last executing test programs: 9.683556154s ago: executing program 1 (id=367): recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/205, 0xcd, 0x20000002, &(0x7f0000000100)=@hci, 0x80) syz_80211_inject_frame(&(0x7f0000000200)=@broadcast, &(0x7f0000000340)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x204}, @initial, @device_a, @device_b, {0x8, 0x7}}, @random="5a0e3269ef10d89883c73a681f906df5132399625b45678683ecd90140d60631a2e1de82aea74420925b3ecc70362815ca4366631342d3968614157658997a0d49d2ccdb2c2a0199eac88a0a1894fb9fc9c539737569cd7e4a692fb61d23cc96c08a35e4d2e4d6dd"}, 0x80) 8.79256292s ago: executing program 1 (id=375): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xe) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000040)={'full', 0x20, 0xfd6, 0x20, 0xfffffffffffffff9}, 0xb) r5 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={r5, r6, r7}, 0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) socket(0x5, 0x6, 0xd655) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000004c0)={'netdevsim0\x00'}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, 0x0, 0x20004000) 8.355812474s ago: executing program 1 (id=379): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b080002"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x3) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e22, 0x5, @local, 0x2}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e1f, 0x4, @loopback, 0x2}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0xa8) close(r0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.636845232s ago: executing program 1 (id=388): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400090527bd7000fc045e3d23d7df25", @ANYRES32=r1, @ANYBLOB="08000400640101040800080000010000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x2, 0x60000000, 0x56}, {@remote, 0x4e26, 0x2000, 0x3, 0x8001, 0x4000001}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) r4 = socket(0x10, 0x803, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000080003000000000000000000", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @dev={0xac, 0x14, 0x14, 0x30}, 0xff, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x73, 0x2, 0xa}, 0x0, 0xc0, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x0, 0x3, 0x0, 0xe}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x9, 0x7ff, 0x5, 'netbios-ns\x00', 'syz1\x00', {0x1}}}}, {{@uncond, 0xec010000, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x1, 0x6, 0x4, 0x5, 0x8, 0x4], 0x0, 0x5}, {0x0, [0x1, 0x0, 0x2, 0x0, 0x3, 0x2], 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x0, 0x3, {{}, {@void, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001800db8d000000000000000002140000000000060000000008000600090000000900dc00153f0000"], 0x2c}}, 0x60800) 3.926019201s ago: executing program 1 (id=397): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = socket(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6020400) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x5761, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x1000000, 0x1, 0x1}]}]}, {0x0, [0x5f]}}, &(0x7f0000002580)=""/9, 0x33, 0x9, 0x1, 0x28f0c5d9}, 0x28) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x2c, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}, {[@fragment={0x2f, 0x0, 0xb, 0x0, 0x0, 0x5, 0x64}]}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 3.328938081s ago: executing program 0 (id=400): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="48a20708", @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf250100000044000280340001800800010004000000080001000200000008000100060000000800010007000000080001000600000008000100070000000c0001800800010005000000100002800c0001800800010005000000"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000008400000000000000ffff"], 0x18, 0x20000001}, 0x20008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3c}}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000040000fcffffef1000000008000600000000001800018014000200776c616e310000000000000000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) accept4$inet(r1, 0x0, 0x0, 0x800) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00a'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x67, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10}, 0xc) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x101, 0x0, 0xff, 0xc, 0xfffc, 0x5ea0}, 0x20) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)="17c8cfbfa43c7349fa92e45cf42fe5411fe043e0c8e1d985ef467b002616fbe9deb2660831dd9dcc0661150d12bcef90302a41b27fd08bba5d80b0f58cbc4bfd668666740483f3d9350e5ae2dc2db9d9ba78397778401c65553d1c826893248d3c55f6a8b3cdefd0c45fdc8326fe52271819df10ca31641fc8e1e8740ade1c69e99d2c12c1c39420e2645414d9c4fef55a51afb4f6c71247284bd974e3ae51f8a825029fedb9972acedaaf3fb8", 0xad}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000001) r12 = accept4$nfc_llcp(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3b, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x13, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r12}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.485505816s ago: executing program 4 (id=405): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40281, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r13 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r13, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) close(r13) (async) r14 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2600f64c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000400000008a2bba2edca9eb000"/24], 0x30}}, 0x0) 2.273096966s ago: executing program 3 (id=406): unshare(0x400) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @multicast1}, {0x2, 0x20, @empty}, 0x363, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) listen(r0, 0xfff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500000000000542898129ec2ad8182b93a2e100010006000000"], 0x54}}, 0x0) 2.127945619s ago: executing program 2 (id=407): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x10, 0x80}, 0x94) close(r2) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close(r4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x2000) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608304c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, 0x0, 0x0) (async) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000001c0)={0x5, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r9, &(0x7f0000000000)="436e91", 0x0}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800b18bbfcccb108c81bc61000000e000000111009078e00000f0b485a36ca19ad91739b702000102010000000000000000"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x10, &(0x7f0000000040)=ANY=[@ANYRES8=r8], 0x0, 0x40, 0xbe, &(0x7f0000000240)=""/190, 0x41000, 0x54, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x8, 0xff, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=[{0x2, 0x3, 0x4, 0x7}, {0x1, 0x1, 0xe, 0x7}, {0x0, 0x1, 0x80000001, 0xb}, {0x1, 0x3, 0xa, 0xc8acadbc0b5dcbd4}], 0x10, 0x8}, 0x94) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r10, 0x8937, 0x0) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000001086dd0000"], 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x8094) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 2.054983526s ago: executing program 3 (id=408): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0xac, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x52a10}, [@IFLA_AF_SPEC={0x78, 0x1a, 0x0, 0x1, [@AF_INET={0x74, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24}}, @AF_MPLS={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21, 0x0, 0x0, 0x5}, {0x8, 0x9, 0x0, 0x0, 0x7f}, {0x8, 0x9, 0x0, 0x0, 0x7fffffff}, {0x8, 0x1a, 0x0, 0x0, 0x8}, {0x1, 0xb, 0x0, 0x0, 0xfffffffc}, {0x8, 0x4, 0x0, 0x0, 0x159b}, {0x8, 0x20, 0x0, 0x0, 0xaa}]}}]}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20044851}, 0x4000000) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, &(0x7f0000000300)=0x8) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c00)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x6, 0x2, [@TCF_META_TYPE_VAR="cea5"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x20000000) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4], &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) socket$packet(0x11, 0x2, 0x300) 1.793615342s ago: executing program 0 (id=409): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0xeaa, 0x7ffe, &(0x7f00000003c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x22, 0x6, "f4311553"}]}}}}}}}}, 0x0) 1.691473787s ago: executing program 0 (id=410): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="0503e5fdd3fc14fda7004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) close(0x3) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000080)={{0xc00, 0xd15e}, 0x100, './file0\x00'}) bind$bt_sco(r2, &(0x7f0000005680)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000040)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x84, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}}, 0x0) 1.679618695s ago: executing program 4 (id=411): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfa, {0x2}}, 0x14}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 1.517107503s ago: executing program 2 (id=412): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000100)=0xdb, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async, rerun: 64) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000ad00)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000580)=""/83, 0x53}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/29, 0x1d}, {&(0x7f0000003600)=""/16, 0x10}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000003940)=""/18, 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003c00)=""/185, 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f000000ac00)=[{&(0x7f0000008bc0)=""/4096, 0x1000}, {0x0}], 0x2}}], 0x4, 0x40000020, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) (async) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) (async) sendmsg$rds(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002600)=[{0x0, 0x500}, {&(0x7f0000002500)=""/107, 0x6b}], 0x2}, 0x44884) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0x6, 0x0, 0xc, 0x9, 0x400, 0x3, 0x4, 0x36a58e47, 0xd, 0x2, 0x75}}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvmmsg(r6, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/108, 0x6c}], 0x1}, 0xd2c7}], 0x40000, 0x2, 0x0) (async, rerun: 32) r7 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffffff0000000000000000850000003600000085000000080000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r9, r8, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xd87, &(0x7f0000003d00)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100270086dd60e15c3d0d4d2f00fe8000000000000000000000000000330000000000000000000000000000000073000000000000000c20880b000000010c000800000086ddfa54121ace7fa5fc3cb036f62b669313ea83e72fd62fe8c23309464c8db9d365a98fbbab21a36832badba8f374fe192eee6d8ece024d61038def9d131e91fabca50809fd821c894084fb67ed44a3c22f83a47b0cde980188346eb4d5d9bbbf7ad7f62ed1740138a0b2667c03e1dd28b7ba5563cb7a74a0a2b2e56a6f784adf63e07cbbff48c254db470ddc213b0204ee7f7d41806d08e03b61f4d50833f3f75365e07f662a4ed1ded21587e24729280bf67a12b068f96a8bfcb141813cbe7555e9d2e1a87add6658589569011a21881a827a51cd9100652c7e11b43a81bedeea8c2da2cd063125f2d5b5babcb11682bcdc94aa94ddbdd1985aea19f4515c08bc63f650aa02478c1c14090616fd5866befc999339684997b3c4560d3b8ca8d7685de17de9735311d14ac3ff444f696ff93ff7f3cb1c77dc34fe68fefd02d3d5b24b13446fef0016eeed5b49bdbcbc3d21edaa689d65a8679d8f09284590dbbbeb6209711c75a421ec297adcefb627a3b82e72e24adb0e741d575e65662f4a7b20328d40c18bb1b41b9ef36df343f34feae893a2ce14d0522aeb8abf0361c72ffaadf0fd5a4b49f9e913940e48a026ae0bef21503f5ee1740246061081c06efa300058fe59f1aaaa7c457a23b4f1d1985a7d58b71cd44b0401e9cd0d8ff5f92aa7569681cfd366d9d6648c2e10d04374294dac830f0ef37729ed8e8180731b4972c5243edd402c0ec34ffe43ef29f63d4db605af93380b8f6fef5a50b3df7200712071cccdf92953851958dcdcc5e95c17af1ffa8b19391050974a42142ffa0d27cbdc0b412b06e09907e3df74bb3996307a6303b4298ac068b99e2649be722c3775ffc4361c0ba4a44ec6ff54ac24efa56f4a39484b5d6654f56fc66aa98a8d4c47ea1d03ee44412ff8ff51da6448796a8dc05c430fedb4410a3b078c843eb0f5f3f19125ea9e11d626527704a624f6b29e29fddcf34dd12d57c769e70460a186021ef2c54196822768c209f15fe826b486642479cd924d5c62afea9bffd03479d6395800df29264b0ec6ee4891fae8a9249717eed8b3a23acb3a956104c797da0acd12ae5de0d1493f7471c8aa9b2740edd8d5a7d7aab70a74907f7fae9f4b271f98ae29719f64e804585c6bd4678c82ec723f5ece5f56d197cd925e9ba3d3e84452ec01bd3f2be5055106f32bb2b7e9bb7670e9fffc9f3b8420d830d1c3f5f927ca0d05fcb6a6d572c0b424a2253028d008382d80b4be69fa5b028cfc848d4d87ec33ad9b5d2eb117f5b415d31983cc443bb53a7bca783f98f7fd54ad3afac57dd2304c4426dba29c53f8c448c15f9d9f5b8ff6cd523ca1e04e9808e0620f59bc10457280143afba733b71f0fa718cff8e468ced3b6b3da85cd29383cda085841c726af2a81aeeb4fd0a32e8f4ebb1d0d79076dd1315311d6cec9500fc1f4969a21f26337d19cb5ced9833587b3d286fb5b0d7190d2e2174f4ff63136a4cc2799eb31c6528127fd859744705146f9c980d7b5837475a14eb612e75164ff0fe2196e4112c4a736ba5ec5de63a20fcd2194c861fbf43468187386d27a0f75257c0efa53b1150dc0ee39c71001270f10acffd65e46118c259530c3739496a297519a9dd63256d339d8c1d738c775589c3d6c81784de6abadc6fb5909e310e1404ea8507ce1405c648023776cb88d446a7528818659d6048f9540c39db73675f9d59d6491ab0272f78a67dfa2452dcf087ea4f55891cfe7682f6b6e9d60a99cf460b916e8571215e6acdad7a78e80b54496189e0a359cdec3b926575d276c3f43af0f9e9ef20be20879634ed27074067393bf97fee5b009fef37d38c187962839d5a4ee204f0712fa4bda5940551a5c58528cbd64fe599fdd89ac6f33434186c0d003d8d795ac9bc1b014a55a794b4da9347a305c19c566e201f