x1ed/0x440 [ 69.674340][ C1] j1939_tp_recv+0x7fe/0x1050 [ 69.679063][ C1] j1939_can_recv+0x732/0xb20 [ 69.683775][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 69.689008][ C1] ? __lock_acquire+0x1397/0x2100 [ 69.694064][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 69.699291][ C1] can_rcv_filter+0x359/0x7f0 [ 69.704005][ C1] can_receive+0x327/0x480 [ 69.708445][ C1] ? can_receive+0x1c9/0x480 [ 69.713055][ C1] can_rcv+0x144/0x260 [ 69.717147][ C1] ? __pfx_can_rcv+0x10/0x10 [ 69.721761][ C1] __netif_receive_skb+0x2e0/0x650 [ 69.726903][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 69.731950][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 69.737607][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.743627][ C1] ? __pfx_lock_release+0x10/0x10 [ 69.748682][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 69.753836][ C1] process_backlog+0x662/0x15b0 [ 69.758732][ C1] ? process_backlog+0x33b/0x15b0 [ 69.763795][ C1] ? __pfx_process_backlog+0x10/0x10 [ 69.769109][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.775124][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.781484][ C1] __napi_poll+0xcb/0x490 [ 69.785851][ C1] net_rx_action+0x89b/0x1240 [ 69.790586][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 69.795727][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.801749][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.808123][ C1] handle_softirqs+0x2d4/0x9b0 [ 69.812929][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 69.817730][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 69.823048][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 69.828273][ C1] __irq_exit_rcu+0xf7/0x220 [ 69.832895][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 69.838131][ C1] irq_exit_rcu+0x9/0x30 [ 69.842397][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 69.848058][ C1] [ 69.851003][ C1] [ 69.853948][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 69.859973][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 69.866505][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 5e 9e 3c f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 f4 a2 f5 65 8b 05 f4 44 39 74 85 c0 74 43 48 c7 04 24 0e 36 [ 69.886146][ C1] RSP: 0018:ffffc9000455f620 EFLAGS: 00000206 [ 69.892246][ C1] RAX: 3a3c0809ac1fd800 RBX: 1ffff920008abec8 RCX: ffffffff817b241a [ 69.900249][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9680 RDI: 0000000000000001 [ 69.908250][ C1] RBP: ffffc9000455f6b0 R08: ffffffff94282997 R09: 1ffffffff2850532 [ 69.916248][ C1] R10: dffffc0000000000 R11: fffffbfff2850533 R12: dffffc0000000000 [ 69.924248][ C1] R13: 1ffff920008abec4 R14: ffffc9000455f640 R15: 0000000000000246 [ 69.932255][ C1] ? mark_lock+0x9a/0x360 [ 69.936626][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.942996][ C1] j1939_sk_sendmsg+0xe01/0x14c0 [ 69.947964][ C1] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 69.953730][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 69.959131][ C1] ? __import_iovec+0x590/0x870 [ 69.964026][ C1] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 69.969431][ C1] __sock_sendmsg+0x221/0x270 [ 69.974148][ C1] ____sys_sendmsg+0x52a/0x7e0 [ 69.978967][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.984296][ C1] ? __sys_sendmmsg+0x392/0x720 [ 69.989184][ C1] ? __might_fault+0xaa/0x120 [ 69.993898][ C1] __sys_sendmmsg+0x36a/0x720 [ 69.998616][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 70.003861][ C1] ? wake_up_q+0xdc/0x120 [ 70.008221][ C1] ? futex_wait+0x285/0x360 [ 70.012749][ C1] ? __pfx_futex_wait+0x10/0x10 [ 70.017629][ C1] ? j1939_sk_connect+0x442/0x5c0 [ 70.022686][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 70.028440][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 70.033685][ C1] ? do_futex+0x33b/0x560 [ 70.038066][ C1] ? __sys_connect+0x119/0x2d0 [ 70.042873][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.048893][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.055260][ C1] ? do_syscall_64+0x100/0x230 [ 70.060075][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 70.064967][ C1] do_syscall_64+0xf3/0x230 [ 70.069512][ C1] ? clear_bhb_loop+0x35/0x90 [ 70.074231][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.080175][ C1] RIP: 0033:0x7f8a2df7ff19 [ 70.084620][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.104259][ C1] RSP: 002b:00007f8a2ed10058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 70.112728][ C1] RAX: ffffffffffffffda RBX: 00007f8a2e145fa0 RCX: 00007f8a2df7ff19 [ 70.120744][ C1] RDX: 03ffffffffffff06 RSI: 00000000200038c0 RDI: 0000000000000007 [ 70.128756][ C1] RBP: 00007f8a2dff3986 R08: 0000000000000000 R09: 0000000000000000 [ 70.136766][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.144773][ C1] R13: 0000000000000000 R14: 00007f8a2e145fa0 R15: 00007ffda73ee208 [ 70.152796][ C1] [ 70.156110][ C1] Kernel Offset: disabled [ 70.160450][ C1] Rebooting in 86400 seconds..