last executing test programs: 10.142847124s ago: executing program 3 (id=43): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x71, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3b, 0x63, 0x66, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e20, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1, 0x0, 0x20}, {"1d8d53fd95af3d87b33530609cb699258189b246d1d07bf95817d6a9f4e75bd77f7d4cb37e660682c9f56aa4876a708894d8510353370af469dd31"}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x2, 0x3, 0xff) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)="7ca96e1548a7145621d040371d17f0e6cb718ef0d0dee1e919279bb32328e893cba362da0f60a8677cc348713966261c", 0x30}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}], 0x18}}], 0x2, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@updsa={0x14c, 0x1a, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'xcbc(aes)\x00'}, 0x80, 0x0, "97a2c2df58bf2babea45840d4da5d432"}}]}, 0x14c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000200)=0xfffffffc, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x1b, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$netlink(0x10, 0x3, 0x0) 9.121894716s ago: executing program 3 (id=48): socket$kcm(0x10, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, 0x0, 0xda00) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x1d, 0x0, 0x0, 0x6, 0x41, &(0x7f0000000480)=""/65, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, r3, 0x8, &(0x7f0000000500)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x10, 0x353, 0xcce5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x8000) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3) epoll_create1(0x0) close(0xffffffffffffffff) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 8.802860352s ago: executing program 3 (id=51): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 8.49454621s ago: executing program 3 (id=54): r0 = openat$ppp(0xffffff9c, &(0x7f0000000740), 0x80, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000780)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000004c0)={0x6}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3, 0x1001, 0x2, 0x1127, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9, @void, @value, @void, @value}, 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="2e000000010001", 0x7) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000180), 0x2ae, 0x0) 7.307934938s ago: executing program 1 (id=61): socket$kcm(0x10, 0x2, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, 0x0, 0xda00) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x1d, 0x0, 0x0, 0x6, 0x41, &(0x7f0000000480)=""/65, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, r3, 0x8, &(0x7f0000000500)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x10, 0x353, 0xcce5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x8000) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3) epoll_create1(0x0) close(0xffffffffffffffff) bpf$LINK_DETACH(0x22, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) 7.018096045s ago: executing program 1 (id=63): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0xffffffff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}}, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x4001) preadv(r5, &(0x7f00000024c0)=[{&(0x7f0000001700)=""/188, 0xbc}], 0x1, 0x3, 0x0) 6.963886992s ago: executing program 4 (id=64): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}]}, 0x24}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='softirq_noise\x00', r0, 0x0, 0x17f9}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x3a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$inet6(r6, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000540)=0x96, 0x4) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="0049146eb2339ee9b2b7a2000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000110000000c0009800500010000000000"], 0x20}}, 0x0) 6.429260457s ago: executing program 4 (id=67): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x0) epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, 0x0, 0x4000010) sendto$inet(r3, &(0x7f0000000040)="0d02", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$alg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)='y', 0x1}], 0x1}, 0x0) 5.95278955s ago: executing program 1 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x170}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006d40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 5.602384192s ago: executing program 2 (id=71): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 5.216771952s ago: executing program 4 (id=73): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r4, &(0x7f0000000140)={0x10, 0x0, r3, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private}, @address_request}}}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000007e40), 0x0, 0x0) 4.709138647s ago: executing program 1 (id=74): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000440)=""/147, 0x93}, 0x10100) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1000000000000010, 0x80802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x0, 0xbc, 0x0, 0xfffffffa, 0x56, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x500, 0xfffffe00}}) connect$packet(r4, &(0x7f0000000380)={0x11, 0xc, r5, 0x1, 0x8, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 4.348561261s ago: executing program 0 (id=75): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000080)=0xb9f2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4.182561715s ago: executing program 4 (id=76): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) accept4(r0, &(0x7f00000004c0)=@isdn, &(0x7f0000000400)=0x80, 0x80000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.424232928s ago: executing program 2 (id=77): socket(0x10, 0x803, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.104298197s ago: executing program 0 (id=78): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 2.995326617s ago: executing program 2 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.674733771s ago: executing program 0 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x177d6876d68fd27f}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [{{0x254, 0x1, {{0x0, 0x4}, 0xc2, 0x7f, 0x8, 0x7, 0xd, 'syz0\x00', "cbfe23ce25e668eccee46779368681a6d5c135f9616f1880c3eb912bbbb90ead", "212cea2144945cf11cf81e71419473e04a190784db84c66e8563aa590e37a945", [{0x1, 0xe, {0x1, 0x1}}, {0x200, 0xbd8c, {0x1, 0x5}}, {0x2, 0x0, {0x1, 0x5}}, {0x1, 0xfff9, {0x2, 0xa}}, {0x4, 0x3, {0x0, 0x9000000}}, {0x8, 0x10, {0x2, 0x6}}, {0x7fff, 0x9, {0x0, 0x8}}, {0x236, 0x43, {0x2}}, {0x2, 0x7, {0x0, 0x6}}, {0x1, 0x5, {0x0, 0x9}}, {0x8, 0x2, {0x0, 0x2}}, {0x4020, 