last executing test programs: 3.290186198s ago: executing program 1 (id=7): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000001c0)={r2, r2, 0x8, 0x0, 0x0, 0x4, 0x47, 0x15c2, 0x81, 0x9, 0x0, 0x4, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000180)={@none}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.071990802s ago: executing program 3 (id=4): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x24, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x24}}, 0x8004) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x800}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$AUDIT_TRIM(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3f6, 0x20, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x404c000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x54}}, 0x0) 3.064863208s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x19, 0x0, 0x41100, 0x0, '\x00', r0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x8080) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0x100000000) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000240)=r5) 2.993213694s ago: executing program 1 (id=8): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) recvmmsg(r4, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x21f}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f0000001940)=""/4102, 0x1006}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f00000005c0)=""/52}, {&(0x7f0000000600)=""/61}, {&(0x7f0000000640)}, {&(0x7f0000004ac0)=""/239}, {&(0x7f0000004bc0)=""/155}, {&(0x7f0000004c80)=""/4096}, {&(0x7f0000005c80)=""/151}], 0x6, 0x0, 0xffffff7d}, 0x5}, {{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000340)=""/170, 0xaa}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x9, &(0x7f0000000400)=""/39, 0x27}, 0x2}], 0x5, 0x20, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$l2tp6(0xa, 0x2, 0x73) close(r9) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x42e}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440f0}, 0x4) 2.663108781s ago: executing program 3 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r4}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000019"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4050000000000006110aa000000000063010d000000000095000900000000001a17c24b5bb4348cb91f7cde20689f79f476601b623507138b53b1738324220be6b2d1aeffc043807b72ef07f90a90c4ccab0a75d6da68296782840f1b2f4dfed3ea765f29e5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) getpeername$inet6(r5, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=')\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) 2.524180154s ago: executing program 2 (id=3): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="660a000000000000611183000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 2.357513188s ago: executing program 2 (id=10): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "cbb2fd3f672d14425aacb92be3da827479a24338a2c0c75226e9decabaa91898", "72400b87b3dd9c2f7dc0d06ece5e42cb179918de99d4391a3670a351bc61912c", "581f875d4403a678dda39f3057d5a0eb80bae57823a202367fd58181d4bad6ab", "0738a62146b4cc3da01d39a1b2c2fdd173ae57f65c2db93e41d8ddd021e1a8e0", "249b31d0dbbea85d1ffea921785f94479c58ec423779c41375cda3cc2bb127c4", "3244ac5a9adf601631fd6a43"}}) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000016000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3a) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x0, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a00000c"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4000) (async, rerun: 64) r2 = socket(0x2000000000000021, 0x2, 0x2) (rerun: 64) shutdown(r2, 0x2) (async) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081}, 0x40000) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xf}, &(0x7f0000000100)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x7b, "9182c0a3f56560910ff55fec03a67bc548a22c7b8ae7d1947f35cb846739d91002f3bd5b3e5df7b06ca8fb129a2935fdfe9e3ec1cc07a7cfb51421f5f17cb1963faa13f7ea4c9ee403da6a70dda0511aafe75eddda0c76bafcb0cc70e9acd9c2ba988beb01d28ee6f9d699977cb7e6188ca2aa30141feee66c8a85"}, &(0x7f0000000180)=0x83) (async, rerun: 32) socket(0xb, 0x6, 0x3ff) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async, rerun: 32) socketpair(0x23, 0x2, 0x4, &(0x7f0000005fc0)) (rerun: 32) 2.338421229s ago: executing program 1 (id=11): socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_dellink={0x20, 0x11, 0x5, 0x40000000, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40010}}, 0x20}}, 0x800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 2.305354829s ago: executing program 3 (id=12): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0xffff05f1, 0x2, 0x1000}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x20042800) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x3311, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}]]}, 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) 2.052874902s ago: executing program 1 (id=13): shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x98, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x49144}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xf3e, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x2}}]}]}}}]}, 0x98}}, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r4, 0x75fb3000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getuid() sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES32=r6, @ANYRES8=r4, @ANYRES32=r5], 0x24}}, 0x0) 2.016307731s ago: executing program 2 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r1, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000022000106000200ea6356b50000000000000000000000aa"], 0x1c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team_slave_0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, &(0x7f0000000300)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r7, 0x34da2000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r7, @ANYRES16=0x0, @ANYBLOB="000427bd7000fddbdf25060000000a00180003030303030300000a00e800ffffffffffff00000800050003000000"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x810) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="40000000a2517a0a"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) 1.839341153s ago: executing program 1 (id=15): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d660671f3e121710e8537c4c3060c6a41d106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r1 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 1.838939848s ago: executing program 3 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000a0a0101000000000000"], 0x20}}, 0x8000884) 1.63760673s ago: executing program 2 (id=17): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="9e91", 0x2}], 0x1}, 0xc001) 1.562336172s ago: executing program 1 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.519757521s ago: executing program 3 (id=19): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0xa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.35541243s ago: executing program 2 (id=20): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x0, 0x418, 0x418, 0x0, 0x118, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@private2, @private2, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_hsr\x00', 'ipvlan1\x00', {}, {0xff}, 0x63, 0xf9, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @ipv6=@mcast2, 0x1, 0x1a, 0xff}}}, {{@ipv6={@remote, @private0, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_batadv\x00', 'ipvlan0\x00', {}, {}, 0x88, 0x9}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff, 0x0, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'ip6erspan0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x87, 0x3, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@rand_addr=0x64010101, 0x24, 0x2f, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@remote, 0x32, 0x1d, 0x8}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0xffffff00, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xffffff00], 'wlan1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x2b, 0x80, 0x6, 0x40}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fff, 0xac, 0x7, 0x1, 0x0, "19d25cd206333f4d699dba98ab1354b509a278b9ffa467d2bf9404628fa167ab3335dd225366042c9057bc137f4edbce3f5b911441992c07eaced70d4a79b60e"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 0s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) (async) r1 = socket$alg(0x26, 0x5, 0x0) close(r1) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)={0x4d4, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2cc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x264, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x250, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x108, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "083d31ab451a62fafe883531e6aae0c35313c71642c134fc3082b671ab5a0a02e7c8c26089c031fa612acd08cf2b77111a6fb51563f2fda859931be76b4e90d1393a684dacad8bc0af82c815a0530a8a2b9de467e61b18a9cf7b"}, @NFTA_DATA_VALUE={0x4f, 0x1, "be04eeca90bb5361963c659ec92e8feb3be0f57722777f2c82d49fd5797ab7178cb39342b7e23bd95689b16c846ab26ed1f58ab4f68857f208c8ce051968ecc5af87e4bb9ac19402698c73"}]}, @NFTA_IMMEDIATE_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "61f1e93ea3943a17ace1c01a63fb3c0b165db740c7b2f1d7d103c1d901904989179a19bfde24df52ccbabbf944a4e178f36248aa0137fe85b4c2b6271ae48d4ee1d451c4ec4676abf540e6c216a08c219a4912d677eafc2cf47394cba256f3139debf1e981fb3ef191f92f193d24bfbcbb8eacfcb27d850a1a7ed9be67b34282ae51a07c27960f0585f572a52820b249ffc0014c5654c59d99695c16d278ce9c249643f162f947025eb6c32e0008970b93620480429b55405dc7b55ed55e6a4945932096c323bda67fcdb0007540e8"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x110, 0x4, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x43}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fff}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x34, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4c}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x34}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x42}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "75dd9db9b1f09e4a0d0e4fabe75ea547fecd3a6491eb435b2c81aadd6891ce903e3ce1229949e31cc067c6d3197d29d6a18a5c245e9607d581587b9e874c4749f1951297cfc0fb4b055e4ad750886607467418e25ba789c5092d9bc303c9b9a2ab117af37bbc721b74"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x66}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x80}, 0x4040) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x30000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.11' (ED25519) to the list of known hosts. [ 85.202692][ T5816] cgroup: Unknown subsys name 'net' [ 85.379118][ T5816] cgroup: Unknown subsys name 'cpuset' [ 85.388908][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.263598][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.898376][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.915203][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.933412][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.940752][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.950038][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.965279][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.972547][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.982844][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.983245][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.990343][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.007456][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.024957][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.045339][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.053689][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.071660][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.086926][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.089251][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.097920][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.101175][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.108856][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.124699][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.126146][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.134277][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.140169][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.158262][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.882516][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 90.913695][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 90.934681][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.004524][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.111297][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 91.290307][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.298787][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.306916][ T5828] bridge_slave_0: entered allmulticast mode [ 91.314393][ T5828] bridge_slave_0: entered promiscuous mode [ 91.357485][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.364643][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.372023][ T5837] bridge_slave_0: entered allmulticast mode [ 91.379796][ T5837] bridge_slave_0: entered promiscuous mode [ 91.401631][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.408941][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.416301][ T5828] bridge_slave_1: entered allmulticast mode [ 91.424208][ T5828] bridge_slave_1: entered promiscuous mode [ 91.471509][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.479629][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.487754][ T5836] bridge_slave_0: entered allmulticast mode [ 91.496812][ T5836] bridge_slave_0: entered promiscuous mode [ 91.504114][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.511563][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.518954][ T5837] bridge_slave_1: entered allmulticast mode [ 91.527055][ T5837] bridge_slave_1: entered promiscuous mode [ 91.574292][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.581632][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.589374][ T5839] bridge_slave_0: entered allmulticast mode [ 91.597297][ T5839] bridge_slave_0: entered promiscuous mode [ 91.605178][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.612324][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.620184][ T5836] bridge_slave_1: entered allmulticast mode [ 91.627627][ T5836] bridge_slave_1: entered promiscuous mode [ 91.666226][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.679519][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.689732][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.697481][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.704639][ T5839] bridge_slave_1: entered allmulticast mode [ 91.713252][ T5839] bridge_slave_1: entered promiscuous mode [ 91.754567][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.813370][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.839490][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.849532][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.858089][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.865478][ T5826] bridge_slave_0: entered allmulticast mode [ 91.872701][ T5826] bridge_slave_0: entered promiscuous mode [ 91.897125][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.920660][ T43] cfg80211: failed to load regulatory.db [ 91.933346][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.971978][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.979773][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.987390][ T5826] bridge_slave_1: entered allmulticast mode [ 91.994650][ T5826] bridge_slave_1: entered promiscuous mode [ 92.007994][ T5828] team0: Port device team_slave_0 added [ 92.033987][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.048922][ T5837] team0: Port device team_slave_0 added [ 92.071256][ T5828] team0: Port device team_slave_1 added [ 92.081021][ T5839] team0: Port device team_slave_0 added [ 92.091112][ T5839] team0: Port device team_slave_1 added [ 92.114116][ T5837] team0: Port device team_slave_1 added [ 92.155528][ T5148] Bluetooth: hci0: command tx timeout [ 92.219961][ T5836] team0: Port device team_slave_0 added [ 92.235635][ T5148] Bluetooth: hci3: command tx timeout [ 92.235644][ T5841] Bluetooth: hci2: command tx timeout [ 92.235827][ T5841] Bluetooth: hci4: command tx timeout [ 92.241393][ T5148] Bluetooth: hci1: command tx timeout [ 92.263889][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.274972][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.281944][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.309071][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.322479][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.329557][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.355658][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.369053][ T5836] team0: Port device team_slave_1 added [ 92.406413][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.431268][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.441386][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.467914][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.479880][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.487663][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.513965][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.549039][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.556304][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.582467][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.618493][ T5826] team0: Port device team_slave_0 added [ 92.629500][ T5826] team0: Port device team_slave_1 added [ 92.637201][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.644263][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.670578][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.682772][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.690860][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.717053][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.763898][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.771157][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.797333][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.850371][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.857688][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.883811][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.896796][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.903780][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.929742][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.052823][ T5837] hsr_slave_0: entered promiscuous mode [ 93.059434][ T5837] hsr_slave_1: entered promiscuous mode [ 93.071419][ T5836] hsr_slave_0: entered promiscuous mode [ 93.078331][ T5836] hsr_slave_1: entered promiscuous mode [ 93.085595][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.093386][ T5836] Cannot create hsr debugfs directory [ 93.104306][ T5839] hsr_slave_0: entered promiscuous mode [ 93.113530][ T5839] hsr_slave_1: entered promiscuous mode [ 93.126000][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.134164][ T5839] Cannot create hsr debugfs directory [ 93.165267][ T5828] hsr_slave_0: entered promiscuous mode [ 93.172114][ T5828] hsr_slave_1: entered promiscuous mode [ 93.183154][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.191086][ T5828] Cannot create hsr debugfs directory [ 93.353183][ T5826] hsr_slave_0: entered promiscuous mode [ 93.360550][ T5826] hsr_slave_1: entered promiscuous mode [ 93.368011][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.376977][ T5826] Cannot create hsr debugfs directory [ 93.854823][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.886690][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.913187][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.927983][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.997467][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.011607][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.035857][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.062564][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.131663][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.142338][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.179146][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.194086][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.235520][ T5148] Bluetooth: hci0: command tx timeout [ 94.284163][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.315674][ T5833] Bluetooth: hci4: command tx timeout [ 94.315989][ T5841] Bluetooth: hci3: command tx timeout [ 94.321109][ T5833] Bluetooth: hci2: command tx timeout [ 94.332232][ T5148] Bluetooth: hci1: command tx timeout [ 94.350511][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.394057][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.413108][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.437887][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.498521][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.512168][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.523421][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.537918][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.578233][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.618700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.626052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.636920][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.644064][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.696458][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.770358][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.801333][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.843624][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.850818][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.877185][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.884337][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.949048][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.990575][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.001447][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.008722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.073590][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.080846][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.106531][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.160519][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.225961][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.294181][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.320960][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.328181][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.389042][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.396272][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.421436][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.428843][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.447457][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.454668][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.713115][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.738105][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.857315][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.934381][ T5828] veth0_vlan: entered promiscuous mode [ 95.987540][ T5828] veth1_vlan: entered promiscuous mode [ 96.122192][ T5839] veth0_vlan: entered promiscuous mode [ 96.172432][ T5828] veth0_macvtap: entered promiscuous mode [ 96.184723][ T5839] veth1_vlan: entered promiscuous mode [ 96.197161][ T5828] veth1_macvtap: entered promiscuous mode [ 96.215777][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.264451][ T5837] veth0_vlan: entered promiscuous mode [ 96.291405][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.315367][ T5148] Bluetooth: hci0: command tx timeout [ 96.322690][ T5837] veth1_vlan: entered promiscuous mode [ 96.343366][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.388903][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.396444][ T5833] Bluetooth: hci4: command tx timeout [ 96.396552][ T5148] Bluetooth: hci3: command tx timeout [ 96.405241][ T5833] Bluetooth: hci2: command tx timeout [ 96.413043][ T5148] Bluetooth: hci1: command tx timeout [ 96.449160][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.458191][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.467313][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.478866][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.533752][ T5839] veth0_macvtap: entered promiscuous mode [ 96.568595][ T5839] veth1_macvtap: entered promiscuous mode [ 96.669678][ T5826] veth0_vlan: entered promiscuous mode [ 96.713325][ T5837] veth0_macvtap: entered promiscuous mode [ 96.754619][ T5837] veth1_macvtap: entered promiscuous mode [ 96.772996][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.788309][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.812748][ T5826] veth1_vlan: entered promiscuous mode [ 96.819425][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.832231][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.832240][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.849810][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.858665][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.867431][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.961201][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.974389][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.986847][ T5836] veth0_vlan: entered promiscuous mode [ 96.997388][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.008128][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.032126][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.043836][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.055540][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.064289][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.104482][ T5826] veth0_macvtap: entered promiscuous mode [ 97.134077][ T5836] veth1_vlan: entered promiscuous mode [ 97.154090][ T5826] veth1_macvtap: entered promiscuous mode [ 97.185992][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.240390][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.310281][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.318210][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.324358][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.359914][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.359942][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.369297][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.380476][ T5918] Bluetooth: MGMT ver 1.23 [ 97.394502][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.482253][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.509220][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.573428][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.601241][ T5836] veth0_macvtap: entered promiscuous mode [ 97.604996][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.623015][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.649357][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.683809][ T5836] veth1_macvtap: entered promiscuous mode [ 97.798964][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.827493][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.860408][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.953931][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.992075][ T5928] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 98.003642][ T5931] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 98.015748][ T5931] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 98.023703][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.033774][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.049505][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.051449][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.073032][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.088181][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.131721][ T5928] syz_tun: entered promiscuous mode [ 98.153108][ T5928] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 98.213852][ T5932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.342654][ T5932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.406149][ T5148] Bluetooth: hci0: command tx timeout [ 98.454349][ T5932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.475140][ T5148] Bluetooth: hci1: command tx timeout [ 98.480651][ T5833] Bluetooth: hci2: command tx timeout [ 98.480682][ T5830] Bluetooth: hci4: command tx timeout [ 98.491610][ T5841] Bluetooth: hci3: command tx timeout [ 98.531017][ T5941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 98.671513][ T5932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.837205][ T5952] pim6reg: entered allmulticast mode [ 98.910650][ T5952] pim6reg: left allmulticast mode [ 99.000622][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.017465][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.102534][ T30] audit: type=1804 audit(1748602493.958:2): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.14" name="/newroot/2/cgroup.controllers" dev="tmpfs" ino=28 res=1 errno=0 [ 99.177302][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.212484][ T30] audit: type=1800 audit(1748602493.958:3): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="cgroup.controllers" dev="tmpfs" ino=28 res=0 errno=0 [ 99.240683][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.250124][ T5932] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.254145][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 99.337115][ T5932] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.442299][ T5932] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.557348][ C0] hrtimer: interrupt took 23215584 ns [ 205.914763][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 205.921992][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5847/1:b..l [ 205.930217][ C1] rcu: (detected by 1, t=10506 jiffies, g=11333, q=1401 ncpus=2) [ 205.938056][ C1] task:udevd state:R running task stack:26376 pid:5847 tgid:5847 ppid:1 task_flags:0x40054c flags:0x00004006 [ 205.951957][ C1] Call Trace: [ 205.955262][ C1] [ 205.958248][ C1] __schedule+0x16f5/0x4d00 [ 205.962828][ C1] ? __lock_acquire+0xab9/0xd20 [ 205.967740][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 205.973071][ C1] ? __pfx___schedule+0x10/0x10 [ 205.977960][ C1] ? __lock_acquire+0xab9/0xd20 [ 205.982856][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 205.988173][ C1] preempt_schedule_irq+0xb5/0x150 [ 205.993310][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 205.999072][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 206.004910][ C1] irqentry_exit+0x6f/0x90 [ 206.009354][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 206.014833][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 206.020150][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb ba fd 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 206.039791][ C1] RSP: 0018:ffffc9000499ee78 EFLAGS: 00000206 [ 206.045886][ C1] RAX: 1c9b24e453218300 RBX: 0000000000000000 RCX: 1c9b24e453218300 [ 206.053903][ C1] RDX: 0000000000000000 RSI: ffffffff8db588e9 RDI: ffffffff8be26400 [ 206.061909][ C1] RBP: ffffffff81724865 R08: 0000000000000000 R09: ffffffff81724865 [ 206.069906][ C1] R10: ffffc9000499f098 R11: fffff52000933e15 R12: 0000000000000002 [ 206.077898][ C1] R13: ffffffff8e13ccc0 R14: 0000000000000000 R15: 0000000000000246 [ 206.085893][ C1] ? unwind_next_frame+0xa5/0x2390 [ 206.091070][ C1] ? unwind_next_frame+0xa5/0x2390 [ 206.096234][ C1] ? unwind_next_frame+0xa5/0x2390 [ 206.101374][ C1] ? arch_stack_walk+0xe4/0x150 [ 206.106262][ C1] ? unwind_next_frame+0xa5/0x2390 [ 206.111402][ C1] unwind_next_frame+0xc2/0x2390 [ 206.116374][ C1] ? unwind_next_frame+0xa5/0x2390 [ 206.121532][ C1] ? unwind_next_frame+0xa5/0x2390 [ 206.126675][ C1] ? __unwind_start+0xf8/0x760 [ 206.131476][ C1] __unwind_start+0x5b9/0x760 [ 206.136197][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.142370][ C1] arch_stack_walk+0xe4/0x150 [ 206.147087][ C1] ? arch_stack_walk+0xe4/0x150 [ 206.151975][ C1] stack_trace_save+0x9c/0xe0 [ 206.156672][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 206.162081][ C1] save_stack+0xf5/0x1f0 [ 206.166359][ C1] ? __pfx_save_stack+0x10/0x10 [ 206.171254][ C1] ? page_ext_put+0x97/0xc0 [ 206.175794][ C1] __reset_page_owner+0x71/0x1f0 [ 206.180768][ C1] free_unref_folios+0xcc9/0x1550 [ 206.185838][ C1] folios_put_refs+0x559/0x640 [ 206.190641][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 206.195967][ C1] ? free_swap_cache+0x109/0x300 [ 206.200936][ C1] free_pages_and_swap_cache+0x277/0x520 [ 206.206602][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 206.212829][ C1] ? tlb_table_flush+0x36d/0x410 [ 206.217802][ C1] tlb_flush_mmu+0x3a0/0x680 [ 206.222422][ C1] ? __pfx_down_write+0x10/0x10 [ 206.227311][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 206.231926][ C1] exit_mmap+0x474/0xba0 [ 206.236207][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 206.241000][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 206.246675][ C1] ? __pfx_exit_aio+0x10/0x10 [ 206.251391][ C1] ? uprobe_clear_state+0x274/0x290 [ 206.256624][ C1] __mmput+0x118/0x420 [ 206.260736][ C1] exit_mm+0x1da/0x2c0 [ 206.264831][ C1] ? __pfx_exit_mm+0x10/0x10 [ 206.269445][ C1] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 206.274939][ C1] ? rcu_is_watching+0x15/0xb0 [ 206.279738][ C1] do_exit+0x864/0x2550 [ 206.283924][ C1] ? __lock_acquire+0xab9/0xd20 [ 206.288812][ C1] ? do_raw_spin_lock+0x121/0x290 [ 206.293861][ C1] ? __pfx_do_exit+0x10/0x10 [ 206.298476][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.303899][ C1] do_group_exit+0x21c/0x2d0 [ 206.308525][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.313755][ C1] get_signal+0x1286/0x1340 [ 206.318313][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 206.323886][ C1] ? fput_close_sync+0x119/0x200 [ 206.328847][ C1] ? kmem_cache_free+0x309/0x400 [ 206.333817][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 206.340014][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 206.345515][ C1] exit_to_user_mode_loop+0x75/0x110 [ 206.350838][ C1] do_syscall_64+0x2bd/0x3b0 [ 206.355468][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.361559][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.367732][ C1] ? clear_bhb_loop+0x60/0xb0 [ 206.372434][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.378346][ C1] RIP: 0033:0x7f4a822a7407 [ 206.382796][ C1] RSP: 002b:00007ffd4ea45b10 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 206.391235][ C1] RAX: 0000000000000000 RBX: 00007f4a8295e880 RCX: 00007f4a822a7407 [ 206.399224][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 206.407214][ C1] RBP: 00007f4a8295e6e8 R08: 0000000000000000 R09: 0000000000000000 [ 206.415291][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 206.423278][ C1] R13: 00007ffd4ea45bd0 R14: 0000000000000000 R15: 0000000000000000 [ 206.431289][ C1] [ 206.434333][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g11333 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 206.445546][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 206.455527][ C1] rcu: RCU grace-period kthread stack dump: [ 206.461428][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 206.474987][ C1] Call Trace: [ 206.478290][ C1] [ 206.481254][ C1] __schedule+0x16f5/0x4d00 [ 206.485795][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 206.491024][ C1] ? schedule+0x165/0x360 [ 206.495376][ C1] ? __lock_acquire+0xab9/0xd20 [ 206.500267][ C1] ? __pfx___schedule+0x10/0x10 [ 206.505158][ C1] ? schedule+0x91/0x360 [ 206.509426][ C1] schedule+0x165/0x360 [ 206.513610][ C1] schedule_timeout+0x12b/0x270 [ 206.518500][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 206.523915][ C1] ? __pfx_process_timeout+0x10/0x10 [ 206.529264][ C1] ? prepare_to_swait_event+0x341/0x380 [ 206.534850][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 206.539734][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.544974][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 206.549938][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 206.555254][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 206.560481][ C1] ? finish_swait+0xcd/0x1f0 [ 206.565099][ C1] rcu_gp_kthread+0x99/0x390 [ 206.569720][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 206.574949][ C1] ? __kthread_parkme+0x7b/0x200 [ 206.579928][ C1] ? __kthread_parkme+0x1a1/0x200 [ 206.584991][ C1] kthread+0x70e/0x8a0 [ 206.589090][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 206.594329][ C1] ? __pfx_kthread+0x10/0x10 [ 206.598958][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.604192][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.609425][ C1] ? __pfx_kthread+0x10/0x10 [ 206.614045][ C1] ret_from_fork+0x3fc/0x770 [ 206.618668][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 206.623821][ C1] ? __switch_to_asm+0x39/0x70 [ 206.628607][ C1] ? __switch_to_asm+0x33/0x70 [ 206.633392][ C1] ? __pfx_kthread+0x10/0x10 [ 206.638011][ C1] ret_from_fork_asm+0x1a/0x30 [ 206.642814][ C1] [ 206.645851][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 206.652223][ C1] CPU: 1 UID: 0 PID: 5825 Comm: syz-executor Not tainted 6.15.0-syzkaller-07787-g27eab4c64423 #0 PREEMPT(full) [ 206.664068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.674161][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 206.679919][ C1] Code: 43 d5 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 92 24 00 f3 0f 1e fa fb f4 18 d5 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 206.699548][ C1] RSP: 0018:ffffc90000a07f18 EFLAGS: 00000246 [ 206.705640][ C1] RAX: ffffffff8171aaed RBX: 0000000000000003 RCX: ffff88802b4e3c00 [ 206.713635][ C1] RDX: 0000000000000100 RSI: ffffffff8d96be0e RDI: ffffffff8be26400 [ 206.721628][ C1] RBP: ffffc90000a07ff0 R08: ffffffff8fa0b1b7 R09: 1ffffffff1f41636 [ 206.729619][ C1] R10: dffffc0000000000 R11: fffffbfff1f41637 R12: dffffc0000000000 [ 206.737609][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000140fe8 [ 206.745597][ C1] FS: 0000000000000000(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 206.754635][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.761237][ C1] CR2: 00007f2bbaf94f98 CR3: 000000003333c000 CR4: 00000000003526f0 [ 206.769230][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.777231][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.785219][ C1] Call Trace: [ 206.788521][ C1] [ 206.791385][ C1] kvm_wait+0x232/0x290 [ 206.795564][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.800792][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 206.805503][ C1] __pv_queued_spin_lock_slowpath+0x7bf/0xb60 [ 206.811597][ C1] ? vfree+0x1a6/0x330 [ 206.815703][ C1] ? arch_do_signal_or_restart+0x9a/0x750 [ 206.821447][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.827535][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 206.834169][ C1] queued_spin_lock_slowpath+0x43/0x50 [ 206.839651][ C1] do_raw_spin_lock+0x21f/0x290 [ 206.844530][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 206.849923][ C1] ? trace_kmalloc+0x1f/0xd0 [ 206.854543][ C1] ? cfg80211_inform_single_bss_data+0xb90/0x1ac0 [ 206.860990][ C1] cfg80211_inform_single_bss_data+0xb90/0x1ac0 [ 206.867270][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 206.873972][ C1] ? __lock_acquire+0xab9/0xd20 [ 206.878878][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 206.884110][ C1] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 206.889952][ C1] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 206.895609][ C1] ? __kernel_text_address+0xd/0x40 [ 206.900835][ C1] ? unwind_get_return_address+0x4d/0x90 [ 206.906504][ C1] ? __lock_acquire+0xab9/0xd20 [ 206.911397][ C1] ? __lock_acquire+0xab9/0xd20 [ 206.916279][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 206.922384][ C1] ? __lock_acquire+0xab9/0xd20 [ 206.927272][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 206.932519][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 206.937767][ C1] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 206.943602][ C1] cfg80211_inform_bss_frame_data+0x362/0x700 [ 206.949709][ C1] ieee80211_bss_info_update+0x746/0x9e0 [ 206.955372][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 206.961566][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 206.967484][ C1] ieee80211_scan_rx+0x527/0x9b0 [ 206.972468][ C1] ieee80211_rx_list+0x22fc/0x2d80 [ 206.977622][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 206.983121][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 206.988174][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 206.993239][ C1] ? ieee80211_rx_napi+0xca/0x3d0 [ 206.998300][ C1] ieee80211_rx_napi+0x1a8/0x3d0 [ 207.003271][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 207.008772][ C1] ? skb_dequeue+0x10e/0x150 [ 207.013396][ C1] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 207.019407][ C1] tasklet_action_common+0x36c/0x580 [ 207.024723][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 207.030545][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 207.036553][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 207.042911][ C1] ? workqueue_softirq_action+0xd4/0x150 [ 207.048568][ C1] handle_softirqs+0x286/0x870 [ 207.053366][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 207.058165][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 207.063493][ C1] __irq_exit_rcu+0xca/0x1f0 [ 207.068116][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 207.073356][ C1] irq_exit_rcu+0x9/0x30 [ 207.077628][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 207.083293][ C1] [ 207.086238][ C1] [ 207.089193][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.095197][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 207.100508][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 bb ba fd 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 207.120147][ C1] RSP: 0018:ffffc9000484f478 EFLAGS: 00000206 [ 207.126279][ C1] RAX: 6c95275699155c00 RBX: 0000000000000000 RCX: 6c95275699155c00 [ 207.134281][ C1] RDX: 0000000000000001 RSI: ffffffff8db588e9 RDI: ffffffff8be26400 [ 207.142271][ C1] RBP: ffffffff81724865 R08: 0000000000000000 R09: ffffffff81724865 [ 207.150291][ C1] R10: ffffc9000484f638 R11: ffffffff81ac9920 R12: 0000000000000002 [ 207.158315][ C1] R13: ffffffff8e13ccc0 R14: 0000000000000000 R15: 0000000000000246 [ 207.166326][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.171478][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 207.177656][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.182822][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.187965][ C1] ? __free_frozen_pages+0xc6e/0xe50 [ 207.193270][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.198416][ C1] unwind_next_frame+0xc2/0x2390 [ 207.203384][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.208531][ C1] ? unwind_next_frame+0xa5/0x2390 [ 207.213673][ C1] ? __reset_page_owner+0x71/0x1f0 [ 207.218834][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 207.225013][ C1] arch_stack_walk+0x11c/0x150 [ 207.229833][ C1] ? __free_frozen_pages+0xc6e/0xe50 [ 207.235156][ C1] stack_trace_save+0x9c/0xe0 [ 207.239856][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 207.245259][ C1] save_stack+0xf5/0x1f0 [ 207.249532][ C1] ? __pfx_save_stack+0x10/0x10 [ 207.254412][ C1] ? __free_frozen_pages+0xc6e/0xe50 [ 207.259738][ C1] ? page_ext_put+0x97/0xc0 [ 207.264277][ C1] __reset_page_owner+0x71/0x1f0 [ 207.269245][ C1] __free_frozen_pages+0xc6e/0xe50 [ 207.274385][ C1] vfree+0x1a6/0x330 [ 207.278331][ C1] ? __pfx_kcov_close+0x10/0x10 [ 207.283214][ C1] kcov_close+0x28/0x50 [ 207.287393][ C1] __fput+0x44c/0xa70 [ 207.291414][ C1] task_work_run+0x1d1/0x260 [ 207.296039][ C1] ? __pfx_task_work_run+0x10/0x10 [ 207.301182][ C1] ? kmem_cache_free+0x18f/0x400 [ 207.306159][ C1] do_exit+0x8d1/0x2550 [ 207.310341][ C1] ? __lock_acquire+0xab9/0xd20 [ 207.315229][ C1] ? do_raw_spin_lock+0x121/0x290 [ 207.320274][ C1] ? __pfx_do_exit+0x10/0x10 [ 207.324894][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 207.330307][ C1] do_group_exit+0x21c/0x2d0 [ 207.334922][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.340157][ C1] get_signal+0x1286/0x1340 [ 207.344712][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 207.350282][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 207.355596][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 207.361792][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 207.367285][ C1] exit_to_user_mode_loop+0x75/0x110 [ 207.372599][ C1] do_syscall_64+0x2bd/0x3b0 [ 207.377213][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.382442][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.388532][ C1] ? clear_bhb_loop+0x60/0xb0 [ 207.393235][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.399147][ C1] RIP: 0033:0x7f29a2384b93 [ 207.403625][ C1] Code: Unable to access opcode bytes at 0x7f29a2384b69. [ 207.410657][ C1] RSP: 002b:00007ffef3712eb8 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 207.419101][ C1] RAX: fffffffffffffe00 RBX: 00000000000016cc RCX: 00007f29a2384b93 [ 207.427112][ C1] RDX: 0000000040000000 RSI: 00007ffef3712ecc RDI: 00000000ffffffff [ 207.435117][ C1] RBP: 00007ffef3712ecc R08: 0000000000000000 R09: 0000000000000000 [ 207.443145][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 207.451138][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 207.459148][ C1] [ 207.462517][ C1] sched: DL replenish lagged too much