last executing test programs: 994.830684ms ago: executing program 0 (id=151): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xf5}}], 0x400000000000172, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003007379000000000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 984.40624ms ago: executing program 3 (id=153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x34}}, 0x0) 914.866259ms ago: executing program 3 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 914.71181ms ago: executing program 0 (id=157): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @default}, 0x1c) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) 914.258526ms ago: executing program 0 (id=158): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e20, @multicast1}}) 883.863195ms ago: executing program 3 (id=160): socket$nl_route(0x10, 0x3, 0x0) unshare(0x24020400) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r2], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r7, 0x25, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r5, 0x4, r4}, 0x6) 826.816469ms ago: executing program 0 (id=162): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xe}, {0x5, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 806.904409ms ago: executing program 0 (id=164): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000006000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007b9f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2301ff00000000000000000014d6d930dfe1d9c322fe040000007025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0xc0) 735.126864ms ago: executing program 0 (id=165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(r0, 0x0, 0x41) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0xffffffffffffffff, {0x1, 0x0, 0x3}, {0x0, 0x1}, 0x0, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x2c, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x6}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 679.0781ms ago: executing program 3 (id=172): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002680)=[{{&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)="3ef7ac", 0x3}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000180)="913a04", 0x3}], 0x1}}], 0x2, 0x4004081) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 618.803509ms ago: executing program 3 (id=176): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) 596.375121ms ago: executing program 3 (id=179): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 546.958969ms ago: executing program 4 (id=181): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}, r2}, 0x14) 546.560261ms ago: executing program 4 (id=183): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r3, 0x0) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 511.455291ms ago: executing program 4 (id=185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) 435.103771ms ago: executing program 4 (id=187): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) 434.860216ms ago: executing program 4 (id=188): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 434.504295ms ago: executing program 4 (id=189): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c395892f8ffe25d6d9a7faa7073fd9c3b3aac94c554dab9c35667eb49d5f0e47fd6bb41ca4b2f420b1e3915fa653aaf8d842cc4b0fec5011bd0ba372601fb7930ce98402d2e3d64f8422550a621fa23b128e66b6afe1a74dab2b53de22214844e53441ab7998d4ac3557cca9ffe4997c778243c943ca2de0b1deba8468a5fe3c0f1fa93a9a7bb5dbc3ec2058ac7ad4ffa64966bbd90a5f3f53de5c44af6e93f248471ca09cabe6e6c0a87586ff04a5a8cea539d049d82929277cfba7e46fddcdc0f4c2995def4ac27d65bde4bb88dbed3b9cf9eb9501273ca533da1220422f6585bfa77f5df5faaf3250349b514f44bfd55f106792bc7c766eddde2267a12888db542803efcf48357368880fa7771a2d962ae0bb14934a93d28a18da7d39ed6be7d1897e33d3ba0f6db99325a12f64670f22c762a395c9c6ef4e8ef15c0798465b1c9d406ed5731002a0ce72ca4adf125124046d5ac76b6782257587ff6ed55a55f98f8c377e36983b81c4b775cf0d41a9070cd1adeddf2083b635ae671f4e559990164e3a3e32a07c9faa438d73b1662e9eabf061703c7afb7adf2ae5f3acf2fcd57fef779f6b6e68656da61c8d45858d26f3858492e7797fb65d21f47ba805283f74fd473fcbd8b217ab628d62917dd96d5c49ad16d1616a946b8d4108a4d3f11c4f9260d9e01729beaf96231e6fb9d1181a1e032a71adde4c529f14029b728d163714e69f968340f7e2f9f420339bee64275474787d6b14cc9bbcbe1973cad7c29bfa1002adcb67b15c6edc01b00bca7823eb8fb6db7548fdd1ac1f7b3a69ed481c9cd2af0a09abd12e9a4e26e23d69790bdcd07b8da72da3ba97b0f2bc92a7da43845b70ae351f7ccc7cc7d92288f51f45e4d9d31a6bfeaa36621674170aad5d23a194921e81142505ec02020816a855eb162a9a5fefbc10121a534516be5fa2a17ed437cfb09d5085413a883ebf81538c2fd11edd0689bc339fc754d22ac9dec26d1e594f2cd14c605d069df81f876bf8c8b775108db76cac14088b9ea08d72a7f6c552e2954d8afd07f826085b2d67c828acb01943e576035f04c710a7f0edc8b6b9fa11325643d35193c9bb5a17c6e670ed0fc8be003c9fd769c1fe0480b10d7533cf3aeac0d2a157459a06af57d1ae20fb373f430f41c37cb0fb6745bb61f771e18a661dd58d9932eb543b0fb90dafbf495f1568e77a03864b66bfcd91918ceb9c28a1011fa5a3521ecb2042bd98955827a61480cf285739a6b5451a5a7e8d79b883e2782", 0x7fc}], 0x1}}], 0x1, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) unshare(0x22020400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000280)=0x7fffffffffffffff, 0x9) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x3, 0x10, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8000, 0x3, 0x7ff}}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000680)="fd87e5d2baef0a3ed302f4be29989bf72473f769dc050aaf4fb89cc6cc1d822a22cd4c0b09b7126ee8535951f863f9451975f4131cb3ac1c2b892945cbf624c89070864b5eb365bef626c6ae5b8c9b1f1c6b6dd836b5144809ae267c520201f659cc59ab88639f487913082255ecc731b50be47ea55f246a0a321cefcfbbd85ca54a82da4b2e6fd585d8ff8ae7db5f9a015e", 0x92}], 0x1, 0x0) 306.975733ms ago: executing program 2 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 285.438442ms ago: executing program 2 (id=195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000100001002ad070000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e04"], 0x58}}, 0x4000050) 262.552715ms ago: executing program 1 (id=196): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) 225.054475ms ago: executing program 1 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x1, 0xa, [@empty, @random="711fe152e567", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @multicast, @empty, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="76061125c72d", @random="e7086f647aa5", @multicast]}) 159.132046ms ago: executing program 2 (id=198): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x202000, 0x4) 158.495982ms ago: executing program 2 (id=199): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff01010000260000000019e1b6950000000000000018100000", @ANYRES32, @ANYBLOB="100000000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x37) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) accept4$unix(r2, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e, 0x80800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000540), 0x0, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xed23}}], 0xb8}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f00000001c0)={0x87}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000000040)={r11, 0x1}, &(0x7f00000000c0)=0x8) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r12, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000100)=0x10) 113.381232ms ago: executing program 1 (id=200): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) 76.588317ms ago: executing program 1 (id=201): r0 = socket(0x22, 0x2, 0x23) bind$inet6(r0, 0x0, 0x0) 14.84719ms ago: executing program 2 (id=202): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x46c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x43c, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x11, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xab, 0x7, 0x0, 0x6, 0x100, 0x7a, 0x8, 0xff, 0x0, 0x0, 0x47, 0x10000, 0x5, 0x2, 0xec, 0x5, 0x88b, 0x3, 0x8, 0xfffffff8, 0x7, 0xcefb, 0x1, 0xae42, 0x94, 0x9, 0x4dd8, 0xffffffff, 0x8, 0x20ce, 0x7, 0x9, 0x4, 0x3, 0x36222594, 0x6, 0x3, 0x9, 0x80, 0x7, 0x7ff, 0x9, 0x8, 0x9, 0x9c18, 0x5, 0x4, 0xffffffcf, 0x20000000, 0x0, 0x5, 0x7fffffff, 0x3, 0x1, 0x80, 0xffffffff, 0x5, 0x4, 0x5, 0x80, 0x2, 0xfff, 0x9, 0x100, 0x2, 0x1, 0x4ea4, 0x7, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x1, 0x897, 0x3, 0xf555, 0x81, 0x3, 0xf, 0xfffffff9, 0xffffff7f, 0x3, 0x5e8, 0x20000008, 0xc82, 0xa1b4, 0x0, 0x3, 0x10000, 0x5, 0x8000, 0x1ff, 0x7, 0xa, 0x6, 0x6, 0x421, 0x400005, 0x5, 0xff, 0x9, 0x0, 0x5, 0x9b8e, 0x0, 0xaf8c, 0x1e, 0x1, 0x9, 0x8b9, 0x7, 0x7, 0x2, 0x8, 0x7, 0xba8e, 0x5, 0x101, 0x6c6, 0x5, 0x9, 0x9, 0x7fffffff, 0x1a8e, 0x8, 0x3, 0x6, 0xa, 0x4, 0x8, 0xfff, 0xf, 0x1000, 0x2, 0x6, 0x101, 0x1, 0x7, 0x80, 0xe00, 0x80000001, 0x80000000, 0xf, 0x6, 0x2, 0xfff, 0x0, 0x7, 0xfffffe00, 0x8, 0x9ab2, 0x8, 0xfffffff8, 0x8000, 0x1e, 0x4, 0x6, 0xfffffffa, 0x8, 0xe, 0x800, 0x0, 0x8000, 0x3, 0x400, 0xfffff800, 0x1, 0x9, 0x10000, 0x101, 0xf, 0x8, 0x7fffffff, 0x7, 0x2, 0x4, 0x0, 0x2, 0x7, 0xfa, 0x8, 0x7, 0x9, 0x2f, 0x7, 0x5, 0x1, 0x590, 0x5, 0x10, 0x1, 0x4, 0x2, 0x3ff, 0x55, 0x5, 0xf, 0xa, 0x8, 0x6, 0x7fff, 0x0, 0x7, 0xffffffff, 0xfff, 0xfffffff7, 0x0, 0xb0, 0x81, 0x5152, 0x7fffffff, 0x7fffffff, 0x6, 0x9, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x8, 0xba, 0x5, 0x1, 0x8000, 0xecf, 0x2, 0x4000000, 0x400, 0xc9db, 0x0, 0x3, 0x8ed, 0x34, 0x1, 0x81, 0x28, 0x7ff, 0x21a, 0x401, 0x0, 0xfffe000, 0x1, 0x9, 0xfff, 0x1, 0x1, 0x3, 0x10000, 0x800, 0x4, 0x7ffffffe, 0x7]}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) 14.542015ms ago: executing program 1 (id=203): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001a000100000000000000001881000000004000000000000008"], 0x24}}, 0x10000000) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.122394ms ago: executing program 1 (id=204): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x28, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x22, 0x4, "a85b"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x7, 0x0, 0x2}]}}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x800003f, @remote, 0x2}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000019c0)=""/4094, 0xffe}, {&(0x7f0000000000)=""/170, 0xaa}, {&(0x7f0000000900)=""/168, 0xa8}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000000140)=""/28, 0x1c}], 0x7}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x89}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="4f6b3780907c340a944dc93f004f", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 0s ago: executing program 2 (id=205): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x6020400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x891e, &(0x7f0000000900)={'bridge0\x00', @multicast}) r2 = socket(0x14, 0x2, 0x4) shutdown(r2, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec640", 0x46}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x32}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000100)={0x5, @remote}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 26.529463][ T6515] cgroup: Unknown subsys name 'net' [ 26.661422][ T6515] cgroup: Unknown subsys name 'cpuset' [ 26.663428][ T6515] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.789765][ T6515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.891122][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.898951][ T6539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.899811][ T6539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.899978][ T6539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.900395][ T6539] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.900598][ T6539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.901226][ T6541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.901536][ T6541] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.901774][ T6541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.901985][ T6541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.902267][ T6541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.902402][ T6541] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.902700][ T6541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.903126][ T6540] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 28.903673][ T6538] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.903985][ T6538] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.904346][ T6538] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.904592][ T6538] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.905266][ T6538] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.905468][ T6538] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.905931][ T6538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.906130][ T6538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.915126][ T6532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.915319][ T6532] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.918195][ T6532] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.039177][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 29.092930][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 29.103710][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.105131][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.106410][ T6533] bridge_slave_0: entered allmulticast mode [ 29.107994][ T6533] bridge_slave_0: entered promiscuous mode [ 29.115870][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 29.118548][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.118616][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.118681][ T6533] bridge_slave_1: entered allmulticast mode [ 29.119341][ T6533] bridge_slave_1: entered promiscuous mode [ 29.155781][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.156708][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.178778][ T6533] team0: Port device team_slave_0 added [ 29.188484][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.188608][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.188658][ T6525] bridge_slave_0: entered allmulticast mode [ 29.189068][ T6525] bridge_slave_0: entered promiscuous mode [ 29.197537][ T6533] team0: Port device team_slave_1 added [ 29.201487][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 29.205246][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.205298][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.205365][ T6525] bridge_slave_1: entered allmulticast mode [ 29.205779][ T6525] bridge_slave_1: entered promiscuous mode [ 29.221745][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.221781][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.222089][ T6528] bridge_slave_0: entered allmulticast mode [ 29.222569][ T6528] bridge_slave_0: entered promiscuous mode [ 29.233993][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.235365][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.236661][ T6528] bridge_slave_1: entered allmulticast mode [ 29.238052][ T6528] bridge_slave_1: entered promiscuous mode [ 29.246933][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.246957][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.246970][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.247873][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.247883][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.247901][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.248193][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 29.264859][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.265761][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.282133][ T6525] team0: Port device team_slave_0 added [ 29.284120][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.284975][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.294542][ T6525] team0: Port device team_slave_1 added [ 29.317624][ T6528] team0: Port device team_slave_0 added [ 29.318890][ T6528] team0: Port device team_slave_1 added [ 29.322803][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.322907][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.322957][ T6526] bridge_slave_0: entered allmulticast mode [ 29.323343][ T6526] bridge_slave_0: entered promiscuous mode [ 29.327631][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.328738][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.330143][ T6527] bridge_slave_0: entered allmulticast mode [ 29.331505][ T6527] bridge_slave_0: entered promiscuous mode [ 29.333312][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.333333][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.333347][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.333947][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.333954][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.333967][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.340896][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.343173][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.343253][ T6526] bridge_slave_1: entered allmulticast mode [ 29.343667][ T6526] bridge_slave_1: entered promiscuous mode [ 29.352717][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.352753][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.352823][ T6527] bridge_slave_1: entered allmulticast mode [ 29.353235][ T6527] bridge_slave_1: entered promiscuous mode [ 29.354867][ T6533] hsr_slave_0: entered promiscuous mode [ 29.355191][ T6533] hsr_slave_1: entered promiscuous mode [ 29.372270][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.374996][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.376926][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.376947][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.376963][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.377538][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.377545][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.377558][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.390702][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.391743][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.409509][ T6526] team0: Port device team_slave_0 added [ 29.422768][ T6528] hsr_slave_0: entered promiscuous mode [ 29.423099][ T6528] hsr_slave_1: entered promiscuous mode [ 29.423303][ T6528] debugfs: 'hsr0' already exists in 'hsr' [ 29.423341][ T6528] Cannot create hsr debugfs directory [ 29.424790][ T6526] team0: Port device team_slave_1 added [ 29.432703][ T6525] hsr_slave_0: entered promiscuous mode [ 29.433010][ T6525] hsr_slave_1: entered promiscuous mode [ 29.433188][ T6525] debugfs: 'hsr0' already exists in 'hsr' [ 29.433198][ T6525] Cannot create hsr debugfs directory [ 29.437412][ T6527] team0: Port device team_slave_0 added [ 29.438206][ T6527] team0: Port device team_slave_1 added [ 29.456806][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.457042][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.457056][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.470875][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.470902][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.470916][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.493102][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.494342][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.494372][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.501107][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.501126][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.501140][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.528639][ T6526] hsr_slave_0: entered promiscuous mode [ 29.530356][ T6526] hsr_slave_1: entered promiscuous mode [ 29.530566][ T6526] debugfs: 'hsr0' already exists in 'hsr' [ 29.530586][ T6526] Cannot create hsr debugfs directory [ 29.570478][ T6527] hsr_slave_0: entered promiscuous mode [ 29.571893][ T6527] hsr_slave_1: entered promiscuous mode [ 29.573250][ T6527] debugfs: 'hsr0' already exists in 'hsr' [ 29.574202][ T6527] Cannot create hsr debugfs directory [ 29.618049][ T6533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.622352][ T6533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.631953][ T6533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.637450][ T6533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.667417][ T6525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.671058][ T6525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.677238][ T6525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.679285][ T6525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.685416][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.685466][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.685673][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.685697][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.703372][ T6528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.706001][ T6528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.708400][ T6528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.711785][ T6528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.735284][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.735352][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.735451][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.735473][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.747143][ T6526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.749339][ T6526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.751773][ T6526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.754352][ T6526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.759302][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.759349][ T6528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.759420][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.759458][ T6528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.786208][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.792855][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.794157][ T6527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.803177][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.804557][ T6527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.806660][ T6527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.809576][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.812723][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.815696][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.817265][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.818849][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.821594][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.835897][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.837696][ T6527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.849320][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.861496][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.861542][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.864698][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.864738][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.865039][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.865053][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.882911][ T1519] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.882954][ T1519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.897527][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.905511][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.905695][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.906042][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.906057][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.916799][ T6528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.916841][ T6528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.924955][ T6525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.927015][ T6525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.934773][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.939901][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.968172][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.968219][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.970821][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.970840][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.973890][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.976585][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.998837][ T6527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.999634][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.006172][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.006209][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.006504][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.006521][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.022684][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.042619][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.056264][ T6528] veth0_vlan: entered promiscuous mode [ 30.078423][ T6533] veth0_vlan: entered promiscuous mode [ 30.083560][ T6533] veth1_vlan: entered promiscuous mode [ 30.088036][ T6528] veth1_vlan: entered promiscuous mode [ 30.094039][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.109670][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.115273][ T6525] veth0_vlan: entered promiscuous mode [ 30.117739][ T6525] veth1_vlan: entered promiscuous mode [ 30.126516][ T6525] veth0_macvtap: entered promiscuous mode [ 30.128742][ T6525] veth1_macvtap: entered promiscuous mode [ 30.155672][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.158637][ T6533] veth0_macvtap: entered promiscuous mode [ 30.159574][ T6533] veth1_macvtap: entered promiscuous mode [ 30.165855][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.169182][ T6528] veth0_macvtap: entered promiscuous mode [ 30.178015][ T6526] veth0_vlan: entered promiscuous mode [ 30.182582][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.188472][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.191172][ T6526] veth1_vlan: entered promiscuous mode [ 30.192482][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.192643][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.192670][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.192685][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.198808][ T6528] veth1_macvtap: entered promiscuous mode [ 30.205257][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.225699][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.228027][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.244373][ T1598] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.244445][ T1598] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.244470][ T1598] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.244488][ T1598] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.244514][ T1598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.244535][ T1598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.244551][ T1598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.244564][ T1598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.269021][ T6527] veth0_vlan: entered promiscuous mode [ 30.276895][ T6526] veth0_macvtap: entered promiscuous mode [ 30.282935][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.282963][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.289676][ T6526] veth1_macvtap: entered promiscuous mode [ 30.294101][ T6527] veth1_vlan: entered promiscuous mode [ 30.302863][ T6527] veth0_macvtap: entered promiscuous mode [ 30.321655][ T6527] veth1_macvtap: entered promiscuous mode [ 30.329221][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.334453][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.335214][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.335225][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.336488][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.343281][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.343315][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.347822][ T4666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.347893][ T4666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.347961][ T4666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.348005][ T4666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.355047][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.368601][ T1598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.368639][ T1598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.382996][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.383054][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.383168][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.383185][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.383638][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.383650][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.405769][ T6525] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.428554][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.428588][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.451387][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.451415][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.481137][ T4666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.481171][ T4666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.523737][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.523767][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.547640][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.547672][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.578149][ T6651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.688324][ T6671] veth1_to_bond: entered allmulticast mode [ 30.688896][ T6671] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.689242][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 30.701506][ T6673] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.714287][ T6671] bond0: (slave bond_slave_1): Releasing backup interface [ 30.785317][ T6681] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 30.848532][ T6690] netlink: 44 bytes leftover after parsing attributes in process `syz.4.21'. [ 30.857680][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 30.980648][ T6124] Bluetooth: hci3: command tx timeout [ 30.980729][ T52] Bluetooth: hci1: command tx timeout [ 30.980979][ T52] Bluetooth: hci0: command tx timeout [ 30.980982][ T6124] Bluetooth: hci4: command tx timeout [ 30.981109][ T6124] Bluetooth: hci2: command tx timeout [ 31.007729][ T6709] netlink: 96 bytes leftover after parsing attributes in process `syz.0.31'. [ 31.042989][ T6715] syz.4.35 uses obsolete (PF_INET,SOCK_PACKET) [ 31.078976][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 31.121615][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 31.218039][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.45'. [ 31.359796][ T6755] tipc: Started in network mode [ 31.359837][ T6755] tipc: Node identity 56e9fdc318a5, cluster identity 4711 [ 31.360892][ T6755] tipc: Enabled bearer , priority 0 [ 31.363419][ T6755] syzkaller0: entered promiscuous mode [ 31.363435][ T6755] syzkaller0: entered allmulticast mode [ 31.371937][ T6754] tipc: Resetting bearer [ 31.377184][ T6754] tipc: Disabling bearer [ 31.455877][ T6761] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 31.457827][ T6761] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 31.459561][ T6761] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 31.461335][ T6761] Zero length message leads to an empty skb [ 32.320868][ T6829] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 32.408720][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 32.691573][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 32.827234][ T6866] sctp: [Deprecated]: syz.4.97 (pid 6866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 32.827234][ T6866] Use struct sctp_sack_info instead [ 32.906917][ T6876] netlink: 'syz.0.102': attribute type 9 has an invalid length. [ 32.982547][ T6881] Bluetooth: MGMT ver 1.23 [ 33.039539][ T6888] warning: `syz.1.