last executing test programs: 3m0.515639835s ago: executing program 2 (id=810): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r2, 0xac9d4000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)="a26776", 0x3}, {0x0}], 0x2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @ldst={0x0, 0x2, 0x4, 0x2, 0xb, 0xffffffffffffffff, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x1, 0xb, 0x3, 0x80, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x45, '\x00', r3, 0x19, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x1, 0xe, 0x0, 0x1ff}, 0x10, 0x1763b, r5, 0x6, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0x2, 0x9}, {0x1, 0x5, 0x6, 0x9}, {0x1, 0x2, 0x4, 0x2}, {0x0, 0x4, 0x7, 0x8}, {0x5, 0x3, 0xf, 0x8}, {0x5, 0x5, 0xa, 0x1}], 0x10, 0xffff}, 0x94) 3m0.325919532s ago: executing program 2 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000000080)) r2 = socket(0x1e, 0x2, 0x4) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000007c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaffffffff08004500002000000000008890"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) splice(r4, &(0x7f0000000900)=0x100, r4, &(0x7f0000000940)=0x40000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000061112c000000000006000000000000009500000000000000281622bb8b4fee"], &(0x7f0000000e00)='GPL\x00', 0x5, 0xb682, &(0x7f0000000e40)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) connect$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000980)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1028000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000100)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000a80)={'geneve0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r10, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x200480c1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10015}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x2000000000000000}, 0x0) 3m0.019024058s ago: executing program 2 (id=820): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000200)=@raw=[@alu={0x7, 0x1, 0x0, 0xb, 0x0, 0x80, 0x5}, @jmp={0x5, 0x1, 0x5, 0x3, 0x5, 0xebd64cbe74404f7, 0x1}, @jmp={0x5, 0x1, 0x0, 0x4, 0x5, 0xfffffffffffffff4}, @alu={0x4, 0x0, 0xa, 0x2, 0xb, 0x0, 0x4}, @ldst={0x3, 0x3, 0x2, 0x8, 0x7, 0xfffffffffffffffc, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x3c, &(0x7f0000000280)=""/60, 0x41100, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000300)=[{0x2, 0x5, 0x1, 0x5}, {0x0, 0x2, 0xc, 0x5}, {0x3, 0x4, 0x7, 0xc}, {0x5, 0x2, 0x2, 0xc}], 0x10, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000ac0)={r3, r1, 0x25, 0x0, @val=@perf_event={0x3}}, 0x18) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 2m59.918618253s ago: executing program 2 (id=822): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008050) connect$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(0x4) unshare(0x2020600) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000006c0)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000d40)={0x2000}) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) close(r3) unshare(0x8000c00) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000400)={{}, 0x9, 0x9f, 0x50c2}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r6, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x8, 0x7, 0xfffffff4, 0x400, {{0x17, 0x4, 0x2, 0x4, 0x5c, 0x67, 0x0, 0x6, 0x29, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x2b, 0x37, [@empty, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010102, @broadcast, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @local]}, @ssrr={0x89, 0xf, 0xc3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010101]}, @generic={0x89, 0xa, "24532b1d247b9d04"}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x23c0400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xfc, 0x0, 0x408, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x24}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040051}, 0x4000) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback=0x2c000001}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}}, 0x4040800) 2m59.815069655s ago: executing program 0 (id=823): r0 = socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x13, &(0x7f0000000700)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r2, 0x0, 0xe, 0x0, &(0x7f0000000880)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000080)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r3, 0x0, 0x0) write$nci(r3, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r3, &(0x7f0000000300)=ANY=[], 0x4a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}}, 0x20}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 2m59.59756035s ago: executing program 1 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30006700002c000000030a05000000000000000000050000500900010073797a30000000000900030073797a31000000005c000000060a010400130000000000000500000008000b40000000000900010073797a30000000003400048030"], 0xd0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xfec1}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) bind$rds(r1, &(0x7f0000001140)={0x2, 0x101, @private=0xa010102}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000cc0)={0x7, 'ip6erspan0\x00', {0x401}, 0x9}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000240)=0x79, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='bbr', 0x3) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000003c0)=0xdf8, 0x4) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="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", 0x1e5}], 0x1}}], 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f0000000e00)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000e40)=0x1, 0x4) socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000e80)={0x2, 0x4e21, @local}, 0x10) sendfile(r6, r5, 0x0, 0xf03a0005) sendmsg(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="385eab4f254e5a5c492c82d7a6cb15c97b4de4a0b5092720b7ebefc2d3df7a66ce924b3780b96e046163f5aa0f201cebe27b121e79e27ba6efae9a7e6b36cee37fc3449d8ac5ededbf212f5b55001f13c3b1407b01ba0dee4deba035d6ed5f5b74676f8d6db7925354e02c0ab329b80ca2e0ce7298587db2c7c3ebd37ada39c4963113e7bd2deeff49781bf9afc9683b7a56b01fdd29fb063e018a1624fef60e7567ab60504cda0dbf99088d3907b6e5aca46471aa135eb3634067655df131b9759a1d31a9c80dec265cfb740d2b8762cf0af6a8596e5e731759f0c40f8bcdd7c41473f67620b778421b032e9c071e61de656b03c099", 0xf6}, {&(0x7f0000000ac0)="9a8c2cdd41cd6761f2c6345b40511bfd251f7a1bdd56c67eee39cc1715f7d41ca10df78d80177cc7c8c1950fc98b9c697f4b51a13cf6b15e206d225c140e62eca3dd2b2c6789eda8d0ebc12baf8311b9167ee3da0386b9da0efe18c727ce6f80e875f3d8cf29aabed912f1b04d8811cbd3ad58bd6eca6e059868b9f2be9651b6a3f60a14c644569ac8e4ebb0dcb393a3def7dda8a612c88f6e3b4b2013b4b5ff972c2dc9792ac982e5c0abf2d1fc4883c82e47fa3e758c56c516668fae7a3727e3c669373c0047245a731bc7bf50c83772f3473b696cf3bcb3ada751b213870fbcf0f4ed7018736a3f4f67871a0b68e153b6ceb95fb212a18d42bdb61c2379cb0ea3c2d29b637a5069cd16b2a2717b00478b6bf0a1d2c3c4be18f93e55b9c7b715529b526a9ce37302de5bd4a3bce1cb2350a2118817867055224b4c47bc451e9001c587b2ad59f9e1ada2bb809d710b7de370b526b5763196b9a061707e83b8b54edc8f2928d41336572b9a9ecd9a854a63c2d7798432d1de90fee17221688c31a240a3f5ef84dc09f9cbae9dceb76da286721c323f27d140b792852f48e962875dba224631d8b57c2d5d7a7b68b5d5125ade6d457ae4d77033ab4b28a8e9a7de3c", 0x1c2}], 0x2}, 0x0) getsockopt$sock_int(r3, 0x1, 0x10, 0x0, &(0x7f0000000080)=0x16) 2m59.423904316s ago: executing program 1 (id=830): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{}, {{0x44}, 0x5a}, {{0x2000004}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x12, "be45"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@security={'security\x00', 0x64, 0x4, 0x2f0, 0x100000c, 0x148, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0x1000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "3a2a8fa7d4b22c81086c268084a9c7223d88d322ef00"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0xfe}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff000000, 0xffffff00, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x28}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@set4={{0x50}, {{}, {{0x44}, 0x5a}, {{0x2000004}, 0xa}, 0x3}}, @common=@icmp={{0x28}, {0x12, "be45"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0xa1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x40) (async) 2m59.385764758s ago: executing program 4 (id=832): r0 = socket(0x23, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000044}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r3, 0x300, 0xffffffff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x81}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x4b, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @mic={0x8c, 0x10, {0xe37, "44290fe4077f", @short="a276900c9782643a"}}, @preq={0x82, 0x30, {{0x1}, 0x84, 0x1, 0x401, @device_a, 0x2, @void, 0x9, 0x0, 0x2, [{{0x1, 0x0, 0x1}, @device_a, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0x1ff}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x20004010) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x5c, r5, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x20}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0xb, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b, 0x0, 0x50}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd0700142}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x922, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0xffffffff, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0x1fc, 0x80000a, 0x1, 0x1, 0x8e06}}, {0x4}}, {{0x1c, 0x1, {0x6, 0xc, 0x1c, 0xa, 0x1, 0x7, 0xffffffff}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 2m59.307886561s ago: executing program 1 (id=833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="757494a85f6b9c319d704961acd5", 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x200}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x9007}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000780)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) (async) close(0x3) socket(0x400000000010, 0x3, 0x1) (async) socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) (async) socket$nl_route(0x10, 0x3, 0x0) 2m59.166592815s ago: executing program 1 (id=835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in=@broadcast, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x4d, 0x2, {{'cbc(cast5)\x00'}, 0x28, '\x00@\x00\x00 '}}]}, 0x140}}, 0x44050) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x7, 0xd9, &(0x7f0000000f80)=""/217, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 2m58.937396031s ago: executing program 1 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001e00)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="260000000001000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000080)='\'\'\')#+(@!\x00', 0x80200, &(0x7f0000000280)={@align=0x11, {0x4, 0x10, 0xe, 0x4}}, 0xc7b5, &(0x7f00000002c0), &(0x7f0000000300)=0xa}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07002dbd70000000000005000000180001801400020073797a5f74756e000000000000000000180003801400038010000180040003000800010001000000e66bc7bf60144222b779caf2e625b195d9d4e467d37904d2d8246d37f01d60b4b32b568ac7ed1d564892ca5ef7cb22853e5a52aa55f7317f3276717173c6cfe49c172260e4a51daa832763d0ed4ac310d586d1d5bb100b5bf8fda3f61ae5224bc70e5132f04b9e34a2c3e587a78fa872756016dc017c1eaae8657a9785e459c725b7c196a4de"], 0x44}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x10, 0x8000, 0x6bed, 0x5, {{0x10, 0x4, 0x0, 0x9, 0x40, 0x66, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@timestamp_addr={0x44, 0x24, 0xdd, 0x1, 0x7, [{@multicast2, 0x3}, {@loopback, 0x4}, {@loopback, 0xffffffff}, {@private=0xa010102, 0xc}]}, @noop, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'virt_wifi0\x00', 0x0}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c00)={r6, r6, 0x2f, 0x0, @void}, 0x10) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r9 = socket(0xa, 0x80805, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000c40)={0x0, 0x1c, &(0x7f0000000c80)=[@in6={0xa, 0x4e22, 0x3, @private1, 0x1}]}, &(0x7f0000000cc0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000d00)=@assoc_value={0x0}, &(0x7f0000000d40)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000d80)={r11, 0x1}, &(0x7f0000000dc0)=0x8) (async) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000e00)={r11, 0x1}, 0x8) unshare(0x22020600) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 32) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000e80)={r7, r6, 0x4, r6}, 0x10) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0000010180c2000001080600010800060400020a0132becef393fad46f6dae64c8aaaaaaaaaabb00080000b726bc896e522556c60199b2186c56c4bde908b350354bb236b61aee9460704f95ee0eda7130c8a39ece53208780d3f6c1395028bd3af858c80ea63fd54cbeb1600c13e9732b887ccaa6e55cdb8ccad10e2abfdfd4a70dbf5bbeff89709cf8fdd4328a4f1538b7863286ccaa7141147d3348c246023dce10648b57"], 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@private1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x1, 0x4e24, 0x7, 0x2, 0x20, 0x60, 0x33}, {0xa3, 0x4, 0x3, 0x8001, 0x80000001, 0x5, 0xce, 0x4}, {0x100, 0x8, 0x8f6, 0x1}, 0x2, 0x6e6bba, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x4d4, 0x33}, 0x2, @in6=@remote, 0x3501, 0x0, 0x2, 0x8, 0x7fffffff, 0x7, 0x7}}, 0xe8) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000007c0)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) socket$inet6(0xa, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x4, 0x4, 0xfffffff9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48817}, 0x2000400c) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'ip_vti0\x00', r4, 0x7800, 0x80, 0x7, 0x2, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x67, 0x0, 0x3, 0x29, 0x0, @remote, @loopback, {[@lsrr={0x83, 0x2b, 0xb2, [@empty, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x27}, @empty, @multicast2, @private=0xa010100, @rand_addr=0x64010102, @remote, @remote]}, @ssrr={0x89, 0xb, 0xe9, [@rand_addr=0x64010102, @remote]}, @cipso={0x86, 0x14, 0x6900df7751bc25aa, [{0x2, 0xe, "4dd58a3bfa5e6666483d319b"}]}]}}}}}) 2m56.752400227s ago: executing program 0 (id=839): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000100000000001800000085100000010000009500"/36], &(0x7f0000000140)='GPL\x00', 0x6, 0x9c, &(0x7f0000000040)=""/156, 0x40f00, 0x40}, 0x94) 2m56.729081824s ago: executing program 4 (id=840): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000380)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000440)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000500)={0x2}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000200)={{r3, &(0x7f0000000000)='\x00', 0x202000, &(0x7f0000000040)={@align=0x9, {0x5, 0x1, 0x0, 0xc176}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x3}, 0x1, &(0x7f00000001c0)=[{0x1, 0x6, &(0x7f0000000100)='!\x00', &(0x7f0000000140)="7627c8ca96dab32a36f8d56e7edf13f4b3cc73b19922fafb8fbc49eaaa8f5a982094085ec0917c95b89394095ac600723b03cab0d771058a260b99cf54e305316418e6a40d", 0x45}]}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x84) 2m56.727427122s ago: executing program 2 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000ea8fd26ea1c4f94fa42012c6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xe4ff, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00 \x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) (async, rerun: 64) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x8000002, 0x2004}, 0x1c) (rerun: 64) sendto$inet6(r6, 0x0, 0x0, 0x220080c1, &(0x7f0000000100)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) (async, rerun: 32) sendto$inet6(r6, &(0x7f0000000140)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async, rerun: 32) write$tcp_mem(r4, &(0x7f00000005c0)={0x2, 0x20, 0x5, 0x20, 0x6893}, 0x48) (async) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2m56.72692379s ago: executing program 3 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) unshare(0x600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000040000000400000012"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000001200000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m56.648309987s ago: executing program 1 (id=843): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x44004000) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000140)={0x1100, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x7c2}) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000380)={&(0x7f0000000300)=[{0x1794, 0x1, 0x1, 0x9}, {0x8, 0x4, 0x7fff, 0x8, 0x4}], 0x2, 0x28, 0xfffb, 0x5}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x5, &(0x7f0000000280)=[{0x35, 0x0, 0x3}, {0x45, 0x1, 0x2, 0x5}, {0x44, 0x94, 0x0, 0x9}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080000000400000004000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x14, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018010000202073250000000000202014c36937dd778ffa2546152be8207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000220002800a000100dd"], 0x40}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010"], 0x3c}, 0x1, 0x0, 0x0, 0x4000889}, 0x20048810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="05002f00000000001d9f4359f21380c1d3b7a21895e3f0bfc9e2157a04cea18b8d88d659496707b2116ca3c61f162e2709a8b502be0fe27b953e546607ad1ba8d8c5f00e581e6a0ba467214918b56a7b1f998ba20aab235eb87a3568288415a46ca9e0b358b47b66caf37496"], 0x24}}, 0x54) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x24, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40841) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000980)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000009c0)='dctcp', 0x5) connect$inet(r9, &(0x7f0000000a00)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000a40)="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", 0xffffff5d, 0x12, 0x0, 0x0) 2m56.647518079s ago: executing program 3 (id=844): recvmsg(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000080)=""/170, 0xaa}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/221, 0xdd}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/239, 0xef}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x7}, 0x10000) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f00000024c0)=@name, &(0x7f0000002500)=0x10, 0x80000) sendmsg$tipc(r0, &(0x7f0000002ac0)={&(0x7f0000002540)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002580)="f3bb13dc6a7e601c0ec6ee057292e5908fdeb1839443bf8d6e77d5168d29c3c54853feb411dc1bb767dc2ee4ae62ddcf8af73238a7d2e2b47f84be97374f8741626afa22666fb07872921443a583876da9e8952045c8502093", 0x59}, {&(0x7f0000002600)="ad53972b56a4dcecbf86836faf2d496a0cd9b92b560af1ba924b5517fa0c1524798df9d41546f070f696547862ae1594b47c166517f67129a14a2724de5d189873e9a423ed40a8f242856364e67ded18818b436bf8fc9bb3f2dd0933cc697423d6a96fb70c6ebf7b13b6affc1bae3783cbc13227abc2f814639e6f8078fdabeab4729cb5c3d63db4ec6a585650e4dbf056f90a03150bafaa552526843f68b79c276ae8de4128bc09e239d656c73e000d2d36eecab554ed61902dec51f1dfc369a753f10672f505466e962a08c20b9f700bc0661a4b062dcf2ff901fc5b9105fb9c7b9d4f37604f75baa5602b20bdab5b7a79239216b5", 0xf6}, {&(0x7f0000002700)="9402b9b2ac91b9a991acb1a423e1cab75191f3a57a70fd90b9aff1c3d57afde15b5fafdeb8dcae252afc146b0568b4aafaf90b485f5a6fc9e0b3fb9c33a9edb4ff7fcf19a534cb5e27ebec4b5da4e6b835d868197d73143d38f64206d8e37b332fa1206bccbcbc4e8c75a6462c5a0c47cce021", 