0x4, {0x3, 0x1}}, {0x9, 0x2, {0x1, 0x9}}, {0x7b, 0x80, {0x1, 0x2}}, {0xff40, 0x8, {0x1, 0x1}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0x7fffffff}}, {0x10, 0x2a, {0x3, 0x9}}, {0x8, 0xff2a, {0x2, 0xffffdb56}}, {0x401, 0x3, {0x0, 0xffff059a}}, {0xb9, 0x876, {0x2, 0xfff}}, {0x10, 0x3, {0x1, 0x4}}, {0x1, 0x100, {0x2, 0x4ee0}}, {0x5, 0xfc01, {0x3, 0x9}}, {0xf78, 0x5, {0x0, 0xf}}, {0x3, 0x5, {0x3, 0x100}}, {0xb, 0x6, {0x3, 0x3ff}}, {0x1, 0xe, {0x3, 0x6}}, {0xd, 0xfff9, {0x3}}, {0x9e, 0x0, {0x1, 0x1ff}}, {0x1, 0x3, {0x1, 0x4f8}}, {0x8, 0x9, {0x1, 0x7}}, {0x5, 0x7, {0x1, 0x8}}, {0x3, 0x1, {0x0, 0xfffff800}}, {0x3, 0x2, {0x0, 0x4}}, {0x1, 0x200, {0x0, 0x7f}}, {0x1, 0x7, {0x3, 0x80}}, {0x2, 0x0, {0x3, 0x3}}, {0x3, 0xf, {0x2, 0x6}}, {0x1, 0xe912, {0x2, 0x5}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20048085}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r6, 0x21eae}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_newaddr={0x48, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x7, 0x2, 0xb}}, @IFA_FLAGS={0x8, 0x8, 0xa8}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r8, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r8, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x50) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x3}]}}}]}, 0x44}}, 0x0) 2.6564641s ago: executing program 2 (id=81): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14}}], 0x18}}], 0x1, 0x4000810) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r1, 0x100000000000000, 0x6, 0x5}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x39ae, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0), 0x0, 0x0) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x7d, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x18, &(0x7f0000000000)="0e", 0x1) socket$nl_generic(0x10, 0x3, 0x10) 2.349590075s ago: executing program 2 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x108, 0x218, 0x308, 0x308, 0x108, 0x4, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'gre0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_0\x00', 'virt_wifi0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @remote}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r5, &(0x7f0000000000), 0x10) close(r5) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x60, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x60}}, 0x0) 1.886055959s ago: executing program 2 (id=83): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) unshare(0x22000400) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x27, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0xa, 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000340)=0x1, 0x4) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="140004007465616d5f736c6176650630000000001430da20286f001880c26ad92e5efc04000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x24040811) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.885619459s ago: executing program 4 (id=84): socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x39) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 1.867159148s ago: executing program 3 (id=85): ioctl$sock_proto_private(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x874, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00003cf000/0x4000)=nil, 0x4000, 0x2, 0x22051, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x68, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x5}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7}, @in={0x2, 0x4e24, @loopback}]}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x44, 0x0, "bf53bfedc9f296bb5e7b908535351b97446395ee0d89a2172b45bd23d76b28e16d64949966c2b34a91bd65a35690ed5c93dc7f5ff6bd91ff1fad838cf493901a8d0ea1054df7e0c4791000232100"}, 0xd8) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.829239829s ago: executing program 0 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r8, 0x0, 0x0) 1.355471881s ago: executing program 4 (id=87): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) socket(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda0602000000fde80001dd0000040d001800ea11ea110005000000", 0x29}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 651.329139ms ago: executing program 0 (id=88): socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000000)=@abs, 0x2, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0042e800"], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000030000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 629.318197ms ago: executing program 1 (id=89): socket(0x10, 0x803, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x17, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x76}, [@call={0x27}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x200000100000011, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 207.307767ms ago: executing program 1 (id=90): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 23.816557ms ago: executing program 0 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x170}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000006d40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 0s ago: executing program 3 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7ffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4b2f}, 0x0, &(0x7f0000000140)={0x1fe, 0x0, 0x0, 0xffffffffffffffff, 0xc00000000000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001180)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmmsg$sock(r1, &(0x7f0000000a80)=[{{&(0x7f0000000440)=@ieee802154, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000700)="a0284d1d595a2ceb894b6c5038f4fa0ddef2b30d248724bac189d12f1df42caa4ea0b9a414a3d43f4e837502415af0ffb5c4ab30c2f08628b295f45561e9ca992096d1f9e8824363", 0x48}], 0x2, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}], 0x1, 0x20000004) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 73.997051][ T5832] cgroup: Unknown subsys name 'net' [ 74.150066][ T5832] cgroup: Unknown subsys name 'cpuset' [ 74.158920][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.742344][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.050482][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.070624][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.078753][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.085474][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.097823][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.103470][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.113204][ T5857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.113601][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.121414][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.135860][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.143104][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.154197][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.161596][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.169682][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.178304][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.185963][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.186196][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.193640][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.201675][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.209131][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.223448][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.229830][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.231088][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.238937][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.245346][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.253913][ T5861] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.274725][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.276676][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.295436][ T5861] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.306824][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.803426][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 78.845159][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 78.871687][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 78.963325][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 79.027864][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 79.108767][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.116106][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.125274][ T5858] bridge_slave_0: entered allmulticast mode [ 79.132708][ T5858] bridge_slave_0: entered promiscuous mode [ 79.163888][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.171212][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.179279][ T5842] bridge_slave_0: entered allmulticast mode [ 79.186186][ T5842] bridge_slave_0: entered promiscuous mode [ 79.212240][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.219644][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.227513][ T5858] bridge_slave_1: entered allmulticast mode [ 79.234322][ T5858] bridge_slave_1: entered promiscuous mode [ 79.255354][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.262955][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.271459][ T5842] bridge_slave_1: entered allmulticast mode [ 79.278532][ T5842] bridge_slave_1: entered promiscuous mode [ 79.285880][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.293721][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.301458][ T5844] bridge_slave_0: entered allmulticast mode [ 79.309033][ T5844] bridge_slave_0: entered promiscuous mode [ 79.371392][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.378846][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.387397][ T5844] bridge_slave_1: entered allmulticast mode [ 79.394263][ T5844] bridge_slave_1: entered promiscuous mode [ 79.401324][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.408581][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.415817][ T5843] bridge_slave_0: entered allmulticast mode [ 79.423678][ T5843] bridge_slave_0: entered promiscuous mode [ 79.468339][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.475753][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.483657][ T5843] bridge_slave_1: entered allmulticast mode [ 79.491060][ T5843] bridge_slave_1: entered promiscuous mode [ 79.509786][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.532037][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.562524][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.572295][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.580345][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.588330][ T5845] bridge_slave_0: entered allmulticast mode [ 79.595453][ T5845] bridge_slave_0: entered promiscuous mode [ 79.605159][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.625835][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.639140][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.650176][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.662493][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.691443][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.699197][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.707059][ T5845] bridge_slave_1: entered allmulticast mode [ 79.713987][ T5845] bridge_slave_1: entered promiscuous mode [ 79.741835][ T5842] team0: Port device team_slave_0 added [ 79.773894][ T5858] team0: Port device team_slave_0 added [ 79.791386][ T5842] team0: Port device team_slave_1 added [ 79.819118][ T5858] team0: Port device team_slave_1 added [ 79.827453][ T5843] team0: Port device team_slave_0 added [ 79.835507][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.850078][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.893161][ T5844] team0: Port device team_slave_0 added [ 79.901922][ T5843] team0: Port device team_slave_1 added [ 79.939775][ T5845] team0: Port device team_slave_0 added [ 79.947025][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.954117][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.981408][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.995793][ T5844] team0: Port device team_slave_1 added [ 80.024891][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.032116][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.058877][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.072313][ T5845] team0: Port device team_slave_1 added [ 80.079290][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.087762][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.113869][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.142946][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.150102][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.176187][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.216707][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.223726][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.249944][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.260987][ T5861] Bluetooth: hci3: command tx timeout [ 80.267451][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.274433][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.301227][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.313567][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.320905][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.347431][ T5847] Bluetooth: hci2: command tx timeout [ 80.347441][ T5851] Bluetooth: hci1: command tx timeout [ 80.348257][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.353832][ T5861] Bluetooth: hci4: command tx timeout [ 80.367909][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.382749][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.410175][ T5861] Bluetooth: hci0: command tx timeout [ 80.410280][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.441490][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.449405][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.475980][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.492912][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.500784][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.527288][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.569231][ T5858] hsr_slave_0: entered promiscuous mode [ 80.575945][ T5858] hsr_slave_1: entered promiscuous mode [ 80.612187][ T5842] hsr_slave_0: entered promiscuous mode [ 80.619132][ T5842] hsr_slave_1: entered promiscuous mode [ 80.625635][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.634049][ T5842] Cannot create hsr debugfs directory [ 80.687919][ T5843] hsr_slave_0: entered promiscuous mode [ 80.695955][ T5843] hsr_slave_1: entered promiscuous mode [ 80.703373][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.711811][ T5843] Cannot create hsr debugfs directory [ 80.727364][ T5845] hsr_slave_0: entered promiscuous mode [ 80.733786][ T5845] hsr_slave_1: entered promiscuous mode [ 80.740264][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.748139][ T5845] Cannot create hsr debugfs directory [ 80.802479][ T5844] hsr_slave_0: entered promiscuous mode [ 80.809525][ T5844] hsr_slave_1: entered promiscuous mode [ 80.816055][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.823827][ T5844] Cannot create hsr debugfs directory [ 81.194672][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.208892][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.225790][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.246978][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.296614][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.309936][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.319603][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.334497][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.429107][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.440451][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.452100][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.463788][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.562668][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.573979][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.591826][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.608250][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.626266][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.676254][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.711098][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.718494][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.729702][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.736883][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.765497][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.784746][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.808849][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.821464][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.834976][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.911898][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.939791][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.946982][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.979158][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.997934][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.005116][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.129733][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.190025][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.197236][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.231438][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.238694][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.262553][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.283237][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.311165][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.328243][ T5861] Bluetooth: hci3: command tx timeout [ 82.351273][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.388827][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.396123][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.407785][ T5861] Bluetooth: hci1: command tx timeout [ 82.413443][ T5861] Bluetooth: hci4: command tx timeout [ 82.419903][ T5847] Bluetooth: hci2: command tx timeout [ 82.423277][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.452595][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.459786][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.485699][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.493077][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.496965][ T5861] Bluetooth: hci0: command tx timeout [ 82.508087][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.515459][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.673262][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.696426][ T5858] veth0_vlan: entered promiscuous mode [ 82.720739][ T5858] veth1_vlan: entered promiscuous mode [ 82.849745][ T5858] veth0_macvtap: entered promiscuous mode [ 82.884181][ T5858] veth1_macvtap: entered promiscuous mode [ 82.909469][ T5842] veth0_vlan: entered promiscuous mode [ 82.944356][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.980173][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.000874][ T5842] veth1_vlan: entered promiscuous mode [ 83.025735][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.052202][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.067949][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.077762][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.169492][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.185817][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.234161][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.284715][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.294679][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.318181][ T5842] veth0_macvtap: entered promiscuous mode [ 83.362391][ T5845] veth0_vlan: entered promiscuous mode [ 83.390393][ T5842] veth1_macvtap: entered promiscuous mode [ 