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 33.060248][ T6532] Bluetooth: hci2: command tx timeout [ 33.060632][ T6124] Bluetooth: hci4: command tx timeout [ 33.060653][ T6124] Bluetooth: hci0: command tx timeout [ 33.060668][ T6124] Bluetooth: hci3: command tx timeout [ 33.060681][ T6124] Bluetooth: hci1: command tx timeout [ 33.273306][ T6910] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 33.273340][ T6910] netlink: 'syz.4.116': attribute type 4 has an invalid length. [ 33.502019][ T6932] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 33.699262][ T6960] sctp: [Deprecated]: syz.2.135 (pid 6960) Use of int in max_burst socket option. [ 33.699262][ T6960] Use struct sctp_assoc_value instead [ 33.707186][ T6959] netlink: 'syz.1.137': attribute type 6 has an invalid length. [ 33.868022][ T6977] syzkaller1: entered promiscuous mode [ 33.869015][ T6977] syzkaller1: entered allmulticast mode [ 33.947471][ T6984] Bluetooth: MGMT ver 1.23 [ 34.239546][ T7025] tipc: Started in network mode [ 34.240739][ T7025] tipc: Node identity fffffdfc, cluster identity 4711 [ 34.243689][ T7025] tipc: Node number set to 4294966780 [ 34.409125][ T7051] netlink: 'syz.2.180': attribute type 4 has an invalid length. [ 34.467734][ T7060] netlink: 'syz.4.183': attribute type 7 has an invalid length. [ 34.469319][ T7060] netlink: 'syz.4.183': attribute type 8 has an invalid length. [ 34.769452][ T7091] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 34.935750][ T7103] delete_channel: no stack [ 35.050146][ T7114] ------------[ cut here ]------------ [ 35.050171][ T7114] verifier bug: not inlined functions bpf_probe_read_kernel#113 is missing func(1) [ 35.050229][ T7114] WARNING: CPU: 1 PID: 7114 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 35.053857][ T7114] Modules linked in: [ 35.054419][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.1.204 Not tainted syzkaller #0 PREEMPT [ 35.055708][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 35.057281][ T7114] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 35.058450][ T7114] pc : bpf_check+0x1559c/0x15d8c [ 35.059133][ T7114] lr : bpf_check+0x1559c/0x15d8c [ 35.059879][ T7114] sp : ffff8000a32d7480 [ 35.060459][ T7114] x29: ffff8000a32d7980 x28: dfff800000000000 x27: 0000000000000006 [ 35.061584][ T7114] x26: 1ffff00013803a13 x25: ffff80009c01d09c x24: ffff0000f6758008 [ 35.062727][ T7114] x23: ffff80009c01d098 x22: ffff80008b154840 x21: ffff800092e12000 [ 35.063892][ T7114] x20: ffff80009c01d09c x19: 1ffff00013803a13 x18: 00000000b7030000 [ 35.065053][ T7114] x17: 2020200025732020 x16: ffff80008b0155d8 x15: 0000000000000001 [ 35.066214][ T7114] x14: 1fffe0003379e900 x13: 0000000000000000 x12: 0000000000000000 [ 35.067380][ T7114] x11: 0000000000080000 x10: 0000000000000003 x9 : a623a9950272e900 [ 35.068697][ T7114] x8 : a623a9950272e900 x7 : ffff80008b020e00 x6 : 0000000000000000 [ 35.070007][ T7114] x5 : 0000000000000001 x4 : 0000000000000001 x3 : 0000000000000010 [ 35.071205][ T7114] x2 : ffff8000a32d70f0 x1 : ffff80008b668440 x0 : 0000000000000001 [ 35.072654][ T7114] Call trace: [ 35.073117][ T7114] bpf_check+0x1559c/0x15d8c (P) [ 35.073885][ T7114] bpf_prog_load+0xec8/0x13fc [ 35.074624][ T7114] __sys_bpf+0x450/0x628 [ 35.075299][ T7114] __arm64_sys_bpf+0x80/0x98 [ 35.075963][ T7114] invoke_syscall+0x98/0x2b8 [ 35.076598][ T7114] el0_svc_common+0x130/0x23c [ 35.077303][ T7114] do_el0_svc+0x48/0x58 [ 35.077880][ T7114] el0_svc+0x5c/0x254 [ 35.078488][ T7114] el0t_64_sync_handler+0x84/0x12c [ 35.079276][ T7114] el0t_64_sync+0x198/0x19c [ 35.079976][ T7114] irq event stamp: 710 [ 35.080635][ T7114] hardirqs last enabled at (709): [] raw_spin_rq_unlock_irq+0x14/0x24 [ 35.082176][ T7114] hardirqs last disabled at (710): [] el1_brk64+0x20/0x54 [ 35.083557][ T7114] softirqs last enabled at (534): [] local_bh_enable+0x10/0x34 [ 35.084924][ T7114] softirqs last disabled at (532): [] local_bh_disable+0x10/0x34 [ 35.086227][ T7114] ---[ end trace 0000000000000000 ]--- [ 35.140577][ T6532] Bluetooth: hci1: command tx timeout [ 35.140620][ T6532] Bluetooth: hci3: command tx timeout [ 35.140648][ T6532] Bluetooth: hci0: command tx timeout [ 35.140665][ T6532] Bluetooth: hci4: command tx timeout [ 35.140681][ T6532] Bluetooth: hci2: command tx timeout [ 37.220115][ T52] Bluetooth: hci2: command tx timeout [ 37.220155][ T52] Bluetooth: hci4: command tx timeout [ 37.222598][ T52] Bluetooth: hci0: command tx timeout [ 37.223095][ T6532] Bluetooth: hci3: command tx timeout [ 37.223117][ T6532] Bluetooth: hci1: command tx timeout