0x73}, {&(0x7f0000002780)="8f3fb41db91ad1fff8e9bda38bb34be296f8fee98003740d8fed9ff70d6d48f5c78808a177758165f4a55095136a86c0d53e385c4cc37f6479d900c5c3c93d9ddff31748d869d04a7ff8d23c1b89e948bceb39acbfe308f4e0a8739c4ebc00404260a656fa6c69fdcdc798d42c325402702535130219e4154a53cea0a9c7af9f9732dace96c8a13b1067db872b286046461e3ed3174e2a91fc5dd3b0107fa1b2034c8e213b8f55a6750e77de006b7a90fe26547ef844c1898bdafd12c78b0c9d8b1103f9860c9e3e", 0xc8}, {&(0x7f0000002880)="ae788f07f792be5022156596550f5d6578f1612de9da4fe69495d5e17deaae09556b7c87742067d5644de6e2c4a202b69f504eb437c99508b7ccb038e7ec589de3da2e0b5e411c388832ff0b42f68e3e35063ac8e097120f630177749eaeda14c4d66a86e168b02c2c8fb81e74a77a08b57c91579e426182a354485e335656e333922c3e61748962cf5546294c", 0x8d}], 0x5, &(0x7f00000029c0)="58cac06d137d1d605781dc1c577e18f3144b68eaf5b4fd5b1ad0a91ee9381fee25110d44586a3039280dc98f6a707953e0117f4cc6021bb910bf84ab1e493d324e6a296d747c0c09886b3b8c222a4924a2f0420a5a563d959430959b150c397fa10b0aeb9cbe8d6fcafe7191b884dbf96e5991073a07ae5230e75b13f9b4e7b8ce353a62710be1e339cbf775c8a45f1e2a9ef2e7926bfb9738b8b6ac353b40fdfbe5ec8504d916c6272260e0a6fe62657d092b635df3911c22d119ed91e752a82c3a887a2722d0342466a9f9f6f6", 0xce, 0x4040}, 0x4040804) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000002b40)='syz0\x00', 0x1ff) openat$cgroup(r2, &(0x7f0000002b80)='syz1\x00', 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000003180)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003140)={&(0x7f0000002c00)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x4, 0x0, 0x6}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x2bc, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x26c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x24c}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xa8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x14, 0x6, "9f394c2c69394bbede237ca5c563760e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x3b, 0x6, "263a685cc708ab1c179b819c0677bf3966e5410bf99e523d7e2c5eda05964069be2b55cde6049f7d40b6b9068a7d0a9cf0fd8cb967646c"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x54, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xbf}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe00000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x530}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$sock(r3, &(0x7f0000003500)={&(0x7f00000031c0)=@rc={0x1f, @none, 0xf}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003240)="7ad097262f27c616c2a1b0754e28b57c1c5aad3ff7533a6a851b85180ce0f9667ed7e7cb9da1a792fb7d45bb9fbff21c2025c2e955fb42b5a1373d235b159601676b8452507b6371790626152a9f6de614296d2b68bd064302f88b6ff2e484fdc19514f8fe69d98d2fba1fd7d6f0eb8b07143c804c322b4ab8187ad66c5c03d276ce59a04e76091d731a61ad40b478a5fb5ce7c22dc583637eda30f3882b0453a16a884b4a15823df378", 0xaa}, {&(0x7f0000003300)="1b363e68f4546caca7a46fa47c22729ebf98ec29b7a0aa07c0b2653cacbb0dbe20d19eebc0d2b2ef7466a40f9f65bdc69ab29e073ad71fc37a6d6d6d62a709e5a4edc4306cf0a40c6c77f9d28da320e0aa86fa3b9aa40a01637ca04220ecedea18d8390b8c79d0ef5235439126114711ceaa380dfe18d0f31553bf3f8ef9e2f070e06cfc21fd02261b5238c37edafb36385e548048daa1a7e047caf2b278878190197dec34429c0d7d9219664b4325d91d151020f234a93d1131f854fc6fa131253240ac14eecf05d5a89e7b8fecde59757bc769cb16a4f270f85c7d7a3a727307fc7155d319e1afaac4d1a82bcf95", 0xef}, {&(0x7f0000003400)="8a69323e02ef4e60eb2ad4c6024451c1637cc0b61809e2dc01ab56fdedeb309e061273cb1f811ef480a45b2c32e589f8bc652adb31863524f0ae1dfd25c2b3d11a41a8b97d70f7", 0x47}], 0x3, &(0x7f00000034c0)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}], 0x18}, 0x60) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000003540)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000003580)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000035c0)={0x0, 0x5}, &(0x7f0000003600)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000003640)={r5}, &(0x7f0000003680)=0x8) socketpair(0xa, 0x80000, 0x3, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000003840)={r1, &(0x7f0000003740)=':\x00', 0x40001, &(0x7f0000003780)={@_ha_fsid={[0x5, 0x9]}, {0x2, 0x7ff, 0x59, 0xffffffffffffffb3}}, 0x1, &(0x7f00000037c0), &(0x7f0000003800)=0x6}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003700), r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000003dc0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003d80)={&(0x7f00000038c0)={0x4bc, 0x0, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0x10}, 0x87, 0x7, 0x1, 0x3, 0x7, 'syz0\x00', "6ae643f35a94516aa911f35e115e63c7fc2163ebf134f4ecfb830051e6d01109", "a12208b9a36a42476c6f6fce02274e5e6620c0bd7bdc01261a67b5f3f92f6068", [{0x200, 0xce, {0x2, 0x2}}, {0xafd5, 0xb, {0x3, 0x7}}, {0x1, 0x4, {0x2, 0x4}}, {0xd, 0x44a, {0xdebcbdc774209242, 0xffffff13}}, {0x800, 0x0, {0x2, 0xd8d}}, {0xfffb, 0x2, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0xffffff80}}, {0x401, 0x4, {0x0, 0x1}}, {0x2, 0x7, {0x1, 0x4}}, {0x9, 0x101, {0x2}}, {0x5, 0x0, {0x0, 0x9}}, {0xa, 0x9, {0x2, 0x200}}, {0x4b2, 0xffff, {0x2, 0x8001}}, {0x4000, 0x797, {0x1, 0x1}}, {0x2a9, 0x17, {0x1, 0x101}}, {0x6, 0x4000, {0x0, 0x82}}, {0x7, 0x6, {0x3, 0x8}}, {0x6, 0x9, {0x0, 0x200}}, {0x7c40, 0x9, {0x1, 0x9}}, {0x2, 0xfffc, {0x2, 0x7}}, {0x0, 0x9, {0x1, 0x26d}}, {0x4, 0x9, {0x0, 0x9}}, {0x8, 0x4000, {0x2, 0x1ff}}, {0x5, 0x6603, {0x1, 0x6}}, {0x2, 0x5, {0x617faa3ea94e9c9a}}, {0x5, 0x8, {0x3, 0xd}}, {0x7, 0x7ff, {0x1, 0x5}}, {0x401, 0xc6, {0x1, 0x3f}}, {0x423, 0xfffe, {0x2, 0x100000}}, {0x3ff, 0x3, {0x3}}, {0x9, 0x6, {0x3, 0xd1cefdf}}, {0x5, 0xffff, {0x3, 0x7ff}}, {0x2, 0x7, {0x3, 0x6}}, {0x6, 0xc, {0x1, 0x3}}, {0x8, 0x0, {0x0, 0x8}}, {0x8, 0xf, {0x3, 0x4}}, {0x4, 0x8753, {0x3, 0x7fffffff}}, {0x8001, 0x6, {0x2, 0xb}}, {0x2000, 0x7, {0x2, 0x42b}}, {0xffff, 0x9, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x5, 0x7, 0x0, 0x3, 0x2, 'syz1\x00', "59fe3c885e926aea59bccc4086b3b74a28ba5dda581dd9d23f9f8d9d923239a1", "abfd2e92e14fd036bfb9f310b31546385c8ec1194f37a46d2f5697cced8b3a4e", [{0x3, 0x7, {0xd630c59fce88e7c8, 0x8}}, {0x9, 0xffff, {0x1, 0x1000}}, {0x1, 0x8, {0x2, 0x7}}, {0x1ff, 0x7, {0x2, 0x7}}, {0xb17, 0x800, {0x0, 0x40000}}, {0x5, 0xfff9, {0x3, 0x38}}, {0x1, 0xff, {0x0, 0xfffffffd}}, {0x3ff, 0x568, {0x0, 0x8}}, {0x0, 0x1, {0x1, 0x5}}, {0xff, 0x4, {0x1, 0x50}}, {0xfff, 0xe, {0x0, 0x10001}}, {0x9, 0x7, {0x2, 0x4}}, {0x8000, 0x1000, {0x1, 0xb586}}, {0x81, 0xc, {0x0, 0x40}}, {0xfed, 0xd, {0x0, 0x42ef}}, {0x1, 0x4, {0x2}}, {0x0, 0x69f6, {0x0, 0x3}}, {0x47, 0x401, {0x0, 0x3}}, {0x8f, 0x6, {0x3, 0x1ff}}, {0x1000, 0x9, {0x3, 0x810}}, {0xff7f, 0x8, {0x0, 0x7fff}}, {0x4, 0x9bc8, {0x0, 0x3}}, {0x0, 0x9, {0x3, 0xe7f}}, {0x100, 0xda4a, {0x1, 0x1}}, {0x5, 0x1, {0x0, 0x6}}, {0x136d, 0x1, {0x0, 0x4}}, {0x800, 0x1b1b, {0x0, 0x1}}, {0xff74, 0xca7, {0x1, 0x7fffffff}}, {0x1, 0xfc1, {0x3, 0x4}}, {0x9, 0xfffa, {0x0, 0x7f}}, {0x7, 0xc, {0x3, 0xddeb}}, {0x7fff, 0x4, {0x2, 0x9}}, {0x0, 0x0, {0x0, 0x8}}, {0x0, 0x1, {0x1, 0x8}}, {0x8e, 0x6, {0x0, 0x9}}, {0xe, 0x8, {0x3, 0x401}}, {0x5, 0x8, {0x1, 0x8}}, {0x3, 0x3, {0x3, 0x401}}, {0x1, 0x0, {0x1, 0x758}}, {0xff, 0x65b8, {0x2, 0x6}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x5}, 0x10) bind$inet(r7, &(0x7f0000003e00)={0x2, 0x4e23, @multicast1}, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r8, 0x84, 0x7a, &(0x7f0000003e40)={r6, 0xffffffffffffffff, 0x80000}, &(0x7f0000003e80)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000003ec0)={r5, 0x10001}, &(0x7f0000003f00)=0x8) r13 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r13, 0xf503, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$unix(0x1, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000003f40)={r12, 0x2, 0x2, 0xffffffff}, &(0x7f0000003f80)=0x10) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r7, 0x84, 0x83, &(0x7f0000003fc0)={r14, 0x1}, &(0x7f0000004000)=0x8) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000004040)=0x410, 0x4) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f00000041c0)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40c4) 2m56.563679464s ago: executing program 0 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x20, 0x270bd1e, 0x25dfdbf7, {0x15}, [@nested={0x4, 0x11c}]}, 0x18}, 0x1, 0x0, 0x0, 0xc8c5}, 0x0) 2m56.522045363s ago: executing program 4 (id=846): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000e4e60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x4, 0x1005, &(0x7f00000004c0)=""/4101, 0x0, 0xc}, 0x94) (async) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2, 0x0, 0x1}}, 0xfffffffffffffffe) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0xffffffff, 0x2}}, 0x2e) (async) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="28609ed1db863c714da623d283bbed3ffff02d464f0821eb94e07874cfee99d4b59ae457c93a22995ef699922009c49d269d0dec3235e31f6cb3da6d2dd0b8affcd204e4ea90704a0cfff0897d74decf372045abe92baaf6bac3c2fc12ab9331b372c41b49bbbb18e696558635d1ff2bbce85b9e2e3e90cdf522d8bcff11fe0139bc7417db0a66d3aa270c62afd945e098159224335ed3f6724c5ea8fc7aed191c5005e03e18758179d629d574265bd7dbee4be421557390a4a8202c1d9b6cabd58254923fcc4aa82400"/212, 0xd4}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000000000800f"], 0x18, 0x4008000}, 0x28008841) 2m56.391776222s ago: executing program 0 (id=847): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) close(r0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f0000000240)={0x2, @in6={{0xa, 0x4e22, 0x100, @local, 0x770}}, 0x4e20}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000340)={r2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x7f}}}, &(0x7f0000000480)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000004c0)={r2, 0xc}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={r3, 0x3, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000580)={r3, 0x1, 0x1f6fc406, 0x800, 0x2, 0x1a3, 0x3, 0xe52, {r5, @in6={{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0x3, 0x0, 0x5, 0x4}}, &(0x7f0000000640)=0xb0) connect$pptp(r0, &(0x7f0000000680)={0x18, 0x2, {0x2, @rand_addr=0x64010101}}, 0x1e) r6 = socket(0x1e, 0x80000, 0x101) sendmsg$nl_route(r6, &(0x7f0000000740)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000780)) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000800), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x130, r7, 0x20, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x10c, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x81, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x69fd}}]}, {0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3b, @mcast1, 0x5}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @private0, 0x400}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xea7}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x130}, 0x1, 0x0, 0x0, 0x804}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000a00)=""/165, &(0x7f0000000ac0)=0xa5) socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$inet6(0xa, 0x80000, 0x3) ioctl$F2FS_IOC_COMPRESS_FILE(r8, 0xf518, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000b00)={0x4, [0x82, 0x6, 0x2, 0x200]}, 0xc) setsockopt$inet6_buf(r6, 0x29, 0x1b, &(0x7f0000000b40)="aeb033a032f6eb9591d07efffff95a93f85ad7c7922fc938444ef7e8e96c7f6b604502bf83895002a6bcf5481cbc2d107685a0f3a5904c8af7754eb73defb13da2684a9cedda115687edccad7b6eab38fde96cc816df8014a0863f0dc842ff01112ed4f304a5349b0567ca09f85bfca48370fd820124a15fdfc1c7c63bb7ffad24", 0x81) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000c00)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10008054}, 0x1000408c) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000d40)={0x100, 0x2}) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0xc004800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000ec0), 0x0) 2m56.38410295s ago: executing program 3 (id=848): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x2c, &(0x7f0000000100)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1e, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200, "c135"}}}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000880)=0x40, 0x49) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@empty, @local, @remote}, &(0x7f00000000c0)=0xc) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f00000004c0)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f00000005c0)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20041080) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff4}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m56.320435315s ago: executing program 3 (id=849): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000280)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@RTM_NEWNSID={0x24, 0x58, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r0}, @NETNSA_FD={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20049808}, 0x0) 2m56.217073286s ago: executing program 3 (id=850): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r4}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x14, 0x6, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="79114800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x20000, &(0x7f0000009b80)=""/131072, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 2m56.172027354s ago: executing program 4 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000200081dcfcffffff03000000020000000043cb26b30e0000050016000400000008000200ac1414bb080017004e214e22"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4044000) 2m56.128221497s ago: executing program 0 (id=852): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000680)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)={0x2, {{0x2, 0x2, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r6 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000001040)={0x24, {{0x29, 0x0, 0x2000000, @mcast1, 0x40}}}, 0x88) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x3, 0x0, &(0x7f0000000180)) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0xffffffffffffff45, &(0x7f0000000200)={&(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000c00)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000c40)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001340)={@map, r9, 0x11}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000f00)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000f40)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="11"], 0xa) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES64=r11, @ANYRES32=r11, @ANYRESOCT=r4], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r11}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)=@bridge_delneigh={0x0, 0x1d, 0x2, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, r11, 0x0, 0x81, 0x4}, [@NDA_DST_MAC, @NDA_DST_IPV6={0x0, 0x1, @local}, @NDA_DST_MAC={0x0, 0x1, @local}, @NDA_DST_MAC={0x0, 0x1, @local}, @NDA_SRC_VNI={0x0, 0xb, 0x1}, @NDA_SRC_VNI={0x0, 0xb, 0x10}, @NDA_MASTER={0x0, 0x9, 0x100}, @NDA_FDB_EXT_ATTRS={0x0, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH, @NFEA_DONT_REFRESH, @NFEA_DONT_REFRESH, @NFEA_DONT_REFRESH]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x2400c000) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 2m56.029360361s ago: executing program 4 (id=853): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000d80)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @random, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "a4b76e", 0x10, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4={'\x00', '\xff\xff', @empty}, {[@fragment={0xff, 0x0, 0x7, 0x1, 0x0, 0x19, 0x68}], {0x4e24, 0x4e21, 0x8}}}}}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#\x00\x00\x00#\x00\x00\x00'], 0x48) unshare(0x20400) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x120, 0x0, 0x0, 0xee01}, {0x0, 0x200, 0x0, 0x0, 0x0, 0x2, 0x10000000000, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000000280), 0x800001d, 0x1c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000dc0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000e00)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000e40)='batadv_slave_1\x00', 0x10) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000e80)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000000ec0)={0x2, 0x4e23, @local}, 0x10) shutdown(r3, 0x1) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10) 2m55.963806779s ago: executing program 0 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000580)={'veth1\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000008c0)={&(0x7f0000000900)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000980)=[{&(0x7f00000009c0)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) r13 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3400000068000100000000000000000002000400000000000c00088005000400c5ad6bac069c6173f4ac269737b5bc4f0300000008000500", @ANYRES32=r14, @ANYBLOB="0600070007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0xfffffffffffffcf3, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x8014) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newtfilter={0x56c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x540, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xa}}, @TCA_FW_POLICE={0x458, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0x7, 0x1, 0x40, 0x1, 0x4, 0x4, 0x59, 0xb, 0xa, 0x7, 0xfffffffa, 0xc, 0x0, 0x80000001, 0x5, 0x2, 0x6, 0x8000, 0x3, 0xe, 0xf22f, 0xda5d, 0xf05a, 0x800, 0xfffffffb, 0x5, 0x6, 0x724, 0x2, 0xa, 0x5, 0x3, 0x100, 0x7, 0x8000, 0xe7, 0x4e9c3675, 0x9, 0x0, 0x2, 0x3, 0x0, 0xe3db, 0x6, 0x590d, 0x10000, 0xa, 0x79, 0x8, 0x7, 0x1, 0x5000000, 0x3, 0x2, 0x2d0, 0x9a5, 0x9, 0x4, 0x7, 0x20000, 0x7ff, 0x6, 0x80, 0x3, 0x5, 0x2, 0xf8f, 0x9, 0xd91, 0x6, 0x1, 0x3f5, 0x7fff, 0x1000, 0x0, 0x6f90, 0x0, 0x2, 0x7, 0x4, 0x110f, 0x1, 0x12f, 0x4, 0x1, 0x6, 0xfe4, 0x896951e3, 0x0, 0x9, 0x6, 0x1, 0x6, 0x1, 0x1, 0x1, 0x8, 0x4, 0x600000, 0x10000, 0x8000, 0x80000000, 0x6, 0x8, 0xfff, 0x10, 0x8, 0x9, 0x9, 0x0, 0x4, 0x9, 0x4, 0x5, 0x54, 0x2, 0x3609, 0x4, 0x7f, 0xff, 0x5, 0x5, 0x2, 0x8, 0x9, 0x4, 0xff, 0x4, 0x2a, 0xad91, 0x2, 0x7, 0x1000, 0x1ff, 0x7f, 0x800, 0x8, 0x9, 0x8d0, 0x2, 0x4, 0x4, 0xee6012e, 0xff, 0x7, 0x9, 0x3, 0x4, 0x9ac, 0x655f, 0x7f, 0x8, 0x8, 0x3f, 0x5, 0x10000, 0x7, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9c, 0x401, 0x100, 0x7, 0x528, 0x200, 0x8, 0x80000001, 0x1, 0x7, 0xc97, 0x4, 0xb, 0xf17, 0x7, 0x2e8a, 0x19d, 0xb, 0x3, 0x70a3, 0xc4d3, 0x0, 0x1, 0x8, 0x7, 0x7, 0x80, 0x9f, 0x1ff, 0x2abc, 0x4, 0x2, 0x10001, 0x3, 0x2, 0x3, 0x7, 0x5ce5, 0x900, 0x80000000, 0x3, 0x4, 0x73946692, 0x2, 0x2, 0x2, 0x6, 0x8, 0xc00000, 0x200, 0x2, 0x3, 0x5b, 0xba83, 0x9, 0xfff, 0x9, 0x15d, 0xe33, 0x52bf, 0x7ff, 0x10, 0x9, 0x6, 0x2, 0xde6, 0x6, 0x7, 0xc2dc, 0x6, 0x5, 0xe06, 0x4327, 0x400, 0x3, 0x9, 0x40, 0x3, 0xfffffff2, 0x5, 0x8, 0x8001, 0x4, 0x9, 0xc13c, 0xffffff50, 0x2, 0xe172, 0x0, 0x1ff, 0xe97, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x2, 0x1, 0x2, 0x7fffffff, {0x8, 0x1, 0xfff8, 0x1, 0x3ff, 0xbf47}, {0x9, 0x2, 0x2, 0x1, 0x800, 0x9e8d}, 0x9, 0x9, 0xfffff001}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_ACT={0xcc, 0x4, [@m_csum={0xc8, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0xc, 0x4, 0xf068, 0x3}, 0x54}}]}, {0x80, 0x6, "a17e5df2ab7b4d14fe5cfb01c96cbf1e75c0e1311fa65ef174c986ad624d0ae41cad775a7f2f5fe71eacee52e1a21120ecbc65d77fb395a7a4ebda86f0e92329288e56d6da05e15ad99439d35eeedff14c094ef9738cc27133602c6d3518b621247d97471d663773c3b8233ce8e3c5efb02e652976fa2cdda5676571"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x7ff}]}}]}, 0x56c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m55.959589768s ago: executing program 3 (id=855): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840)=r1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r2, &(0x7f0000000940), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x8000) sendmsg$key(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)={0x2, 0x10, 0x8, 0x8, 0x35, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_sec_ctx={0x20, 0x18, 0xf9, 0x2, 0xf7, "e2323d0c32271bc894c2b08c2fd1b2a2a412675c730143c9ed8357148e4319fff9106564ae390da3ba8132ca7913c44b378ff84a3fd4ca33ec0935791bd6735faeb3021c363bfc2d5cdf0d18d226337575860a1a4a31c860f65bcaf3da4c5174e51b00b27fb5701ae7c71c833e8e1a523b35b4991b970da2f400730d4c0a58e97851b4ec9124c8a1ec25ff61c5d3a764669b35a5f37e14fe5e0f4b8b65a404b70f2692d9209820603a24edf492cc9b667a79021e6720995ddc67fb89c7fb1bf1490d924e8edb120e00b19cd86ebb08fc56e0aac62137d951e0ea9bd9580a40785ce0a576c1e3f1925d120cabe97a421d59a62cfdabc95c"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x7ff, @mcast1, 0x4}, @in6={0xa, 0x4e21, 0x51a0fe8e, @rand_addr=' \x01\x00', 0xfffffffd}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_address={0x5, 0x17, 0x6c, 0x20, 0x0, @in6={0xa, 0x4e24, 0x9, @loopback, 0x6}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x9, 0xd, 0x79, 0x0, 0x20000001}, @sadb_sa={0x2, 0x1, 0x4d6, 0x7, 0x37, 0x43, 0x1, 0x80000000}]}, 0x1a8}}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e80)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x4788}, 0x0) 2m55.599410655s ago: executing program 4 (id=856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth1\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='veno', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000200), 0x4) sendto$inet(r5, &(0x7f0000000240), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x1, 0xc529, 0xfffffff8, 0x2, 0x8000, 0x8000, 0x4, 0x3, 0x7fffffff, 0x3, 0xfdfe, 0x8, 0x80, 0x3, 0xfffffffe, 0x8, 0x80000000, 0x40, 0x7, 0x9244, 0x10000, 0x7}}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000480)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000600)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c1"], 0x34}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000240)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000400)=0x5, 0x4) 2m55.420766714s ago: executing program 2 (id=857): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r0, 0x12, 0x1, 0x101, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = socket(0x10, 0x3, 0x5) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x2c, r6, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x31}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x406c8c4}, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x18, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc800}, 0x810) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@ifindex=r7, r1, 0xd, 0x4, 0x0, @void, @value=r1, @void, @void, r2}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x198e}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44001}, 0x4000000) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000006c0)=r10, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xe, 0x0, &(0x7f0000000780)="b9e20300600d0600fb9e34f086f8", 0x0, 0x7ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xeec}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m20.591715522s ago: executing program 32 (id=854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000580)={'veth1\x00', @broadcast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xf, 0x8}, {0xc, 0xfffe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000008c0)={&(0x7f0000000900)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000980)=[{&(0x7f00000009c0)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x2) r13 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r13, 0x84, 0x7c, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3400000068000100000000000000000002000400000000000c00088005000400c5ad6bac069c6173f4ac269737b5bc4f0300000008000500", @ANYRES32=r14, @ANYBLOB="0600070007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0xfffffffffffffcf3, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x8014) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newtfilter={0x56c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x2}, {0xd}, {0xfff1, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x540, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xa}}, @TCA_FW_POLICE={0x458, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0x7, 0x1, 0x40, 0x1, 0x4, 0x4, 0x59, 0xb, 0xa, 0x7, 0xfffffffa, 0xc, 0x0, 0x80000001, 0x5, 0x2, 0x6, 0x8000, 0x3, 0xe, 0xf22f, 0xda5d, 0xf05a, 0x800, 0xfffffffb, 0x5, 0x6, 0x724, 0x2, 0xa, 0x5, 0x3, 0x100, 0x7, 0x8000, 0xe7, 0x4e9c3675, 0x9, 0x0, 0x2, 0x3, 0x0, 0xe3db, 0x6, 0x590d, 0x10000, 0xa, 0x79, 0x8, 0x7, 0x1, 0x5000000, 0x3, 0x2, 0x2d0, 0x9a5, 0x9, 0x4, 0x7, 0x20000, 0x7ff, 0x6, 0x80, 0x3, 0x5, 0x2, 0xf8f, 0x9, 0xd91, 0x6, 0x1, 0x3f5, 0x7fff, 0x1000, 0x0, 0x6f90, 0x0, 0x2, 0x7, 0x4, 0x110f, 0x1, 0x12f, 0x4, 0x1, 0x6, 0xfe4, 0x896951e3, 0x0, 0x9, 0x6, 0x1, 0x6, 0x1, 0x1, 0x1, 0x8, 0x4, 0x600000, 0x10000, 0x8000, 0x80000000, 0x6, 0x8, 0xfff, 0x10, 0x8, 0x9, 0x9, 0x0, 0x4, 0x9, 0x4, 0x5, 0x54, 0x2, 0x3609, 0x4, 0x7f, 0xff, 0x5, 0x5, 0x2, 0x8, 0x9, 0x4, 0xff, 0x4, 0x2a, 0xad91, 0x2, 0x7, 0x1000, 0x1ff, 0x7f, 0x800, 0x8, 0x9, 0x8d0, 0x2, 0x4, 0x4, 0xee6012e, 0xff, 0x7, 0x9, 0x3, 0x4, 0x9ac, 0x655f, 0x7f, 0x8, 0x8, 0x3f, 0x5, 0x10000, 0x7, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9c, 0x401, 0x100, 0x7, 0x528, 0x200, 0x8, 0x80000001, 0x1, 0x7, 0xc97, 0x4, 0xb, 0xf17, 0x7, 0x2e8a, 0x19d, 0xb, 0x3, 0x70a3, 0xc4d3, 0x0, 0x1, 0x8, 0x7, 0x7, 0x80, 0x9f, 0x1ff, 0x2abc, 0x4, 0x2, 0x10001, 0x3, 0x2, 0x3, 0x7, 0x5ce5, 0x900, 0x80000000, 0x3, 0x4, 0x73946692, 0x2, 0x2, 0x2, 0x6, 0x8, 0xc00000, 0x200, 0x2, 0x3, 0x5b, 0xba83, 0x9, 0xfff, 0x9, 0x15d, 0xe33, 0x52bf, 0x7ff, 0x10, 0x9, 0x6, 0x2, 0xde6, 0x6, 0x7, 0xc2dc, 0x6, 0x5, 0xe06, 0x4327, 0x400, 0x3, 0x9, 0x40, 0x3, 0xfffffff2, 0x5, 0x8, 0x8001, 0x4, 0x9, 0xc13c, 0xffffff50, 0x2, 0xe172, 0x0, 0x1ff, 0xe97, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x2, 0x1, 0x2, 0x7fffffff, {0x8, 0x1, 0xfff8, 0x1, 0x3ff, 0xbf47}, {0x9, 0x2, 0x2, 0x1, 0x800, 0x9e8d}, 0x9, 0x9, 0xfffff001}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_ACT={0xcc, 0x4, [@m_csum={0xc8, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0xc, 0x4, 0xf068, 0x3}, 0x54}}]}, {0x80, 0x6, "a17e5df2ab7b4d14fe5cfb01c96cbf1e75c0e1311fa65ef174c986ad624d0ae41cad775a7f2f5fe71eacee52e1a21120ecbc65d77fb395a7a4ebda86f0e92329288e56d6da05e15ad99439d35eeedff14c094ef9738cc27133602c6d3518b621247d97471d663773c3b8233ce8e3c5efb02e652976fa2cdda5676571"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x7ff}]}}]}, 0x56c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 0s ago: executing program 33 (id=843): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x44004000) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000140)={0x1100, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg0\x00', 0x7c2}) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f0000000380)={&(0x7f0000000300)=[{0x1794, 0x1, 0x1, 0x9}, {0x8, 0x4, 0x7fff, 0x8, 0x4}], 0x2, 0x28, 0xfffb, 0x5}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000240)={0x5, &(0x7f0000000280)=[{0x35, 0x0, 0x3}, {0x45, 0x1, 0x2, 0x5}, {0x44, 0x94, 0x0, 0x9}, {}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080000000400000004000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x14, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002500000018010000202073250000000000202014c36937dd778ffa2546152be8207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e6400000000220002800a000100dd"], 0x40}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010"], 0x3c}, 0x1, 0x0, 0x0, 0x4000889}, 0x20048810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250f00000008000300", @ANYRES32=r8, @ANYBLOB="05002f00000000001d9f4359f21380c1d3b7a21895e3f0bfc9e2157a04cea18b8d88d659496707b2116ca3c61f162e2709a8b502be0fe27b953e546607ad1ba8d8c5f00e581e6a0ba467214918b56a7b1f998ba20aab235eb87a3568288415a46ca9e0b358b47b66caf37496"], 0x24}}, 0x54) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000940)={0x24, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40841) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000980)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000009c0)='dctcp', 0x5) connect$inet(r9, &(0x7f0000000a00)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000a40)="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", 0xffffff5d, 0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 71.235377][ T5601] cgroup: Unknown subsys name 'net' [ 71.344715][ T5601] cgroup: Unknown subsys name 'cpuset' [ 71.347284][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.663034][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.794853][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.796756][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.798520][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.835688][ T5618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.836126][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.839867][ T4935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.848688][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.849200][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.850269][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.850801][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.915797][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.918633][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.919662][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.934724][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.948846][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.992022][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.993566][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.994274][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.995346][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.995936][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.011117][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.014425][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.015068][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.016092][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.016944][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.799608][ T5616] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 75.807382][ T5625] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 75.809541][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.824878][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.833398][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.875198][ T5612] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 75.879835][ T5620] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.131862][ T5626] infiniband rxe0: set active [ 76.133815][ T5626] infiniband rxe0: added rxe_eth0 [ 76.158552][ T3108] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.172470][ T5626] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 76.172506][ T5626] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 76.172539][ T5626] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 76.251857][ T5626] RDS/IB: rxe0: added [ 76.254032][ T5626] smc: adding ib device rxe0 with port count 1 [ 76.254101][ T5626] smc: ib device rxe0 port 1 has no pnetid [ 76.280693][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.297794][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.568151][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.910844][ T5615] Bluetooth: hci1: command tx timeout [ 76.911036][ T4935] Bluetooth: hci0: command tx timeout [ 76.924729][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.977263][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.977963][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.978479][ T5612] bridge_slave_0: entered allmulticast mode [ 76.980784][ T5612] bridge_slave_0: entered promiscuous mode [ 76.995291][ T4935] Bluetooth: hci2: command tx timeout [ 77.071452][ T5615] Bluetooth: hci4: command tx timeout [ 77.071632][ T4935] Bluetooth: hci3: command tx timeout [ 77.106691][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.106819][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.106961][ T5612] bridge_slave_1: entered allmulticast mode [ 77.109086][ T5612] bridge_slave_1: entered promiscuous mode [ 77.190440][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.244155][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.244259][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.244635][ T5625] bridge_slave_0: entered allmulticast mode [ 77.246915][ T5625] bridge_slave_0: entered promiscuous mode [ 77.253266][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.254871][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.254990][ T5625] bridge_slave_1: entered allmulticast mode [ 77.256762][ T5625] bridge_slave_1: entered promiscuous mode [ 77.293389][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.307680][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.307837][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.307948][ T5616] bridge_slave_0: entered allmulticast mode [ 77.309751][ T5616] bridge_slave_0: entered promiscuous mode [ 77.342750][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.366917][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.367904][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.368302][ T5616] bridge_slave_1: entered allmulticast mode [ 77.380710][ T5616] bridge_slave_1: entered promiscuous mode [ 77.388053][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.388149][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.388271][ T5620] bridge_slave_0: entered allmulticast mode [ 77.396478][ T5620] bridge_slave_0: entered promiscuous mode [ 77.450695][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.473120][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.473285][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.473897][ T5620] bridge_slave_1: entered allmulticast mode [ 77.475710][ T5620] bridge_slave_1: entered promiscuous mode [ 77.505203][ T5612] team0: Port device team_slave_0 added [ 77.511351][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.554085][ T5612] team0: Port device team_slave_1 added [ 77.582589][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.584937][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.619180][ T5625] team0: Port device team_slave_0 added [ 77.629149][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.629630][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.641497][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.657738][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.657759][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.657780][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.690500][ T5625] team0: Port device team_slave_1 added [ 77.748201][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.748216][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.748237][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.806335][ T5620] team0: Port device team_slave_0 added [ 77.829079][ T5616] team0: Port device team_slave_0 added [ 77.836640][ T5620] team0: Port device team_slave_1 added [ 77.837673][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.837684][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.837704][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.841976][ T5616] team0: Port device team_slave_1 added [ 77.928083][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.928100][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.928118][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.929386][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.929397][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.929414][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.962157][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.962173][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.962193][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.007452][ T5612] hsr_slave_0: entered promiscuous mode [ 78.009375][ T5612] hsr_slave_1: entered promiscuous mode [ 78.042156][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.042173][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.042194][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.067860][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.067875][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.067896][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.192234][ T5625] hsr_slave_0: entered promiscuous mode [ 78.192851][ T5625] hsr_slave_1: entered promiscuous mode [ 78.193263][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 78.193335][ T5625] Cannot create hsr debugfs directory [ 78.256925][ T5616] hsr_slave_0: entered promiscuous mode [ 78.257997][ T5616] hsr_slave_1: entered promiscuous mode [ 78.258540][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 78.258555][ T5616] Cannot create hsr debugfs directory [ 78.268240][ T5620] hsr_slave_0: entered promiscuous mode [ 78.269601][ T5620] hsr_slave_1: entered promiscuous mode [ 78.270652][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 78.270669][ T5620] Cannot create hsr debugfs directory [ 78.754314][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.766644][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.776594][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.782312][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.807742][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.811715][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.829528][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.838922][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.904845][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.904930][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.905237][ T5626] bridge_slave_0: entered allmulticast mode [ 78.906669][ T5626] bridge_slave_0: entered promiscuous mode [ 78.913487][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.916663][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.917043][ T5626] bridge_slave_1: entered allmulticast mode [ 78.922971][ T5626] bridge_slave_1: entered promiscuous mode [ 78.936277][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.947772][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.987891][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.994261][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.995092][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.997711][ T4935] Bluetooth: hci0: command tx timeout [ 78.997738][ T4935] Bluetooth: hci1: command tx timeout [ 79.001806][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.015129][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.016287][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.024698][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.045332][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.070387][ T5615] Bluetooth: hci2: command tx timeout [ 79.092862][ T5626] team0: Port device team_slave_0 added [ 79.097156][ T5626] team0: Port device team_slave_1 added [ 79.136397][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.136411][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.136428][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.145599][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.145612][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.145632][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.151262][ T4935] Bluetooth: hci4: command tx timeout [ 79.151416][ T5615] Bluetooth: hci3: command tx timeout [ 79.248583][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.253847][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.256411][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.262981][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.275998][ T5626] hsr_slave_0: entered promiscuous mode [ 79.277323][ T5626] hsr_slave_1: entered promiscuous mode [ 79.277954][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 79.277970][ T5626] Cannot create hsr debugfs directory [ 79.286341][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.295764][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.296699][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.303360][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.489517][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.501066][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.502229][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.504413][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.529138][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.535472][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.551932][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.555767][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.618127][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.657533][ T5626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.663065][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.663867][ T5626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.678585][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.696134][ T5626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.698524][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.699614][ T5626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.714691][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.752607][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.767045][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.805024][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.805117][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.833845][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.846932][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.847026][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.855767][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.879775][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.880199][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.912751][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.912829][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.916372][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.962542][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.962601][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.016256][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.016316][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.063435][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.095403][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.137475][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.187288][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.187413][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.230978][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.231082][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.238102][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.281203][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.281329][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.307770][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.307874][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.076925][ T5615] Bluetooth: hci1: command tx timeout [ 81.076948][ T4935] Bluetooth: hci0: command tx timeout [ 81.114155][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.150201][ T4935] Bluetooth: hci2: command tx timeout [ 81.230758][ T4935] Bluetooth: hci3: command tx timeout [ 81.230791][ T4935] Bluetooth: hci4: command tx timeout [ 81.309146][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.317168][ T5616] veth0_vlan: entered promiscuous mode [ 81.351066][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.364040][ T5616] veth1_vlan: entered promiscuous mode [ 81.515110][ T5612] veth0_vlan: entered promiscuous mode [ 81.533963][ T5616] veth0_macvtap: entered promiscuous mode [ 81.568974][ T5616] veth1_macvtap: entered promiscuous mode [ 81.577342][ T5625] veth0_vlan: entered promiscuous mode [ 81.588708][ T5612] veth1_vlan: entered promiscuous mode [ 81.626931][ T5625] veth1_vlan: entered promiscuous mode [ 81.647685][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.665664][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.682327][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.718087][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.810442][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.810674][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.844087][ T5612] veth0_macvtap: entered promiscuous mode [ 81.882432][ T5612] veth1_macvtap: entered promiscuous mode [ 81.897239][ T5625] veth0_macvtap: entered promiscuous mode [ 81.967396][ T5620] veth0_vlan: entered promiscuous mode [ 81.984410][ T5625] veth1_macvtap: entered promiscuous mode [ 82.020184][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.020226][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.039810][ T5620] veth1_vlan: entered promiscuous mode [ 82.063183][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.130457][ T287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.130486][ T287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.132685][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.189325][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.227269][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.249458][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.249485][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.272484][ T299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.272544][ T299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.272583][ T299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.272607][ T299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.340809][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.340853][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.340885][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.341166][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.404613][ T5620] veth0_macvtap: entered promiscuous mode [ 82.417280][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.447791][ T5626] veth0_vlan: entered promiscuous mode [ 82.469533][ T5620] veth1_macvtap: entered promiscuous mode [ 82.494024][ T287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.494046][ T287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.535211][ T5626] veth1_vlan: entered promiscuous mode [ 82.577264][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.632252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.632272][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.636132][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.679229][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.679248][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.732434][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.732736][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.732974][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.758360][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.758379][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.836966][ T5626] veth0_macvtap: entered promiscuous mode [ 82.865731][ T5626] veth1_macvtap: entered promiscuous mode [ 82.953142][ T5818] Zero length message leads to an empty skb [ 82.988642][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.988661][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.028632][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.042844][ T287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.050917][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.119410][ T5819] erspan1: entered allmulticast mode [ 83.150511][ T5615] Bluetooth: hci0: command tx timeout [ 83.150542][ T5615] Bluetooth: hci1: command tx timeout [ 83.199125][ T5829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 83.227973][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.227992][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.230832][ T4935] Bluetooth: hci2: command tx timeout [ 83.235207][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.235276][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.235363][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.235418][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.310789][ T4935] Bluetooth: hci4: command tx timeout [ 83.310799][ T5615] Bluetooth: hci3: command tx timeout [ 83.453126][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.453147][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.548509][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.548530][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.668721][ T5843] syzkaller0: entered promiscuous mode [ 83.668742][ T5843] syzkaller0: entered allmulticast mode [ 83.725988][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 84.053886][ T5858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 84.083301][ T5855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 84.287493][ T5859] Cannot find set identified by id 65534 to match [ 84.385360][ T5869] erspan0: entered promiscuous mode [ 84.718150][ T5881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.721264][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 84.721293][ T5881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15'. [ 84.874271][ T5857] erspan0: left promiscuous mode [ 85.102974][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 85.262957][ T5910] Driver unsupported XDP return value 0 on prog (id 77) dev N/A, expect packet loss! [ 85.333811][ T5910] bridge_slave_0: left allmulticast mode [ 85.333838][ T5910] bridge_slave_0: left promiscuous mode [ 85.334126][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 85.334142][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21'. [ 85.335486][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.359379][ T5910] bridge_slave_1: left allmulticast mode [ 85.359403][ T5910] bridge_slave_1: left promiscuous mode [ 85.359700][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.727136][ T5930] ip_tables: iptables: counters copy to user failed while replacing table [ 85.758007][ T5930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 85.793943][ T5930] ip_tables: iptables: counters copy to user failed while replacing table [ 86.019643][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 86.102514][ T5734] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.289028][ T5944] pimreg: entered allmulticast mode [ 86.303520][ T5944] pimreg: left allmulticast mode [ 86.373871][ T5956] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 86.503672][ T5952] veth3: entered allmulticast mode [ 86.613996][ T5952] macvlan2: entered promiscuous mode [ 86.614018][ T5952] macvlan2: entered allmulticast mode [ 86.675116][ T987] cfg80211: failed to load regulatory.db [ 86.714199][ T5961] syzkaller0: entered promiscuous mode [ 86.714221][ T5961] syzkaller0: entered allmulticast mode [ 86.731402][ T5972] tipc: Started in network mode [ 86.731429][ T5972] tipc: Node identity 1a8972f633b8, cluster identity 4711 [ 86.731933][ T5972] tipc: Enabled bearer , priority 0 [ 86.757391][ T5960] tipc: Resetting bearer [ 86.817297][ T5960] tipc: Disabling bearer [ 87.008144][ T5988] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 87.699586][ T6032] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 87.714375][ T6034] xt_hashlimit: size too large, truncated to 1048576 [ 87.793323][ T6036] netlink: 'syz.0.51': attribute type 39 has an invalid length. [ 88.081298][ T6048] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.237052][ T6062] __nla_validate_parse: 7 callbacks suppressed [ 88.237071][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 88.382286][ T6066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.53'. [ 88.488396][ T6074] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 88.601150][ T6065] v: renamed from vlan1 [ 88.859627][ T6048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.952004][ T6084] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 88.954762][ T6084] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 88.954798][ T6084] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 89.090061][ T6048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.249642][ T6087] smbdirect: ib_dev[rxe0] renamed to [sy] [ 89.361720][ T6048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.386311][ T49] IPVS: starting estimator thread 0... [ 89.481462][ T6114] IPVS: using max 34 ests per chain, 81600 per kthread [ 89.643960][ T6131] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 89.679002][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 89.706950][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 89.753617][ T61] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.753757][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.760258][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.760306][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.767517][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 89.820200][ T6133] vlan1: entered allmulticast mode [ 89.913879][ T6137] openvswitch: netlink: ufid size 30 bytes exceeds the range (1, 16) [ 89.913902][ T6137] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 89.984150][ T6140] netlink: 68 bytes leftover after parsing attributes in process `syz.4.69'. [ 90.384187][ T6153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.393035][ T6148] netlink: Unknown nat attribute (0) [ 90.393077][ T6148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.832500][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 90.841527][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 90.849093][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 90.856434][ T6166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.75'. [ 91.558068][ T31] audit: type=1800 audit(1792410898.473:2): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.81" name="memory.events" dev="tmpfs" ino=115 res=0 errno=0 [ 92.718430][ T6208] syz.1.86 (6208) used greatest stack depth: 16608 bytes left [ 93.052974][ T6237] syzkaller0: entered promiscuous mode [ 93.052995][ T6237] syzkaller0: entered allmulticast mode [ 93.139231][ T6241] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.428167][ T6255] __nla_validate_parse: 35 callbacks suppressed [ 93.428186][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 93.484850][ T6257] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 93.590482][ T6250] ip6_vti0: entered promiscuous mode [ 93.609421][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 93.953015][ T6265] Bluetooth: MGMT ver 1.23 [ 94.167946][ T6269] bond1: entered allmulticast mode [ 94.294193][ T6270] bond2: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 94.294222][ T6270] bond2: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 94.297597][ T6270] bond2: entered allmulticast mode [ 94.298106][ T6270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.336625][ T6281] nftables ruleset with unbound set [ 94.573027][ T6288] netlink: 128 bytes leftover after parsing attributes in process `syz.0.98'. [ 94.577750][ T6288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.608265][ T6289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.105'. [ 94.608315][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 94.637997][ T6289] smc: removing ib device sy [ 94.935531][ T6289] smbdirect: ib_dev[sy] removed [ 95.113725][ T6124] Set syz1 is full, maxelem 65536 reached [ 95.396888][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.0.110'. [ 95.396917][ T6307] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 95.397204][ T6304] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 95.397219][ T6304] netlink: 1368 bytes leftover after parsing attributes in process `syz.1.109'. [ 95.520997][ T61] IPVS: starting estimator thread 0... [ 95.602484][ T6318] xt_hashlimit: size too large, truncated to 1048576 [ 95.620839][ T6315] IPVS: using max 31 ests per chain, 74400 per kthread [ 96.075066][ T6334] netlink: 256 bytes leftover after parsing attributes in process `syz.3.115'. [ 96.075091][ T6334] netlink: 256 bytes leftover after parsing attributes in process `syz.3.115'. [ 96.109629][ T6336] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 96.618120][ T6341] bond1: entered promiscuous mode [ 96.625986][ T6341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.717538][ T6358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.121'. [ 96.774866][ T6358] geneve1: entered promiscuous mode [ 97.093378][ T6381] 8021q: VLANs not supported on gre0 [ 97.690375][ T6399] xt_hashlimit: size too large, truncated to 1048576 [ 97.924766][ T6414] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 98.297022][ T6422] batman_adv: batadv0: Adding interface: veth0 [ 98.297038][ T6422] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.297063][ T6422] batman_adv: batadv0: Interface activated: veth0 [ 98.298229][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.298248][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.356725][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.356746][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.368326][ T6424] batman_adv: batadv0: Interface deactivated: veth0 [ 98.368344][ T6424] batman_adv: batadv0: Removing interface: veth0 [ 98.442076][ T6430] netlink: 'syz.1.138': attribute type 1 has an invalid length. [ 98.572352][ T6441] __nla_validate_parse: 2 callbacks suppressed [ 98.572372][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 98.580817][ T6405] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 98.613330][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 98.613632][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 98.638466][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 98.759005][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 98.772267][ T6443] ip6gretap0: entered promiscuous mode [ 98.918410][ T6458] veth1_to_bond: entered allmulticast mode [ 98.918821][ T6458] veth1_to_bond: entered promiscuous mode [ 98.931928][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 98.982009][ T6458] veth1_to_bond (unregistering): left allmulticast mode [ 98.982048][ T6458] veth1_to_bond (unregistering): left promiscuous mode [ 99.046749][ T6458] bond0: (slave bond_slave_1): Releasing backup interface [ 99.096081][ T6463] veth0_to_bridge: entered promiscuous mode [ 99.099879][ T6463] macvtap1: entered allmulticast mode [ 99.099898][ T6463] veth0_to_bridge: entered allmulticast mode [ 99.133347][ T6463] veth0_to_bridge: left allmulticast mode [ 99.133372][ T6463] veth0_to_bridge: left promiscuous mode [ 99.346551][ T6476] sctp: [Deprecated]: syz.4.148 (pid 6476) Use of int in max_burst socket option. [ 99.346551][ T6476] Use struct sctp_assoc_value instead [ 99.684883][ T160] IPVS: starting estimator thread 0... [ 99.715177][ T6495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 99.749793][ T6498] IPVS: set_ctl: invalid protocol: 135 10.1.1.14:20004 [ 99.770980][ T6501] IPVS: using max 41 ests per chain, 98400 per kthread [ 99.887374][ T31] audit: type=1804 audit(1792410906.803:3): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.154" name="/newroot/33/cgroup.controllers" dev="tmpfs" ino=187 res=1 errno=0 [ 99.895524][ T31] audit: type=1800 audit(1792410906.813:4): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.154" name="cgroup.controllers" dev="tmpfs" ino=187 res=0 errno=0 [ 100.035135][ T6514] ipt_ah: unknown flags FF [ 100.124838][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 100.185408][ T6518] warning: `syz.1.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.257345][ T6524] vti0: entered promiscuous mode [ 100.562903][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 100.583143][ T6544] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 100.696271][ T6546] netlink: 56 bytes leftover after parsing attributes in process `syz.2.164'. [ 100.831855][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.137019][ T6566] syzkaller1: entered promiscuous mode [ 101.137042][ T6566] syzkaller1: entered allmulticast mode [ 101.512572][ T6579] xt_hl: Unknown Hop Limit match mode: 4 [ 101.825577][ T6612] syzkaller1: entered allmulticast mode [ 101.908648][ T6622] x_tables: duplicate underflow at hook 1 [ 102.445667][ T6644] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.589562][ T6655] netlink: 'syz.4.195': attribute type 1 has an invalid length. [ 102.589612][ T6655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.589621][ T6655] IPv6: NLM_F_CREATE should be set when creating new route [ 102.605481][ T6655] openvswitch: netlink: Message has 5920 unknown bytes. [ 102.605520][ T6655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.687480][ T6657] TC_ACT_REPEAT abuse ? [ 103.189891][ T6682] ip_tables: iptables: counters copy to user failed while replacing table [ 103.675367][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.676041][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.897539][ T6707] udevd[6707]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 103.916727][ T6707] udevd[6707]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 104.030110][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.054485][ T6694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.115297][ T6708] __nla_validate_parse: 7 callbacks suppressed [ 104.115317][ T6708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.212'. [ 104.205314][ T6718] netlink: 120 bytes leftover after parsing attributes in process `syz.2.213'. [ 104.222533][ T287] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.222572][ T287] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.222597][ T287] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.222621][ T287] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.380789][ T6733] netlink: 3 bytes leftover after parsing attributes in process `syz.0.216'. [ 104.650113][ T6752] netlink: 72 bytes leftover after parsing attributes in process `syz.4.217'. [ 104.653716][ T6754] netlink: 72 bytes leftover after parsing attributes in process `syz.4.217'. [ 105.163830][ T6782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 105.166826][ T6782] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 105.175095][ T6781] netlink: 72 bytes leftover after parsing attributes in process `syz.4.221'. [ 105.201565][ T6782] team0 (unregistering): Port device team_slave_0 removed [ 105.204581][ T6782] team0 (unregistering): Port device team_slave_1 removed [ 105.319477][ T6795] netlink: 72 bytes leftover after parsing attributes in process `syz.4.221'. [ 105.608171][ T6802] netlink: 'syz.1.224': attribute type 1 has an invalid length. [ 106.181515][ T6840] sctp: [Deprecated]: syz.2.232 (pid 6840) Use of int in max_burst socket option. [ 106.181515][ T6840] Use struct sctp_assoc_value instead [ 106.184130][ T6841] sctp: [Deprecated]: syz.2.232 (pid 6841) Use of int in max_burst socket option. [ 106.184130][ T6841] Use struct sctp_assoc_value instead [ 106.244348][ T6843] netlink: 'syz.4.230': attribute type 8 has an invalid length. [ 106.360111][ T6853] netlink: 116 bytes leftover after parsing attributes in process `syz.1.234'. [ 106.365912][ T6844] pimreg0: tun_chr_ioctl cmd 1074025677 [ 106.366033][ T6844] pimreg0: linktype set to 776 [ 106.384178][ T6844] pimreg0: tun_chr_ioctl cmd 1074025673 [ 106.394477][ T6857] pimreg0: tun_chr_ioctl cmd 1074025677 [ 106.394587][ T6857] pimreg0: linktype set to 776 [ 106.783593][ T6890] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.239'. [ 106.883307][ T6896] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 107.028550][ T6908] Cannot find add_set index 2 as target [ 107.080128][ T6913] netlink: 'syz.0.248': attribute type 178 has an invalid length. [ 107.340911][ T6927] block nbd0: not configured, cannot reconfigure [ 107.833027][ T6961] xt_cgroup: invalid path, errno=-2 [ 108.412058][ T6986] Unsupported ieee802154 address type: 0 [ 108.695904][ T7003] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 108.826611][ T7003] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.949013][ T7014] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 109.106759][ T7026] netlink: 'syz.2.273': attribute type 30 has an invalid length. [ 109.205406][ T7026] vxlan0: entered promiscuous mode [ 109.205429][ T7026] vxlan0: entered allmulticast mode [ 109.221450][ T160] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.221497][ T160] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.221530][ T160] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.221563][ T160] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.508696][ T7044] __nla_validate_parse: 4 callbacks suppressed [ 109.508714][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 109.606226][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 109.606261][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.279'. [ 109.661594][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 109.661614][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 109.993433][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.287'. [ 110.018744][ T7080] netlink: 'syz.1.288': attribute type 6 has an invalid length. [ 110.041366][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.289'. [ 110.073758][ T7078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.289'. [ 110.167596][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.289'. [ 110.263753][ T7078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.289'. [ 110.522481][ T7119] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.575935][ T7070] rxe_eth0: entered allmulticast mode [ 110.677638][ T7129] netlink: 'syz.3.297': attribute type 2 has an invalid length. [ 110.822955][ T7137] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 111.476684][ T7161] syz.0.305 (7161) used obsolete PPPIOCDETACH ioctl [ 111.671816][ T287] IPVS: starting estimator thread 0... [ 111.760028][ T7187] IPVS: using max 38 ests per chain, 91200 per kthread [ 112.375337][ T7226] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 112.561182][ T7240] syzkaller0: entered promiscuous mode [ 112.561205][ T7240] syzkaller0: entered allmulticast mode [ 112.566368][ T7240] TC_ACT_REPEAT abuse ? [ 112.633361][ T7240] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.633394][ T7240] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.750988][ T287] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 112.781202][ T7254] netlink: 'syz.1.322': attribute type 21 has an invalid length. [ 112.781227][ T7254] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.846735][ T7247] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 113.152678][ T7266] netlink: 'syz.1.324': attribute type 4 has an invalid length. [ 113.171810][ T7247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.171844][ T7247] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.204386][ T7282] netlink: 'syz.1.324': attribute type 4 has an invalid length. [ 113.424748][ T7247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.428681][ T7247] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.721895][ T7247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.721930][ T7247] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.768793][ T7300] tap0: tun_chr_ioctl cmd 2147767521 [ 113.787162][ T7304] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 113.958012][ T7304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.036437][ T7308] bond4: (slave gretap1): making interface the new active one [ 114.049242][ T7308] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 114.320043][ T61] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.320073][ T61] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.381313][ T61] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.381344][ T61] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.381387][ T61] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.381409][ T61] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.432102][ T160] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.432134][ T160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.809256][ T7372] xt_ipcomp: unknown flags 1D [ 115.126016][ T7382] __nla_validate_parse: 7 callbacks suppressed [ 115.126034][ T7382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 115.128742][ T7382] hsr_slave_0: left promiscuous mode [ 115.156269][ T7382] hsr_slave_1: left promiscuous mode [ 115.434135][ T7392] 8021q: VLANs not supported on ip_vti0 [ 115.565425][ T49] IPVS: starting estimator thread 0... [ 115.660038][ T7413] IPVS: using max 40 ests per chain, 96000 per kthread [ 115.683740][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 115.683764][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.352'. [ 115.772311][ T7423] netlink: 'syz.3.354': attribute type 10 has an invalid length. [ 115.814742][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 115.814770][ T7416] netlink: 'syz.2.352': attribute type 4 has an invalid length. [ 115.952863][ T7431] lo: entered promiscuous mode [ 115.964318][ T7431] tunl0: entered promiscuous mode [ 115.970134][ T7431] gre0: entered promiscuous mode [ 115.976103][ T7442] netlink: 'syz.0.357': attribute type 1 has an invalid length. [ 116.004041][ T7431] gretap0: entered promiscuous mode [ 116.038165][ T7431] erspan0: entered promiscuous mode [ 116.053134][ T7431] ip_vti0: entered promiscuous mode [ 116.066416][ T7431] sit0: entered promiscuous mode [ 116.095333][ T7431] ip6tnl0: entered promiscuous mode [ 116.114845][ T7431] ip6gre0: entered promiscuous mode [ 116.128701][ T7445] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 116.138968][ T7431] syz_tun: entered promiscuous mode [ 116.157251][ T7431] ip6gretap0: entered promiscuous mode [ 116.162249][ T7450] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 116.170271][ T7431] vcan0: entered promiscuous mode [ 116.179292][ T7431] bond0: entered promiscuous mode [ 116.179308][ T7431] bond_slave_0: entered promiscuous mode [ 116.179496][ T7431] bond_slave_1: entered promiscuous mode [ 116.198388][ T7431] team0: entered promiscuous mode [ 116.198405][ T7431] team_slave_0: entered promiscuous mode [ 116.198585][ T7431] team_slave_1: entered promiscuous mode [ 116.208608][ T7431] dummy0: entered promiscuous mode [ 116.228368][ T7431] nlmon0: entered promiscuous mode [ 116.229720][ T7431] batadv0: entered promiscuous mode [ 116.245795][ T7431] vxcan0: entered promiscuous mode [ 116.246785][ T7431] vxcan1: entered promiscuous mode [ 116.247766][ T7431] veth0: entered promiscuous mode [ 116.252377][ T7431] veth1: entered promiscuous mode [ 116.256373][ T7431] wg0: entered promiscuous mode [ 116.261805][ T7431] wg1: entered promiscuous mode [ 116.266937][ T7431] wg2: entered promiscuous mode [ 116.269806][ T7431] veth0_to_bridge: entered promiscuous mode [ 116.278071][ T7431] bridge_slave_0: entered promiscuous mode [ 116.301476][ T7431] veth1_to_bridge: entered promiscuous mode [ 116.312631][ T7431] bridge_slave_1: entered promiscuous mode [ 116.317538][ T7431] veth0_to_bond: entered promiscuous mode [ 116.330221][ T7431] veth1_to_bond: entered promiscuous mode [ 116.345564][ T7431] veth0_to_team: entered promiscuous mode [ 116.368891][ T7431] veth1_to_team: entered promiscuous mode [ 116.386125][ T7431] veth0_to_batadv: entered promiscuous mode [ 116.395968][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.396217][ T7431] batadv_slave_0: entered promiscuous mode [ 116.413265][ T7431] veth1_to_batadv: entered promiscuous mode [ 116.443693][ T7431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.443744][ T7431] batadv_slave_1: entered promiscuous mode [ 116.446654][ T7431] xfrm0: entered promiscuous mode [ 116.448725][ T7431] veth0_to_hsr: entered promiscuous mode [ 116.456332][ T7454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.361'. [ 116.490266][ T7431] hsr_slave_0: entered promiscuous mode [ 116.497745][ T7431] veth1_to_hsr: entered promiscuous mode [ 116.516903][ T7431] hsr_slave_1: entered promiscuous mode [ 116.520469][ T7431] veth1_virt_wifi: entered promiscuous mode [ 116.539129][ T7431] veth0_virt_wifi: entered promiscuous mode [ 116.549814][ T7431] virt_wifi0: entered promiscuous mode [ 116.569656][ T7431] vlan0: entered promiscuous mode [ 116.578112][ T7431] vlan1: entered promiscuous mode [ 116.587648][ T7431] macvlan0: entered promiscuous mode [ 116.598883][ T7431] macvlan1: entered promiscuous mode [ 116.611674][ T7431] ipvlan0: entered promiscuous mode [ 116.611841][ T7431] ipvlan1: entered promiscuous mode [ 116.632196][ T7431] macvtap0: entered promiscuous mode [ 116.635049][ T7431] macsec0: entered promiscuous mode [ 116.638767][ T7431] geneve0: entered promiscuous mode [ 116.658653][ T7431] geneve1: entered promiscuous mode [ 116.669412][ T7431] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 116.681347][ T7431] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 116.683527][ T7431] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 116.686508][ T7431] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 116.717285][ T7431] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 116.736605][ T7431] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 116.738006][ T7431] vlan2: entered promiscuous mode [ 116.754054][ T7431] bridge0: entered promiscuous mode [ 116.768397][ T299] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.769930][ T5710] s`z1: Port: 1 Link DOWN [ 116.971639][ T7481] block nbd0: not configured, cannot reconfigure [ 116.990490][ T7449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.051209][ T61] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.051252][ T61] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.051290][ T61] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.392142][ T7500] bridge_slave_0: left promiscuous mode [ 117.392450][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.397428][ T7500] bridge_slave_1: left allmulticast mode [ 117.397450][ T7500] bridge_slave_1: left promiscuous mode [ 117.400871][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.447363][ T7500] bond0: (slave bond_slave_0): Releasing backup interface [ 117.488188][ T7500] bond0: (slave bond_slave_1): Releasing backup interface [ 117.503000][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.504116][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.505105][ T7500] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 117.814788][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 117.951933][ T7528] syzkaller0: entered promiscuous mode [ 117.951952][ T7528] syzkaller0: entered allmulticast mode [ 118.126041][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 118.406725][ T7544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.380'. [ 118.509095][ T7567] netlink: 14 bytes leftover after parsing attributes in process `syz.0.385'. [ 118.734296][ T7588] netlink: del zone limit has 4 unknown bytes [ 118.794422][ T7591] bridge0: port 1(bond0) entered blocking state [ 118.794594][ T7591] bridge0: port 1(bond0) entered disabled state [ 118.794911][ T7591] bond0: entered allmulticast mode [ 118.794928][ T7591] bond_slave_0: entered allmulticast mode [ 118.794961][ T7591] bond_slave_1: entered allmulticast mode [ 118.841818][ T7593] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.841850][ T7593] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.841900][ T7593] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.872636][ T7593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.393'. [ 119.378540][ T7635] ovs-dp0: entered promiscuous mode [ 119.440361][ T7637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.462900][ T7621] tipc: Started in network mode [ 119.462913][ T7621] tipc: Node identity 4, cluster identity 4711 [ 119.462920][ T7621] tipc: Node number set to 4 [ 119.463368][ T7642] bridge_slave_0: default FDB implementation only supports local addresses [ 119.568757][ T7637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.634174][ T7640] netlink: 'syz.4.404': attribute type 3 has an invalid length. [ 119.639156][ T7640] netlink: 'syz.4.404': attribute type 1 has an invalid length. [ 119.639172][ T7640] netlink: 'syz.4.404': attribute type 268 has an invalid length. [ 119.725752][ T7637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.820814][ T7637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.888825][ T7657] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 119.888845][ T7657] netlink: 'syz.1.407': attribute type 2 has an invalid length. [ 119.915493][ T7658] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 119.917128][ T7658] bond1 (unregistering): Released all slaves [ 120.021386][ T7652] bridge0: entered promiscuous mode [ 120.026625][ T7652] ip6gretap0: entered promiscuous mode [ 120.028409][ T7652] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 120.028428][ T7652] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 120.152935][ T61] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.170103][ T61] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.170143][ T61] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.190101][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.254757][ T7672] __nla_validate_parse: 148 callbacks suppressed [ 120.254776][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 120.270419][ T7672] vlan1: entered allmulticast mode [ 120.270464][ T7672] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 120.271855][ T7672] batman_adv: batadv0: Adding interface: vlan1 [ 120.271867][ T7672] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.271888][ T7672] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 120.530525][ T7699] ipt_rpfilter: unknown options [ 120.535027][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 120.689396][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 