83.412884][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.420855][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.435915][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.437216][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.460281][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.490763][ T5845] veth1_vlan: entered promiscuous mode [ 83.544993][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.547917][ T5858] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.556023][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.583068][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.595624][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.604930][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.615582][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624985][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.660583][ T5844] veth0_vlan: entered promiscuous mode [ 83.722678][ T5844] veth1_vlan: entered promiscuous mode [ 83.823026][ T5844] veth0_macvtap: entered promiscuous mode [ 83.836166][ T5844] veth1_macvtap: entered promiscuous mode [ 83.853910][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.865012][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.874942][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.885717][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.897204][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.938091][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.948905][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.959191][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.978891][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.992255][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.054974][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.064560][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073934][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.084448][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.138266][ T5845] veth0_macvtap: entered promiscuous mode [ 84.163390][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.190665][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.215067][ T5843] veth0_vlan: entered promiscuous mode [ 84.267796][ T5845] veth1_macvtap: entered promiscuous mode [ 84.280999][ T5843] veth1_vlan: entered promiscuous mode [ 84.313976][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.334200][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.344463][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.358507][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.370164][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.381247][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.393283][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.413961][ T5861] Bluetooth: hci3: command tx timeout [ 84.434247][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.455322][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.474784][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.487189][ T5847] Bluetooth: hci1: command tx timeout [ 84.492673][ T5847] Bluetooth: hci2: command tx timeout [ 84.497754][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.498307][ T5861] Bluetooth: hci4: command tx timeout [ 84.525225][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.552247][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.562891][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.573961][ T5861] Bluetooth: hci0: command tx timeout [ 84.573998][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.592021][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.641251][ T5843] veth0_macvtap: entered promiscuous mode [ 84.651811][ T5843] veth1_macvtap: entered promiscuous mode [ 84.667839][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.674987][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.675703][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.687464][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.711986][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.723029][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.736717][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.747551][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.757702][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.768534][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.780963][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.811985][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.821575][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.832134][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.845300][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.859099][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.871132][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.881307][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.891905][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.901872][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.912562][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.922560][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.934313][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.948298][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.985323][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.006638][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.015440][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.052047][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.073476][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.094884][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.340696][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.370239][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.445806][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.502334][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.576224][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.591780][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.639892][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.653730][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.688090][ T5958] Zero length message leads to an empty skb [ 85.720823][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 86.083052][ T5969] syz.3.12 uses obsolete (PF_INET,SOCK_PACKET) [ 86.352594][ T5970] sctp: [Deprecated]: syz.0.11 (pid 5970) Use of int in max_burst socket option deprecated. [ 86.352594][ T5970] Use struct sctp_assoc_value instead [ 86.487532][ T5861] Bluetooth: hci3: command tx timeout [ 86.568184][ T5861] Bluetooth: hci4: command tx timeout [ 86.574963][ T5861] Bluetooth: hci2: command tx timeout [ 86.581253][ T5847] Bluetooth: hci1: command tx timeout [ 86.648449][ T5847] Bluetooth: hci0: command tx timeout [ 86.939684][ T5901] IPVS: starting estimator