5f326e22a39ead7efa776bfdbc57ea78de54e7c1536b51254e3a12a5bcd17357eb847bea073373044ad00cfe676742aee8c2e48fc232483c3d9fba591aca4d0a65435d36b4940e08f5882358c1191b218024d3596c8cbfbc419397bdddf97e8a0fba83e7c833d923f3687830f7dda0255f5e73fdc679ecaddd6911160c1dbf1e66a6b9ec9ba1c8f6bd7a2f4eefe987f251f8371792d68399b6f5063218b547ea4d72b55c87b7ac26849ea4e5c78815f0c1f1ba5e9ccdde30a9e956c454783e8c8fc56b2d384602fa305097ff9ea04a6273458d02faef732b90dbdf405bbec7f1904917d3023b59a19b26c8e80078a2d5a509ec292fda3cd4a0a45a8c700ac977edef56a3a40e343566c9394ea611cb1db7829ad95fdbfe532fc180692bdddcdf683178520e25e4efe85aaf3ac83ca9cccc32999059a3cb707fa31754587c42b3cd5de93480b063ef105ecbf4cc767039684b7d7e3396ad5a9f154766af52a0539ea7c5caabb44d9f618cb4f899ecdd0b0b1fdd04d8c2f3d689e7d990f35130ac5c9897ee173b83867b408e8e59a9a9dc81f31e1f765f78810e42588a09cc494d92e039452ba7b1189175090bf850b78f61190b99a32f0a244efa2c153eb0ec223aad6521be2a17b479c4a97de3cd2ebc86a418481dc020425fc96d966621a6f14c594026d240eb149a164cf09eb68c657c192123275bacd3823e7096d44c0b184b7780b02d6acb26ce8fd518bcf7a10e6504f6971aed3a3da5452449ee95599e99c00bfd6cfd263d4534c1f188c09b82637d931e27834ea0c63840393890d770c00066b1fc66b408fdf8fdd100737d8d0974e2ae0f13f806f4e1eb2262fc95cf6bc66e110cd105a7c1fb02f3ce99cb7ea8866929360cd99bc9743261da0d34b89f7709e4384bd74ea696e630f84600197f31185a106f77c1262599a948a6b40f1fef29d2a384687e1931ab29a314edc972664995c1eb6402bc3932e70576dac739e4f0c3cd8c530d9cb73b23f2ded63b70aeab3b9b9ad7f51d9aeaa59ba2eb95534090a3f9e6b6edcc7f085d7ffe13f8e98360e2fd65daa219905855a5e6a0c9e83165a8ead37221722724482efa3cdd0a05d61d7e0b9b650015442980fb8420c3c0322edd1de77a8e3d34c2fa2907ccd416d306ece028c71914751db050c22bcb8b4095497134e9c79f2050b1eb667c8aac39968c293b54ad58756ddbc9eb5b7c502886ac43495ed03e3091442e0a4d51f6afcdfcfb34357942543ed1ab7933a010d8774f1afcc1f668befaae83da00eb3907638803cc46e1cdeb3ead3af9dd675875990a745e981ff22a662fc8d01c4a8d5d5d6950def78350a84a7c43788c613830f54a1f7ac58f6131ccd3d271d5d716e9d986b152dce566483e85237b32c4089cc2772f214345ac19344f357f7d88715017037277c52015090219c93bb6e922d89c9aae8e6c1722ac50b65d6601e2e3cb18d7e4f7b12b9e4c52f90b1c778a7f27844795b01539a99337e6bfa80ad4dc185fef0d503733fbd39ae4912a5416244db547c804b2dd561513d43cc63e34fcae77e0e654b7284826049cccf3b1f40b5c56f1575ff9d4726132657cd8405062f74363e670eea3f4781f369dbca41d5df40cbb2338796a3b43ecff6d2decb1433f0ffa9dcbb2fa46a1f78b7604aa0151eaf3ca4c0cba3fefaeeba21ac8035259f674bd028b437a0b148d62b5984bd2b8ae6a3e7ef890e2965476e447c21102da6166f223bb4439b1d30bda089b115cd0fb22155e000973cb974074854cea63ec52ad31fef04778ef4561daf3349f5cb243f39b6be08106db4ebc270782ae2d32b8aa77feb14a955a19a1c79114aff6d3a788952af2947856c23f21df468d2625aac32f1f9acdb0145f2edac2450b4b75800236a5fb2cb64c495399089a13d787173b2b127a1e4335abbafa7506ae6faaa5894b6317c6ee4c8054fed99a0db7ca28da529ccc501f28abf22de9ad9c108291d4515b510f2bd8b772483e6a80caf054d0fcd3ea419def48f43db198f96801d878713f8783422aa753d2f1f28f464af8772d0590ba12b54d8ab59d6634537ad092c7f6615b81aa9c58bb6d02ea328276ab6562a461e346d536125d8b7231eb41b081eee5a1bcf8ac819fb409864a64448325d1a4f1c75f0a347b7e52b442d9856d21808700399355752abb0f8f2cba0fbd446a6373e1af25bb0f9f83f3e65e27f2b9f2b430abc726ed843966fbb6e0ad3e49e807e7fac0954762ad020a85b2f811f24062d079c9489e644a3fdd7c9b8c8374ae7b2b31cf5e631cc4bf8336b023a1e9a97e8140ff8662186076e9922ab38d7e432443653aaf89500b41247cef5e607012b1f609a25082b1d5f4727838d280e1b18294faff739c03629280b508a5aca8f196c7a7b2f32d3103ffcdf61679c96ed5e6afdb782f3420d6a3f69aa291e9ce7d0f752c83f7a3079dedc6975ace448938d5055009c9d2f668012048368f31ce9dec1e9d2723c4a3403a3cb560eb4c4e4da1eff85ee03807a45e1ae825680ecf329be4d1664aac5f3381b50e395e327facd4010b5e20b83ab2f6e237cb144e2c3d0b461a46160a02c1b096de47c51a166536fdf28ed2f0e62f5ac3dcb202c28c49e17bb3820109ccaf9775f6e8502a00e297dbbfcf3b239198d99c8fc09f17ff653f71f6707b757aaf72ecb5ef5aab909ae413eb5aa14df33d006dcd39b348b870d79caa2769c168a688675a17a27d800ad0620a58d13b5506d13ff8083b1926dcde48d080088be00000000160819060100000000010001080022eb000000012300e8070200000000000005000489190800655800000003d932a5dfeef24a5517fa7e616528ba10688c7d589f4fc7339373c56b7cc44d4b3850d01c3656832c590717de007da32cb52ff447457bfa875fca06abd0b5fe8e26d98f021d29c3b21917"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r10, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa8080000000000f7ff000000210d0000aaa8fa017242ba9380d412000000000000002900000005000000679db99d", 0x34) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.516046115s ago: executing program 3 (id=413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xfe76}}, 0xa8}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x1e00, 0xc}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x25, 0x80005, 0x70}, 0x2c) (async, rerun: 32) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (rerun: 32) 1.492569569s ago: executing program 1 (id=414): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'gretap0\x00', r8, 0x700, 0x40, 0x81, 0x8, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x65, 0x0, 0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xf, 0x18, [@local, @broadcast, @broadcast]}, @ssrr={0x89, 0x7, 0x5e, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @rr={0x7, 0xb, 0xaa, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2c}]}, @timestamp_prespec={0x44, 0x1c, 0xe2, 0x3, 0x7, [{@loopback, 0x5}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}]}]}}}}}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.362855215s ago: executing program 0 (id=415): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000280)="c1188e99b95d02ff4284860188a88aa286ddd7db13d340462e9a8bac2fe84396cb5db6180079837dc4c595207217f3c7ffc3cf0fc55c", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0x2d, 0x2, 0x0) (async) socket$inet6(0x2d, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r6, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r7 = socket$inet6(0xa, 0x800, 0x8) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x400}, 0x8) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020605000000000600000000070000320e0003006269746d61703a697000080005000400000000000900020073797a310000000020000780050003000b0000000c000180"], 0x68}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020605000000000600000000070000320e0003006269746d61703a697000080005000400000000000900020073797a310000000020000780050003000b0000000c000180"], 0x68}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, &(0x7f0000000180)) 1.246313585s ago: executing program 4 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept(r0, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000002600)=""/208, &(0x7f0000001180)=0xd0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$sock(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="77be4504de8ca5372aeaa8e435307b6937b16349766eef163e6fa374586b4e966adc39df65f87be0eb5fa3f91ed8376b7d268ed75292a98770626937e4a2335f97979b21166de0ade794b06766adba616d10124510c51be55332e638751cae4feb4000d9e95949a9724200a6d09b00edb57e085c2069e18a4bdf5652205ca9b5d240a66f8d2c11d951f1469ccacbb18bcd63d7a5a077818497ce3d756838b2b0f6a165148508", 0xa6}, {&(0x7f0000000400)="7fc90b024e48ecc18f722777e1288e1e1e444412d76a3d1eea0f0b93579ea3c8ff60a8622b821228e3f8394fc0980e9889e6fba39b421b74c96747e21c68b26349fd02da7b8c0710db65918654cdd7c09ed76d7a", 0x54}, {&(0x7f0000000480)="f40eacaab6ffe2b01dcfec03428bc46a74d68044e0e0de60eddb01a7abf2c2d8380d712f94866b18bad53d3b2e4ea0d77f04f89e16e2b2d0870e2e77edb9f967823edb1a92f8d5d14f4f074bdca6fe2a640af97e7f9ba34f0acb43a71bbeb42ce66c7604aecb4a2cb37bf9bcad9ac71220362430dcede27c99ec0ae4dfbb8e479ccb5312c67229c33a49303463acfa94732322adb1bdd5f66c571a8b4b1ae18bfba443a4ff18b7f6cc71c1ff2d4b9d4eb18ba6bb2b06dad35478afa0be657fa34e448514e1e4778c97d43c2dea7f4660e94653ad548a708793c07a78", 0xdc}, {&(0x7f0000000580)="7f49b98607c8eef4bcc367e4f3fa78a7f86f6ae31414075dd72f27311aa8e2ddb4b5475c71f5a3a659298093d0ca8af6850c34300b32e71b188db2debc9930aee2dfa08fae5d98677e96342150b7614ba053e9fb4206cd3f03e9491f34a6b7efa58dd83a44a58642753a27e578d3468ee024a8bf3d95cfb03ae5f78904", 0x7d}, {&(0x7f0000000600)="76e9a90fd70a25d3cd3ab2af78d89628ecdd4ab6ec729ee1899c57ef5227fc3131ee5a158a2857cdcddc3de529bc16270b6d2ba2a6a470fa9a25a38114d6970c922b0e44391b926bbc8b1cbf80", 0x4d}, {&(0x7f0000000700)="4e9b0ee9546a1bfd0a28b2a9361bdb9b898fb165901574b04d16551f7f3bbf53352156a0a67dc26fc36bed265d8a943418a090b5e1da6564c278d95d444386c74ae3205e267f4a738c8a00dc4d2bad289d99d57e691c7d75b257f9323369f0cf9e43276ed4521d32c5776dc5a6a835c714701c40c463d08ae318ee629b3ab999321bf8fac67f0f157388e45d14eff705c14629d524edec9366a0121d016d33f1f3968d6041c063092f0532a0b8f82797", 0x7b}], 0x6}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000008c0)="c198735e0313129560f9812383eed153763d7780cd0ad2facc90c2e6c14c69eeefb8e986c1a83b595b6a9b6f60f94f794a73deb69c5fd9921ea0c8d3b036e7f82c6ddb2855dc0ab4d3e2b67ea94a4945359e7a4249e92def5dbbd5c1709d248dc4d5bfe17588cec4da", 0x69}, {&(0x7f0000000940)="62bb1112981fb547b186226f57d1e3eebcbfb3e1417df7f14939203afe3aca06f00175696719a785a90d9c2189098428a73c", 0x32}, {&(0x7f0000000680)="9eb05bd01a9265a95e2411c3ef27c55e3f36413ffd4cff0a98c9fcd9294090aa70f751ca2b0699f198e9931de3c93b50b9caaac999b49aaf25ee95b15ac4c9944ed4571ea492662f7c659c8d8f4de0a2cd63b16a67ec702a3d93f2ec2a4dce45e5bc46aeca7d01", 0x67}, {&(0x7f0000000a00)="e67348dd645f643ecc8884a7e260eaef072fb81fdd855d58900d7fe88e94fd3ea4c661dc184b881f671cf5ca8c11bcb63bc24af4917f17b2e1a0e57e0e39d6906e6188702b9eb2af50627cc283881a7196a2510a87da044eb527417332ecd9084bab1aacfc97eaa98c1b2837469c7167da0fac71fd8536013ee408767496530214dd16d43e09994bc5ce861f49", 0x8d}, {&(0x7f0000000ac0)="d5741ba41b0dd71341ab4d8fb0f821161654b681fc58f9096de7edda129fafda73acd1d97b30793c4169f2a7821be634528c8b8ed0a51f204467204a85d4b1ec1eb574846fb913288e16b6c01124445907364110a5a3fab297cff701d6aab544b0", 0x61}, {&(0x7f0000000b40)="745fec41f03c6a44399bd766318cc1a8b6ebc25a6f9da7fdb06be5ac2c2a9bb7b2b77d960344f5494d8b95b204784bf8e34055e83ba8fcda2976b040156a9e3bbb874030206f99258f780c3976a47d7bd2f0ee97552e873178be6c9591ef54f231c31211b3647412237c0a3df48474a480c452851cbff93b40c2aebfca9814089cb480706a35578292b137e1c7d45f25bc7063ed9d9ebd9b95145f27b34ac50e00abe5c1a0a2d93bf22cad940a1fbd60d9ba88195d2bd93ced6ccde287b3794345d117db7ff5b5b1b5518de13c2ebee4729be5c1eec78c61fe53fed5f0123f6ccf4e9d106a7d875a49c09fb8dc20", 0xfffffd84}, {&(0x7f0000000c40)="886199d19bb2d84a1ba96c0144f97f7844535683b2615dab35cfc7079fa6734cb3962d80ed886a4fd265d4405acc525326e213249aa340ee495479ca0ff3d6076b81275f9df890f972792b645e3c158d3115ac06df3b6309a6db4ccea5b87fdd89eaf29a875b094fcd0cfe26a0f24bc0b7ac344520ac8825554b5309d9cdb9529602df99370b57720e6b126cada35129dd1ce2929ca888cf3d0153862c742c5324d4e78d5f00e4944f6772a311c9f0a5d423458d821dccd56ba5cd883bbbf0adb35b35241d655cc40c9e44365c29453ade093d419e9f0b29c674188da15f75db307aa4f7a82cfb4e26b868", 0xeb}], 0x7}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000dc0)="24a5f73d00f8525613b306e77e76689963dff19dd1525f22742cf7c446ecc39ba3451e2b63d06b31bfc1b8c5f6d8714dc03d718c74fc5a0f4274d97922a3c6f0d79773950b863607b860cbe99df87247277b45e529159f36732e3f9362901b930f3e165d0ab43dcc8162a56fe2b987e4ac7bfee1120ebfea8ccc7c932cdfcacadb2e05cb95a527343e8be849a83783121bd1ec1d5df40b01787da490", 0x9c}, {&(0x7f0000000e80)="2c06238f8158e308c1708ab8a587927ec5578b8f76d1fe807e16be246730b39454f4572784905da088de17208d9be0936b787414b4958b410136bddd2eedb4bfc50e99992f88d8cf4993c9ab01a9098d6325fd3bd9dfced8863eb0a2a9fb295ba0e5da4f2abfad8507803c500e5b2ccd963ac26393d215587a095e7915e8295b2a3a05b82d8ffefff32c94ea579d0174ddf9ce1e5a18cf9d4eb8733afc0bc7f04dcdb6f22241c68a3b4b7032beebbd8987de9f23d4935f840cf7caa038b8eb9583b1a5039f2eeab45812935a1d7feb", 0xcf}, {&(0x7f0000000f80)="abf0eea8255eaacec55b24e7260dde675edd5b8c47dd86f22b72efe0df75f84bc8b7701b680afb7599573a9ccf1a9736b5752d0ba74884cc87717b98eaf2f78ca31c1f7acb5d3325cfc6ce33b8a72bcc37c6f37f77d9cc4cbc76a445ba9e86ef7bb330d4", 0x64}, {&(0x7f0000001000)="af7e096c4e538dc7b098209dd9ebd6940a0f8a968083b79e5f46a4f1a29644e1b6406dfc2b87266ff6c1a5c3a91dcf2b0c6a25cffd20fd432e44db33bf0f15f8ab910540b32f4f1324bcdf2f683eba2502451969c39b84904e576a14f19c9c442a89bd2f927c0ab21e976e2984df44b6dc5ad3afd73b42944475e3ee70687ef22d3410ee27935aad2dd6dd24cde6b598bffeb11eae2184f862a342d4f18e0c", 0x9f}, {&(0x7f00000010c0)="57a009428694f983d754", 0xa}, {&(0x7f0000001100)="1d6b878b52fd5974ce1bd8eb5257e65720facca49493a6cf4d8fbe5dc3f6516fc25c4182f5320f1641127c9b9f42abddbbb30b1bd30bb37d0235a20126d4b898de95ca3ea987bb9c54a6ca19d8013f626598c84fa28310", 0x57}, {&(0x7f0000001180)="f44748d6fb92a82a97c8b2a3d165a8999db67e92e5ed4f12ae9f090650b0bdc2eec8fdd4aa57b46b6fe6f48ea94d7efa863877c1299ce6ea31d256829174f19a55c96b915f98f310cc1fa121479bc887397175baa93ff0e3e073071e8261932ae887f3ecc1e52f0dd58a673920df30af59704ef75c6683677e03cfd832dc276f93a0a29bf670fe2f7d436c1af52a94709069af392560bef638149a48094bbffe1bd0d1d3f18239bc6f62f5a17e1f7f6318def0245d", 0xb5}], 0x7}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000002400)="f908d0426d6463b1e0f7074182d16481be699c5e0fcac225da69b9d6832938f3f9473c61de0d42c931de7d83323d19ac35d519b5c079b8ee9bf6e9a260d618102118646d4d869ec9fcff47721a386df4ae0f4b61a8d74b60913d49006d76f48ad621c0dacfd9298931a29c6f7ad1b5ef5f8fd5f1541c1a6bc68773ee8c4d01efd6", 0x81}, {&(0x7f00000024c0)="4ac75fb1b1ee1b9034bef69c6a084e5150c0d1eef44b630310a2d736cc9a9a17692fc26d7035acc27a9ff571ac303d17d24162cf68133d6964545ad15c82ebb767fc6c9597d44fd8a11bb223acca5b84cad761d8d7131d663e1b275c65c0f66b29ea0d58951f88f9a6ae32dc", 0x6c}, {&(0x7f0000002540)="66857b51bda250cded2f43ec7f4362b4dc9ed67d8c78fec020369f4bd75147978fa0305ab420a25349c377047498ff7b18f9ae0c6d02951cc4f25735eb71fb7ddf6305e1fa62107448c2dbc5d549897ce3ce997af751018eb2f1035928959acd58", 0x61}, {&(0x7f00000025c0)="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", 0x44a}], 0x4}}], 0x4, 0x44044) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 1.240739292s ago: executing program 2 (id=417): r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) r1 = epoll_create1(0x0) shutdown(r0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000094) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x30000009}) 1.06647295s ago: executing program 4 (id=418): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r5, 0xe, 0x0, 0x9, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@netkit={@void, @value, @void, @void, r8}}, 0x1c) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r11, r10, &(0x7f00000002c0)=0x9, 0x9ff) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYRES32=r4, @ANYBLOB="010000000400000000000000", @ANYRES32=r12, @ANYBLOB="ffb873fe77b888ec14e7ea45ece931a5a993da948ac428", @ANYRES64=r8], 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 902.132073ms ago: executing program 3 (id=419): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000000)={r4, r1}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x3c}, @in=@rand_addr=0x64010100, {0x0, 0x192, 0x6, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4000}, {r6, 0x7040}, {r6, 0x80a0}, {r5}, {r5, 0x2}, {r5, 0xa04d}], 0x6, &(0x7f0000000100), &(0x7f0000000140)={[0x561]}, 0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000100000014001f000000000000000000000000000000000014002000fec8"], 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 866.116701ms ago: executing program 2 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900140000060015000200000014001680100008800c00028008000100060000005c94ffd012fb665a7345851eaf35c4fb3d09906772fbc6f9702eadb5ebd37cc315115d0d1b6aea67e20f39575ab1888fa6e6d1ff558719b2b91821e1713056db2ca902998e49a69f927766aa35e2196f539a9ce0f8157f69"], 0x38}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000001800128008000100687372000c00028008000100", @ANYRES32=r2, @ANYBLOB="db4a1cd1301cdfda00e893dc2ac837fa73224954d6af46ca3960bc"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r7 = socket(0x2, 0x2, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ppoll(&(0x7f0000003840)=[{r8, 0x40}], 0x20000000000000fc, 0x0, 0x0, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r9, &(0x7f0000000000)=[{&(0x7f0000000400)="1054", 0x2}], 0x1, 0x2, 0x7) unshare(0x400) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x468f74858728407a, 0x0) vmsplice(r10, 0x0, 0x0, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x1) sendto$inet(r7, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom$l2tp(r7, 0x0, 0x0, 0x12002, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="9db625bd7000ffdbdf2501916621dd7308cd0d000000d254ccb078abf3b869de62831358dbb6980499b7d1ea39c88eb268d9f844cd5debaa012850b1f633f203fef00263aeadc284730cdab2724024e61c11d55b7c6836132d65d2830debf87157"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f000000d1c0)={&(0x7f000000c040)={0xa, 0x4e23, 0x2, @remote}, 0x1c, &(0x7f000000d140)=[{&(0x7f000000c080)="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", 0x5ad}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1400000000daaf7c9e3f391f31eb923ea4e04e000000290000003e000000010000000000000018000000000000002900ec4bd9ec870000370000000c000060f4d8ce6746062c07176c69d7189940dad05a17993fb381c5372ca1d82d97c3e1210a9e12fa501bceda2dcb414276d7efde716821091904c8cc2f66e94630bd321e8886c6ebce570a14e0"], 0x30}, 0x8084) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf2d02000000"], 0x14}}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012cbd7000fbdbdf2501000000050002000200000006000a004e210000050003007300000008000600ac1414bb08000b00", @ANYRES32=0x0, @ANYBLOB="06000a004e240000050002000200000008000b00", @ANYRES32=r12, @ANYBLOB="c50dfd7eedb297d1d072ef05e526fb10a1bd2f1f021b6f81840f9fc2f387f6d8d3f1afa09bef7a5e6416b43e95afd1ac362498cd7c33995e4a162fadaa37449b3dfa4e180a0d590b031c3f51c95330691717fbfa697f92bcc0eac7727fed53d38fd1d1f389e1a13485febbfbb61914f601293ebd3ee0913ef7092d380db720dcaf5ba9f2f8759cc010bf7757bf4deb71ab2c9259dcc905ed6391363f1c8a1e2727c48ed85bb10997a0201b0e214568de4942b504aa5911f696a40d14be304cfa4a20ccc4613efdc97cbcc502e908880bbd6c9699cc44"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40050) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f0000000440)={0x2, 0xc}) accept$phonet_pipe(r7, &(0x7f0000000480), &(0x7f00000004c0)=0x10) 819.050464ms ago: executing program 4 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000240)={0x3, {0xb, 0x0, 0x50601bed, 0xe7}}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0019e229bd7000fddbdf250000000000000000080005009f1b12dd5d"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='%^\'--\x00', 0x202, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x7]}, {0x409b, 0x1ff, 0x29, 0x2}}, 0x7f, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x80}) recvmsg$can_j1939(r1, &(0x7f0000001840)={&(0x7f00000001c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/42, 0x2a}, {&(0x7f0000001540)=""/99, 0x63}, {&(0x7f00000015c0)=""/174, 0xae}, {&(0x7f0000001680)=""/77, 0x4d}, {&(0x7f0000001700)=""/162, 0xa2}], 0x6}, 0x143) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000280)={'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 513.370299ms ago: executing program 4 (id=422): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) bind$l2tp6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0xe8, 0x1c8, 0x1c8, 0x290, 0x378, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x200, 0x0, @loopback, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xde}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfe}}}, {{@ip={@multicast2, @local, 0xff, 0xffffffff, 'pimreg\x00', 'ip6erspan0\x00', {}, {0xff}, 0x32, 0x2, 0x48}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@ip={@broadcast, @broadcast, 0x3c1f00084daf9c0a, 0xffffffff, 'pim6reg0\x00', 'dvmrp1\x00', {0xff}, {0x101}, 0x62, 0x3, 0x1f}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "03722f53329555cbf1c4cb9313a5bc155d175e3901afd36d28847eece9d9"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x3, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c6}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'sit0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="1709000000000000000001000000050007000000000008000900fbff00001400200000000000000000000000ffff0000000008000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) 512.716191ms ago: executing program 0 (id=423): socket$kcm(0x2, 0x200000000000001, 0x0) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0xfffffff7, 0x1, 0x3, 0x7ff, 0x4, 0xc0f, 0x11}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r2, 0x8, 0xa}, &(0x7f0000000540)=0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000580)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @local, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e20, 0xffffffff, @local, 0xc48}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e23, @multicast2}], 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x3}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) connect$unix(r4, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) ioctl$XFS_IOC_BULKSTAT(r5, 0x8040587f, &(0x7f0000000940)={{0xfff, 0x1, 0x2f2, 0x4, 0x7fffffff}, &(0x7f00000007c0)=[{}, {}]}) (async) ioctl$XFS_IOC_BULKSTAT(r5, 0x8040587f, &(0x7f0000000940)={{0xfff, 0x1, 0x2f2, 0x4, 0x7fffffff}, &(0x7f00000007c0)=[{}, {}]}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x7}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf2504000000080004000200000004000500"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) (async) sendmsg$nl_generic(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf2504000000080004000200000004000500"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4}}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000004b5fc56deff5b79c2ffa4a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000004b5fc56deff5b79c2ffa4a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800e1636db759f15b58e748972944bd3683379f7af31f210000000000000400b1b290c8138edb5ba241e87bce47d265ebc50b7c73af3edfd47f928c162df233db25307a863382a2bda54b8486592173c202b0286eace3cae5e3ccf6b13274289b7ec4cb2cde7cdd22e5dac5edbf203177ea98a0bdae506e2f11", @ANYRES32=r11, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) 345.989868ms ago: executing program 2 (id=424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000089000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 218.426937ms ago: executing program 0 (id=425): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x3000008, 0x13, r0, 0x4a9b6000) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c"], 0x28}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c74657200000000000000ee2b000000643b02000000000000000000000002000000"], 0x48) socket$netlink(0x10, 0x3, 0x12) r1 = socket$inet(0xa, 0x6, 0x200085) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3030, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40081}, 0x22000004) socket(0x2b, 0x1, 0x1) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, "000022ebffff0000"}}}}}, 0x0) 134.330482ms ago: executing program 3 (id=426): socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) 78.17408ms ago: executing program 2 (id=427): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000002000040050104"], 0x48}}, 0x20004800) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/4097, 0x1001}], 0x1}, 0xb}], 0x4000000000000f1, 0x40000021, 0x0) 0s ago: executing program 3 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x49}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9313}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x40010) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff020000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 73.302361][ T5608] cgroup: Unknown subsys name 'net' [ 73.428177][ T5608] cgroup: Unknown subsys name 'cpuset' [ 73.436839][ T5608] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.831260][ T5608] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.997556][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.013883][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.022715][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.032840][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.045128][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.050152][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.061040][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.061937][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.069201][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.081542][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.083621][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.090766][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.107325][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.118022][ T4940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.126960][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.134522][ T4940] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.143071][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.150830][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.171170][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.172186][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.188711][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.196092][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.204236][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.211499][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.218806][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.866775][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.873993][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.882363][ T5625] bridge_slave_0: entered allmulticast mode [ 78.889463][ T5625] bridge_slave_0: entered promiscuous mode [ 78.897498][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.904692][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.911971][ T5634] bridge_slave_0: entered allmulticast mode [ 78.919073][ T5634] bridge_slave_0: entered promiscuous mode [ 78.946162][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.953326][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.960575][ T5621] bridge_slave_0: entered allmulticast mode [ 78.967542][ T5621] bridge_slave_0: entered promiscuous mode [ 78.976453][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.983623][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.990887][ T5625] bridge_slave_1: entered allmulticast mode [ 78.997801][ T5625] bridge_slave_1: entered promiscuous mode [ 79.004762][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.011905][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.019131][ T5634] bridge_slave_1: entered allmulticast mode [ 79.026163][ T5634] bridge_slave_1: entered promiscuous mode [ 79.050703][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.057847][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.064949][ T5621] bridge_slave_1: entered allmulticast mode [ 79.071893][ T5621] bridge_slave_1: entered promiscuous mode [ 79.165360][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.176216][ T50] Bluetooth: hci1: command tx timeout [ 79.180140][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.182120][ T5638] Bluetooth: hci0: command tx timeout [ 79.194596][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.209088][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.223429][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.230754][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.237932][ T5633] bridge_slave_0: entered allmulticast mode [ 79.244881][ T5633] bridge_slave_0: entered promiscuous mode [ 79.255143][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.265319][ T5638] Bluetooth: hci4: command tx timeout [ 79.271446][ T50] Bluetooth: hci3: command tx timeout [ 79.272989][ T5628] Bluetooth: hci2: command tx timeout [ 79.292083][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.309576][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.316764][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.324028][ T5633] bridge_slave_1: entered allmulticast mode [ 79.331283][ T5633] bridge_slave_1: entered promiscuous mode [ 79.382700][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.390471][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.398023][ T5620] bridge_slave_0: entered allmulticast mode [ 79.405644][ T5620] bridge_slave_0: entered promiscuous mode [ 79.424302][ T5621] team0: Port device team_slave_0 added [ 79.431652][ T5625] team0: Port device team_slave_0 added [ 79.446032][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.453305][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.460551][ T5620] bridge_slave_1: entered allmulticast mode [ 79.468051][ T5620] bridge_slave_1: entered promiscuous mode [ 79.486420][ T5621] team0: Port device team_slave_1 added [ 79.493668][ T5625] team0: Port device team_slave_1 added [ 79.509558][ T5634] team0: Port device team_slave_0 added [ 79.526670][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.554761][ T5634] team0: Port device team_slave_1 added [ 79.571588][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.591098][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.598095][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.624448][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.647642][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.665571][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.672535][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.698713][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.710294][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.717650][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.743840][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.766576][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.786500][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.793442][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.819799][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.839125][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.846125][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.872893][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.894567][ T5633] team0: Port device team_slave_0 added [ 79.913874][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.921085][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.947062][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.969846][ T5633] team0: Port device team_slave_1 added [ 80.003484][ T5620] team0: Port device team_slave_0 added [ 80.044806][ T5625] hsr_slave_0: entered promiscuous mode [ 80.051597][ T5625] hsr_slave_1: entered promiscuous mode [ 80.059801][ T5620] team0: Port device team_slave_1 added [ 80.066017][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.073046][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.099084][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.139912][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.146939][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.172904][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.189187][ T5621] hsr_slave_0: entered promiscuous mode [ 80.195573][ T5621] hsr_slave_1: entered promiscuous mode [ 80.201576][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 80.207930][ T5621] Cannot create hsr debugfs directory [ 80.259495][ T5634] hsr_slave_0: entered promiscuous mode [ 80.266056][ T5634] hsr_slave_1: entered promiscuous mode [ 80.272064][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 80.277875][ T5634] Cannot create hsr debugfs directory [ 80.285522][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.292481][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.318400][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.356327][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.363270][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.389352][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.478551][ T5633] hsr_slave_0: entered promiscuous mode [ 80.484783][ T5633] hsr_slave_1: entered promiscuous mode [ 80.491046][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 80.496796][ T5633] Cannot create hsr debugfs directory [ 80.619746][ T5620] hsr_slave_0: entered promiscuous mode [ 80.625962][ T5620] hsr_slave_1: entered promiscuous mode [ 80.631943][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 80.638009][ T5620] Cannot create hsr debugfs directory [ 80.949519][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.961587][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.969468][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.980750][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.988916][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.997805][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.017127][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.028666][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.125820][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.137795][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.147966][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.158911][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.167607][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.178567][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.192919][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.202550][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.255538][ T50] Bluetooth: hci1: command tx timeout [ 81.261363][ T5628] Bluetooth: hci0: command tx timeout [ 81.302331][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.314149][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.329376][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.339529][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.347231][ T5638] Bluetooth: hci4: command tx timeout [ 81.352644][ T50] Bluetooth: hci3: command tx timeout [ 81.355155][ T5628] Bluetooth: hci2: command tx timeout [ 81.360002][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.373310][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.381785][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.391452][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.448136][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.485856][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.496623][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.512508][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.522003][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.530322][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.539282][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.547983][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.557277][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.634216][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.668328][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.675929][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.695473][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.706469][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.714207][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.723520][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.733290][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.743551][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.754267][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.761369][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.775842][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.784899][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.892970][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.944572][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.959893][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.971492][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.978648][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.001847][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.036948][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.044052][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.080765][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.109409][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.128671][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.135889][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.165944][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.173125][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.200486][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.207655][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.233293][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.263983][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.271161][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.377135][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.504722][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.543836][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.551047][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.604890][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.612098][ T3404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.820737][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.055534][ T5625] veth0_vlan: entered promiscuous mode [ 83.111580][ T5625] veth1_vlan: entered promiscuous mode [ 83.217960][ T5625] veth0_macvtap: entered promiscuous mode [ 83.263913][ T5625] veth1_macvtap: entered promiscuous mode [ 83.317039][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.336228][ T5628] Bluetooth: hci0: command tx timeout [ 83.342003][ T50] Bluetooth: hci1: command tx timeout [ 83.368330][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.393641][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.415185][ T5628] Bluetooth: hci4: command tx timeout [ 83.420672][ T5638] Bluetooth: hci2: command tx timeout [ 83.435080][ T50] Bluetooth: hci3: command tx timeout [ 83.493824][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.506689][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.550881][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.563882][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.589036][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.707340][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.757917][ T5621] veth0_vlan: entered promiscuous mode [ 83.796024][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.815914][ T3346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.832225][ T3346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.851066][ T5621] veth1_vlan: entered promiscuous mode [ 83.909338][ T5634] veth0_vlan: entered promiscuous mode [ 83.931743][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.952976][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.967885][ T5634] veth1_vlan: entered promiscuous mode [ 84.039377][ T5633] veth0_vlan: entered promiscuous mode [ 84.091338][ T5621] veth0_macvtap: entered promiscuous mode [ 84.112065][ T5621] veth1_macvtap: entered promiscuous mode [ 84.128374][ T5633] veth1_vlan: entered promiscuous mode [ 84.133262][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.187692][ T5634] veth0_macvtap: entered promiscuous mode [ 84.242662][ T5634] veth1_macvtap: entered promiscuous mode [ 84.247310][ T5817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.260137][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.289108][ T5817] team1: entered promiscuous mode [ 84.294209][ T5817] team1: entered allmulticast mode [ 84.300295][ T5817] 8021q: adding VLAN 0 to HW filter on device team1 [ 84.310607][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.320286][ T5620] veth0_vlan: entered promiscuous mode [ 84.345438][ T5818] team2: entered promiscuous mode [ 84.350535][ T5818] team2: entered allmulticast mode [ 84.356418][ T5818] 8021q: adding VLAN 0 to HW filter on device team2 [ 84.363692][ T5818] Zero length message leads to an empty skb [ 84.366351][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.404859][ T5620] veth1_vlan: entered promiscuous mode [ 84.417095][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.426541][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.451024][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.466340][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.477382][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.488978][ T5633] veth0_macvtap: entered promiscuous mode [ 84.534613][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.558800][ T5633] veth1_macvtap: entered promiscuous mode [ 84.608493][ T3404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.619151][ T3404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.642848][ T5822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 84.657193][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.666077][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.693036][ T5620] veth0_macvtap: entered promiscuous mode [ 84.743158][ T5620] veth1_macvtap: entered promiscuous mode [ 84.763564][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.838638][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.861833][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.871749][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.873159][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.891568][ T5829] syz.2.8 uses obsolete (PF_INET,SOCK_PACKET) [ 84.916348][ T1177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.926109][ T5829] syzkaller1: entered promiscuous mode [ 84.931609][ T5829] syzkaller1: entered allmulticast mode [ 84.948519][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.961288][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.977044][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.984348][ T1177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.994071][ T1177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.031357][ T1177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.062184][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.062628][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.071555][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.093055][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.111390][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.127256][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.176420][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.194093][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.415183][ T50] Bluetooth: hci1: command tx timeout [ 85.420641][ T5638] Bluetooth: hci0: command tx timeout [ 85.478760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.493093][ T5840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 85.504175][ T5638] Bluetooth: hci3: command tx timeout [ 85.505342][ T50] Bluetooth: hci2: command tx timeout [ 85.509653][ T5628] Bluetooth: hci4: command tx timeout [ 85.523192][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.576893][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.602384][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.660600][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.676975][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.719988][ T5840] gretap0: entered promiscuous mode [ 85.730989][ T5840] vlan2: entered promiscuous mode [ 85.861712][ T3346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.888021][ T3346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.106584][ T5856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.148724][ T5857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 86.175413][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.247289][ T42] cfg80211: failed to load regulatory.db [ 86.259644][ T5863] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.504330][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 86.534267][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 86.566101][ T5871] netlink: 'syz.3.13': attribute type 6 has an invalid length. [ 86.644527][ T5871] netlink: 'syz.3.13': attribute type 6 has an invalid length. [ 86.783215][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.830053][ T57] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.860343][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.921227][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.086571][ T5895] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 87.372315][ T5912] Cannot find map_set index 0 as target [ 87.422786][ T5914] netlink: 'syz.0.24': attribute type 28 has an invalid length. [ 87.646333][ T5923] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 87.942492][ T5935] lo: entered allmulticast mode [ 87.969470][ T5935] tunl0: entered allmulticast mode [ 87.986812][ T5935] gre0: entered allmulticast mode [ 88.011355][ T5935] gretap0: entered allmulticast mode [ 88.026911][ T5935] erspan0: entered allmulticast mode [ 88.041531][ T5935] ip_vti0: entered allmulticast mode [ 88.064159][ T5935] ip6_vti0: entered allmulticast mode [ 88.078022][ T5935] sit0: entered allmulticast mode [ 88.093208][ T5935] ip6tnl0: entered allmulticast mode [ 88.107672][ T5935] ip6gre0: entered allmulticast mode [ 88.124897][ T5935] syz_tun: entered allmulticast mode [ 88.146055][ T5935] ip6gretap0: entered allmulticast mode [ 88.158745][ T5935] bridge0: entered allmulticast mode [ 88.168078][ T5935] vcan0: entered allmulticast mode [ 88.174489][ T5935] bond0: entered allmulticast mode [ 88.180849][ T5935] bond_slave_0: entered allmulticast mode [ 88.187373][ T5935] bond_slave_1: entered allmulticast mode [ 88.194005][ T5935] team0: entered allmulticast mode [ 88.200104][ T5935] team_slave_0: entered allmulticast mode [ 88.207131][ T5935] team_slave_1: entered allmulticast mode [ 88.213676][ T5935] dummy0: entered allmulticast mode [ 88.224413][ T5935] nlmon0: entered allmulticast mode [ 88.230943][ T5935] batadv0: entered allmulticast mode [ 88.238226][ T5935] vxcan0: entered allmulticast mode [ 88.244926][ T5935] vxcan1: entered allmulticast mode [ 88.252558][ T5935] veth0: entered allmulticast mode [ 88.259160][ T5935] veth1: entered allmulticast mode [ 88.265885][ T5935] wg0: entered allmulticast mode [ 88.271734][ T5935] wg1: entered allmulticast mode [ 88.278396][ T5935] wg2: entered allmulticast mode [ 88.284317][ T5935] veth0_to_bridge: entered allmulticast mode [ 88.293047][ T5935] veth1_to_bridge: entered allmulticast mode [ 88.303237][ T5935] veth0_to_bond: entered allmulticast mode [ 88.312539][ T5935] veth1_to_bond: entered allmulticast mode [ 88.320820][ T5935] veth0_to_team: entered allmulticast mode [ 88.333367][ T5935] veth1_to_team: entered allmulticast mode [ 88.341682][ T5935] veth0_to_batadv: entered allmulticast mode [ 88.349493][ T5935] batadv_slave_0: entered allmulticast mode [ 88.358324][ T5935] veth1_to_batadv: entered allmulticast mode [ 88.364935][ T5935] batadv_slave_1: entered allmulticast mode [ 88.374484][ T5935] xfrm0: entered allmulticast mode [ 88.381052][ T5935] veth0_to_hsr: entered allmulticast mode [ 88.390139][ T5935] hsr_slave_0: entered allmulticast mode [ 88.396734][ T5935] veth1_to_hsr: entered allmulticast mode [ 88.402931][ T5935] hsr_slave_1: entered allmulticast mode [ 88.410180][ T5935] hsr0: entered allmulticast mode [ 88.415779][ T5935] veth1_virt_wifi: entered allmulticast mode [ 88.422169][ T5935] veth0_virt_wifi: entered allmulticast mode [ 88.429603][ T5935] virt_wifi0: entered allmulticast mode [ 88.436065][ T5935] veth1_vlan: entered allmulticast mode [ 88.442055][ T5935] veth0_vlan: entered allmulticast mode [ 88.448875][ T5935] vlan0: entered allmulticast mode [ 88.454385][ T5935] vlan1: entered allmulticast mode [ 88.461388][ T5935] macvlan0: entered allmulticast mode [ 88.467609][ T5935] macvlan1: entered allmulticast mode [ 88.473403][ T5935] ipvlan0: entered allmulticast mode [ 88.479732][ T5935] ipvlan1: entered allmulticast mode [ 88.486550][ T5935] veth1_macvtap: entered allmulticast mode [ 88.492794][ T5935] veth0_macvtap: entered allmulticast mode [ 88.499976][ T5935] macvtap0: entered allmulticast mode [ 88.506281][ T5935] macsec0: entered allmulticast mode [ 88.513146][ T5935] geneve0: entered allmulticast mode [ 88.519637][ T5935] geneve1: entered allmulticast mode [ 88.526737][ T5935] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 88.534799][ T5935] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 88.544579][ T5935] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 88.553269][ T5935] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 88.561923][ T5935] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 88.569938][ T5935] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 88.599268][ T5944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.963073][ T5962] netlink: 'syz.1.36': attribute type 280 has an invalid length. [ 89.198167][ T5975] FAULT_INJECTION: forcing a failure. [ 89.198167][ T5975] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.246759][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: syz.4.42 Not tainted syzkaller #0 PREEMPT(full) [ 89.246784][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.246801][ T5975] Call Trace: [ 89.246809][ T5975] [ 89.246816][ T5975] dump_stack_lvl+0xe8/0x150 [ 89.246858][ T5975] should_fail_ex+0x40c/0x560 [ 89.246890][ T5975] _copy_from_user+0x2d/0xb0 [ 89.246918][ T5975] generic_map_update_batch+0x6a3/0x9a0 [ 89.246944][ T5975] ? __pfx_generic_map_update_batch+0x10/0x10 [ 89.246963][ T5975] ? __fget_files+0x2a/0x420 [ 89.246992][ T5975] ? __pfx_generic_map_update_batch+0x10/0x10 [ 89.247009][ T5975] bpf_map_do_batch+0x391/0x630 [ 89.247039][ T5975] __sys_bpf+0xbe5/0xd90 [ 89.247069][ T5975] ? __pfx___sys_bpf+0x10/0x10 [ 89.247102][ T5975] ? __fget_files+0x2a/0x420 [ 89.247139][ T5975] ? ksys_write+0x242/0x270 [ 89.247169][ T5975] ? __pfx_ksys_write+0x10/0x10 [ 89.247200][ T5975] __x64_sys_bpf+0xba/0xd0 [ 89.247220][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.247239][ T5975] do_syscall_64+0x174/0x580 [ 89.247263][ T5975] ? trace_irq_disable+0x3b/0x140 [ 89.247286][ T5975] ? clear_bhb_loop+0x40/0x90 [ 89.247308][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.247325][ T5975] RIP: 0033:0x7f03e6d9de59 [ 89.247348][ T5975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.247363][ T5975] RSP: 002b:00007f03e7bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.247382][ T5975] RAX: ffffffffffffffda RBX: 00007f03e7025fa0 RCX: 00007f03e6d9de59 [ 89.247395][ T5975] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 89.247407][ T5975] RBP: 00007f03e7bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 89.247418][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 89.247429][ T5975] R13: 00007f03e7026038 R14: 00007f03e7025fa0 R15: 00007ffd5ee3a0f8 [ 89.247458][ T5975] [ 89.480072][ T5976] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 89.481003][ T5974] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 89.816792][ T5992] __nla_validate_parse: 9 callbacks suppressed [ 89.816808][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 90.508057][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 91.435277][ T6018] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 91.545646][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'. [ 91.609435][ T6028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.55'. [ 91.721011][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.758146][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'. [ 91.767850][ T6035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.798111][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.60'. [ 91.852627][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.919373][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.928269][ T6041] netlink: 'syz.2.60': attribute type 1 has an invalid length. [ 92.077975][ T6065] netlink: 'syz.3.61': attribute type 4 has an invalid length. [ 92.289211][ T6056] vlan2: entered allmulticast mode [ 92.477436][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.64'. [ 92.614404][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.679411][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.792135][ T6083] ip_vti0: entered promiscuous mode [ 92.798163][ T6083] ip_vti0: left allmulticast mode [ 92.808854][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 92.995327][ T6092] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.006478][ T6092] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.150924][ T6095] bond1: option lacp_active: invalid value (5) [ 93.160103][ T6095] bond1 (unregistering): Released all slaves [ 93.177235][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'. [ 93.198820][ T9] IPVS: starting estimator thread 0... [ 93.242112][ T6104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.299929][ T6105] IPVS: using max 26 ests per chain, 62400 per kthread [ 93.584077][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 94.042484][ T6153] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.101161][ T6154] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 94.191937][ T6158] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 94.278817][ T6163] lo speed is unknown, defaulting to 1000 [ 94.314053][ T6163] lo speed is unknown, defaulting to 1000 [ 94.352584][ T6163] lo speed is unknown, defaulting to 1000 [ 94.381042][ T6163] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 94.428888][ T6163] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 94.484554][ T6163] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 94.544097][ T6163] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.629190][ T6163] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.718203][ T6179] syzkaller0: entered promiscuous mode [ 94.724297][ T6178] netlink: get zone limit has 8 unknown bytes [ 94.735940][ T6179] syzkaller0: entered allmulticast mode [ 94.836061][ T6163] lo speed is unknown, defaulting to 1000 [ 94.945901][ T6163] lo speed is unknown, defaulting to 1000 [ 94.955411][ T5285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.060185][ T6163] lo speed is unknown, defaulting to 1000 [ 95.075711][ T6163] lo speed is unknown, defaulting to 1000 [ 95.087162][ T6191] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 95.089770][ T6163] lo speed is unknown, defaulting to 1000 [ 95.243948][ T6191] bond1 (unregistering): Released all slaves [ 95.379837][ T6206] __nla_validate_parse: 3 callbacks suppressed [ 95.379855][ T6206] netlink: 256 bytes leftover after parsing attributes in process `syz.3.97'. [ 96.512064][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 96.534320][ T6263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.110'. [ 97.296398][ T6309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.788855][ T6330] Bluetooth: MGMT ver 1.23 [ 98.181373][ T6344] veth1_to_bond: entered promiscuous mode [ 98.191301][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'. [ 98.254209][ T6343] veth1_to_bond: left promiscuous mode [ 98.396172][ T6353] netlink: 'syz.2.132': attribute type 21 has an invalid length. [ 98.422105][ T6350] ipip0: entered promiscuous mode [ 98.439781][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.132'. [ 98.498322][ T6356] syzkaller1: entered promiscuous mode [ 98.524565][ T6356] syzkaller1: entered allmulticast mode [ 99.238495][ T6326] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 99.270508][ T6326] netlink: 'syz.3.122': attribute type 1 has an invalid length. [ 99.303222][ T6326] netlink: 1 bytes leftover after parsing attributes in process `syz.3.122'. [ 99.666778][ T6390] FAULT_INJECTION: forcing a failure. [ 99.666778][ T6390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.714065][ T6390] CPU: 1 UID: 0 PID: 6390 Comm: syz.4.139 Not tainted syzkaller #0 PREEMPT(full) [ 99.714091][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 99.714101][ T6390] Call Trace: [ 99.714108][ T6390] [ 99.714116][ T6390] dump_stack_lvl+0xe8/0x150 [ 99.714148][ T6390] should_fail_ex+0x40c/0x560 [ 99.714172][ T6390] _copy_from_user+0x2d/0xb0 [ 99.714199][ T6390] generic_map_update_batch+0x6a3/0x9a0 [ 99.714227][ T6390] ? __pfx_generic_map_update_batch+0x10/0x10 [ 99.714245][ T6390] ? __fget_files+0x2a/0x420 [ 99.714275][ T6390] ? __pfx_generic_map_update_batch+0x10/0x10 [ 99.714294][ T6390] bpf_map_do_batch+0x391/0x630 [ 99.714325][ T6390] __sys_bpf+0xbe5/0xd90 [ 99.714355][ T6390] ? __pfx___sys_bpf+0x10/0x10 [ 99.714389][ T6390] ? __fget_files+0x2a/0x420 [ 99.714429][ T6390] ? ksys_write+0x242/0x270 [ 99.714457][ T6390] ? __pfx_ksys_write+0x10/0x10 [ 99.714489][ T6390] __x64_sys_bpf+0xba/0xd0 [ 99.714510][ T6390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.714531][ T6390] do_syscall_64+0x174/0x580 [ 99.714555][ T6390] ? trace_irq_disable+0x3b/0x140 [ 99.714630][ T6390] ? clear_bhb_loop+0x40/0x90 [ 99.714652][ T6390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.714670][ T6390] RIP: 0033:0x7f03e6d9de59 [ 99.714688][ T6390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.714702][ T6390] RSP: 002b:00007f03e7bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.714721][ T6390] RAX: ffffffffffffffda RBX: 00007f03e7025fa0 RCX: 00007f03e6d9de59 [ 99.714734][ T6390] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 99.714745][ T6390] RBP: 00007f03e7bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 99.714756][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.714766][ T6390] R13: 00007f03e7026038 R14: 00007f03e7025fa0 R15: 00007ffd5ee3a0f8 [ 99.714796][ T6390] [ 100.051642][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 100.060753][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 100.069830][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 100.078922][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 100.274209][ T6397] bond2: option xmit_hash_policy: invalid value (10) [ 100.352348][ T6397] bond2 (unregistering): Released all slaves [ 100.446755][ T6408] __nla_validate_parse: 69 callbacks suppressed [ 100.446815][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.143'. [ 100.502409][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 100.838569][ T6397] bond2: option xmit_hash_policy: invalid value (10) [ 100.866807][ T6425] netlink: 44 bytes leftover after parsing attributes in process `syz.4.146'. [ 100.906414][ T6397] bond2 (unregistering): Released all slaves [ 101.388138][ T6448] netlink: 'syz.2.149': attribute type 11 has an invalid length. [ 101.440831][ T6448] netlink: 224 bytes leftover after parsing attributes in process `syz.2.149'. [ 101.812623][ T6462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 101.881128][ T6465] FAULT_INJECTION: forcing a failure. [ 101.881128][ T6465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.915212][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 101.928098][ T6465] CPU: 1 UID: 0 PID: 6465 Comm: syz.0.153 Not tainted syzkaller #0 PREEMPT(full) [ 101.928122][ T6465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.928133][ T6465] Call Trace: [ 101.928141][ T6465] [ 101.928149][ T6465] dump_stack_lvl+0xe8/0x150 [ 101.928181][ T6465] should_fail_ex+0x40c/0x560 [ 101.928207][ T6465] _copy_from_user+0x2d/0xb0 [ 101.928235][ T6465] generic_map_update_batch+0x651/0x9a0 [ 101.928264][ T6465] ? __pfx_generic_map_update_batch+0x10/0x10 [ 101.928284][ T6465] ? __fget_files+0x2a/0x420 [ 101.928312][ T6465] ? __pfx_generic_map_update_batch+0x10/0x10 [ 101.928331][ T6465] bpf_map_do_batch+0x391/0x630 [ 101.928360][ T6465] __sys_bpf+0xbe5/0xd90 [ 101.928389][ T6465] ? __pfx___sys_bpf+0x10/0x10 [ 101.928423][ T6465] ? __fget_files+0x2a/0x420 [ 101.928462][ T6465] ? ksys_write+0x242/0x270 [ 101.928492][ T6465] ? __pfx_ksys_write+0x10/0x10 [ 101.928524][ T6465] __x64_sys_bpf+0xba/0xd0 [ 101.928546][ T6465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.928566][ T6465] do_syscall_64+0x174/0x580 [ 101.928595][ T6465] ? trace_irq_disable+0x3b/0x140 [ 101.928617][ T6465] ? clear_bhb_loop+0x40/0x90 [ 101.928640][ T6465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.928659][ T6465] RIP: 0033:0x7f32a199de59 [ 101.928676][ T6465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.928691][ T6465] RSP: 002b:00007f32a2921028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.928711][ T6465] RAX: ffffffffffffffda RBX: 00007f32a1c25fa0 RCX: 00007f32a199de59 [ 101.928725][ T6465] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 101.928736][ T6465] RBP: 00007f32a2921090 R08: 0000000000000000 R09: 0000000000000000 [ 101.928748][ T6465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.928758][ T6465] R13: 00007f32a1c26038 R14: 00007f32a1c25fa0 R15: 00007fffdb6db8e8 [ 101.928796][ T6465] [ 101.952985][ T6462] ipvlan1: entered promiscuous mode [ 101.957992][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 102.122587][ T6462] ipvlan1: left promiscuous mode [ 102.402923][ T6467] ipvlan1: entered promiscuous mode [ 102.433779][ T6467] ipvlan1: left promiscuous mode [ 103.456391][ T6512] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 103.527030][ T6512] warning: `syz.4.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.928328][ T6526] FAULT_INJECTION: forcing a failure. [ 103.928328][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.986134][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.4.165 Not tainted syzkaller #0 PREEMPT(full) [ 103.986160][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 103.986170][ T6526] Call Trace: [ 103.986177][ T6526] [ 103.986185][ T6526] dump_stack_lvl+0xe8/0x150 [ 103.986218][ T6526] should_fail_ex+0x40c/0x560 [ 103.986244][ T6526] _copy_from_user+0x2d/0xb0 [ 103.986271][ T6526] generic_map_update_batch+0x6a3/0x9a0 [ 103.986300][ T6526] ? __pfx_generic_map_update_batch+0x10/0x10 [ 103.986321][ T6526] ? __fget_files+0x2a/0x420 [ 103.986350][ T6526] ? __pfx_generic_map_update_batch+0x10/0x10 [ 103.986369][ T6526] bpf_map_do_batch+0x391/0x630 [ 103.986400][ T6526] __sys_bpf+0xbe5/0xd90 [ 103.986431][ T6526] ? __pfx___sys_bpf+0x10/0x10 [ 103.986465][ T6526] ? __fget_files+0x2a/0x420 [ 103.986504][ T6526] ? ksys_write+0x242/0x270 [ 103.986533][ T6526] ? __pfx_ksys_write+0x10/0x10 [ 103.986565][ T6526] __x64_sys_bpf+0xba/0xd0 [ 103.986587][ T6526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.986607][ T6526] do_syscall_64+0x174/0x580 [ 103.986634][ T6526] ? clear_bhb_loop+0x40/0x90 [ 103.986657][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.986675][ T6526] RIP: 0033:0x7f03e6d9de59 [ 103.986692][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.986710][ T6526] RSP: 002b:00007f03e7bf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.986730][ T6526] RAX: ffffffffffffffda RBX: 00007f03e7025fa0 RCX: 00007f03e6d9de59 [ 103.986744][ T6526] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 000000000000001a [ 103.986756][ T6526] RBP: 00007f03e7bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 103.986767][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.986777][ T6526] R13: 00007f03e7026038 R14: 00007f03e7025fa0 R15: 00007ffd5ee3a0f8 [ 103.986810][ T6526] [ 104.255246][ T6532] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 104.358490][ T6532] bond2: option mode: invalid value (7) [ 104.362557][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 104.454535][ T6532] bond2 (unregistering): Released all slaves [ 104.713692][ T6558] netlink: 'syz.4.170': attribute type 13 has an invalid length. [ 104.805943][ T5750] IPVS: starting estimator thread 0... [ 104.814634][ T6559] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 104.852147][ T6559] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 104.895110][ T6561] IPVS: using max 30 ests per chain, 72000 per kthread [ 104.945370][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.023128][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.238727][ T6542] : renamed from dummy0 [ 105.351859][ T6564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.571601][ T6581] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 105.694946][ T6586] af_packet: tpacket_rcv: packet too big, clamped from 68 to 4294967272. macoff=96 [ 105.757351][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.889033][ T6591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.177'. [ 105.934784][ T6589] bond1: (slave geneve2): making interface the new active one [ 105.974757][ T6589] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 106.016842][ T6594] syzkaller0: entered promiscuous mode [ 106.034184][ T6594] syzkaller0: entered allmulticast mode [ 106.044860][ T6581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.071271][ T6594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 106.134176][ T6589] syz.0.173 (6589) used greatest stack depth: 19320 bytes left [ 106.269021][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 106.559230][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 106.582005][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 106.865547][ T6622] bridge_slave_0: left allmulticast mode [ 106.882790][ T6622] bridge_slave_0: left promiscuous mode [ 106.901289][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.927643][ T6622] bridge_slave_1: left allmulticast mode [ 106.957800][ T6622] bridge_slave_1: left promiscuous mode [ 106.964540][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.031884][ T6622] bond0: (slave bond_slave_0): Releasing backup interface [ 107.077787][ T6622] bond0: (slave bond_slave_1): Releasing backup interface [ 107.123695][ T6622] team0: Port device team_slave_0 removed [ 107.152109][ T6622] team0: Port device team_slave_1 removed [ 107.163610][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.173115][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.190216][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.204797][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.221280][ T6638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.189'. [ 107.226831][ T6622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.258713][ T5757] lo speed is unknown, defaulting to 1000 [ 107.299430][ T6637] tipc: Started in network mode [ 107.317949][ T6637] tipc: Node identity 2aa5865769a2, cluster identity 4711 [ 107.352695][ T6637] tipc: Enabled bearer , priority 0 [ 107.374133][ T6642] syzkaller0: entered promiscuous mode [ 107.388200][ T6642] syzkaller0: entered allmulticast mode [ 107.455789][ T6636] tipc: Resetting bearer [ 107.569385][ T6636] tipc: Disabling bearer [ 107.647601][ T6647] pimreg: entered allmulticast mode [ 107.671238][ T6647] pimreg: left allmulticast mode [ 108.148021][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 108.284245][ T6678] veth0: entered promiscuous mode [ 108.363050][ T6673] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.548870][ T6672] veth0: left promiscuous mode [ 108.656804][ T6690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'. [ 108.726479][ T6692] syzkaller0: entered promiscuous mode [ 108.745762][ T6692] syzkaller0: entered allmulticast mode [ 108.798038][ T6692] tipc: Started in network mode [ 108.819125][ T6692] tipc: Node identity ae3000615bf5, cluster identity 4711 [ 108.839685][ T6692] tipc: Enabled bearer , priority 0 [ 108.872235][ T6700] netlink: 'syz.1.207': attribute type 1 has an invalid length. [ 109.068831][ T6696] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.293778][ T6711] netlink: 44 bytes leftover after parsing attributes in process `syz.0.210'. [ 109.332622][ T6691] tipc: Resetting bearer [ 109.406384][ T6691] tipc: Disabling bearer [ 109.935317][ T6698] netlink: 80 bytes leftover after parsing attributes in process `syz.3.209'. [ 110.104259][ T6735] bridge_slave_0: left allmulticast mode [ 110.163521][ T6735] bridge_slave_0: left promiscuous mode [ 110.192142][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.308058][ T6735] bridge_slave_1: left allmulticast mode [ 110.334092][ T6735] bridge_slave_1: left promiscuous mode [ 110.353530][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.414254][ T6735] bond0: (slave bond_slave_0): Releasing backup interface [ 110.484321][ T6735] bond0: (slave bond_slave_1): Releasing backup interface [ 110.624706][ T6735] team0: Port device team_slave_0 removed [ 110.698036][ T6735] team0: Port device team_slave_1 removed [ 110.708170][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.737829][ T6735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.770666][ T6735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.784220][ T6735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.797311][ T6735] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.819347][ T6751] netlink: 44 bytes leftover after parsing attributes in process `syz.2.219'. [ 111.205972][ T6770] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 111.238935][ T6770] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.338279][ T6770] netlink: 'syz.4.224': attribute type 2 has an invalid length. [ 111.430177][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.225'. [ 111.463296][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.225'. [ 111.680127][ T6772] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZIh~"GQ [ 111.817721][ T6770] : entered promiscuous mode [ 112.102927][ T6803] netlink: 224 bytes leftover after parsing attributes in process `syz.2.230'. [ 112.182709][ T6801] netlink: 'syz.4.229': attribute type 13 has an invalid length. [ 112.212468][ T6801] netlink: 'syz.4.229': attribute type 17 has an invalid length. [ 112.976588][ T6841] netlink: 44 bytes leftover after parsing attributes in process `syz.0.234'. [ 112.994164][ T6801] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 113.077306][ T6833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.232'. [ 113.610406][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 113.693636][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'. [ 113.727050][ T6865] netlink: 'syz.2.241': attribute type 7 has an invalid length. [ 113.752135][ T6869] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 113.771577][ T6865] netlink: 'syz.2.241': attribute type 8 has an invalid length. [ 113.801459][ T6869] netlink: 224 bytes leftover after parsing attributes in process `syz.2.241'. [ 113.823323][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 113.912782][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.240'. [ 114.691257][ T6900] netlink: 'syz.4.249': attribute type 2 has an invalid length. [ 114.921192][ T6911] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 115.339823][ T6921] batadv1: entered promiscuous mode [ 115.360359][ T6921] batadv1: entered allmulticast mode [ 115.400859][ T6921] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 116.449589][ T6974] __nla_validate_parse: 4 callbacks suppressed [ 116.449623][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 116.525503][ T6974] netlink: 'syz.1.265': attribute type 5 has an invalid length. [ 116.565359][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 116.609216][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 116.706768][ T6982] netlink: 'syz.1.265': attribute type 5 has an invalid length. [ 116.759161][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 116.818790][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 116.847276][ T6987] xt_TCPMSS: Only works on TCP SYN packets [ 116.877753][ T1119] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.919137][ T1119] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.970093][ T1119] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.981048][ T6990] netlink: 68 bytes leftover after parsing attributes in process `syz.4.270'. [ 117.010599][ T1119] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.159129][ T6998] netlink: 192 bytes leftover after parsing attributes in process `syz.3.271'. [ 119.341638][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.284'. [ 119.351048][ T7074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.284'. [ 119.589894][ T7078] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 120.041296][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 120.061675][ T7086] hsr_slave_0: left promiscuous mode [ 120.068944][ T7086] hsr_slave_1: left promiscuous mode [ 120.843921][ T7022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.856869][ T7074] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 121.270216][ T7114] netlink: 'syz.3.295': attribute type 39 has an invalid length. [ 121.404554][ T7102] bond2: option all_slaves_active: invalid value (127) [ 121.448905][ T7102] bond2 (unregistering): Released all slaves [ 121.459812][ T7122] __nla_validate_parse: 2 callbacks suppressed [ 121.459829][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 121.513668][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 121.524372][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 121.547926][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 121.667573][ T7127] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 121.732729][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.4.300'. [ 121.746425][ T7130] netlink: 'syz.4.300': attribute type 7 has an invalid length. [ 121.772130][ T7130] netlink: 'syz.4.300': attribute type 8 has an invalid length. [ 121.820090][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 122.081802][ T7138] netlink: 16 bytes leftover after parsing attributes in process `syz.0.303'. [ 122.380907][ T7150] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 122.661706][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 122.904403][ T7176] openvswitch: netlink: Missing key (keys=40, expected=100) [ 122.929425][ T7174] debugfs: '1^!' already exists in 'ieee80211' [ 123.194861][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.316'. [ 123.342895][ T7193] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 124.073721][ T7222] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 124.090552][ T7222] bond2 (unregistering): Released all slaves [ 124.212152][ T7217] lo speed is unknown, defaulting to 1000 [ 124.889739][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.336'. [ 125.147280][ T7272] openvswitch: netlink: Flow key attr not present in new flow. [ 126.137172][ T7286] lo speed is unknown, defaulting to 1000 [ 126.390396][ T7306] syz_tun: entered allmulticast mode [ 126.529075][ T7311] __nla_validate_parse: 4 callbacks suppressed [ 126.529107][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 127.042433][ T7334] bridge1: entered promiscuous mode [ 127.092282][ T7334] bridge1: entered allmulticast mode [ 127.249817][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.358'. [ 127.330575][ T7343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.357'. [ 127.393040][ T7345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.359'. [ 127.438663][ T7348] netlink: 'syz.1.358': attribute type 1 has an invalid length. [ 127.482534][ T7343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.663389][ T7348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.892665][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 127.939281][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.366'. [ 128.122167][ T7373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.226219][ T7380] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 128.451860][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 128.624913][ T7377] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 128.648024][ T7377] netlink: 248 bytes leftover after parsing attributes in process `syz.4.369'. [ 128.782592][ T7392] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 128.936794][ T7392] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.387451][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 129.410520][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 132.766816][ T7415] bond0: entered promiscuous mode [ 132.772089][ T7415] bond_slave_0: entered promiscuous mode [ 132.779586][ T7415] bond_slave_1: entered promiscuous mode [ 132.787540][ T7415] gretap0: entered promiscuous mode [ 132.795880][ T7415] hsr1: entered promiscuous mode [ 132.860990][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.090459][ T7450] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 133.129585][ T7450] netlink: 'syz.1.388': attribute type 2 has an invalid length. [ 133.158108][ T7450] __nla_validate_parse: 5 callbacks suppressed [ 133.158126][ T7450] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.388'. [ 133.281780][ T7459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.392'. [ 133.349588][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 133.454047][ T7450] xt_CT: No such helper "netbios-ns" [ 133.669765][ T7473] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 133.689958][ T7473] netlink: 'syz.4.396': attribute type 8 has an invalid length. [ 134.341958][ T7490] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 134.367918][ T7490] netlink: 'syz.0.400': attribute type 1 has an invalid length. [ 134.391342][ T7490] netlink: 156 bytes leftover after parsing attributes in process `syz.0.400'. [ 134.414108][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 134.493178][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.401'. [ 134.676719][ T7498] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 134.787148][ T7501] netlink: 92 bytes leftover after parsing attributes in process `syz.3.403'. [ 135.046275][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.402'. [ 135.642070][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.408'. [ 135.690252][ T7524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.408'. [ 135.738274][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.746309][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.761547][ T7524] bridge0: entered allmulticast mode [ 136.105445][ T7540] geneve2: entered promiscuous mode [ 136.157523][ T7540] geneve2: entered allmulticast mode [ 136.862719][ T7573] netlink: 'syz.4.421': attribute type 2 has an invalid length. [ 137.158850][ T7582] syzkaller0: entered promiscuous mode [ 137.180734][ T7582] syzkaller0: entered allmulticast mode [ 144.184798][ C1] sched: DL replenish lagged too much [ 196.516934][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.172481][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 206.315952][ T5635] Bluetooth: hci0: command 0x0406 tx timeout [ 210.344447][ T4940] Bluetooth: hci2: command 0x0406 tx timeout [ 256.934992][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 256.942535][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3404/3:b..l P7600/1:b..l [ 256.952609][ C0] rcu: (detected by 0, t=10503 jiffies, g=24313, q=1772 ncpus=2) [ 256.960743][ C0] task:syz.3.428 state:R running task stack:26736 pid:7600 tgid:7598 ppid:5634 task_flags:0x400140 flags:0x00080000 [ 256.976295][ C0] Call Trace: [ 256.979688][ C0] [ 256.983156][ C0] __schedule+0x17d9/0x56c0 [ 256.989288][ C0] ? __lock_acquire+0x683/0x2cf0 [ 256.994822][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 257.000801][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 257.006927][ C0] ? __lock_acquire+0x683/0x2cf0 [ 257.011996][ C0] ? __pfx___schedule+0x10/0x10 [ 257.017339][ C0] ? __lock_acquire+0x683/0x2cf0 [ 257.022823][ C0] preempt_schedule_irq+0x4d/0xa0 [ 257.028161][ C0] irqentry_exit+0x14f/0x8f0 [ 257.034226][ C0] ? trace_irq_disable+0x3b/0x140 [ 257.039660][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 257.045945][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 257.051366][ C0] Code: ff ff ff e8 41 20 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b db c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 21 2f 0a cc 48 8d 3d b8 77 b8 [ 257.074299][ C0] RSP: 0018:ffffc90005a07200 EFLAGS: 00000286 [ 257.082548][ C0] RAX: f9d20b8fdbec6800 RBX: 0000000000000000 RCX: 0000000000000046 [ 257.091660][ C0] RDX: 0000000041ab91b9 RSI: ffffffff8e4afaa3 RDI: ffffffff8c4bd280 [ 257.099820][ C0] RBP: ffffffff8176f21f R08: ffffffff8176f21f R09: 0000000000000000 [ 257.108443][ C0] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002 [ 257.117402][ C0] R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000246 [ 257.126433][ C0] ? unwind_next_frame+0x8f/0x2550 [ 257.131834][ C0] ? unwind_next_frame+0x8f/0x2550 [ 257.137136][ C0] ? __x64_sys_bpf+0xba/0xd0 [ 257.142724][ C0] ? unwind_next_frame+0x8f/0x2550 [ 257.148220][ C0] unwind_next_frame+0xac/0x2550 [ 257.153620][ C0] ? unwind_next_frame+0x8f/0x2550 [ 257.158863][ C0] ? __sys_bpf+0xd0d/0xd90 [ 257.163666][ C0] ? unwind_next_frame+0x8f/0x2550 [ 257.169429][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 257.176682][ C0] arch_stack_walk+0x11b/0x150 [ 257.181890][ C0] ? __x64_sys_bpf+0xba/0xd0 [ 257.186879][ C0] stack_trace_save+0xa9/0x100 [ 257.192941][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 257.198544][ C0] save_stack+0x122/0x230 [ 257.203357][ C0] ? __pfx_save_stack+0x10/0x10 [ 257.208561][ C0] ? __free_frozen_pages+0xc1e/0xd10 [ 257.214159][ C0] ? __slab_free+0x274/0x2c0 [ 257.219097][ C0] ? qlist_free_all+0x99/0x100 [ 257.224182][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 257.230022][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 257.235159][ C0] ? __kvmalloc_node_noprof+0x4cd/0x860 [ 257.240735][ C0] ? bpf_compute_postorder+0x131/0x970 [ 257.246314][ C0] ? bpf_check+0x3059/0x5310 [ 257.251018][ C0] ? bpf_prog_load+0x1577/0x1c00 [ 257.256032][ C0] ? __sys_bpf+0xd0d/0xd90 [ 257.260473][ C0] ? __x64_sys_bpf+0xba/0xd0 [ 257.265397][ C0] ? page_ext_put+0x97/0xc0 [ 257.270404][ C0] __reset_page_owner+0x71/0x1f0 [ 257.276067][ C0] __free_frozen_pages+0xc1e/0xd10 [ 257.281473][ C0] __slab_free+0x274/0x2c0 [ 257.286132][ C0] ? qlist_free_all+0x8e/0x100 [ 257.290918][ C0] qlist_free_all+0x99/0x100 [ 257.295625][ C0] ? bpf_compute_postorder+0x131/0x970 [ 257.301230][ C0] kasan_quarantine_reduce+0x148/0x160 [ 257.306991][ C0] __kasan_slab_alloc+0x22/0x80 [ 257.312247][ C0] __kvmalloc_node_noprof+0x4cd/0x860 [ 257.318626][ C0] ? __kvmalloc_node_noprof+0x35c/0x860 [ 257.324994][ C0] ? bpf_compute_postorder+0x131/0x970 [ 257.330698][ C0] bpf_compute_postorder+0x131/0x970 [ 257.337157][ C0] ? check_subprogs+0x5c4/0x680 [ 257.342067][ C0] bpf_check+0x3059/0x5310 [ 257.346519][ C0] ? pcpu_memcg_post_alloc_hook+0x2a4/0x630 [ 257.352457][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 257.357979][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 257.363459][ C0] ? ktime_get_with_offset+0x93/0x2d0 [ 257.368964][ C0] ? __pfx_bpf_check+0x10/0x10 [ 257.373930][ C0] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 257.379153][ C0] ? security_bpf_prog_load+0x125/0x3c0 [ 257.384900][ C0] bpf_prog_load+0x1577/0x1c00 [ 257.389710][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 257.394973][ C0] __sys_bpf+0xd0d/0xd90 [ 257.399690][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 257.404924][ C0] ? do_futex+0x3e7/0x4e0 [ 257.409857][ C0] ? rcu_is_watching+0x15/0xb0 [ 257.415008][ C0] __x64_sys_bpf+0xba/0xd0 [ 257.419585][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.426194][ C0] do_syscall_64+0x174/0x580 [ 257.431596][ C0] ? trace_irq_disable+0x3b/0x140 [ 257.436774][ C0] ? clear_bhb_loop+0x40/0x90 [ 257.441569][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.447757][ C0] RIP: 0033:0x7fb9d199de59 [ 257.452676][ C0] RSP: 002b:00007fb9d27b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.462001][ C0] RAX: ffffffffffffffda RBX: 00007fb9d1c25fa0 RCX: 00007fb9d199de59 [ 257.470095][ C0] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 257.478732][ C0] RBP: 00007fb9d1a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 257.486985][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.494967][ C0] R13: 00007fb9d1c26038 R14: 00007fb9d1c25fa0 R15: 00007fff23a10308 [ 257.503168][ C0] [ 257.506427][ C0] task:kworker/u8:12 state:R running task stack:22200 pid:3404 tgid:3404 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 257.521643][ C0] Workqueue: krds_cp_wq#4/5 rds_send_worker [ 257.527576][ C0] Call Trace: [ 257.530862][ C0] [ 257.533827][ C0] __schedule+0x17d9/0x56c0 [ 257.538374][ C0] ? unwind_next_frame+0x8f/0x2550 [ 257.543788][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 257.548886][ C0] ? __pfx___schedule+0x10/0x10 [ 257.554713][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 257.560395][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 257.565878][ C0] ? ip6t_do_table+0x13c4/0x15b0 [ 257.570960][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 257.576630][ C0] preempt_schedule_common+0x82/0xd0 [ 257.582135][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 257.587021][ C0] preempt_schedule_thunk+0x16/0x40 [ 257.592260][ C0] __local_bh_enable_ip+0xe1/0x130 [ 257.597974][ C0] ip6t_do_table+0x13c4/0x15b0 [ 257.603517][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 257.608578][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 257.614114][ C0] ? nf_nat_ipv6_local_fn+0x21d/0x3c0 [ 257.619791][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 257.625371][ C0] nf_hook_slow+0xc5/0x220 [ 257.630261][ C0] ? __pfx_dst_output+0x10/0x10 [ 257.635490][ C0] nf_hook+0x22a/0x3a0 [ 257.640112][ C0] ? nf_hook+0xa1/0x3a0 [ 257.644561][ C0] ? __pfx_nf_hook+0x10/0x10 [ 257.649377][ C0] ? __pfx_dst_output+0x10/0x10 [ 257.654450][ C0] ? ip6_xmit+0x273/0x1a60 [ 257.659256][ C0] ip6_xmit+0x10d1/0x1a60 [ 257.663789][ C0] ? __pfx_dst_output+0x10/0x10 [ 257.668700][ C0] ? ip6_xmit+0x273/0x1a60 [ 257.674200][ C0] ? ip6_dst_check+0xe2/0x7e0 [ 257.679202][ C0] ? __pfx_ip6_xmit+0x10/0x10 [ 257.684446][ C0] ? inet6_csk_xmit+0xf4/0x660 [ 257.689593][ C0] ? inet6_csk_xmit+0xf4/0x660 [ 257.694506][ C0] ? ip6_dst_check+0x5e3/0x7e0 [ 257.699764][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 257.705176][ C0] inet6_csk_xmit+0x397/0x660 [ 257.710398][ C0] ? inet6_csk_xmit+0xf4/0x660 [ 257.715503][ C0] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 257.720880][ C0] __tcp_transmit_skb+0x2640/0x47c0 [ 257.726680][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 257.732452][ C0] ? tcp_init_nondata_skb+0x1f7/0x370 [ 257.738269][ C0] ? __tcp_send_ack+0x21a/0x4f0 [ 257.743342][ C0] tcp_validate_incoming+0x1483/0x2440 [ 257.749284][ C0] ? ktime_get+0x45/0x220 [ 257.754255][ C0] tcp_rcv_established+0xc29/0x2910 [ 257.760390][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 257.766718][ C0] ? __pfx_ip6_dst_check+0x10/0x10 [ 257.772800][ C0] ? rcuref_put+0x13f/0x170 [ 257.777508][ C0] ? dst_release+0x79/0x1b0 [ 257.782483][ C0] tcp_v6_do_rcv+0x88a/0x1c70 [ 257.787553][ C0] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 257.793105][ C0] __release_sock+0x1de/0x390 [ 257.799520][ C0] release_sock+0x190/0x260 [ 257.805833][ C0] ? __pfx_rds_tcp_xmit_path_prepare+0x10/0x10 [ 257.812762][ C0] rds_send_xmit+0x45e/0x28a0 [ 257.817758][ C0] ? look_up_lock_class+0x57/0x110 [ 257.824490][ C0] ? register_lock_class+0x31/0x2e0 [ 257.830330][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 257.835986][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 257.842278][ C0] rds_send_worker+0x7d/0x2e0 [ 257.847254][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 257.853095][ C0] process_scheduled_works+0xa8e/0x14e0 [ 257.859154][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.865517][ C0] ? assign_work+0x3cf/0x5d0 [ 257.870586][ C0] worker_thread+0xa47/0xfb0 [ 257.875767][ C0] ? __kthread_parkme+0x71/0x1f0 [ 257.881063][ C0] kthread+0x388/0x470 [ 257.885364][ C0] ? __pfx_worker_thread+0x10/0x10 [ 257.890796][ C0] ? __pfx_kthread+0x10/0x10 [ 257.896407][ C0] ret_from_fork+0x514/0xb70 [ 257.901212][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 257.906619][ C0] ? __switch_to+0xc89/0x1420 [ 257.911595][ C0] ? __pfx_kthread+0x10/0x10 [ 257.916276][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.921355][ C0] [ 257.924598][ C0] rcu: rcu_preempt kthread starved for 9614 jiffies! g24313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 257.935995][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 257.946158][ C0] rcu: RCU grace-period kthread stack dump: [ 257.952228][ C0] task:rcu_preempt state:R running task stack:26848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 257.965921][ C0] Call Trace: [ 257.969392][ C0] [ 257.972345][ C0] __schedule+0x17d9/0x56c0 [ 257.977246][ C0] ? __lock_acquire+0x683/0x2cf0 [ 257.982543][ C0] ? __pfx___schedule+0x10/0x10 [ 257.987528][ C0] ? schedule+0x90/0x2b0 [ 257.991807][ C0] schedule+0x164/0x2b0 [ 257.996010][ C0] schedule_timeout+0x152/0x2c0 [ 258.000906][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 258.006317][ C0] ? __pfx_process_timeout+0x10/0x10 [ 258.011873][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 258.018211][ C0] ? prepare_to_swait_event+0x322/0x350 [ 258.023900][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 258.028809][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 258.035747][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 258.041158][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 258.046613][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 258.051688][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 258.056943][ C0] ? __kthread_parkme+0x71/0x1f0 [ 258.062004][ C0] ? __kthread_parkme+0x196/0x1f0 [ 258.067231][ C0] kthread+0x388/0x470 [ 258.071350][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 258.076820][ C0] ? __pfx_kthread+0x10/0x10 [ 258.081605][ C0] ret_from_fork+0x514/0xb70 [ 258.086537][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 258.091826][ C0] ? __switch_to+0xc89/0x1420 [ 258.097038][ C0] ? __pfx_kthread+0x10/0x10 [ 258.101920][ C0] ret_from_fork_asm+0x1a/0x30 [ 258.106956][ C0] [ 258.110194][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 258.116689][ C0] Sending NMI from CPU 0 to CPUs 1: [ 258.122219][ C1] NMI backtrace for cpu 1 [ 258.122254][ C1] CPU: 1 UID: 0 PID: 7063 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 258.122291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.122302][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 258.122334][ C1] RIP: 0010:lock_acquire+0x10a/0x350 [ 258.122360][ C1] Code: 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 e8 da 02 00 00 48 83 c4 28 <48> c7 c7 a3 fa 4a 8e e8 2a 3f 2c 0a b8 ff ff ff ff 65 0f c1 05 ed [ 258.122374][ C1] RSP: 0018:ffffc90000a08560 EFLAGS: 00000096 [ 258.122388][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 258.122398][ C1] RDX: 00000000a42637f2 RSI: 00000000db147cf1 RDI: ffff88802f088000 [ 258.122409][ C1] RBP: ffffffff8176f21f R08: ffffffff8176f21f R09: 0000000000000000 [ 258.122420][ C1] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002 [ 258.122438][ C1] R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000246 [ 258.122452][ C1] FS: 0000000000000000(0000) GS:ffff888125060000(0000) knlGS:0000000000000000 [ 258.122465][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 258.122477][ C1] CR2: 00007ffdb477de60 CR3: 00000000631b8000 CR4: 00000000003526f0 [ 258.122492][ C1] Call Trace: [ 258.122498][ C1] [ 258.122509][ C1] ? unwind_next_frame+0x8f/0x2550 [ 258.122526][ C1] ? wg_cookie_add_mac_to_packet+0x57/0x1a0 [ 258.122545][ C1] ? unwind_next_frame+0x8f/0x2550 [ 258.122564][ C1] unwind_next_frame+0xac/0x2550 [ 258.122580][ C1] ? unwind_next_frame+0x8f/0x2550 [ 258.122597][ C1] ? compute_mac1+0x177/0x200 [ 258.122614][ C1] ? unwind_next_frame+0x8f/0x2550 [ 258.122630][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 258.122651][ C1] arch_stack_walk+0x11b/0x150 [ 258.122670][ C1] ? wg_cookie_add_mac_to_packet+0x57/0x1a0 [ 258.122689][ C1] stack_trace_save+0xa9/0x100 [ 258.122708][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 258.122729][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 258.122750][ C1] kasan_save_track+0x3e/0x80 [ 258.122770][ C1] ? kasan_save_track+0x3e/0x80 [ 258.122789][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 258.122808][ C1] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 258.122826][ C1] ? skb_clone+0x212/0x3a0 [ 258.122850][ C1] ? can_can_gw_rcv+0x49c/0xfd0 [ 258.122874][ C1] ? can_rcv_filter+0x126/0x7a0 [ 258.122890][ C1] ? can_receive+0x2c6/0x440 [ 258.122906][ C1] ? can_rcv+0x1f9/0x330 [ 258.122922][ C1] ? process_backlog+0xbf0/0x1860 [ 258.122942][ C1] ? __napi_poll+0xaa/0x330 [ 258.122958][ C1] ? net_rx_action+0x61d/0xf50 [ 258.122977][ C1] ? handle_softirqs+0x225/0x840 [ 258.122995][ C1] ? do_softirq+0x76/0xd0 [ 258.123011][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 258.123028][ C1] ? blake2s_compress+0xfa/0x1c00 [ 258.123051][ C1] ? blake2s_update+0x140/0x450 [ 258.123074][ C1] ? compute_mac1+0x177/0x200 [ 258.123089][ C1] ? wg_cookie_add_mac_to_packet+0x57/0x1a0 [ 258.123122][ C1] __kasan_slab_alloc+0x6c/0x80 [ 258.123144][ C1] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 258.123162][ C1] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 258.123179][ C1] ? skb_clone+0x212/0x3a0 [ 258.123201][ C1] ? skb_clone+0x212/0x3a0 [ 258.123227][ C1] skb_clone+0x212/0x3a0 [ 258.123250][ C1] ? can_can_gw_rcv+0x48f/0xfd0 [ 258.123273][ C1] can_can_gw_rcv+0x49c/0xfd0 [ 258.123296][ C1] ? lock_acquire+0x106/0x350 [ 258.123320][ C1] ? __pfx_can_can_gw_rcv+0x10/0x10 [ 258.123343][ C1] can_rcv_filter+0x126/0x7a0 [ 258.123361][ C1] ? can_receive+0x16c/0x440 [ 258.123378][ C1] can_receive+0x2c6/0x440 [ 258.123397][ C1] can_rcv+0x1f9/0x330 [ 258.123413][ C1] ? __pfx_can_rcv+0x10/0x10 [ 258.123435][ C1] process_backlog+0xbf0/0x1860 [ 258.123457][ C1] ? process_backlog+0x3c3/0x1860 [ 258.123481][ C1] __napi_poll+0xaa/0x330 [ 258.123500][ C1] net_rx_action+0x61d/0xf50 [ 258.123524][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 258.123554][ C1] handle_softirqs+0x225/0x840 [ 258.123573][ C1] ? do_softirq+0x76/0xd0 [ 258.123592][ C1] ? kernel_fpu_end+0x62/0x80 [ 258.123609][ C1] do_softirq+0x76/0xd0 [ 258.123626][ C1] [ 258.123631][ C1] [ 258.123637][ C1] __local_bh_enable_ip+0xf8/0x130 [ 258.123654][ C1] blake2s_compress+0xfa/0x1c00 [ 258.123683][ C1] ? __up_read+0x29c/0x930 [ 258.123700][ C1] ? __pfx___up_read+0x10/0x10 [ 258.123717][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 258.123740][ C1] ? __lock_acquire+0x683/0x2cf0 [ 258.123764][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 258.123802][ C1] blake2s_update+0x140/0x450 [ 258.123827][ C1] compute_mac1+0x177/0x200 [ 258.123844][ C1] ? __pfx_compute_mac1+0x10/0x10 [ 258.123865][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 258.123889][ C1] wg_cookie_add_mac_to_packet+0x57/0x1a0 [ 258.123909][ C1] wg_packet_handshake_send_worker+0x1aa/0x370 [ 258.123933][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 258.123965][ C1] ? rcu_is_watching+0x15/0xb0 [ 258.123990][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 258.124008][ C1] process_scheduled_works+0xa8e/0x14e0 [ 258.124035][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.124055][ C1] ? assign_work+0x3cf/0x5d0 [ 258.124073][ C1] worker_thread+0xa47/0xfb0 [ 258.124096][ C1] ? __kthread_parkme+0x71/0x1f0 [ 258.124119][ C1] kthread+0x388/0x470 [ 258.124140][ C1] ? __pfx_worker_thread+0x10/0x10 [ 258.124157][ C1] ? __pfx_kthread+0x10/0x10 [ 258.124179][ C1] ret_from_fork+0x514/0xb70 [ 258.124202][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 258.124225][ C1] ? __switch_to+0xc89/0x1420 [ 258.124247][ C1] ? __pfx_kthread+0x10/0x10 [ 258.124269][ C1] ret_from_fork_asm+0x1a/0x30 [ 258.124290][ C1] [ 266.537224][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.577328][ T4940] Bluetooth: hci1: command tx timeout