120.689422][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 120.801830][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 121.265629][ T7720] netlink: 136 bytes leftover after parsing attributes in process `syz.1.423'. [ 121.265821][ T7720] netlink: 136 bytes leftover after parsing attributes in process `syz.1.423'. [ 121.266001][ T7720] netlink: 136 bytes leftover after parsing attributes in process `syz.1.423'. [ 121.266144][ T7720] netlink: 136 bytes leftover after parsing attributes in process `syz.1.423'. [ 121.266292][ T7720] netlink: 136 bytes leftover after parsing attributes in process `syz.1.423'. [ 121.924135][ T7771] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 122.055413][ T4935] Bluetooth: hci3: link tx timeout [ 122.055432][ T4935] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.075705][ T7787] netlink: 'syz.4.444': attribute type 4 has an invalid length. [ 122.084234][ T7787] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 123.019117][ T7862] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.107478][ T7865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 123.560500][ T5615] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 123.630450][ T5615] Bluetooth: hci0: command 0x1407 tx timeout [ 123.691007][ T7891] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 123.691027][ T7891] netlink: 'syz.4.463': attribute type 268 has an invalid length. [ 124.111570][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 124.442526][ T7893] x_tables: duplicate underflow at hook 3 [ 124.498153][ T7894] x_tables: duplicate underflow at hook 3 [ 125.187991][ T7940] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 125.254685][ T7940] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.577151][ T7967] syzkaller0: entered promiscuous mode [ 125.577174][ T7967] syzkaller0: entered allmulticast mode [ 125.940987][ T7979] __nla_validate_parse: 70 callbacks suppressed [ 125.941008][ T7979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.480'. [ 126.136667][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 126.717652][ T8023] bridge0: Device is already in use. [ 127.293470][ T5279] veth0_macvtap: left promiscuous mode [ 127.705313][ T8086] netlink: 56 bytes leftover after parsing attributes in process `syz.3.497'. [ 128.106619][ T8100] netlink: 'syz.1.499': attribute type 3 has an invalid length. [ 129.984635][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.521'. [ 130.377617][ T8192] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 131.353520][ T8224] geneve2: entered promiscuous mode [ 131.413906][ T8228] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 131.715952][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.533'. [ 131.753336][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.754573][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.791316][ T8023] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 132.061031][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.106041][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.535611][ T250] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.535658][ T250] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.535690][ T250] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.535721][ T250] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.758990][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759049][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.770602][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'. [ 132.770625][ T8292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'. [ 132.770639][ T8292] netlink: 32 bytes leftover after parsing attributes in process `syz.4.544'. [ 132.771724][ T8289] netlink: 132 bytes leftover after parsing attributes in process `syz.0.543'. [ 132.794755][ T8289] vlan2: entered promiscuous mode [ 132.794918][ T8289] vlan2: entered allmulticast mode [ 132.794930][ T8289] bridge0: entered allmulticast mode [ 133.078901][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 133.083779][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.546'. [ 133.257818][ T8317] bond1: invalid NS target :: specified for addition [ 133.257843][ T8317] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 133.276711][ T8317] bond1 (unregistering): Released all slaves [ 133.378963][ T8327] Bluetooth: hci0: unsupported parameter 5135 [ 133.378984][ T8327] Bluetooth: hci0: unsupported parameter 8192 [ 133.379009][ T8327] Bluetooth: hci0: unsupported parameter 5135 [ 133.379019][ T8327] Bluetooth: hci0: unsupported parameter 8192 [ 133.741415][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.555'. [ 133.813373][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.555'. [ 133.962564][ T8346] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 133.995390][ T8346] bond1: entered promiscuous mode [ 133.996380][ T8346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.023872][ T8346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.024230][ T8346] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 134.024248][ T8346] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 134.037512][ T8346] bond1: (slave ip6gre1): making interface the new active one [ 134.037533][ T8346] ip6gre1: entered promiscuous mode [ 134.072297][ T8346] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 134.255713][ T8362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.257779][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 134.276122][ T8362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.286252][ T8362] bond2: (slave bond0): Enslaving as an active interface with a down link [ 134.367783][ T8369] netlink: 'syz.0.560': attribute type 2 has an invalid length. [ 134.368451][ T8370] netlink: 'syz.0.560': attribute type 2 has an invalid length. [ 134.896826][ T8362] bond2 (unregistering): (slave bond0): Releasing active interface [ 134.916662][ T8362] bond2 (unregistering): Released all slaves [ 135.372087][ T8405] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 135.736826][ T8425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 135.841981][ T8426] bridge0: left promiscuous mode [ 135.875649][ T8430] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 136.137819][ T8445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.137834][ T8445] IPv6: NLM_F_CREATE should be set when creating new route [ 136.137859][ T8445] IPv6: NLM_F_CREATE should be set when creating new route [ 136.138635][ T8452] batadv0: entered allmulticast mode [ 136.144325][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.146749][ T8452] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 136.412719][ T8465] openvswitch: netlink: Flow key attr not present in new flow. [ 136.531246][ T8470] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 136.620517][ T8470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.714189][ T8478] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 137.116348][ T8501] syzkaller0: entered promiscuous mode [ 137.116368][ T8501] syzkaller0: entered allmulticast mode [ 137.196080][ T8504] FAULT_INJECTION: forcing a failure. [ 137.196080][ T8504] name failslab, interval 1, probability 0, space 0, times 1 [ 137.196130][ T8504] CPU: 0 UID: 0 PID: 8504 Comm: syz.4.601 Not tainted syzkaller #0 PREEMPT(full) [ 137.196150][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.196167][ T8504] Call Trace: [ 137.196173][ T8504] [ 137.196185][ T8504] dump_stack_lvl+0xe8/0x150 [ 137.196223][ T8504] should_fail_ex+0x410/0x560 [ 137.196252][ T8504] should_failslab+0xa8/0x100 [ 137.196277][ T8504] __kmalloc_noprof+0xfe/0x720 [ 137.196295][ T8504] ? sk_prot_alloc+0xe7/0x210 [ 137.196316][ T8504] ? sk_prot_alloc+0xe7/0x210 [ 137.196341][ T8504] sk_prot_alloc+0xe7/0x210 [ 137.196361][ T8504] ? sk_alloc+0x27/0x390 [ 137.196383][ T8504] sk_alloc+0x3a/0x390 [ 137.196408][ T8504] bpf_prog_test_run_skb+0x3a6/0x2230 [ 137.196427][ T8504] ? lock_acquire+0x115/0x350 [ 137.196462][ T8504] ? __fget_files+0x3a2/0x420 [ 137.196486][ T8504] ? __fget_files+0x2a/0x420 [ 137.196514][ T8504] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 137.196533][ T8504] bpf_prog_test_run+0x2c5/0x340 [ 137.196561][ T8504] __sys_bpf+0xa22/0xd90 [ 137.196587][ T8504] ? __pfx___sys_bpf+0x10/0x10 [ 137.196618][ T8504] ? __fget_files+0x2a/0x420 [ 137.196661][ T8504] ? rcu_is_watching+0x16/0xb0 [ 137.196699][ T8504] __x64_sys_bpf+0xba/0xd0 [ 137.196722][ T8504] do_syscall_64+0x166/0x520 [ 137.196744][ T8504] ? trace_irq_disable+0x3b/0x140 [ 137.196763][ T8504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.196781][ T8504] ? clear_bhb_loop+0x70/0xc0 [ 137.196802][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.196819][ T8504] RIP: 0033:0x7fd76d99e559 [ 137.196843][ T8504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.196857][ T8504] RSP: 002b:00007fd76e874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.196880][ T8504] RAX: ffffffffffffffda RBX: 00007fd76dc25fa0 RCX: 00007fd76d99e559 [ 137.196891][ T8504] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 137.196901][ T8504] RBP: 00007fd76e874090 R08: 0000000000000000 R09: 0000000000000000 [ 137.196912][ T8504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.196921][ T8504] R13: 00007fd76dc26038 R14: 00007fd76dc25fa0 R15: 00007fffd9b0fa48 [ 137.196951][ T8504] [ 137.324838][ T8508] __nla_validate_parse: 12 callbacks suppressed [ 137.324857][ T8508] netlink: 120 bytes leftover after parsing attributes in process `syz.4.603'. [ 137.608777][ T8526] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 137.959552][ T8534] netlink: 'syz.4.610': attribute type 2 has an invalid length. [ 137.971730][ T8543] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 137.993801][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.994409][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.028483][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 138.030961][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.031069][ T8543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.031430][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.031561][ T8543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.099175][ T8548] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 138.113276][ T8543] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 138.116984][ T8545] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 138.153368][ T8548] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.153550][ T8548] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.171715][ T8556] netlink: zone id is out of range [ 138.171728][ T8556] netlink: zone id is out of range [ 138.171736][ T8556] netlink: zone id is out of range [ 138.171743][ T8556] netlink: zone id is out of range [ 138.171750][ T8556] netlink: zone id is out of range [ 138.171757][ T8556] netlink: zone id is out of range [ 138.421693][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 138.633350][ T8589] netlink: 'syz.2.618': attribute type 10 has an invalid length. [ 138.771852][ T8593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 138.865192][ T8598] netlink: 'syz.1.621': attribute type 21 has an invalid length. [ 138.865212][ T8598] netlink: 128 bytes leftover after parsing attributes in process `syz.1.621'. [ 140.327896][ T8598] netlink: 'syz.1.621': attribute type 4 has an invalid length. [ 140.327919][ T8598] netlink: 3 bytes leftover after parsing attributes in process `syz.1.621'. [ 140.347660][ T8600] tipc: Enabling of bearer rejected, failed to enable media [ 140.564395][ T8626] sctp: [Deprecated]: syz.4.629 (pid 8626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.564395][ T8626] Use struct sctp_sack_info instead [ 140.806572][ T8646] net_ratelimit: 1561 callbacks suppressed [ 140.806591][ T8646] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 140.806815][ T8642] bridge0: entered allmulticast mode [ 140.823390][ T8643] bridge_slave_1: left allmulticast mode [ 140.823415][ T8643] bridge_slave_1: left promiscuous mode [ 140.826357][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.938232][ T8643] bridge_slave_0: left allmulticast mode [ 140.938257][ T8643] bridge_slave_0: left promiscuous mode [ 140.938454][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.993897][ T8643] bond0: (slave bridge0): Releasing backup interface [ 141.026241][ T8633] syzkaller1: entered promiscuous mode [ 141.026261][ T8633] syzkaller1: entered allmulticast mode [ 141.073537][ T8659] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 141.073560][ T8659] netlink: 224 bytes leftover after parsing attributes in process `syz.3.634'. [ 141.112544][ T8668] lo: entered promiscuous mode [ 141.112716][ T8668] tunl0: entered promiscuous mode [ 141.112860][ T8668] gre0: entered promiscuous mode [ 141.112990][ T8668] gretap0: entered promiscuous mode [ 141.113097][ T8668] erspan0: entered promiscuous mode [ 141.113208][ T8668] ip_vti0: entered promiscuous mode [ 141.113343][ T8668] ip6_vti0: entered promiscuous mode [ 141.113453][ T8668] sit0: entered promiscuous mode [ 141.113567][ T8668] ip6tnl0: entered promiscuous mode [ 141.113680][ T8668] ip6gre0: entered promiscuous mode [ 141.113788][ T8668] syz_tun: entered promiscuous mode [ 141.113934][ T8668] ip6gretap0: entered promiscuous mode [ 141.114045][ T8668] bridge0: entered promiscuous mode [ 141.119323][ T8668] vcan0: entered promiscuous mode [ 141.119472][ T8668] bond0: entered promiscuous mode [ 141.119485][ T8668] bond_slave_0: entered promiscuous mode [ 141.119754][ T8668] team0: entered promiscuous mode [ 141.119766][ T8668] team_slave_0: entered promiscuous mode [ 141.120085][ T8668] team_slave_1: entered promiscuous mode [ 141.120395][ T8668] nlmon0: entered promiscuous mode [ 141.120525][ T8668] batadv0: entered promiscuous mode [ 141.120653][ T8668] vxcan0: entered promiscuous mode [ 141.121933][ T8668] vxcan1: entered promiscuous mode [ 141.122075][ T8668] veth0: entered promiscuous mode [ 141.122207][ T8668] veth1: entered promiscuous mode [ 141.122335][ T8668] wg0: entered promiscuous mode [ 141.122482][ T8668] wg1: entered promiscuous mode [ 141.122583][ T8668] wg2: entered promiscuous mode [ 141.122709][ T8668] veth0_to_bridge: entered promiscuous mode [ 141.122942][ T8668] veth1_to_bridge: entered promiscuous mode [ 141.123168][ T8668] veth0_to_bond: entered promiscuous mode [ 141.123417][ T8668] veth0_to_team: entered promiscuous mode [ 141.127311][ T8668] veth1_to_team: entered promiscuous mode [ 141.127580][ T8668] veth0_to_batadv: entered promiscuous mode [ 141.127713][ T8668] batadv_slave_0: entered promiscuous mode [ 141.127877][ T8668] veth1_to_batadv: entered promiscuous mode [ 141.128006][ T8668] batadv_slave_1: entered promiscuous mode [ 141.128134][ T8668] xfrm0: entered promiscuous mode [ 141.128264][ T8668] veth0_to_hsr: entered promiscuous mode [ 141.128510][ T8668] veth1_to_hsr: entered promiscuous mode [ 141.132212][ T8668] hsr0: entered promiscuous mode [ 141.132349][ T8668] veth1_virt_wifi: entered promiscuous mode [ 141.132485][ T8668] veth0_virt_wifi: entered promiscuous mode [ 141.132615][ T8668] virt_wifi0: entered promiscuous mode [ 141.132984][ T8668] vlan0: entered promiscuous mode [ 141.133278][ T8668] vlan1: entered promiscuous mode [ 141.133538][ T8668] macvlan0: entered promiscuous mode [ 141.135289][ T8668] macvlan1: entered promiscuous mode [ 141.135433][ T8668] ipvlan0: entered promiscuous mode [ 141.135571][ T8668] ipvlan1: entered promiscuous mode [ 141.136008][ T8668] macvtap0: entered promiscuous mode [ 141.136140][ T8668] macsec0: entered promiscuous mode [ 141.136242][ T8668] geneve0: entered promiscuous mode [ 141.136372][ T8668] geneve1: entered promiscuous mode [ 141.136534][ T8668] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 141.136664][ T8668] bond1: entered promiscuous mode [ 141.139751][ T8668] bond2: entered promiscuous mode [ 141.139881][ T8668] sit1: entered promiscuous mode [ 141.140061][ T8668] bond3: entered promiscuous mode [ 141.140168][ T8668] bond4: entered promiscuous mode [ 141.140179][ T8668] gretap1: entered promiscuous mode [ 141.140640][ T8668] netdevsim netdevsim3 eth0: entered promiscuous mode [ 141.140758][ T8668] netdevsim netdevsim3 eth1: entered promiscuous mode [ 141.140873][ T8668] netdevsim netdevsim3 eth2: entered promiscuous mode [ 141.141008][ T8668] netdevsim netdevsim3 eth3: entered promiscuous mode [ 141.141112][ T8668] ip6gretap1: entered promiscuous mode [ 141.145127][ T8668] bond5: entered promiscuous mode [ 141.145260][ T8668] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 141.146212][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 141.674588][ T8687] validate_nla: 2 callbacks suppressed [ 141.674606][ T8687] netlink: 'syz.2.639': attribute type 1 has an invalid length. [ 141.728540][ T8696] Bluetooth: MGMT ver 1.23 [ 142.054569][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 142.054613][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 142.297679][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.297984][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.298245][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.298433][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.298603][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.298788][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.298959][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.331147][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.331323][ T8724] netlink: 'syz.3.645': attribute type 12 has an invalid length. [ 142.502584][ T8739] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 142.804240][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.652'. [ 142.857251][ T8759] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.882729][ T8750] team0: Port device team_slave_0 removed [ 143.110161][ T8766] wg2 speed is unknown, defaulting to 1000 [ 143.110220][ T8766] wg2 speed is unknown, defaulting to 1000 [ 143.111123][ T8766] wg2 speed is unknown, defaulting to 1000 [ 143.140151][ T8766] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 143.140182][ T8766] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 143.140218][ T8766] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 143.297208][ T8766] wg2 speed is unknown, defaulting to 1000 [ 143.316885][ T8766] wg2 speed is unknown, defaulting to 1000 [ 143.334508][ T8766] wg2 speed is unknown, defaulting to 1000 [ 143.337144][ T8766] wg2 speed is unknown, defaulting to 1000 [ 143.339038][ T8766] wg2 speed is unknown, defaulting to 1000 [ 143.507069][ T8779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.559696][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 143.786519][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 143.833512][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.658'. [ 143.870195][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 143.981411][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 143.984254][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 144.150448][ T8804] batman_adv: batadv0: Adding interface: syzkaller0 [ 144.150464][ T8804] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.150908][ T8804] batman_adv: batadv0: Interface activated: syzkaller0 [ 144.378880][ T8819] syzkaller0: entered promiscuous mode [ 144.378900][ T8819] syzkaller0: entered allmulticast mode [ 144.397363][ T8819] tipc: Started in network mode [ 144.397387][ T8819] tipc: Node identity 7215a8587f15, cluster identity 4711 [ 144.397649][ T8819] tipc: Enabled bearer , priority 0 [ 144.427778][ T8825] tipc: Enabling of bearer rejected, already enabled [ 144.465784][ T8811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.666'. [ 144.545036][ T8817] tipc: Resetting bearer [ 144.564115][ T8817] tipc: Disabling bearer [ 144.576071][ T8803] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 144.579701][ T8829] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.606270][ T8803] batman_adv: batadv0: Removing interface: syzkaller0 [ 144.776401][ T8839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.671'. [ 144.784237][ T8840] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 144.876995][ T8831] bridge0: port 1(bond0) entered blocking state [ 144.877138][ T8831] bridge0: port 1(bond0) entered forwarding state [ 144.878673][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.884731][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.923694][ T8848] ip_tables: iptables: counters copy to user failed while replacing table [ 144.976856][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.987486][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.094115][ T8861] netlink: 44 bytes leftover after parsing attributes in process `syz.1.675'. [ 145.117906][ T8266] s`z1: Port: 1 Link ACTIVE [ 145.278806][ T8861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.675'. [ 145.379630][ T8861] bond4 (unregistering): Released all slaves [ 145.491970][ T8862] bond4 (unregistering): Released all slaves [ 145.764346][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.765549][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.813403][ T8872] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 145.923862][ T8909] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.223057][ T8922] FAULT_INJECTION: forcing a failure. [ 146.223057][ T8922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 146.223089][ T8922] CPU: 0 UID: 0 PID: 8922 Comm: syz.3.688 Not tainted syzkaller #0 PREEMPT(full) [ 146.223109][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 146.223119][ T8922] Call Trace: [ 146.223126][ T8922] [ 146.223134][ T8922] dump_stack_lvl+0xe8/0x150 [ 146.223164][ T8922] should_fail_ex+0x410/0x560 [ 146.223192][ T8922] _copy_to_user+0x31/0xb0 [ 146.223221][ T8922] bpf_test_finish+0x1cf/0x690 [ 146.223250][ T8922] ? __pfx_bpf_test_finish+0x10/0x10 [ 146.223271][ T8922] ? eth_type_trans+0x33f/0x640 [ 146.223298][ T8922] bpf_prog_test_run_skb+0x11fe/0x2230 [ 146.223338][ T8922] ? __fget_files+0x3a2/0x420 [ 146.223364][ T8922] ? __fget_files+0x2a/0x420 [ 146.223394][ T8922] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 146.223413][ T8922] bpf_prog_test_run+0x2c5/0x340 [ 146.223440][ T8922] __sys_bpf+0xa22/0xd90 [ 146.223469][ T8922] ? __pfx___sys_bpf+0x10/0x10 [ 146.223502][ T8922] ? __fget_files+0x2a/0x420 [ 146.223545][ T8922] ? ksys_write+0x242/0x270 [ 146.223566][ T8922] ? __pfx_ksys_write+0x10/0x10 [ 146.223590][ T8922] __x64_sys_bpf+0xba/0xd0 [ 146.223612][ T8922] do_syscall_64+0x166/0x520 [ 146.223635][ T8922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.223660][ T8922] ? clear_bhb_loop+0x70/0xc0 [ 146.223683][ T8922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.223701][ T8922] RIP: 0033:0x7f1a35b9e559 [ 146.223717][ T8922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.223731][ T8922] RSP: 002b:00007f1a36a8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.223751][ T8922] RAX: ffffffffffffffda RBX: 00007f1a35e25fa0 RCX: 00007f1a35b9e559 [ 146.223764][ T8922] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 146.223775][ T8922] RBP: 00007f1a36a8b090 R08: 0000000000000000 R09: 0000000000000000 [ 146.223787][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.223797][ T8922] R13: 00007f1a35e26038 R14: 00007f1a35e25fa0 R15: 00007fffcb18e8e8 [ 146.223828][ T8922] [ 146.596228][ T8940] IPVS: set_ctl: invalid protocol: 47 172.30.0.1:20001 [ 146.742411][ T8954] syzkaller0: entered promiscuous mode [ 146.742432][ T8954] syzkaller0: entered allmulticast mode [ 147.586264][ T8963] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.586297][ T8963] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.725755][ T8963] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.725788][ T8963] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.823659][ T9003] syzkaller0: entered promiscuous mode [ 147.823679][ T9003] syzkaller0: entered allmulticast mode [ 147.889032][ T8963] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.889065][ T8963] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.919829][ T8997] tipc: Enabled bearer , priority 0 [ 147.930266][ T9002] wg2 speed is unknown, defaulting to 1000 [ 147.993334][ T9010] validate_nla: 61 callbacks suppressed [ 147.993351][ T9010] netlink: 'syz.3.705': attribute type 26 has an invalid length. [ 148.076299][ T8963] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.076334][ T8963] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.414430][ T9017] __nla_validate_parse: 3 callbacks suppressed [ 148.414449][ T9017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.708'. [ 148.551578][ T8989] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.551610][ T8989] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.574917][ T8994] tipc: Resetting bearer [ 148.632812][ T8994] tipc: Disabling bearer [ 148.659705][ T8984] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.659736][ T8984] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.724468][ T9027] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 148.777605][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 148.814809][ T9027] 8021q: adding VLAN 0 to HW filter on device bond13 [ 148.818596][ T9029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.711'. [ 148.818617][ T9029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.711'. [ 148.820073][ T8985] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.820101][ T8985] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.830678][ T8984] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.830705][ T8984] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.843771][ T9027] netlink: 'syz.4.712': attribute type 13 has an invalid length. [ 148.980318][ T9033] vlan2: entered allmulticast mode [ 148.980339][ T9033] bond0: entered allmulticast mode [ 149.014680][ T9029] netlink: 32 bytes leftover after parsing attributes in process `syz.3.711'. [ 149.097383][ T9042] netlink: 3 bytes leftover after parsing attributes in process `syz.0.717'. [ 149.182429][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.719'. [ 149.379571][ T9056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.723'. [ 149.574509][ T9065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.728'. [ 149.718387][ T9076] ovs0: entered promiscuous mode [ 149.774310][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 151.206619][ T9146] ip6t_srh: unknown srh invflags 4000 [ 151.402123][ T31] audit: type=1804 audit(1792410958.323:5): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.752" name="/newroot/160/cgroup.controllers" dev="tmpfs" ino=838 res=1 errno=0 [ 151.402334][ T31] audit: type=1800 audit(1792410958.323:6): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.752" name="cgroup.controllers" dev="tmpfs" ino=838 res=0 errno=0 [ 151.403631][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.476536][ T9164] x_tables: duplicate underflow at hook 1 [ 151.581504][ T9170] openvswitch: netlink: Flow key attr not present in new flow. [ 151.846890][ T9180] bridge3: entered allmulticast mode [ 151.946328][ T9185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.946944][ T9185] bridge0: port 1(bond2) entered blocking state [ 151.947193][ T9185] bridge0: port 1(bond2) entered disabled state [ 151.947329][ T9185] bond2: entered allmulticast mode [ 151.953052][ T9185] bond2: entered promiscuous mode [ 151.978057][ T9140] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 152.107735][ T9195] netlink: 'syz.4.762': attribute type 2 has an invalid length. [ 152.245253][ T9200] ipt_ah: unknown flags FF [ 152.330514][ T9195] macsec1: entered promiscuous mode [ 152.335517][ T9206] netlink: 'syz.4.762': attribute type 2 has an invalid length. [ 152.486223][ T9061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.692922][ T9228] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 152.693077][ T9227] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 152.694677][ T9228] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 152.794074][ T9231] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 194.192866][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.192917][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.403933][ T9248] Bluetooth: hci4: command 0x0406 tx timeout [ 201.403977][ T9248] Bluetooth: hci1: command 0x0406 tx timeout [ 201.404001][ T9248] Bluetooth: hci2: command 0x0406 tx timeout [ 201.404020][ T9248] Bluetooth: hci0: command 0x1407 tx timeout [ 209.917030][ T9264] bond0: entered promiscuous mode [ 209.926755][ T9264] batadv0: entered promiscuous mode [ 209.943615][ T9264] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 209.943643][ T9264] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 209.971562][ T9264] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 209.975644][ T9264] bond0: left promiscuous mode [ 209.978948][ T9264] batadv0: left promiscuous mode [ 210.105080][ T9282] __nla_validate_parse: 15 callbacks suppressed [ 210.105099][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 210.186306][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.787'. [ 210.267380][ T9285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.285377][ T9288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.315252][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.468065][ T4935] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 210.478926][ T4935] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 210.486455][ T4935] Bluetooth: hci3: unexpected cc 0x2060 length: 3 < 7 [ 210.486481][ T4935] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 210.531762][ T9303] bond3: entered promiscuous mode [ 210.532169][ T9303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.537219][ T9315] netlink: 44 bytes leftover after parsing attributes in process `syz.2.789'. [ 210.752959][ T9325] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.775015][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 210.917781][ T9334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.932958][ T9336] netlink: 'syz.2.796': attribute type 4 has an invalid length. [ 210.932976][ T9336] netlink: 152 bytes leftover after parsing attributes in process `syz.2.796'. [ 210.959750][ T9337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 211.149664][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 211.503131][ T9377] pimreg: entered allmulticast mode [ 211.506306][ T9376] pimreg: left allmulticast mode [ 211.691970][ T9386] bond4: entered promiscuous mode [ 211.692030][ T9386] bond4: entered allmulticast mode [ 211.692386][ T9386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.888713][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 211.888744][ T9405] macvlan0: left promiscuous mode [ 211.888935][ T9405] netlink: 'syz.3.813': attribute type 1 has an invalid length. [ 211.888949][ T9405] netlink: 'syz.3.813': attribute type 2 has an invalid length. [ 212.020869][ T9410] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 212.059271][ T9414] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20001 [ 212.132115][ T9410] bond4: entered promiscuous mode [ 212.132525][ T9410] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.162566][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 212.275770][ T9403] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.292665][ T9403] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 212.292688][ T9403] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 212.323527][ T9403] bond4: (slave wireguard0): making interface the new active one [ 212.323549][ T9403] wireguard0: entered promiscuous mode [ 212.326809][ T9403] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 212.384795][ T9442] netlink: 'syz.1.821': attribute type 3 has an invalid length. [ 212.384816][ T9442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.821'. [ 212.573734][ T9459] netlink: 44 bytes leftover after parsing attributes in process `syz.1.827'. [ 212.611926][ T9461] xt_LOG: level 16 >= 8 [ 212.659624][ T9461] bond14: Unable to set up delay as MII monitoring is disabled [ 212.661405][ T9461] bond14 (unregistering): Released all slaves [ 212.883753][ T9479] xt_CONNSECMARK: invalid mode: 254 [ 212.901096][ T9479] xt_CONNSECMARK: invalid mode: 254 [ 213.063380][ T9500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.069342][ T9500] bond6: (slave macvlan2): Enslaving as an active interface with an up link [ 213.439792][ T9518] netlink: 'syz.1.836': attribute type 16 has an invalid length. [ 213.439812][ T9518] netlink: 'syz.1.836': attribute type 17 has an invalid length. [ 213.475206][ T9518] ip6gretap0: left promiscuous mode [ 213.608248][ T9518] 8021q: adding VLAN 0 to HW filter on device eth0 [ 213.625088][ T9518] 8021q: adding VLAN 0 to HW filter on device eth1 [ 213.640200][ T9518] 8021q: adding VLAN 0 to HW filter on device eth2 [ 213.647391][ T9518] 8021q: adding VLAN 0 to HW filter on device eth3 [ 213.769134][ T9518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.781161][ T9518] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.783028][ T9518] bond4: left promiscuous mode [ 213.783047][ T9518] bond4: left allmulticast mode [ 213.788735][ T3108] wg2 speed is unknown, defaulting to 1000 [ 214.412986][ T9533] netlink: 'syz.3.838': attribute type 8 has an invalid length. [ 214.750798][ T299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 214.750953][ T299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 214.780488][ T8259] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 214.980148][ T5748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 215.140192][ T5748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 215.445282][ T9445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.147194][ T9576] __nla_validate_parse: 2 callbacks suppressed [ 216.147212][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.850'. [ 216.334488][ T9586] veth1: entered promiscuous mode [ 216.334509][ T9586] veth1: entered allmulticast mode [ 216.367529][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.854'. [ 216.373231][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.854'. [ 216.396275][ T9590] bridge_slave_0: left allmulticast mode [ 216.396461][ T9590] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.399688][ T9590] bridge_slave_1: left allmulticast mode [ 216.414165][ T9590] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.604920][ T9590] bond0: (slave bond_slave_0): Releasing backup interface [ 216.715872][ T9590] team0: Port device team_slave_0 removed [ 216.730837][ T9590] team0: Port device team_slave_1 removed [ 216.731233][ T9590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.832394][ T9590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.841882][ T9590] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.600347][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 221.099973][ C0] sched: DL replenish lagged too much [ 223.813183][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.857'. [ 226.832043][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.193343][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 256.173525][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.189897][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.645509][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.652828][ T8258] page_pool_release_retry() stalled pool shutdown: id 60, 44 inflight 61 sec [ 317.374946][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.387343][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.436668][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.155795][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 347.967192][ T8258] page_pool_release_retry() stalled pool shutdown: id 60, 44 inflight 121 sec [ 378.711705][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.727540][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 412.684186][ T8266] page_pool_release_retry() stalled pool shutdown: id 60, 44 inflight 186 sec [ 440.559416][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.575081][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.194274][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 488.608790][ T32] INFO: task kworker/u8:16:8987 blocked for more than 144 seconds. [ 488.608815][ T32] Not tainted syzkaller #0 [ 488.608825][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.608833][ T32] task:kworker/u8:16 state:D stack:25488 pid:8987 tgid:8987 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 488.608883][ T32] Workqueue: ipv6_addrconf addrconf_verify_work [ 488.609004][ T32] Call Trace: [ 488.609039][ T32] [ 488.609054][ T32] __schedule+0x17db/0x58f0 [ 488.609108][ T32] ? __pfx___schedule+0x10/0x10 [ 488.609141][ T32] ? schedule+0x90/0x2b0 [ 488.609166][ T32] schedule+0x164/0x2b0 [ 488.609189][ T32] schedule_preempt_disabled+0x13/0x30 [ 488.609211][ T32] __mutex_lock+0x7c1/0x1550 [ 488.609240][ T32] ? __mutex_lock+0x5d4/0x1550 [ 488.609267][ T32] ? addrconf_verify_work+0x19/0x30 [ 488.609296][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 488.609335][ T32] ? rcu_is_watching+0x16/0xb0 [ 488.609360][ T32] ? process_scheduled_works+0x97a/0x1630 [ 488.609384][ T32] addrconf_verify_work+0x19/0x30 [ 488.609410][ T32] process_scheduled_works+0xc3d/0x1630 [ 488.609467][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 488.609496][ T32] ? assign_work+0x3cf/0x5d0 [ 488.609525][ T32] worker_thread+0xa47/0xfb0 [ 488.609579][ T32] kthread+0x38b/0x480 [ 488.609597][ T32] ? __pfx_worker_thread+0x10/0x10 [ 488.609619][ T32] ? __pfx_kthread+0x10/0x10 [ 488.609639][ T32] ret_from_fork+0x514/0xb70 [ 488.609671][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 488.609699][ T32] ? __switch_to+0xc89/0x1420 [ 488.609726][ T32] ? __pfx_kthread+0x10/0x10 [ 488.609746][ T32] ret_from_fork_asm+0x1a/0x30 [ 488.609791][ T32] [ 488.609847][ T32] [ 488.609847][ T32] Showing all locks held in the system: [ 488.609858][ T32] locks held by kworker/0:0/9: 1, last CPU#0: [ 488.609871][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 488.628010][ T32] locks held by kworker/u8:0/12: 4, last CPU#0: [ 488.628032][ T32] #0: ffff888027bac140 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628091][ T32] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628139][ T32] #2: ffff88805955e780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 488.628185][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 488.628233][ T32] locks held by kworker/1:0/25: 2, last CPU#1: [ 488.628244][ T32] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628292][ T32] #1: ffffc900001f7c40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628340][ T32] locks held by kworker/1:1/30: 3, on CPU#1: [ 488.628353][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628399][ T32] #1: ffffc90000a57c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628445][ T32] #2: ffffffff9125b7e0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 488.628494][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 488.628507][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 488.628549][ T32] locks held by kworker/u8:2/43: 4, last CPU#0: [ 488.628562][ T32] #0: ffff88803553b940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628609][ T32] #1: ffffc90000b37c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628657][ T32] #2: ffff888036a05440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 488.628704][ T32] #3: ffff88807a534888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 488.628750][ T32] locks held by kworker/u8:3/49: 4, last CPU#0: [ 488.628763][ T32] #0: ffff888034549940 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628810][ T32] #1: ffffc90000ba7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.628856][ T32] #2: ffff888034031440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 488.628902][ T32] #3: ffff88807a533ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 488.628956][ T32] locks held by kworker/u8:4/61: 3, on CPU#0: [ 488.628968][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.629017][ T32] #1: ffffc9000202fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.629059][ T32] #2: ffffffff9125b7e0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 488.629099][ T32] locks held by kworker/u8:5/82: 4, last CPU#1: [ 488.629111][ T32] #0: ffff888034549940 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.629158][ T32] #1: ffffc900024cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.629206][ T32] #2: ffff888034031440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 488.629252][ T32] #3: ffff88807a5334b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 488.629298][ T32] locks held by kswapd0/89: 3, last CPU#0: [ 488.629310][ T32] #0: ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0 [ 488.629357][ T32] #1: ffff88807f8420e8 (&type->s_umount_key#54){.+.+}-{4:4}, at: super_cache_scan+0x94/0x4a0 [ 488.629407][ T32] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 488.629456][ T32] locks held by kworker/u8:6/160: 7, last CPU#1: [ 488.629468][ T32] #0: ffff88802dabc140 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.629520][ T32] #1: ffffc90002f07c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.629567][ T32] #2: ffff88802d6a9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 488.629614][ T32] #3: ffff888079ee7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 488.629659][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 488.629704][ T32] #5: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 488.629753][ T32] #6: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 488.629814][ T32] locks held by kworker/1:2/3108: 3, last CPU#1: [ 488.629827][ T32] #0: ffff8880368be540 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 488.629878][ T32] #1: ffffc9000e047c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.698465][ T32] #2: ffff8880570f5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 490.698520][ T32] locks held by klogd/4973: 2, last CPU#0: [ 490.698534][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.698578][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 490.698624][ T32] locks held by udevd/4984: 5, last CPU#0: [ 490.698637][ T32] #0: ffffffff8fe36570 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 490.698682][ T32] #1: ffff88807e59b440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 490.698724][ T32] #2: ffff88807e59f180 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 490.698769][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.698812][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 490.698857][ T32] locks held by dhcpcd/5278: 2, last CPU#0: [ 490.698869][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.698912][ T32] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 490.698956][ T32] locks held by dhcpcd/5279: 5, last CPU#1: [ 490.698969][ T32] #0: ffffffff8fe36570 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 490.699014][ T32] #1: ffff88807e59e540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 490.699055][ T32] #2: ffff888034754080 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 490.699100][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.699143][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 490.699188][ T32] locks held by getty/5372: 2, on CPU#0: [ 490.699201][ T32] #0: ffff8880243160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 490.699253][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 490.699304][ T32] locks held by syz-executor/5616: 1, last CPU#0: [ 490.699317][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 490.699362][ T32] locks held by syz-executor/5620: 3, last CPU#1: [ 490.699375][ T32] #0: ffff88802b3dc2e0 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 490.699417][ T32] #1: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.699459][ T32] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 490.699503][ T32] locks held by syz-executor/5625: 3, last CPU#0: [ 490.699516][ T32] #0: ffffffff904f2b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 490.699563][ T32] #1: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.699606][ T32] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 490.699651][ T32] locks held by syz-executor/5626: 2, last CPU#0: [ 490.699663][ T32] #0: ffffffff904f2b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 490.699711][ T32] #1: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 490.699757][ T32] locks held by kworker/1:3/5711: 4, last CPU#1: [ 490.699769][ T32] #0: ffff88807e380940 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.699822][ T32] #1: ffffc90004a07c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 490.699887][ T32] #2: ffff88802d6a9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 492.364584][ T32] #3: ffff888079ee6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 492.364653][ T32] locks held by kworker/0:7/5748: 3, last CPU#0: [ 492.364667][ T32] #0: ffff888058d4ad40 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.364721][ T32] #1: ffffc90004cdfc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.364780][ T32] #2: ffff888022f5d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 492.364828][ T32] locks held by kworker/1:5/5749: 4, last CPU#1: [ 492.364840][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.364887][ T32] #1: ffffc90004cefc40 ((work_completion)(&ht->run_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.364935][ T32] #2: ffff88802dca9828 (&ht->mutex#10){+.+.}-{4:4}, at: rht_deferred_worker+0x43/0x2250 [ 492.364988][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 492.365033][ T32] locks held by kworker/1:6/5750: 3, last CPU#1: [ 492.365045][ T32] #0: ffff88807b248d40 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365097][ T32] #1: ffffc90004cffc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365157][ T32] #2: ffff8880340e8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 492.365212][ T32] locks held by kworker/1:8/5809: 3, last CPU#1: [ 492.365224][ T32] #0: ffff888058d4ad40 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365275][ T32] #1: ffffc90004f2fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365335][ T32] #2: ffff88807a5320e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 492.365384][ T32] locks held by kworker/0:8/8258: 4, on CPU#0: [ 492.365397][ T32] #0: ffff88807e380940 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365448][ T32] #1: ffffc9000dec7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365508][ T32] #2: ffff88802d6a9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 492.365554][ T32] #3: ffff888079ee6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 492.365601][ T32] locks held by kworker/0:9/8259: 3, last CPU#0: [ 492.365613][ T32] #0: ffff88807b248d40 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365663][ T32] #1: ffffc9000dc97c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365721][ T32] #2: ffff8880340e8330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 492.365767][ T32] locks held by kworker/0:10/8260: 5, last CPU#0: [ 492.365780][ T32] #0: ffff8880368be540 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365831][ T32] #1: ffffc9000dc67c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.365889][ T32] #2: ffff8880570f5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 492.365934][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 492.365977][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 492.366023][ T32] locks held by kworker/0:11/8261: 2, last CPU#0: [ 492.366035][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366082][ T32] #1: ffffc9000dbbfc40 ((work_completion)(&(&pool->release_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366130][ T32] locks held by kworker/u8:10/8981: 7, last CPU#0: [ 492.366143][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366196][ T32] #1: ffffc90002e47c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366244][ T32] #2: ffff88803564b258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 492.366294][ T32] #3: ffff8880570b2ce0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x19e/0xb40 [ 492.366339][ T32] #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 492.366384][ T32] #5: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 492.366434][ T32] #6: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 492.366479][ T32] locks held by kworker/u8:14/8985: 4, last CPU#1: [ 492.366492][ T32] #0: ffff88802af0e940 ((wq_completion)krds_cp_wq#1/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366539][ T32] #1: ffffc9001a677c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366587][ T32] #2: ffff888054d21280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 492.366632][ T32] #3: ffff888054f6c360 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: rds_tcp_tune+0x220/0x920 [ 492.366676][ T32] locks held by kworker/u8:16/8987: 3, on CPU#1: [ 492.366688][ T32] #0: ffff88801d77a940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366735][ T32] #1: ffffc9001a697c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366783][ T32] #2: ffffffff9125b7e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 492.366833][ T32] locks held by kworker/u8:18/8989: 2, last CPU#1: [ 492.366845][ T32] #0: ffff888027bab940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366893][ T32] #1: ffffc9001a6b7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 492.366942][ T32] locks held by syz.0.854/9585: 1, last CPU#0: [ 492.366955][ T32] #0: ffffffff9125b7e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 492.367001][ T32] locks held by syz-executor/9607: 4, last CPU#0: [ 492.367014][ T32] #0: ffff8880377b2460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 492.367061][ T32] #1: ffff88803658f040 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 492.367115][ T32] #2: ffffffff904f2b38 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 492.367162][ T32] #3: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 492.367212][ T32] locks held by syz-executor/9608: 1, last CPU#0: [ 492.367224][ T32] #0: ffffffff8feac5b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 492.367271][ T32] [ 492.367276][ T32] ============================================= [ 492.367276][ T32] [ 492.367296][ T32] NMI backtrace for cpu 1 [ 492.367402][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 492.367422][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 492.367432][ T32] Call Trace: [ 492.367440][ T32] [ 492.367448][ T32] dump_stack_lvl+0xe8/0x150 [ 492.367475][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 492.367495][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.367525][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 492.367547][ T32] sys_info+0x135/0x170 [ 492.367573][ T32] watchdog+0xfd7/0x1030 [ 492.367600][ T32] ? watchdog+0x1c7/0x1030 [ 492.367626][ T32] kthread+0x38b/0x480 [ 492.367644][ T32] ? __pfx_watchdog+0x10/0x10 [ 492.367660][ T32] ? __pfx_kthread+0x10/0x10 [ 492.367678][ T32] ret_from_fork+0x514/0xb70 [ 492.367709][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 492.367735][ T32] ? __switch_to+0xc89/0x1420 [ 492.367762][ T32] ? __pfx_kthread+0x10/0x10 [ 492.367781][ T32] ret_from_fork_asm+0x1a/0x30 [ 492.367824][ T32] [ 492.367830][ T32] Sending NMI from CPU 1 to CPUs 0: [ 492.367870][ C0] NMI backtrace for cpu 0 [ 492.367883][ C0] CPU: 0 UID: 0 PID: 8981 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 492.367904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 492.367916][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 492.367940][ C0] RIP: 0010:unwind_next_frame+0x509/0x2550 [ 492.367964][ C0] Code: 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 <48> 8d 43 fc 4c 0f 47 e0 4c 0f 46 eb 4d 39 e7 76 a9 e9 7c fd ff ff [ 492.367979][ C0] RSP: 0018:ffffc90000006de0 EFLAGS: 00000202 [ 492.367995][ C0] RAX: ffffffff81b2d5bb RBX: ffffffff91968230 RCX: ffffffff91968234 [ 492.368010][ C0] RDX: ffffffff9196822c RSI: ffffffff9216d3e0 RDI: ffffffff8c6ddb20 [ 492.368024][ C0] RBP: ffffffff81b2d578 R08: 000000000000000c R09: 0000000000000000 [ 492.368036][ C0] R10: ffffc90000006ed8 R11: ffffffff81b2d5e0 R12: ffffffff91968230 [ 492.368050][ C0] R13: ffffffff9196822c R14: ffffc90000006e88 R15: ffffffff91968230 [ 492.368065][ C0] FS: 0000000000000000(0000) GS:ffff888123abd000(0000) knlGS:0000000000000000 [ 492.368080][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.368093][ C0] CR2: 00007ffcb0124ff4 CR3: 0000000077386000 CR4: 00000000003526f0 [ 492.368109][ C0] Call Trace: [ 492.368115][ C0] [ 492.368126][ C0] ? stack_trace_save+0xa9/0x100 [ 492.368143][ C0] ? __unwind_start+0x514/0x660 [ 492.368164][ C0] ? unwind_next_frame+0x8f/0x2550 [ 492.368186][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.368206][ C0] arch_stack_walk+0x11b/0x150 [ 492.368230][ C0] ? stack_trace_save+0xa9/0x100 [ 492.368251][ C0] stack_trace_save+0xa9/0x100 [ 492.368269][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 492.368288][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 492.368313][ C0] kasan_save_track+0x3e/0x80 [ 492.368366][ C0] __kasan_slab_alloc+0x6c/0x80 [ 492.368390][ C0] kmem_cache_alloc_node_noprof+0x354/0x610 [ 492.368412][ C0] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 492.368431][ C0] ? __alloc_skb+0x1db/0x7a0 [ 492.368453][ C0] ? __alloc_skb+0x1db/0x7a0 [ 492.368479][ C0] __alloc_skb+0x1db/0x7a0 [ 492.368503][ C0] synproxy_send_client_synack+0x175/0xde0 [ 492.368532][ C0] ? lock_acquire+0x115/0x350 [ 492.368552][ C0] ? synproxy_pernet+0x45/0x270 [ 492.368583][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 492.368610][ C0] ? nft_tunnel_obj_init+0xd70/0x1950 [ 492.368633][ C0] ? synproxy_pernet+0x45/0x270 [ 492.368665][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 492.368704][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 492.368735][ C0] ? nf_ip_checksum+0x13c/0x510 [ 492.368765][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 492.368793][ C0] ? ktime_get+0x45/0x220 [ 492.368814][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 492.368842][ C0] ? __lock_acquire+0x747/0x2de0 [ 492.368865][ C0] ? __lock_acquire+0x747/0x2de0 [ 492.368889][ C0] nft_do_chain+0x48d/0x1b10 [ 492.368915][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 492.368936][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 492.368979][ C0] nft_do_chain_inet+0x360/0x4b0 [ 492.369009][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 492.369038][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 492.369068][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 492.369092][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 492.369121][ C0] nf_hook_slow+0xc5/0x220 [ 492.369143][ C0] NF_HOOK+0x21f/0x3c0 [ 492.369182][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 492.369209][ C0] ? NF_HOOK+0x9e/0x3c0 [ 492.369235][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 492.369261][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 492.369295][ C0] ? ip_local_deliver+0x113/0x190 [ 492.369324][ C0] NF_HOOK+0x336/0x3c0 [ 492.369354][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 492.369369][ C0] ? NF_HOOK+0x9e/0x3c0 [ 492.369395][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 492.369424][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 492.369439][ C0] ? ip_rcv_core+0x88d/0xd50 [ 492.369457][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 492.369484][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 492.369513][ C0] process_backlog+0xa6b/0x18b0 [ 492.369538][ C0] ? process_backlog+0x3de/0x18b0 [ 492.369568][ C0] __napi_poll+0xaa/0x330 [ 492.369591][ C0] net_rx_action+0x61d/0xf50 [ 492.369620][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 492.369658][ C0] handle_softirqs+0x226/0x860 [ 492.369692][ C0] ? do_softirq+0x77/0xd0 [ 492.369718][ C0] ? __alloc_skb+0x18d/0x7a0 [ 492.369740][ C0] ? __alloc_skb+0x18d/0x7a0 [ 492.369762][ C0] do_softirq+0x77/0xd0 [ 492.369786][ C0] [ 492.369792][ C0] [ 492.369799][ C0] __local_bh_enable_ip+0x100/0x140 [ 492.369824][ C0] __alloc_skb+0x1b1/0x7a0 [ 492.369850][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 492.369881][ C0] ? process_scheduled_works+0x97a/0x1630 [ 492.369907][ C0] process_scheduled_works+0xc3d/0x1630 [ 492.369947][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.369977][ C0] ? assign_work+0x3cf/0x5d0 [ 492.370004][ C0] worker_thread+0xa47/0xfb0 [ 492.370045][ C0] kthread+0x38b/0x480 [ 492.370063][ C0] ? __pfx_worker_thread+0x10/0x10 [ 492.370089][ C0] ? __pfx_kthread+0x10/0x10 [ 492.370107][ C0] ret_from_fork+0x514/0xb70 [ 492.370139][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 492.370170][ C0] ? __switch_to+0xc89/0x1420 [ 492.370196][ C0] ? __pfx_kthread+0x10/0x10 [ 492.370216][ C0] ret_from_fork_asm+0x1a/0x30 [ 492.370254][ C0] [ 492.386222][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 494.640706][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 494.649827][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.659912][ T32] Call Trace: [ 494.663196][ T32] [ 494.666136][ T32] vpanic+0x56d/0xa60 [ 494.670144][ T32] ? __pfx_vpanic+0x10/0x10 [ 494.674670][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 494.680234][ T32] panic+0xc5/0xd0 [ 494.683974][ T32] ? __pfx_panic+0x10/0x10 [ 494.688405][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 494.693441][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 494.699613][ T32] watchdog+0x1030/0x1030 [ 494.704003][ T32] ? watchdog+0x1c7/0x1030 [ 494.708470][ T32] kthread+0x38b/0x480 [ 494.712550][ T32] ? __pfx_watchdog+0x10/0x10 [ 494.717234][ T32] ? __pfx_kthread+0x10/0x10 [ 494.721836][ T32] ret_from_fork+0x514/0xb70 [ 494.726449][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 494.731574][ T32] ? __switch_to+0xc89/0x1420 [ 494.736266][ T32] ? __pfx_kthread+0x10/0x10 [ 494.740866][ T32] ret_from_fork_asm+0x1a/0x30 [ 494.745665][ T32] [ 494.749032][ T32] Kernel Offset: disabled [ 494.753351][ T32] Rebooting in 86400 seconds..