thread 0... [ 86.951899][ T5994] vlan2: entered promiscuous mode [ 87.004838][ T5994] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 87.068063][ T6003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.088137][ T5998] IPVS: using max 17 ests per chain, 40800 per kthread [ 87.098091][ T5994] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 87.713166][ T6016] bridge0: port 3(gretap0) entered blocking state [ 87.747439][ T6016] bridge0: port 3(gretap0) entered disabled state [ 87.793405][ T6016] gretap0: entered allmulticast mode [ 87.830951][ T6016] gretap0: entered promiscuous mode [ 87.897799][ T6016] bridge0: port 3(gretap0) entered blocking state [ 87.904681][ T6016] bridge0: port 3(gretap0) entered forwarding state [ 88.126823][ T6018] gretap0: left allmulticast mode [ 88.136628][ T6018] gretap0: left promiscuous mode [ 88.142080][ T6018] bridge0: port 3(gretap0) entered disabled state [ 88.143760][ T6028] netlink: 'syz.4.25': attribute type 11 has an invalid length. [ 88.192448][ T6028] netlink: 224 bytes leftover after parsing attributes in process `syz.4.25'. [ 88.322450][ T6021] netlink: 'syz.4.25': attribute type 12 has an invalid length. [ 88.343004][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.571081][ T6070] sctp: [Deprecated]: syz.1.31 (pid 6070) Use of int in max_burst socket option deprecated. [ 89.571081][ T6070] Use struct sctp_assoc_value instead [ 91.114640][ T2144] IPVS: starting estimator thread 0... [ 91.239076][ T6116] IPVS: using max 18 ests per chain, 43200 per kthread [ 91.842505][ T6131] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 91.876673][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 91.942823][ T6136] bridge_slave_1: left allmulticast mode [ 91.978332][ T6136] bridge_slave_1: left promiscuous mode [ 92.023307][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.425396][ T8] cfg80211: failed to load regulatory.db [ 92.550497][ T6150] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.661380][ T6154] Bluetooth: MGMT ver 1.23 [ 92.777417][ T6150] vlan2: entered promiscuous mode [ 92.821467][ T6150] batadv0: entered promiscuous mode [ 92.909085][ T6150] team0: Port device vlan2 added [ 93.041099][ T6158] ipt_ECN: cannot use operation on non-tcp rule [ 95.302251][ T6198] netlink: 76 bytes leftover after parsing attributes in process `syz.0.70'. [ 95.444125][ T6205] vlan2: entered promiscuous mode [ 96.002132][ T6217] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 96.091496][ T6217] syz_tun: entered promiscuous mode [ 96.175154][ T6217] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 96.794224][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 98.239830][ T6245] macvlan2: entered promiscuous mode [ 98.271939][ T6245] macvlan2: entered allmulticast mode [ 98.459795][ T6245] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 98.588811][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.625238][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.640228][ T6250] netlink: 76 bytes leftover after parsing attributes in process `syz.2.82'. [ 99.346012][ T6264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'. [ 99.466657][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'. [ 99.535599][ T6264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'. [ 99.604012][ T6264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'. [ 100.350648][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 100.406286][ T6277] block nbd0: not configured, cannot reconfigure [ 116.320681][ C1] sched: DL replenish lagged too much [ 172.609917][ T5859] page_pool_release_retry() stalled pool shutdown: id 24, 51 inflight 72 sec [ 187.573967][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.591527][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.898975][ T2144] page_pool_release_retry() stalled pool shutdown: id 24, 51 inflight 138 sec [ 265.809031][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.815438][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.825348][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.831968][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.876997][ T30] INFO: task kworker/0:5:5901 blocked for more than 140 seconds. [ 265.884831][ T30] Not tainted 6.12.0-rc4-syzkaller-01012-g157a4881225b #0 [ 266.286532][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.295292][ T30] task:kworker/0:5 state:D stack:22544 pid:5901 tgid:5901 ppid:2 flags:0x00004000 [ 266.606348][ T30] Workqueue: events reg_todo [ 266.611082][ T30] Call Trace: [ 266.614411][ T30] [ 266.926805][ T30] __schedule+0x18af/0x4bd0 [ 266.931447][ T30] ? __pfx___schedule+0x10/0x10 [ 267.087324][ T30] ? __pfx_lock_release+0x10/0x10 [ 267.092466][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 267.336392][ T30] ? kthread_data+0x52/0xd0 [ 267.341006][ T30] ? schedule+0x90/0x320 [ 267.345393][ T30] ? wq_worker_sleeping+0x66/0x240 [ 267.576500][ T30] ? schedule+0x90/0x320 [ 267.580961][ T30] schedule+0x14b/0x320 [ 267.585175][ T30] schedule_preempt_disabled+0x13/0x30 [ 267.827070][ T30] __mutex_lock+0x6a7/0xd70 [ 267.831693][ T30] ? __mutex_lock+0x52a/0xd70 [ 267.990940][ T30] ? reg_process_self_managed_hints+0xb9/0x1a0 [ 268.106350][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 268.111585][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 268.336347][ T30] ? reg_todo+0x7cd/0x8d0 [ 268.340962][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 268.446410][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 268.452637][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 268.526468][ T30] reg_process_self_managed_hints+0xb9/0x1a0 [ 268.532633][ T30] reg_todo+0x7d2/0x8d0 [ 268.537522][ T5154] Bluetooth: hci1: command 0x0406 tx timeout [ 268.543747][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 268.549882][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 268.697000][ T30] ? process_scheduled_works+0x976/0x1850 [ 268.703192][ T30] process_scheduled_works+0xa63/0x1850 [ 268.876624][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 268.882733][ T30] ? assign_work+0x364/0x3d0 [ 269.040149][ T30] worker_thread+0x870/0xd30 [ 269.044866][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 269.210833][ T30] ? __kthread_parkme+0x169/0x1d0 [ 269.215971][ T30] ? __pfx_worker_thread+0x10/0x10 [ 269.358510][ T30] kthread+0x2f0/0x390 [ 269.362698][ T30] ? __pfx_worker_thread+0x10/0x10 [ 269.462812][ T30] ? __pfx_kthread+0x10/0x10 [ 269.526866][ T30] ret_from_fork+0x4b/0x80 [ 269.531395][ T30] ? __pfx_kthread+0x10/0x10 [ 269.536051][ T30] ret_from_fork_asm+0x1a/0x30 [ 269.666639][ T30] [ 269.760534][ T30] [ 269.760534][ T30] Showing all locks held in the system: