last executing test programs: 5m9.676682041s ago: executing program 2 (id=4507): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0xf4c, 0x4}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380", @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000605d0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='nv', 0x2) unshare(0x22020600) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r4, 0x0, 0x0, 0x1b) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xb6a0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3}, &(0x7f0000000240)=0x8) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0xff81) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x8, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}}}}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x2080, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x4044840, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r2, 0x25, 0x8, @void}, 0x10) close(r10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) 5m5.594608383s ago: executing program 2 (id=4519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) r2 = accept4$inet6(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x101, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000000f00)="9eb8a2c0e241", 0x6}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x2404c080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x64, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'virt_wifi0\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4005}, 0x24000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r7}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 5m3.202465937s ago: executing program 2 (id=4529): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x4, 0x9, "2573f6576f3dfa3f55f316a289cdfb2f8f8daf4191248f8573085b1c0921bf7953340a447a7ed88975f9c0a337e0cc1be5a8f38fba5c5e68027a11c11ea099317e280f609e26f188ad21a14b6c076e43ded79d2dbf55cc7a164aad9232daa71181868991d8eed26df87c2776281be15ebecdf7dad50995be6b2c680089930b284979facb923e9f61cade7abcc756c2c8e148dc1428a1fdcf176cb2d33a5ccd9dbbbdbb75e6b438616bbaab245245076d0a9c833dfc9133fde62350b251d9cdda4489da786744f60c963271013b42dd843bd731e24833822179256b3a181b862decbb5348c0c54773a647d6a85603bd8b8095e5e18d6e5e049efa0e64a940631a14badbf4bad63de9264f74c7472441eef5fb25822b5bf5f4cfc7e444df47790b0e2fcc8c7a7e8a65e9a9c1fcdee74be494f30848ca39f81e1089d1f38ec221b9f9e898044aa10e61a748e295179588bc339e8afa925704ccd174012ea7d7bb808a47dd150e25bfb9a5bcdf8631a650f133778d9c593f281881a0c1c97fda6c96819d77b2f1662a4ba486a929f669a53be2a17615d9e53b1ba52465709ca084a7c91babebc51f7d1908e4a1fa7040416a11763045a48df96cca02faaa2a1cc76a30f81226275215c0ec8ac3995777433b72b4bba8b99411790060277a9d40f877fc4948fe008068fa56c3d22040cbe677e24c4170f3513b1c97f9263c1c4f9cf43fe296a41ac2f7a37a2a429f5df3e2b0640dc44b042727a575deef59c387cacd72b85f299782fb1875681cca0b178f21f6189002fe82575de8a4ada084d7db47c0f1d5a507ef80447fef0047b02676ac33356627fb1e76b55b62d09e8de34fad3029f6fa388d965ac0e7168afca2064a0d39886e3a9eaa33c200d9e8a7f11fa4253dbc081a31c89d124143f9aa4cf5513e742c310e4fce2cc6b648c7c9909a2364f102153ccb6ee93d476fd2780ae4637e66496b41919a9364b576d4d41752c2f09a07083476faf1e9f17923c50b7b853727d3e730bd1180ed558b4d2d62a08cb46c804ee758f5dc587b1ceed15f09d9bfd95e70a0fe507f6608970d7c0d68a2349ec127242bb2a6d7421d788223bca791c32092354dc0ddc7cbdc93792bce273a3f862c90fa33bdd7e7df2a9ca10b06a4a49aa85c1aa4753de0a335e591447cdd4a6151c845f6fda4be4d03a442625cdca6d2621466f31f3f8e54a98713408a660e2920fe39089c05cf2917c2cfd144a955ab22552d826622a42bf6d175ad157adac502edc40393dd84fcb7d0f3d5b3972e858641124fd827e335d1bbcb06ef3ad67877d21db17575a94b605d524ccec2eeec956c41983f5d3e7617a9338b6eaa5c7c5890014b3f50433ca77a2509853a7e3661475c8f7b91aabbf9fe31a1fd22afd9c44d5a09b507967f81b7d29e832e2a82593423749b00bdebb98e5607d2f46bc523901d1758630802074ebd787a1864e366b41d977da8d1ec4894498eeda0a3ea48e54a0ead688b65330bbd6740dbf6e83fc0a174341eff627d6b9418084feca39b29c414fa391000e400cb0927c81eba54a203628df7cafb6a534037a23e734aed250b0a6e49812eb29d6ac3a5972b5a2d4725de7d7af529ed9e8d9c44fd097e43a55145f7cf3f6e360d6197a42e0bdcc3854421ec388b24818eac3a96a46cd38d76c256cfc8282ae5f832783924a0fe749648d20cd74547d943acff7cf7b9e82422029c582774c872b9b07e98a733cab7f63a350e40292ce4989ac92fc3f68650920ffaa1bdd5a46645f483e0714fe0e8141b86cf6b505e491151f60374303fbf25a30cb1e3708f63c372ba86393ed606b52ab17b0ed9ddd71fa0806914206c18ddae0f806f22f5b2540fcfc614738a1a05f6cbfb02f3d99296ab4a1bad5c45cf98b67dccaf3bed33dd746dd8e1ad5d449979437b03d01d7df2696e3dc58a45de8054aa39d015427e8e10e8c8655f067f3be5e8d23a2614a8de6b91fee51e57ea277be2b6645a20c68eaa9341e897b2db5d49c782d8727454c852dd74ee8f5ca5097b42c6aa858ec9c4f108173c77cfe7f469e2965e1dd1b2f839bcde484ec1fdae9ee5d8dc015c09a815f1a9d2a3db3e52a468bffc536a99e867c6f8726d35b87bface12923de0fcd76d4e605d497dc862e2e82284f2a75f324be3bdb7eac6b305c591fb78b6b0bb9b5e20b9f161c5ab00bde369ef598739974fe165e2b5966607016a01bf4b8057fd2926bae84b82b3756c2aa12b2b1bf3e4f50cf175ee38d8740fabd39182749064352e78462fb579f20c517d8a9bf47c89e4476243a6d1ed62b1d2a78406d86c3b6be387a1a9f1f9fc17d2520abc5dd6c71cfd886c4fa7ebca4992505e9f5a1f6545ac6df4cd5d188b9bb000b5c6d78b5ba7b2e22d8c33dba072440092d9577420d17aa692a8e3fea96b093990a6efe209fb93468a8665f5f2fed82c178ccf6e1cbcde540aa27b08228c1c5fcd06eefb974559eeb251e68090979c37fe6b8a78fb800cf4044f31bbfd9de6079eb7be6ea81203f3cd30d6f38bb9b2b14aafd89f91aa84085eb65f5cfcd8d26841bf8ff3689bdb1772da85e8ae9c150addb7cc41e915e78898ad6c8ca13c0faa2aeb3019f2c658e9b16f9b15c36f0de777d09160e767d67e4055d64cf3fbde1723efcb86e25b38a3a986eedb1cfebe35ed1affb8ef436b80a019ac8617132de18061def70cbbd5f8a80ec1cea80b984175006fb1e697e211fcf66aade2954495443732f0cbaf615ac9399cf6ce0968603ca3fab400c980948f8bd0cd55e3ee47d0b05649de8e0f3f31d787635353a4d94fd2247ef2f2c4f9a69105a0dadbd012522c34addaaebac472628ca384054381b9edcd7da52a864286642d44ca581a75aa72bf52cbd8f4fa8461f53a363f64918c2c808360b0293f6a9d18cb5d6d4f10ce1c61d1d84e89cc561fb30dfbe1b0af6a9ec938085944adbb4d19d78d175b125d4851b5a9b00e5af6ce66e887704fa1e70be807864027b6322f37fef8ab9292da1e2fc3accb258e690709dc1285f756ced3ab66e402142a046f32ef98ff68ad8f75539707d0a84e363780b4888114ed2c01b9db203376bd432ac2363ad2adc46c90f353a7f388580034cedebc8e68d617b8c79726f928a7897fb38f032087f2fc30208399482cc33a6078327e278b724ea81c91b5c115b1e922d1837b25a6af96aca9ec9aef7b30484e7cd0e96d2c2eb1ac4b99f3871baf91d07a183f3405f84891792825580cb4ceb93fcdb60e58ad4e02e7df24457f87a3685f9ea63f79f4387c0f8a7ef3f7b3c6cf920bc9359a679d9e8a7d8eb7a3936fd228d59a17417eb55899607d6247f6ffa1ceaa6f2a4e5a7ee7c14d36b5a412a9278963866d77ed58a67a91198a33f5e70923c3b8aa5ddd41b2bec16d31d38444c96305b5e4ee38165ec61301bf1a86058a57e08cae0946655cb63dacee5941fca2c422f0982c3fd85c1aaba2791c282cdf3f85a648ba2494fdf1dabb7e72c9aed781c2da9ba58bc6e23faaf25e9dd12d785acf8ec156750dfce810c704c8cddde7e79045ac080bd42ca0294d8ab9bebfabf07a8e14661baf055e90837d017727b3fb5f652e027066e39d174954e1e5e92ec64921a795419c42457af2a5ec9c3f9e8694b1a556295ea54cc56e3385b05f2accb3f14b19c8c75cfa017c43ec9e44cc6f6de69a47ec93d14c652b497b15f5fb75acdadd98fa6b82d63f8b04a4cd5b2ce698028a9ff9cc3d3a8d262ab029739e62c0a3eaff031ad929da4242ca9d92ffd4813108bb2cf9a2849610f6fe2aa3f7d65fe6669358d6e096cf6c466dd5d41f62e4f7e8c0678fb7115fedbb484f0f628b4b923f3a134ac164a1ebca2f4e5864dd373139da9442c4c09da6e00cdbd1b7b39348d1f2745e714923ac0689a2415f68f3cff66ee5ea6093efe07052fe045d9b70125a99350c8e08c15cc347fce881e12b4c3cd9d3aba35806840cd601abf692b8edcd051a282e7bc31171fb6b659cbdc96aa99a9172bcc6dec21e6927fdb7d005bc3c17a4d17a36018783e46ed231ae47d897fbaf75714995f1f77335ecc19c59da12c9f999df6b3fec47f80de57013b4e1e0d6e18ce5abfc9797b873879bfa9da65a37edfcb31d5ed2a5b25391d33c09001ddf37802963a8cd39f6906d250a9db6cb6f58ca8420124eb3896dfccbcd717627e449b170401432b43d6c77a2c9d20e46423e4e5005471592cdf27798c612b8092d93bac5527e2b1ec016577b2896e28f161b4700862ecf796550a435bc6878360908d225854be3c78d8f2c9840f4a1d93dd441a19e3fde3ab14fa1c8808c083e9972922739ab3a79ec74db2807887306606ed09c7e1484f6d684d82db96c539359cbfd68d86d22ae4329e3bf6c4c8ac01ea78d5acd8ee38aec460fe54816b1c547ecd171a4848b4041a419c2ab3d5c3fb3abb4d401cd13f36f9ae8e7200188dd822fdd37f6b494cd2de13cacba355c77227223d15f9da18334f7120d30ab42fd84959248798c925855117e5d872e5419e6a6947b2adfebbad83b5cdd92f138feb8032a17e94c5bcac97f697178a84e0f2250cb88afcc19d78298995d3acc5cad400f7c89de2b72c5bc4190da5869fdb80d476ce39f94c1f5bc53162bfc5a9f9ebb10becb979724cda308487b94a3cf0b8ee0e869f5f191509c61ae8f7d38dc6140cc8c53018cfa278ac0b12d1312cc4352e433f7c825766ac744d9b96039c24d9ba233913a24f491d2a73b8cc0013d4507b83d478b8574ac5084894bb23b43f9a60908204aadfe3689f0a4aa555a714bfb547ada330147d33d2a26fbeef87936125e4e0dda85d9e9f41a917aa00ecf8df7ab5d58fa07268f38927efa7624dff608952feab021bc0aab31afe313ece759a25510c949000f77c627422ca560c64fc85b17dd111cd75ff0c4fcf8376c0301f852e29557d59454d8aeef7c265a8924f0ae3577844763d14a093493fae127939b3cc39ae8b0d024194d15cde35986dcef8e70cf8c6dceb7862a7821c9b3250ff78694dedde64aae3ba0d416ec0acab3554050297e27a6cebd130378618b7e1fa08f1d919a161ec8190159773fcc1bf9d60caa8675f34436811fbf025042c8d969e2a3babf099e5ae277dcf8f53837474dd9dec2926e4c013b7d1dc940531480cee7aba66028e8b0852ab924375e990abe8d7bb4866d7a344819522d8461fed9a4e3fbcd215f7caf6ecd474ae6f3a12958f51336c61db66ab91c52ea4600e5fe9d95effc7893aca851ba17f7f9c5b22f4673c7b54dd441511ce0eaee6a029f79fa7d2f19aa250f46fad8ac1dfabf498631d689d94aeba3c136145ba9b282d1ac971480941425cb98c95c17643f3cdfab292e843c267b08253697ab9cfc37726c8283099baf7728a6f3e2080a1201b2de12219d7e2a39b0142da4124dbf3b1aed0321c800f597fe286757713e44bd39bf2e1c18fbbc0ddcda0aaadcb2e13c84294042f0491b37e90189974bbc5cefe183e928ad3b51e4d742622af3709bc444c6273642d3b424bfe962ea0c9a011cb5554d5b3aac335b4f72713658cd3603a1ebeff28443dafcd8427822d3b26646af9a7cd87536f116f04f57a95a084b2438a8"}}}}}}, 0x0) readv(r2, &(0x7f0000001300)=[{0x0}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x2) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0xffff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000000001"], 0x40}, 0xc004) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r1, 0x0) listen(r0, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='htcp', 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 5m2.169185283s ago: executing program 2 (id=4535): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a320000000009", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x8004) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x8c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c0) 5m1.844567821s ago: executing program 2 (id=4540): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x400) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x1, 0x1, 0x4, 0x3, 0x6, 0x5}) recvmsg$unix(r0, &(0x7f0000000300)={&(0x7f0000000100), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x100) getsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000003c0)={0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000440)={'veth0_to_hsr\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f00000008c0)={&(0x7f0000000400), 0xc, &(0x7f0000000880)={&(0x7f0000000480)={0x3ec, 0x13, 0x10, 0x70bd26, 0x25dfdbfc, {0x25, 0x8, 0x1, 0x1, {0x4e21, 0x4e23, [0x1, 0x5, 0x2, 0x8], [0x5, 0x47c, 0x2, 0xfff], r13, [0x9, 0x3]}, 0x7ff, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "f3639c7ebfb0b8b6adebdd65b710d78febabee6284c54ec554c3047ff5c86461bbd6ea74d337bbe0d9438b7f7118e21df75f37d72fec7353363b942f540f24f536e0311a9da30475a3885577f04b1bc4ef17cb3169bf23d2e2977434f52973358b52917d07aaf5fd5caf91bfe8c8270ca40dbd0dda0ea9b5"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "2f4766ee0f9d9d11a7421627521d811c14a508b4a00c0f909aaaf3c9bed7952491dac5fa0363485813dc17ef24f0d4b6966d944dd2fc67c3a5cb93f0e37a1f0c1cf976d6f86db4bd60a59094d6568c8d157e4a0b991b6f5b3c2d954737268a4fb1f29c202011db00bf7057481cfd71958251d977a0"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "582679e6284459b980a38e4eaee2fd718bc9886a11261d2b734698519d160c98a4b5c491ca07b6601d8e41fbc794e44539cfc7c4a7682a2008489ac800d07aad1a470c9a35373f4f4f2da295c1bd381904"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "db7e373426753d48f5cb740c0dca3e8697"}, @INET_DIAG_REQ_BYTECODE={0x97, 0x1, "ad02ad9463596129ca023d93d9dbe0a46ba5bc3e1b1d3ba4db407a0654d3007f8565499a36ac93ecb62e78ea253c899aa33a0a352b67d57c49771c120077f162e9459a2f3b28e4fcf4f6b6157bf7de0c46b5055555d389ba00e6a8836c8fdcb73563d516c8b53603609d434f0b98a318e19e07c20131ed7b89535b3938055655e48e4a64c18205112261cf7d22149ff8fccd48"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "96276bb81d2cb473e13650ae16316b13b597ead479a81b90c72a1323ca61b047d0d0e63c3724cd482e8634c8d3219bd14a3038ff8b3a463a5b31a87babf71935133838723e9a0ae22fbdd2ae1ae43a10fb6160ed157efa61099062832baaef1e7577fdf6e5df2beb33d2312b1ce45a2932862d1bf3fadfe870072d892cbdc3e5a1ecb1671097c07dae303bb03300599b3a785235414753b6c1f978ee45d18823965f9287c840ff3e2c8f812677829a6b60434d7bbf9bc44581b9cf24649b1a874687331c26ecdb69f646c43e1dfb965f0ea3b65d7a3891f1cdcc"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "4face0ec1c40e52f09f025431e4592843ef36749c9a00148ae4c22f9e613e0d61d6433c67b287c10ebf239ffd2bd1c03276924d27cc3f74864c5b16fba332ae1e9ae059e91da4eac259d809fb0dfe0fa5269eb55977451629065adbe17841437f26b4114ff4baa9d82"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "f2adb359e936922a5c3b5537b9d65f3ef4909ef0af9cf77c6becd318cc9452c81a91bb104e94fcebc48fe997c2f6239bbb46c0c728e287de242140cff13194e7e4ede9877a68e0126d"}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000980)=r14, 0x4) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000001cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000a40)={0x1220, r15, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/-@*&.^&.,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x35a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!\'%\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcff0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+[\x96\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe83}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'\x19#.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$-\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']]*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'veth0_to_hsr\x00'}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "03d9eccac0396625e7aa9f0f8f39046313439cbd513341ccd7dc47842552cce689bd19"}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "10213d71c1035b9a9725e5ffcf4d5bcfb21284e97a47cd4a1268ca6b9ef42f9b6dcebb50bf824eccfcd1b6b548614a60bf76eb6b00676b9d6488a07c90b457f53d096b20c500cfb25f5f7c72bc001ad516326a5fd28ca2"}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0x1220}, 0x1, 0x0, 0x0, 0x200108c1}, 0x4000800) openat$tun(0xffffffffffffff9c, &(0x7f0000001d00), 0x200000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r14, &(0x7f0000001d40)={0xa0000000}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001d80)={0x8001, 0x200, 0xae2, 0x401, 0x0}, &(0x7f0000001dc0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000001e00)={r16, @in6={{0xa, 0x4e22, 0x4, @mcast2, 0x240}}, 0x0, 0xfffd}, 0x90) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000001ec0)=0x5, 0x4) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f0000001f00)={0x52b2, 0x1e9}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003080)={r4, 0x20, &(0x7f0000003040)={&(0x7f0000001f40)=""/4096, 0x1000, 0x0, &(0x7f0000002f40)=""/232, 0xe8}}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f00000030c0)={r16, 0x9}, &(0x7f0000003100)=0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000031c0)={{r3, 0xffffffffffffffff}, &(0x7f0000003140), &(0x7f0000003180)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x11, 0x10, &(0x7f0000003200)=@raw=[@printk={@lli}, @map_fd={0x18, 0xd, 0x1, 0x0, r18}, @generic={0xc, 0x4, 0x5, 0x0, 0xb16}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f0000003280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x14, r2, 0x8, &(0x7f00000032c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000003300)={0x0, 0x10, 0x7, 0x80}, 0x10, r17, r7, 0x0, &(0x7f0000003340)=[r1, r1, r11, r10], 0x0, 0x10, 0x5}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000003440)={'virt_wifi0\x00', 0x1000}) writev(r3, &(0x7f0000003840)=[{&(0x7f0000003480)="5e32e465fd3139c73b94b2e8b1fe2b54e83704406e82efdad60ebc761129dad38c0a07d834bc0a777e9051de0e4ca836927861475c64104a602015a5ff6aee22d3df02014892302723b2e14caa073471e4ce3144c06b18c7b1f4412a5ee489bf3f8bf29f4eafd54a24b69b21d43058dad094ed6da4e7bd4bc4129307974d5e8c92c2248a2b951fa2c269c3c3ecd4d6328e609115f17e1158dcdc263e45830af289cf13fdc116cb3140a88e3fe2c5559324b84f59f8a52c3c3feb0b872a7b21af86012def0158eb13", 0xc8}, {&(0x7f0000003580)="cce004d5", 0x4}, {&(0x7f00000035c0)="256d680bcb6130c604309b20dfab731ce51d6aa8bc51f5bf6e718336079a18ba04a1535fa429e2845ad4df78007f6d4e8e40f59b8800055d8f7ef5433a503f1ba785478190244c41f7f026aafb6c656efa80a09ac772dd02419066797f497fba0b335b0be6a1be63f5981f3976cf6cc349c22f39ac2bf38424c65edc72433471e74aa9d2f72a27d52f26f80e35769df5a3dae6a32485698bf4489bc1d1741c39bfea146ed60d383162eeafc8fd473c", 0xaf}, {&(0x7f0000003680)="4e930505be82f74a13d9c140b3549d353ac1939c17df7b8616b7792b3279bcd05fe9f247f3fc799f552eee428d053110ed81809fd56f0f26625e3eb19dfc64a79cf5ae330406011e69b433b3627026fc97901187b17b0a678fdf7fb6ea39cf82150c51c828b99b9663f6886b34ecb934192a73d06da3cf7a4fe73dc703f4cb8f1b1e", 0x82}, {&(0x7f0000003740)="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", 0xfd}], 0x5) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f00000038c0)={0x2, [0xbcf, 0xfffffff9], 0x7}, 0x10) getsockopt$bt_hci(r6, 0x0, 0x2, &(0x7f0000003900)=""/80, &(0x7f0000003980)=0x50) sendmmsg(r2, &(0x7f00000039c0), 0x0, 0x24044000) ioctl$sock_FIOSETOWN(r10, 0x8901, &(0x7f0000003a00)=r8) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000003b00)={&(0x7f0000003a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000000) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000003b40)={@dev}, &(0x7f0000003b80)=0x14) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000003bc0)={@dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, 0xffffffffffffffff, "09b075176b59d8fccb8531238722450f7e56195ee5f9eab9e37b60665027b56a", 0xae, 0x0, 0x8, 0x5}, 0x3c) 5m1.664699986s ago: executing program 2 (id=4542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1e09f}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c0001800600060065580000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r7, @ANYRES64=r7], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 4m56.136300642s ago: executing program 4 (id=4582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000000000011, 0x2, 0x20000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000140)="b99cdf", 0x0, 0x800064fd, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7901}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x6b, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r9, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0xf5, r10, 0x1, 0x8, 0x6, @local}, 0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xe, 0x2, 0xff, 0x8, 0x7, 0x1000}, &(0x7f0000000080)=0x20) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000780)=@broute={'broute\x00', 0x20, 0x2, 0x29c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f00000001c0), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x20, 0x888e, 'veth1_to_team\x00', 'vxcan1\x00', 'veth0_to_team\x00', 'ip6gre0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff], 0x6e, 0xce, 0x11e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4fd}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x4}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x9, 0x44, 0x53c6, 'netdevsim0\x00', 'veth0_to_bridge\x00', 'bridge_slave_1\x00', 'veth1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, [0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x11, "ea88e66a3df0ab4683d318857483de2d4dac24e0b69e7bc2d01cebd35e54", 0x5}}}}]}]}, 0x314) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r11, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x801, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x20000061) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797ad3b01d91c3b2aa42ae8be827943000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c810) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4m53.592841485s ago: executing program 3 (id=4590): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r4 = epoll_create1(0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8bba4154f0013000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f28a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f6d8a0d18974e26a607febe419d816e57a6ef190303200f389f9e4b5e92d4810a60107f8bb2da65ef951e9cba1c0cef429fff445668c354f96960925ce061dcb59a9cd763d1c9fef144d8acb14145259718968d6a99e63bd0aff1324382589c5398764edb99934e0cd0", 0x17d}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r5, &(0x7f0000001e00)="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", 0x4d7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r7}, 0xc) r8 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0xf, 0x6, 0x400}, 0x10) write(r8, &(0x7f0000000000)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) unshare(0x2c020400) epoll_wait(r4, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0xa0000004}) 4m53.141322688s ago: executing program 4 (id=4593): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000340)=0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x0, 0x0, 0x238, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x41, 0x8, 0xc0, 0x1, 0x7ff, 0x300, 0x2a}}, @common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d3], 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4, 0x1}, {0x0, 0x3, 0x1}, {0x0, 0x4, 0x7}, 0xfae7, 0x3}}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffff00, 0xff, 0x0, 0xff000000], [0xff000000, 0xff000000, 0x0, 0x1feffff00], '\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x8, 0x6047d657c61d23c6, 0x26}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "67cf", 0x1}}, @common=@dst={{0x48}, {0x6, 0x1, 0x0, [0x3, 0x5, 0x6, 0x0, 0x9, 0x3, 0x86, 0x3, 0x3, 0xd, 0x6, 0x7, 0x0, 0xfffb, 0x5, 0x7], 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}]}, &(0x7f0000000340)=0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x0, 0x0, 0x238, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x108, 0x140, 0x0, {}, [@common=@srh={{0x30}, {0x41, 0x8, 0xc0, 0x1, 0x7ff, 0x300, 0x2a}}, @common=@inet=@ipcomp={{0x30}, {[0x4d2, 0x4d3], 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x4, 0x1}, {0x0, 0x3, 0x1}, {0x0, 0x4, 0x7}, 0xfae7, 0x3}}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffff00, 0xff, 0x0, 0xff000000], [0xff000000, 0xff000000, 0x0, 0x1feffff00], '\x00', 'syzkaller1\x00', {}, {}, 0x32, 0x8, 0x6047d657c61d23c6, 0x26}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "67cf", 0x1}}, @common=@dst={{0x48}, {0x6, 0x1, 0x0, [0x3, 0x5, 0x6, 0x0, 0x9, 0x3, 0x86, 0x3, 0x3, 0xd, 0x6, 0x7, 0x0, 0xfffb, 0x5, 0x7], 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) (async) 4m52.638345032s ago: executing program 4 (id=4597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000000000011, 0x2, 0x20000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000140)="b99cdf", 0x0, 0x800064fd, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7901}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x6b, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0xf5, r10, 0x1, 0x8, 0x6, @local}, 0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xe, 0x2, 0xff, 0x8, 0x7, 0x1000}, &(0x7f0000000080)=0x20) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000780)=@broute={'broute\x00', 0x20, 0x2, 0x29c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f00000001c0), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x20, 0x888e, 'veth1_to_team\x00', 'vxcan1\x00', 'veth0_to_team\x00', 'ip6gre0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff], 0x6e, 0xce, 0x11e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4fd}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x4}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x9, 0x44, 0x53c6, 'netdevsim0\x00', 'veth0_to_bridge\x00', 'bridge_slave_1\x00', 'veth1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, [0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x11, "ea88e66a3df0ab4683d318857483de2d4dac24e0b69e7bc2d01cebd35e54", 0x5}}}}]}]}, 0x314) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r11, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x801, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x20000061) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797ad3b01d91c3b2aa42ae8be827943000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c810) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4m52.174818344s ago: executing program 1 (id=4598): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='westwood', 0x8) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1d, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0xef4d}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0xf, 0x3, 0xa, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0x14}, @ldst={0x3, 0x0, 0x2, 0x1, 0x4, 0xfffffffffffffff4, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r3, 0x25, r4}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r7}, 0x38) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c0001800600060088480000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f00000005c0)="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") r10 = socket(0xa, 0x5, 0x0) listen(r10, 0x7fffffff) sendmsg$inet_sctp(r10, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000040)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x20, 0x880}, 0x8050) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x0, 0x9}, @mss={0x2, 0x1}, @timestamp, @mss={0x2, 0xb}], 0x4) 4m51.827904285s ago: executing program 1 (id=4599): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000a0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000010) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r4, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xdaf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 4m51.57056181s ago: executing program 1 (id=4600): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1d90, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000001c0)="d7ba920075d85de47598400de666d0e538be86683ffc9a74efa19874c273f94d1953bca343f3004ad5a7d5de3ae5dabdb6e0c8af890c1e28d1e59d28b553e87547", 0x41}, {&(0x7f0000000240)="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", 0xff}, {&(0x7f0000000340)="7d489d3ec0e4cfb36199d7193d2b8d5ae6a7e7b231ff9f803dbf55784fa9c74f7d9132869dea06427c28045076ad94f9ec21b9e2150c6003543c69ec10a460464abeb75193588ece7d07dd79f80533fcb3", 0x51}, {&(0x7f00000003c0)="44ba47bd52c464", 0x7}], 0x4, &(0x7f0000000680)=[@rthdr={{0x58, 0x29, 0x39, {0x2e, 0x8, 0x2, 0x8, 0x0, [@private2, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}], 0x58}}, {{&(0x7f0000000700)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000740)="c3e98fe8d112794eaf9004b880d687e16ab9a2a54fc315304eeae4e0ab8cd4b3462a0c9abd2ca733ed7492b9bb10ef738b2708760c1c2d01377c9218a91d63bfdec2e36442e52ea61a896a6aadff2b8cf1cea738995d4da34c05df60c1925530db92a0c182aae7575d73d2c74c30f43954691ab203eb3e5b3f28c017657066767ddbe18ea562c46c33cbfb5f5e0090967bc1f3baa09543c1c88fc14ff23ac10a1d329c9ab07e6e1ca354", 0xaa}, {&(0x7f0000000800)="7644c5dc2878d95d358a37c7becce92fbce58c349806ecd8c7c17554dcf811173a0c93016ec8e54b1622229d56a7421d6437049844425b45273cb82d80da5f202e55b2febe510348fdb2691225258e975d816efe37d09d171adea03368fa4171cf44ec610f85994415f10bbe5b4c71cd8688f911ec2bf5734cfd958fed837e005a1f7c07c3ad8ed9fab373b3e04c4481dd4f789a6149056278b58c13bca1734c7c0fcf9ad8417ee642a2355b", 0xac}, {&(0x7f0000000980)="7236d5048ece12cb10f6d7b78968deb2ee87ca48d2564bd14a8a4f55357001dc5f1080f661e3cb24917d06b060ab5c54c19fd4ccfee582c93fbf758d9070b417369dc33bb7f5f2f86020d4d60a06cc", 0x4f}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="24000000000000002900000014000000fcc5010000000000002000000000000000", @ANYRES32, @ANYBLOB="0000000014000000000000002900000008000000040000000000000014000000000000002900000034000000ff01000000000000140000000000000029000000340000000700000000000000180000000000000029000000390000001100028b00000000"], 0x88}}], 0x3, 0x0) 4m51.384062123s ago: executing program 1 (id=4601): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) setsockopt(r0, 0x4, 0x6, &(0x7f0000000080)="8fe8d95f673d56a100afc55a2c2cd458a458f5cf727e720a5f17e91aa8dde823d967dfe90ab139fe77d3e27c47ba4f5515d3a4319feedcd901cbbace6ac49112512f18122a47b97ff06a76e6d3e3ad1fa8013969fad8fbafcfc4ac57238e3d80e1af4443f5c0ea648f13d161abe278d9dd811ac0754b68a31d06505a7c", 0x7d) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000100)={0x7, 'batadv0\x00', {0x401}, 0xa}) r1 = socket$inet(0x2, 0x6, 0x1000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000540)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000580)=0x2c) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000005c0)={{0x2, 0x4e21, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10, {0x2, 0x4e20, @multicast2}, 'ip6tnl0\x00'}) ioctl(r2, 0x7, &(0x7f0000000640)="4b2a78074474aff5385a48ae313d53257bfb328b651fe66304200d7dfdc477d66685c70e65e1d3dee42c253118edb5286c75e02e6cbebe41eec143d6a25e963011b99f984e93fe58d2c47a7229eb54a1a38f77cfa9654eac51bbdc4c") ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000006c0)={r2, 0x5da, 0xfffffffffffffff7, 0x1}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x94, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1000}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x70}]}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x2000c894) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000980)={r1, &(0x7f0000000880)='}\x00', 0x10000, &(0x7f00000008c0)={@align=0x1ff, {0x8001, 0x5, 0x9, 0x8}}, 0x8, &(0x7f0000000900), &(0x7f0000000940)=0x6}) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000009c0)={0x67, @loopback, 0x4e24, 0x4, 'dh\x00', 0x36, 0x0, 0x3b}, 0x2c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48094}, 0x200080d0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00'}) ioctl$NILFS_IOCTL_SET_SUINFO(r3, 0x40186e8d, &(0x7f0000000cc0)={&(0x7f0000000bc0)=[{0x9, 0x2, 0x0, {0xea44, 0x7fff, 0x2}}, {0x0, 0x0, 0x0, {0xfffffffffffffffa, 0x80}}, {0xffff, 0x0, 0x0, {0xff, 0x5, 0x2}}, {0x7, 0x0, 0x0, {0x2, 0x2, 0x1}}, {0x8, 0x2, 0x0, {0xfffffffffffffff7, 0x9, 0x2}}, {0x1800000000000, 0x1, 0x0, {0x8, 0x4, 0x2}}, {0x3, 0x0, 0x0, {0x9, 0x5}}, {0x2f, 0x0, 0x0, {0x6, 0x7, 0x2}}], 0x8, 0x20, 0x7, 0x80000001}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r3) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d80)={0x1bc, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfff, @rand_addr=' \x01\x00', 0x80}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbf6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5780}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3211}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3f9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000004}, 0x810) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000010c0)={r3, &(0x7f0000000fc0)='\x00', 0x0, &(0x7f0000001000)={@align=0x101, {0x9, 0x4, 0x7, 0xf1}}, 0x800, &(0x7f0000001040), &(0x7f0000001080)=0x1000}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r7, 0xf503, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001100)='hybla', 0x5) getsockname$packet(r3, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001180)=0x14) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000011c0)={r3}) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001340)=@deltclass={0xdc, 0x29, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {0x4, 0x10}, {0xffff, 0x5}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x84, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x5, 0x81, 0x800}}, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffc00, 0x4, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0xbc1b, 0x401, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x7, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x2, 0x5}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x4d5, 0x2}}, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x551, 0x80000001}}, @TCA_HFSC_USC={0x10, 0x3, {0x10, 0x81, 0xc8f}}]}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x0, 0xec}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000094}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r10) r11 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r11, 0xc0389424, &(0x7f0000001540)={0x50000, 0x30, '\x00', 0x1, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 4m51.204218253s ago: executing program 1 (id=4602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0xb, 0x1, 0x6}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4004884) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d1fd1400fd004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m50.752032838s ago: executing program 1 (id=4605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="dc5e50c6000000000000000000000000000000006ca7b26047dcaf15ce1a6984ebb04e2692a578587e34244357577690204457d99e4f2d9371d610220d1993ba1024", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="ff03000000010000000000e60000000f00000000", @ANYRES64=r1, @ANYRESHEX=r4, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES16=r0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003c00000000e005907864010102ac1414aa0001000054c4b247f9337b27accf1c4779fee653df0eae6277bcc110", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac10000090780004131202722e3486ebd900"/28], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000380)=0x8, 0x12) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x1}, @in6={0xa, 0x4e24, 0xc, @remote, 0x6}], 0x38) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r13 = accept4(r12, 0x0, 0x0, 0x80800) sendmmsg$alg(r13, 0x0, 0x0, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @map_val={0x18, 0x5, 0x2, 0x0, r9}]}, &(0x7f0000000200)='syzkaller\x00', 0x6f42, 0x84, &(0x7f0000000700)=""/132, 0x41100, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x409}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0xffffffffffffffff, r10], &(0x7f0000000840)=[{0x5, 0x3, 0xd}, {0x204, 0x4, 0x2}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0xb}, 0x94) write$tun(r10, &(0x7f0000003180)=ANY=[@ANYBLOB="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"], 0x1001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25020000050a000900ffffffffffff000008000300", @ANYRES32=r14, @ANYBLOB="08000b0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) r15 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r15, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$sock_linger(r15, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) sendmmsg$sock(r15, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18}}], 0x30}}], 0x1, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r15, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'gre0\x00', r14, 0x8, 0x700, 0x1, 0x2, {{0xc, 0x4, 0x1, 0x3c, 0x30, 0x68, 0x0, 0xb3, 0x2f, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x1c, 0x11, 0x1, 0xf, [{@loopback, 0x5}, {@multicast2, 0x9}, {@empty, 0x200}]}]}}}}}) 4m49.742263834s ago: executing program 0 (id=4611): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="180000002600010324bd7002ffdbdf250100000004001f"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x60) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, &(0x7f0000000080)={@align=0x8, {0x401, 0x2, 0x6, 0xef}}, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x6}) socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) pipe(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x10001, 0x12) sendfile(r6, r5, 0x0, 0xf03a0005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040605"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$cgroup_type(r11, &(0x7f00000000c0), 0x9) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ioctl$NILFS_IOCTL_SYNC(r12, 0x80086e8a, &(0x7f0000000180)) 4m49.275503258s ago: executing program 0 (id=4612): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40238}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x8000002) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x10010, r0, 0x62ee7000) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000001c0)) 4m49.096435155s ago: executing program 0 (id=4613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x200000000000011, 0x2, 0x20000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000140)="b99cdf", 0x0, 0x800064fd, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7901}) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r7, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x6b, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r4, {0x1}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0xf5, r10, 0x1, 0x8, 0x6, @local}, 0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xe, 0x2, 0xff, 0x8, 0x7, 0x1000}, &(0x7f0000000080)=0x20) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000780)=@broute={'broute\x00', 0x20, 0x2, 0x29c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, &(0x7f00000001c0), &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x20, 0x888e, 'veth1_to_team\x00', 'vxcan1\x00', 'veth0_to_team\x00', 'ip6gre0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0x0, 0xff], 0x6e, 0xce, 0x11e, [], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x4fd}}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00', {0x4}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x9, 0x44, 0x53c6, 'netdevsim0\x00', 'veth0_to_bridge\x00', 'bridge_slave_1\x00', 'veth1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, [0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x11, "ea88e66a3df0ab4683d318857483de2d4dac24e0b69e7bc2d01cebd35e54", 0x5}}}}]}]}, 0x314) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r11}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r11, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) sendmsg$AUDIT_GET_FEATURE(r9, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x10, 0x3fb, 0x801, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x20000061) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797ad3b01d91c3b2aa42ae8be827943000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c810) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4m48.906470083s ago: executing program 3 (id=4614): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000140)={0x7, 0x0, 0x1, 0x0, 0x100, 0x1, 0x0, &(0x7f0000000000)=[{0x16, 0x101, 0x1}]}) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4m48.650353684s ago: executing program 4 (id=4615): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xfffffffffffffee6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x10000000}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0b2abd7000000000002a0000000e0001006e657464657673696d0000000f0002006e657464b35a2e51fe47f5ba"], 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) 4m48.647379261s ago: executing program 3 (id=4616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="0a000200010078", 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000100)=0x8, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000600012800b000100697036746e6c00005000028006000f00000000000500060001000000080008000d000000060012004e21000008001400ffffffff080008003500000014000200fc00000000000000000000000000000108000100", @ANYRESDEC=r3, @ANYBLOB="08000400cd070d23"], 0x90}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) 4m48.15350959s ago: executing program 0 (id=4617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB="2e00000010000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="926ffb6582aa7fc04142ca531bac01babb9aa1c3a8bf84ec3a068679705803aeb4714951ed6972424453fc3ba5ff337edcc7bad609273afa1df1ba765fbe6bd5249d785778e831060b90c2b025cd1222f4", @ANYRES64=0x0], 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'veth0\x00', 0x4}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x50) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000380)={0x2, 0x5e21, @local}, 0x10) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000100)={0x1, 0x2, 0x1000, 0x1f, &(0x7f0000000080)="3d692bed6be61e11296062095415f8a9417f748ab002f4283b1ab5e7128e92", 0x33, 0x0, &(0x7f00000000c0)="236288df1713da0b54c06d97035726aa9c8759141f13bbf310f11febaa5ec1d59dd20c517a370b781f4e6d61fde2d40e010c07"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x20084084) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a0028"], 0xf4}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cb}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0x2, 0x4) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000280)={0xa84, 0x4, 0xa68d, 0x400, 0x6, 0x0, 0x977}) 4m48.152353056s ago: executing program 3 (id=4618): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe0, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xbb, 0x8, "8d2662a2f70651e7a0116b3f4943ae59f91e81edbd437f0226a1d6b7a4453aab3e1344e1998f6dcc7ce5169de685d08e6e0aa4c7d7c83492a9bec296db1d6c7c2f89e11f44820df7f764058cf66f9187fbc17d01f95a31da54180f262a504855c7e19a96b3c09cf9ea2e9081f67a66b9f633f9fdb7502f002cbe19f086b8228f2cb8ed48e1e912857aef365d406548fa2e2215c02c811c45bc2bb0634ce9b5fd43d584921b6fce50ce555e414c69b97358e311d45370c6"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x24040015}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\x00g\x00\b\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) (async) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008010}, 0x4004904) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000006, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x2, 0x41}, @jmp={0x5, 0x1, 0x2, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 4m48.151560791s ago: executing program 4 (id=4619): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x40880) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000001c0)=0x6fc5bfd6, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private0, @in=@rand_addr=0x64010100, 0x4e24, 0x5, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x73, 0x0, r5}, {0x9, 0x7, 0x4, 0x6, 0x9, 0x1, 0x7, 0x7fffffff}, {0x80, 0x80000001, 0x1, 0x8000000000000001}, 0x4, 0x6e6bb0, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3506, 0x2, 0x1, 0x5, 0x94, 0x4, 0xa}}, 0xe8) (async) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private0, @in=@rand_addr=0x64010100, 0x4e24, 0x5, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x73, 0x0, r5}, {0x9, 0x7, 0x4, 0x6, 0x9, 0x1, 0x7, 0x7fffffff}, {0x80, 0x80000001, 0x1, 0x8000000000000001}, 0x4, 0x6e6bb0, 0x0, 0x1, 0x2, 0x1}, {{@in=@remote, 0x4d6, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x3506, 0x2, 0x1, 0x5, 0x94, 0x4, 0xa}}, 0xe8) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'macvtap0\x00', 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000580)={@local, r1}, 0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000005c0)={0x0, @adiantum, 0x0, @desc4}) recvmsg$can_bcm(r0, &(0x7f00000008c0)={&(0x7f0000000600)=@ax25={{0x3, @default}, [@remote, @bcast, @bcast, @remote, @netrom, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f0000000780)=""/230, 0xe6}], 0x2}, 0x2000) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r2) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000940)={{0x3a, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x7, 0xfffffff8, 0x57}, {@empty, 0x4e24, 0x3, 0x2, 0xe20e, 0x15}}, 0x44) socket$can_j1939(0x1d, 0x2, 0x7) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f00000009c0)={0x1d, r6, 0x0, {0x2, 0xf0, 0x2}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6b}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xddbb}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5c2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd76}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, 0x2, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6b}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xddbb}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5c2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xd76}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$inet(r8, &(0x7f0000000b80)={0x2, 0x0, @broadcast}, &(0x7f0000000bc0)=0x10) sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x128, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xee, 0x8, "095e12000bbf28d6976996f690d4540acd27e16d57a8f54bb67bdc0163ccb4a80bf40c41f6408d6550ce5dfae774ece9317b2289cc3db3840fbdaaa1248a9fbac1aef9487d6defa7810a1f29e92cd9061ba55484aee4392afe659ffc358ef133c7c0262c5d6c77125f7fd8b6bf43d2cd85eb80cda6aacf215ec28945e1b12dc5d8aa9b26bbfb4129ff0ce6e870b9259e28559c81c497eef36c1f33259e0c967a0420b50f5d3d7d6892b2bd45b6f08c559dbf5d395c7468d12a01a214dd5dec7383519a0127aa5d8d1e1e3730782b8a465bdadbe1fe4b78372200de9c3ef0203c26afa63e7f9c538ec433"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x2}, 0x4000881) (async) sendmsg$NFT_MSG_GETOBJ(r10, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x128, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xee, 0x8, "095e12000bbf28d6976996f690d4540acd27e16d57a8f54bb67bdc0163ccb4a80bf40c41f6408d6550ce5dfae774ece9317b2289cc3db3840fbdaaa1248a9fbac1aef9487d6defa7810a1f29e92cd9061ba55484aee4392afe659ffc358ef133c7c0262c5d6c77125f7fd8b6bf43d2cd85eb80cda6aacf215ec28945e1b12dc5d8aa9b26bbfb4129ff0ce6e870b9259e28559c81c497eef36c1f33259e0c967a0420b50f5d3d7d6892b2bd45b6f08c559dbf5d395c7468d12a01a214dd5dec7383519a0127aa5d8d1e1e3730782b8a465bdadbe1fe4b78372200de9c3ef0203c26afa63e7f9c538ec433"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x2}, 0x4000881) syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r2) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xc4, r11, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$IPSET_CMD_DEL(r10, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc433e13d101db574) 4m47.946673674s ago: executing program 3 (id=4620): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='-)v]--\x00', 0x301802, &(0x7f0000000040)={@_ha_fsid={[0x8, 0x6]}, {0xb7a, 0x9f71, 0x6, 0x5c}}, 0x6, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8}) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000140)=""/5, &(0x7f0000000180)=0x5) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1, 0x3}, 0x6) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000200)='-)v]--\x00', 0x10800, &(0x7f0000000240)={@align=0x8000000000000001, {0x2, 0x400, 0x10001}}, 0x40, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x1000}, {[0x10000, 0xffffffff, 0x6, 0xb9]}, 0x7, 0x67, &(0x7f0000000300)=""/103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000004c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x444}, 0x8000) (async, rerun: 32) openat$cgroup_int(r0, &(0x7f00000005c0)='pids.max\x00', 0x2, 0x0) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000640)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '{@\'\'-'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c40)={{r2, &(0x7f0000000740)='##],.\\,\x00', 0x101980, &(0x7f0000000780)={@align=0x7, {0xfffc, 0x1, 0x9, 0x7}}, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x8}, 0x3, &(0x7f0000000bc0)=[{0x2, 0x7, &(0x7f0000000840)='}($:#*.\\\x00', &(0x7f0000000880)="8f6e4fca0b550588abca69f505413c5db63ac4c7de9fafdee8ea935a8e51a05177026225d0d323bb88dd90de2c04be2f1e8ed3b830c1927479f3ff69b018afdb477ef13fe8bb4d0ef1b7aee8f11efe56bda7101a84e29bb657bfa0f50bd39f221e379341b8c080a7fd44a1678de0c432f50f7f2e06e84925b361e16e2233e985e317eda854d472b52e4cf23e4db07077967efc04397456177a64f6", 0x9b, 0x2a}, {0x3, 0x40, &(0x7f0000000940)='{@\'\'-', &(0x7f0000000980)="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", 0xfe, 0x22}, {0x2, 0x3, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)="a0bbb2badd9ea7f211c8b5933caf9af179441ec2f94668323c1ce8878155814b9e39656dfc9112d122a5cb19e89f8a50e89b7f6a4b7f52643f0af90e969fda6a20d51121b1a4b84d542a01978898aee7e2685536d796b18486afba8dab3ac7b15b28023eee289f0b7636c7ab2dd1dda2237975264bc9f227deee4535dc54100cc94396c97022103bd6ab95cb49ce0eb0c1b60f0960a0775e311869b4801216ed51ca5995233fe9523a2e22fc16ba22fa463e3c5f4f4b0d116631cea06f501b42d6423231f2a712529e88efea870fbcb495dd3f852164544d0941124981c76955d3d833d44a", 0xe5, 0x8}]}) (async) getsockname$packet(r1, &(0x7f0000000e80)={0x11, 0x0, 0x0}, &(0x7f0000000ec0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xf, 0x1d, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x8, 0x41, &(0x7f0000000e00)=""/65, 0x40f00, 0x4a, '\x00', r9, @cgroup_device=0x6, r1, 0x8, &(0x7f0000000f00)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000f40)=[r0, r0, r1, r1], 0x0, 0x10, 0x7}, 0x94) (async) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000010c0)={0x0}, &(0x7f0000001100)=0xc) sendmsg$nl_generic(r11, &(0x7f0000002300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000022c0)={&(0x7f0000001140)={0x116c, 0x2c, 0x400, 0x70bd29, 0x25dfdbfe, {0x1a}, [@typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@empty}, @nested={0x1134, 0x55, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @pid=r12}, @typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@private0}, @generic="d4f65e0687b3ec2520565bcd309a7f720b9f1fd829aa5e7258c1ea0ee29e57a4", @typed={0xea, 0x3b, 0x0, 0x0, @binary="7bf455b4141b6787e61c537f7cb23db48887a6b7081d77c5c96e2df63517da2aa7c196d760ee5bdd3a758b76577cb2baaf4c965addc2026f7101b24d36ace16c7e237ba660135dd6a168d3714a92b0918a79229fbedba2379ac56f275f5ebbbdcb4a332a58d828e8d96c910749ffdfac5c7f75f49f42417846182847adf42410c258117963549f9dd43b1e64e4e56e78ba161d3daeca90000903bce355f0b5797e9dd2526b1cff7af2c1d129f1ea0c88708e125b7efda8999f6ae972d5be82ae20ced18c42b2deecb06db8a0cb46c184c6fbb76f9c6bfaeaa55d6e4ecbe3f9536a0acd90a1a4"}, @nested={0x4, 0x2b}, @generic="d0aa24de", @generic="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"]}, @typed={0x8, 0x152, 0x0, 0x0, @ipv4=@multicast2}]}, 0x116c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000002340), r3) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10010, r10, 0xe4ae8000) r13 = accept(r11, &(0x7f0000002380)=@isdn, &(0x7f0000002400)=0x80) bind$bt_hci(r13, &(0x7f0000002440)={0x1f, 0x3, 0x1}, 0x6) r14 = openat$cgroup_procs(r0, &(0x7f0000002480)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r14, 0x400c6615, &(0x7f00000024c0)={0x0, @aes128, 0x0, @desc4}) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40045}, 0x40080) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000002600)={0x0, 0x1}, &(0x7f0000002640)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000002680)={0x9, 0x8, 0xb8ff, 0xffffffc5, r15}, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0xaf27568ec892f522, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 4m47.87767782s ago: executing program 0 (id=4621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005000000058008000825c1"], 0x4a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1811000097ae304ccbd1854cf1e5581d958ed13fe50839982c81b80869a0a13fee339025d1f010dd2272c4694bf00f8c37dc1bc4aa846f86a55da377bd3c57db06d83a05b6e242f6206a26c8", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) 4m47.720650786s ago: executing program 3 (id=4622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="f59a4cc3bce2a377edec679a3ca2", 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xfffffffb}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, r4, 0x1, 0xfffbff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x48}}, 0x4080) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r6, &(0x7f0000000100)=@phonet={0x23, 0x7, 0x6, 0x35}, 0x80) 4m47.61434277s ago: executing program 4 (id=4623): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x141, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc54, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x40003ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc54}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x141, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) (async) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc54, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x40003ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x4}}]}, 0xc54}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003ac0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async) 4m47.543816425s ago: executing program 0 (id=4624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0xfffffffe}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x401, 0x200}}]}}]}, 0x48}}, 0x20040084) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socket$nl_sock_diag(0x10, 0x3, 0x4) 4m42.290061872s ago: executing program 32 (id=4542): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1e09f}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c0001800600060065580000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r7, @ANYRES64=r7], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 0s ago: executing program 33 (id=4624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0xfffffffe}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x401, 0x200}}]}}]}, 0x48}}, 0x20040084) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socket$nl_sock_diag(0x10, 0x3, 0x4) kernel console output (not intermixed with test programs): 3][T19273] __netif_receive_skb_core+0xb7d/0x30b0 [ 571.368664][T19273] ? kernel_text_address+0xa5/0xe0 [ 571.368720][T19273] ? unwind_get_return_address+0x4d/0x90 [ 571.368763][T19273] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 571.368804][T19273] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 571.368864][T19273] ? kasan_save_track+0x4f/0x80 [ 571.368888][T19273] ? __kasan_slab_alloc+0x6c/0x80 [ 571.368910][T19273] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 571.368935][T19273] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 571.368957][T19273] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 571.368983][T19273] __netif_receive_skb_list_core+0x24d/0x830 [ 571.369047][T19273] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 571.369084][T19273] netif_receive_skb_list_internal+0x995/0xcf0 [ 571.369138][T19273] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 571.369164][T19273] ? eth_type_trans+0x352/0x800 [ 571.369243][T19273] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 571.369280][T19273] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 571.369338][T19273] netif_receive_skb_list+0x67/0x480 [ 571.369364][T19273] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 571.369391][T19273] bpf_test_run_xdp_live+0x1875/0x1c20 [ 571.369427][T19273] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 571.369461][T19273] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 571.369491][T19273] ? 0xffffffffa0205540 [ 571.369560][T19273] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 571.369593][T19273] ? _copy_from_user+0x94/0xb0 [ 571.369619][T19273] ? bpf_test_init+0x113/0x150 [ 571.369639][T19273] ? xdp_convert_md_to_buff+0x5b/0x330 [ 571.369665][T19273] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 571.369704][T19273] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 571.369730][T19273] ? __fget_files+0x2a/0x420 [ 571.369760][T19273] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 571.369783][T19273] bpf_prog_test_run+0x2c5/0x340 [ 571.369814][T19273] __sys_bpf+0xa22/0xd90 [ 571.369856][T19273] ? __pfx___sys_bpf+0x10/0x10 [ 571.369892][T19273] ? __fget_files+0x2a/0x420 [ 571.369934][T19273] ? ksys_write+0x242/0x270 [ 571.369965][T19273] ? __pfx_ksys_write+0x10/0x10 [ 571.369999][T19273] __x64_sys_bpf+0xba/0xd0 [ 571.370022][T19273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.370044][T19273] do_syscall_64+0x174/0x580 [ 571.370071][T19273] ? trace_irq_disable+0x3b/0x140 [ 571.370094][T19273] ? clear_bhb_loop+0x70/0xc0 [ 571.370118][T19273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.370136][T19273] RIP: 0033:0x7f20a139e0d9 [ 571.370154][T19273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.370170][T19273] RSP: 002b:00007f20a21b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.370190][T19273] RAX: ffffffffffffffda RBX: 00007f20a1625fa0 RCX: 00007f20a139e0d9 [ 571.370203][T19273] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 571.370215][T19273] RBP: 00007f20a21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 571.370227][T19273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 571.370238][T19273] R13: 00007f20a1626038 R14: 00007f20a1625fa0 R15: 00007ffc22f5dbf8 [ 571.370271][T19273] [ 571.957546][T19281] bond2: option broadcast_neighbor: invalid value (3) [ 572.054404][T19281] bond2 (unregistering): Released all slaves [ 572.364209][T19307] syzkaller0: entered promiscuous mode [ 572.371074][T19307] syzkaller0: entered allmulticast mode [ 572.405548][T19307] tipc: Enabled bearer , priority 0 [ 572.435885][T19306] tipc: Resetting bearer [ 572.477618][T19317] __nla_validate_parse: 5 callbacks suppressed [ 572.477641][T19317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3540'. [ 572.544946][T19306] tipc: Disabling bearer [ 573.113733][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 573.247189][T19348] bond1: option broadcast_neighbor: invalid value (3) [ 573.353763][T19348] bond1 (unregistering): Released all slaves [ 573.919938][T19364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3552'. [ 573.940519][T19362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3551'. [ 574.101179][T19364] netlink: 'syz.3.3552': attribute type 1 has an invalid length. [ 574.160320][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3552'. [ 574.421084][T19364] bond2: option mode: invalid value (8) [ 574.478617][T19364] bond2 (unregistering): Released all slaves [ 574.694701][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 574.813512][T19402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.974524][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3559'. [ 575.021462][T19416] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 575.095021][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'. [ 575.129369][T19419] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.143337][T19427] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3563'. [ 575.158875][T19410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3559'. [ 575.326476][T19430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.417204][T19430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.535531][T19430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.656580][T19446] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 576.128544][T19468] bond2: option broadcast_neighbor: invalid value (3) [ 576.175769][T19468] bond2 (unregistering): Released all slaves [ 576.615833][T19490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.892981][T19531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.177128][T19588] __nla_validate_parse: 9 callbacks suppressed [ 578.177149][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'. [ 578.227332][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3594'. [ 578.249117][T19593] FAULT_INJECTION: forcing a failure. [ 578.249117][T19593] name failslab, interval 1, probability 0, space 0, times 0 [ 578.261933][T19593] CPU: 1 UID: 0 PID: 19593 Comm: syz.4.3592 Not tainted syzkaller #0 PREEMPT(full) [ 578.261961][T19593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 578.261972][T19593] Call Trace: [ 578.261980][T19593] [ 578.261989][T19593] dump_stack_lvl+0xe8/0x150 [ 578.262023][T19593] should_fail_ex+0x40c/0x560 [ 578.262052][T19593] should_failslab+0xa8/0x100 [ 578.262081][T19593] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 578.262109][T19593] ? skb_clone+0x212/0x3a0 [ 578.262130][T19593] ? skb_clone+0x212/0x3a0 [ 578.262158][T19593] ? run_filter+0x23/0x270 [ 578.262190][T19593] skb_clone+0x212/0x3a0 [ 578.262210][T19593] ? packet_rcv+0x563/0x16f0 [ 578.262239][T19593] packet_rcv+0x65d/0x16f0 [ 578.262277][T19593] __netif_receive_skb_core+0xb7d/0x30b0 [ 578.262313][T19593] ? kernel_text_address+0xa5/0xe0 [ 578.262342][T19593] ? unwind_get_return_address+0x4d/0x90 [ 578.262370][T19593] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 578.262394][T19593] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 578.262445][T19593] ? kasan_save_track+0x4f/0x80 [ 578.262467][T19593] ? __kasan_slab_alloc+0x6c/0x80 [ 578.262489][T19593] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 578.262513][T19593] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 578.262534][T19593] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 578.262559][T19593] __netif_receive_skb_list_core+0x24d/0x830 [ 578.262600][T19593] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 578.262635][T19593] netif_receive_skb_list_internal+0x995/0xcf0 [ 578.262667][T19593] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 578.262689][T19593] ? eth_type_trans+0x352/0x800 [ 578.262713][T19593] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 578.262750][T19593] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 578.262781][T19593] netif_receive_skb_list+0x67/0x480 [ 578.262805][T19593] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 578.262830][T19593] bpf_test_run_xdp_live+0x1875/0x1c20 [ 578.262865][T19593] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 578.262910][T19593] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 578.262933][T19593] ? 0xffffffffa0205540 [ 578.263005][T19593] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 578.263039][T19593] ? _copy_from_user+0x94/0xb0 [ 578.263064][T19593] ? bpf_test_init+0x113/0x150 [ 578.263084][T19593] ? xdp_convert_md_to_buff+0x5b/0x330 [ 578.263110][T19593] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 578.263150][T19593] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 578.263178][T19593] ? __fget_files+0x2a/0x420 [ 578.263208][T19593] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 578.263233][T19593] bpf_prog_test_run+0x2c5/0x340 [ 578.263265][T19593] __sys_bpf+0xa22/0xd90 [ 578.263299][T19593] ? __pfx___sys_bpf+0x10/0x10 [ 578.263336][T19593] ? __fget_files+0x2a/0x420 [ 578.263378][T19593] ? ksys_write+0x242/0x270 [ 578.263407][T19593] ? __pfx_ksys_write+0x10/0x10 [ 578.263440][T19593] __x64_sys_bpf+0xba/0xd0 [ 578.263462][T19593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.263484][T19593] do_syscall_64+0x174/0x580 [ 578.263512][T19593] ? trace_irq_disable+0x3b/0x140 [ 578.263536][T19593] ? clear_bhb_loop+0x70/0xc0 [ 578.263561][T19593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.263581][T19593] RIP: 0033:0x7f20a139e0d9 [ 578.263600][T19593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.263617][T19593] RSP: 002b:00007f20a21b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 578.263638][T19593] RAX: ffffffffffffffda RBX: 00007f20a1625fa0 RCX: 00007f20a139e0d9 [ 578.263652][T19593] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 578.263664][T19593] RBP: 00007f20a21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 578.263676][T19593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.263686][T19593] R13: 00007f20a1626038 R14: 00007f20a1625fa0 R15: 00007ffc22f5dbf8 [ 578.263720][T19593] [ 578.283056][T19592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3594'. [ 578.298012][T19594] netlink: 'syz.1.3590': attribute type 13 has an invalid length. [ 578.392538][T19597] ip_tables: iptables: counters copy to user failed while replacing table [ 578.633353][T19599] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 579.340457][T19628] netlink: 'syz.3.3604': attribute type 1 has an invalid length. [ 579.428650][T19628] bond2: entered promiscuous mode [ 579.433996][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'. [ 579.444982][T19628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.895709][T19634] bond2 (unregistering): Released all slaves [ 579.984250][T19644] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3607'. [ 580.017335][T19644] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3607'. [ 580.627300][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3615'. [ 580.861186][T19690] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3618'. [ 581.068577][T19690] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3618'. [ 581.136333][T19698] netlink: 'syz.0.3620': attribute type 29 has an invalid length. [ 581.181451][T19698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'. [ 581.235743][T19706] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 581.315162][T19709] netlink: 'syz.4.3621': attribute type 1 has an invalid length. [ 581.446119][T19715] FAULT_INJECTION: forcing a failure. [ 581.446119][T19715] name failslab, interval 1, probability 0, space 0, times 0 [ 581.458872][T19715] CPU: 1 UID: 0 PID: 19715 Comm: syz.2.3623 Not tainted syzkaller #0 PREEMPT(full) [ 581.458900][T19715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.458912][T19715] Call Trace: [ 581.458921][T19715] [ 581.458929][T19715] dump_stack_lvl+0xe8/0x150 [ 581.458963][T19715] should_fail_ex+0x40c/0x560 [ 581.458991][T19715] should_failslab+0xa8/0x100 [ 581.459021][T19715] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 581.459045][T19715] ? skb_clone+0x212/0x3a0 [ 581.459066][T19715] ? skb_clone+0x212/0x3a0 [ 581.459088][T19715] ? run_filter+0x23/0x270 [ 581.459122][T19715] skb_clone+0x212/0x3a0 [ 581.459143][T19715] ? packet_rcv+0x563/0x16f0 [ 581.459173][T19715] packet_rcv+0x65d/0x16f0 [ 581.459211][T19715] __netif_receive_skb_core+0xb7d/0x30b0 [ 581.459247][T19715] ? kernel_text_address+0xa5/0xe0 [ 581.459279][T19715] ? unwind_get_return_address+0x4d/0x90 [ 581.459308][T19715] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 581.459337][T19715] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 581.459391][T19715] ? kasan_save_track+0x4f/0x80 [ 581.459414][T19715] ? __kasan_slab_alloc+0x6c/0x80 [ 581.459437][T19715] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 581.459461][T19715] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 581.459482][T19715] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 581.459507][T19715] __netif_receive_skb_list_core+0x24d/0x830 [ 581.459549][T19715] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 581.459588][T19715] netif_receive_skb_list_internal+0x995/0xcf0 [ 581.459622][T19715] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 581.459647][T19715] ? eth_type_trans+0x352/0x800 [ 581.459672][T19715] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 581.459740][T19715] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 581.459771][T19715] netif_receive_skb_list+0x67/0x480 [ 581.459794][T19715] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 581.459822][T19715] bpf_test_run_xdp_live+0x1875/0x1c20 [ 581.459860][T19715] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 581.459895][T19715] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 581.459919][T19715] ? 0xffffffffa0205540 [ 581.459991][T19715] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 581.460024][T19715] ? _copy_from_user+0x94/0xb0 [ 581.460050][T19715] ? bpf_test_init+0x113/0x150 [ 581.460071][T19715] ? xdp_convert_md_to_buff+0x5b/0x330 [ 581.460096][T19715] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 581.460137][T19715] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 581.460167][T19715] ? __fget_files+0x2a/0x420 [ 581.460195][T19715] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 581.460220][T19715] bpf_prog_test_run+0x2c5/0x340 [ 581.460251][T19715] __sys_bpf+0xa22/0xd90 [ 581.460284][T19715] ? __pfx___sys_bpf+0x10/0x10 [ 581.460322][T19715] ? __fget_files+0x2a/0x420 [ 581.460370][T19715] ? ksys_write+0x242/0x270 [ 581.460402][T19715] ? __pfx_ksys_write+0x10/0x10 [ 581.460436][T19715] __x64_sys_bpf+0xba/0xd0 [ 581.460458][T19715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.460481][T19715] do_syscall_64+0x174/0x580 [ 581.460507][T19715] ? trace_irq_disable+0x3b/0x140 [ 581.460531][T19715] ? clear_bhb_loop+0x70/0xc0 [ 581.460555][T19715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.460575][T19715] RIP: 0033:0x7f919039e0d9 [ 581.460594][T19715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.460610][T19715] RSP: 002b:00007f9191286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.460632][T19715] RAX: ffffffffffffffda RBX: 00007f9190625fa0 RCX: 00007f919039e0d9 [ 581.460647][T19715] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 581.460659][T19715] RBP: 00007f9191286090 R08: 0000000000000000 R09: 0000000000000000 [ 581.460672][T19715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.460684][T19715] R13: 00007f9190626038 R14: 00007f9190625fa0 R15: 00007fff89a79e38 [ 581.460727][T19715] [ 582.345511][T19738] syzkaller0: entered promiscuous mode [ 582.361061][T19738] syzkaller0: entered allmulticast mode [ 582.389066][T19738] tipc: Enabled bearer , priority 0 [ 582.456891][T19737] tipc: Resetting bearer [ 582.480511][T19737] tipc: Disabling bearer [ 582.706651][T19762] FAULT_INJECTION: forcing a failure. [ 582.706651][T19762] name failslab, interval 1, probability 0, space 0, times 0 [ 582.719757][T19762] CPU: 0 UID: 0 PID: 19762 Comm: syz.3.3638 Not tainted syzkaller #0 PREEMPT(full) [ 582.719783][T19762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.719795][T19762] Call Trace: [ 582.719802][T19762] [ 582.719810][T19762] dump_stack_lvl+0xe8/0x150 [ 582.719844][T19762] should_fail_ex+0x40c/0x560 [ 582.719869][T19762] should_failslab+0xa8/0x100 [ 582.719899][T19762] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 582.719922][T19762] ? skb_clone+0x212/0x3a0 [ 582.719944][T19762] ? skb_clone+0x212/0x3a0 [ 582.719966][T19762] ? run_filter+0x23/0x270 [ 582.720000][T19762] skb_clone+0x212/0x3a0 [ 582.720021][T19762] ? packet_rcv+0x563/0x16f0 [ 582.720052][T19762] packet_rcv+0x65d/0x16f0 [ 582.720090][T19762] __netif_receive_skb_core+0xb7d/0x30b0 [ 582.720125][T19762] ? kernel_text_address+0xa5/0xe0 [ 582.720165][T19762] ? unwind_get_return_address+0x4d/0x90 [ 582.720195][T19762] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 582.720224][T19762] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 582.720278][T19762] ? kasan_save_track+0x4f/0x80 [ 582.720300][T19762] ? __kasan_slab_alloc+0x6c/0x80 [ 582.720323][T19762] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 582.720348][T19762] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 582.720370][T19762] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 582.720396][T19762] __netif_receive_skb_list_core+0x24d/0x830 [ 582.720439][T19762] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 582.720479][T19762] netif_receive_skb_list_internal+0x995/0xcf0 [ 582.720512][T19762] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 582.720537][T19762] ? eth_type_trans+0x352/0x800 [ 582.720561][T19762] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 582.720598][T19762] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 582.720628][T19762] netif_receive_skb_list+0x67/0x480 [ 582.720651][T19762] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 582.720676][T19762] bpf_test_run_xdp_live+0x1875/0x1c20 [ 582.720713][T19762] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 582.720748][T19762] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 582.720772][T19762] ? 0xffffffffa0205540 [ 582.720842][T19762] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 582.720875][T19762] ? _copy_from_user+0x94/0xb0 [ 582.720901][T19762] ? bpf_test_init+0x113/0x150 [ 582.720921][T19762] ? xdp_convert_md_to_buff+0x5b/0x330 [ 582.720948][T19762] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 582.720989][T19762] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 582.721018][T19762] ? __fget_files+0x2a/0x420 [ 582.721047][T19762] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 582.721072][T19762] bpf_prog_test_run+0x2c5/0x340 [ 582.721102][T19762] __sys_bpf+0xa22/0xd90 [ 582.721141][T19762] ? __pfx___sys_bpf+0x10/0x10 [ 582.721178][T19762] ? __fget_files+0x2a/0x420 [ 582.721219][T19762] ? ksys_write+0x242/0x270 [ 582.721248][T19762] ? __pfx_ksys_write+0x10/0x10 [ 582.721279][T19762] __x64_sys_bpf+0xba/0xd0 [ 582.721300][T19762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.721319][T19762] do_syscall_64+0x174/0x580 [ 582.721345][T19762] ? trace_irq_disable+0x3b/0x140 [ 582.721367][T19762] ? clear_bhb_loop+0x70/0xc0 [ 582.721391][T19762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.721410][T19762] RIP: 0033:0x7fc52d79e0d9 [ 582.721427][T19762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.721442][T19762] RSP: 002b:00007fc52e6ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.721463][T19762] RAX: ffffffffffffffda RBX: 00007fc52da25fa0 RCX: 00007fc52d79e0d9 [ 582.721476][T19762] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 582.721488][T19762] RBP: 00007fc52e6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 582.721499][T19762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.721510][T19762] R13: 00007fc52da26038 R14: 00007fc52da25fa0 R15: 00007ffcdf8a5f48 [ 582.721542][T19762] [ 583.581911][T19778] __nla_validate_parse: 3 callbacks suppressed [ 583.581932][T19778] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3644'. [ 583.607126][T19784] syzkaller0: entered promiscuous mode [ 583.609647][T19786] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3645'. [ 583.616794][T19784] syzkaller0: entered allmulticast mode [ 583.648237][T19784] tipc: Enabled bearer , priority 0 [ 583.661034][T19786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.663824][T19783] tipc: Resetting bearer [ 583.703342][T19778] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3644'. [ 583.727004][T19783] tipc: Disabling bearer [ 583.769981][T19786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.836991][T19792] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 583.846120][T19786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.868502][T19792] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.877537][T19792] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.897110][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3651'. [ 584.088912][T19802] netlink: 'syz.4.3652': attribute type 136 has an invalid length. [ 584.113926][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3652'. [ 584.427965][T19818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.461425][T19824] FAULT_INJECTION: forcing a failure. [ 584.461425][T19824] name failslab, interval 1, probability 0, space 0, times 0 [ 584.474240][T19824] CPU: 1 UID: 0 PID: 19824 Comm: syz.4.3657 Not tainted syzkaller #0 PREEMPT(full) [ 584.474268][T19824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.474280][T19824] Call Trace: [ 584.474288][T19824] [ 584.474297][T19824] dump_stack_lvl+0xe8/0x150 [ 584.474332][T19824] should_fail_ex+0x40c/0x560 [ 584.474359][T19824] should_failslab+0xa8/0x100 [ 584.474390][T19824] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 584.474414][T19824] ? skb_clone+0x212/0x3a0 [ 584.474436][T19824] ? skb_clone+0x212/0x3a0 [ 584.474458][T19824] ? run_filter+0x23/0x270 [ 584.474492][T19824] skb_clone+0x212/0x3a0 [ 584.474512][T19824] ? packet_rcv+0x563/0x16f0 [ 584.474543][T19824] packet_rcv+0x65d/0x16f0 [ 584.474582][T19824] __netif_receive_skb_core+0xb7d/0x30b0 [ 584.474618][T19824] ? kernel_text_address+0xa5/0xe0 [ 584.474649][T19824] ? unwind_get_return_address+0x4d/0x90 [ 584.474679][T19824] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 584.474707][T19824] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 584.474760][T19824] ? kasan_save_track+0x4f/0x80 [ 584.474783][T19824] ? __kasan_slab_alloc+0x6c/0x80 [ 584.474806][T19824] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 584.474830][T19824] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 584.474852][T19824] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 584.474878][T19824] __netif_receive_skb_list_core+0x24d/0x830 [ 584.474921][T19824] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 584.474962][T19824] netif_receive_skb_list_internal+0x995/0xcf0 [ 584.474996][T19824] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 584.475022][T19824] ? eth_type_trans+0x352/0x800 [ 584.475048][T19824] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 584.475086][T19824] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 584.475117][T19824] netif_receive_skb_list+0x67/0x480 [ 584.475142][T19824] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 584.475170][T19824] bpf_test_run_xdp_live+0x1875/0x1c20 [ 584.475207][T19824] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 584.475251][T19824] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 584.475275][T19824] ? 0xffffffffa0205540 [ 584.475341][T19824] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 584.475371][T19824] ? _copy_from_user+0x94/0xb0 [ 584.475395][T19824] ? bpf_test_init+0x113/0x150 [ 584.475414][T19824] ? xdp_convert_md_to_buff+0x5b/0x330 [ 584.475437][T19824] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 584.475476][T19824] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 584.475504][T19824] ? __fget_files+0x2a/0x420 [ 584.475534][T19824] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 584.475558][T19824] bpf_prog_test_run+0x2c5/0x340 [ 584.475589][T19824] __sys_bpf+0xa22/0xd90 [ 584.475621][T19824] ? __pfx___sys_bpf+0x10/0x10 [ 584.475655][T19824] ? __fget_files+0x2a/0x420 [ 584.475699][T19824] ? ksys_write+0x242/0x270 [ 584.475735][T19824] ? __pfx_ksys_write+0x10/0x10 [ 584.475769][T19824] __x64_sys_bpf+0xba/0xd0 [ 584.475792][T19824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.475814][T19824] do_syscall_64+0x174/0x580 [ 584.475841][T19824] ? trace_irq_disable+0x3b/0x140 [ 584.475862][T19824] ? clear_bhb_loop+0x70/0xc0 [ 584.475886][T19824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.475905][T19824] RIP: 0033:0x7f20a139e0d9 [ 584.475924][T19824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.475939][T19824] RSP: 002b:00007f20a21b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.475960][T19824] RAX: ffffffffffffffda RBX: 00007f20a1625fa0 RCX: 00007f20a139e0d9 [ 584.475974][T19824] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 584.475986][T19824] RBP: 00007f20a21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 584.475998][T19824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.476010][T19824] R13: 00007f20a1626038 R14: 00007f20a1625fa0 R15: 00007ffc22f5dbf8 [ 584.476040][T19824] [ 585.427278][T19847] netlink: 'syz.1.3662': attribute type 1 has an invalid length. [ 585.449237][T19847] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3662'. [ 585.489410][T19850] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3662'. [ 585.524069][T19847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3662'. [ 585.794250][T19868] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3669'. [ 585.853754][T19876] FAULT_INJECTION: forcing a failure. [ 585.853754][T19876] name failslab, interval 1, probability 0, space 0, times 0 [ 585.866525][T19876] CPU: 1 UID: 0 PID: 19876 Comm: syz.4.3672 Not tainted syzkaller #0 PREEMPT(full) [ 585.866554][T19876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 585.866566][T19876] Call Trace: [ 585.866574][T19876] [ 585.866583][T19876] dump_stack_lvl+0xe8/0x150 [ 585.866616][T19876] should_fail_ex+0x40c/0x560 [ 585.866644][T19876] should_failslab+0xa8/0x100 [ 585.866673][T19876] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 585.866705][T19876] ? skb_clone+0x212/0x3a0 [ 585.866727][T19876] ? skb_clone+0x212/0x3a0 [ 585.866749][T19876] ? run_filter+0x23/0x270 [ 585.866782][T19876] skb_clone+0x212/0x3a0 [ 585.866802][T19876] ? packet_rcv+0x563/0x16f0 [ 585.866832][T19876] packet_rcv+0x65d/0x16f0 [ 585.866871][T19876] __netif_receive_skb_core+0xb7d/0x30b0 [ 585.866907][T19876] ? kernel_text_address+0xa5/0xe0 [ 585.866937][T19876] ? unwind_get_return_address+0x4d/0x90 [ 585.866966][T19876] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 585.866994][T19876] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 585.867025][T19876] ? __lock_acquire+0x683/0x2cf0 [ 585.867109][T19876] ? kasan_save_track+0x4f/0x80 [ 585.867131][T19876] ? __kasan_slab_alloc+0x6c/0x80 [ 585.867162][T19876] __netif_receive_skb_list_core+0x24d/0x830 [ 585.867204][T19876] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 585.867229][T19876] ? lockdep_hardirqs_on+0x7a/0x110 [ 585.867257][T19876] ? seqcount_lockdep_reader_access+0xea/0x100 [ 585.867283][T19876] ? ktime_get_with_offset+0x27f/0x2d0 [ 585.867312][T19876] netif_receive_skb_list_internal+0x995/0xcf0 [ 585.867345][T19876] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 585.867371][T19876] ? eth_type_trans+0x352/0x800 [ 585.867395][T19876] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 585.867433][T19876] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 585.867464][T19876] netif_receive_skb_list+0x67/0x480 [ 585.867489][T19876] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 585.867517][T19876] bpf_test_run_xdp_live+0x1875/0x1c20 [ 585.867554][T19876] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 585.867589][T19876] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 585.867613][T19876] ? 0xffffffffa0205540 [ 585.867686][T19876] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 585.867725][T19876] ? _copy_from_user+0x94/0xb0 [ 585.867750][T19876] ? bpf_test_init+0x113/0x150 [ 585.867770][T19876] ? xdp_convert_md_to_buff+0x5b/0x330 [ 585.867797][T19876] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 585.867838][T19876] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 585.867867][T19876] ? __fget_files+0x2a/0x420 [ 585.867898][T19876] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 585.867923][T19876] bpf_prog_test_run+0x2c5/0x340 [ 585.867955][T19876] __sys_bpf+0xa22/0xd90 [ 585.867989][T19876] ? __pfx___sys_bpf+0x10/0x10 [ 585.868026][T19876] ? __fget_files+0x2a/0x420 [ 585.868070][T19876] ? ksys_write+0x242/0x270 [ 585.868101][T19876] ? __pfx_ksys_write+0x10/0x10 [ 585.868136][T19876] __x64_sys_bpf+0xba/0xd0 [ 585.868158][T19876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.868180][T19876] do_syscall_64+0x174/0x580 [ 585.868204][T19876] ? trace_irq_disable+0x3b/0x140 [ 585.868226][T19876] ? clear_bhb_loop+0x70/0xc0 [ 585.868252][T19876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.868271][T19876] RIP: 0033:0x7f20a139e0d9 [ 585.868289][T19876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.868306][T19876] RSP: 002b:00007f20a21b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.868327][T19876] RAX: ffffffffffffffda RBX: 00007f20a1625fa0 RCX: 00007f20a139e0d9 [ 585.868342][T19876] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 585.868354][T19876] RBP: 00007f20a21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 585.868366][T19876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.868377][T19876] R13: 00007f20a1626038 R14: 00007f20a1625fa0 R15: 00007ffc22f5dbf8 [ 585.868409][T19876] [ 585.871138][T19875] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3670'. [ 586.143696][T19883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.343602][T19875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.587615][T19900] FAULT_INJECTION: forcing a failure. [ 586.587615][T19900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.603965][T19900] CPU: 0 UID: 0 PID: 19900 Comm: syz.3.3678 Not tainted syzkaller #0 PREEMPT(full) [ 586.603994][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.604005][T19900] Call Trace: [ 586.604013][T19900] [ 586.604022][T19900] dump_stack_lvl+0xe8/0x150 [ 586.604055][T19900] should_fail_ex+0x40c/0x560 [ 586.604082][T19900] _copy_from_iter+0x1d3/0x1660 [ 586.604177][T19900] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 586.604203][T19900] ? rcu_is_watching+0x15/0xb0 [ 586.604241][T19900] ? trace_kmem_cache_alloc+0x29/0xe0 [ 586.604265][T19900] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 586.604287][T19900] ? __pfx__copy_from_iter+0x10/0x10 [ 586.604309][T19900] ? __alloc_skb+0x276/0x7a0 [ 586.604326][T19900] ? __alloc_skb+0x276/0x7a0 [ 586.604349][T19900] ? netlink_sendmsg+0x650/0xb40 [ 586.604402][T19900] ? skb_put+0x112/0x210 [ 586.604424][T19900] netlink_sendmsg+0x6c0/0xb40 [ 586.604447][T19900] ? lapic_next_event+0x11/0x20 [ 586.604483][T19900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.604510][T19900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 586.604546][T19900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 586.604567][T19900] sock_sendmsg_nosec+0x13a/0x180 [ 586.604597][T19900] ____sys_sendmsg+0x54e/0x850 [ 586.604624][T19900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.604650][T19900] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 586.604684][T19900] ? import_iovec+0x73/0xa0 [ 586.604713][T19900] ___sys_sendmsg+0x2a5/0x360 [ 586.604731][T19900] ? __lock_acquire+0x683/0x2cf0 [ 586.604770][T19900] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.604827][T19900] ? __fget_files+0x2a/0x420 [ 586.604851][T19900] ? __fget_files+0x3a2/0x420 [ 586.604885][T19900] __x64_sys_sendmsg+0x1b1/0x290 [ 586.604909][T19900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.604950][T19900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.604972][T19900] do_syscall_64+0x174/0x580 [ 586.605000][T19900] ? trace_irq_disable+0x3b/0x140 [ 586.605023][T19900] ? clear_bhb_loop+0x70/0xc0 [ 586.605047][T19900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.605067][T19900] RIP: 0033:0x7fc52d79e0d9 [ 586.605085][T19900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.605102][T19900] RSP: 002b:00007fc52e6ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.605124][T19900] RAX: ffffffffffffffda RBX: 00007fc52da25fa0 RCX: 00007fc52d79e0d9 [ 586.605137][T19900] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 586.605149][T19900] RBP: 00007fc52e6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 586.605160][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.605172][T19900] R13: 00007fc52da26038 R14: 00007fc52da25fa0 R15: 00007ffcdf8a5f48 [ 586.605202][T19900] [ 587.403559][T19917] FAULT_INJECTION: forcing a failure. [ 587.403559][T19917] name failslab, interval 1, probability 0, space 0, times 0 [ 587.416473][T19917] CPU: 1 UID: 0 PID: 19917 Comm: syz.1.3684 Not tainted syzkaller #0 PREEMPT(full) [ 587.416502][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.416513][T19917] Call Trace: [ 587.416521][T19917] [ 587.416530][T19917] dump_stack_lvl+0xe8/0x150 [ 587.416570][T19917] should_fail_ex+0x40c/0x560 [ 587.416602][T19917] should_failslab+0xa8/0x100 [ 587.416633][T19917] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 587.416658][T19917] ? skb_clone+0x212/0x3a0 [ 587.416691][T19917] ? skb_clone+0x212/0x3a0 [ 587.416714][T19917] ? run_filter+0x23/0x270 [ 587.416751][T19917] skb_clone+0x212/0x3a0 [ 587.416773][T19917] ? packet_rcv+0x563/0x16f0 [ 587.416804][T19917] packet_rcv+0x65d/0x16f0 [ 587.416845][T19917] __netif_receive_skb_core+0xb7d/0x30b0 [ 587.416881][T19917] ? kernel_text_address+0xa5/0xe0 [ 587.416916][T19917] ? unwind_get_return_address+0x4d/0x90 [ 587.416947][T19917] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 587.416978][T19917] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 587.417032][T19917] ? kasan_save_track+0x4f/0x80 [ 587.417056][T19917] ? __kasan_slab_alloc+0x6c/0x80 [ 587.417080][T19917] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 587.417106][T19917] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 587.417130][T19917] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 587.417158][T19917] __netif_receive_skb_list_core+0x24d/0x830 [ 587.417201][T19917] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 587.417242][T19917] netif_receive_skb_list_internal+0x995/0xcf0 [ 587.417275][T19917] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 587.417300][T19917] ? eth_type_trans+0x352/0x800 [ 587.417325][T19917] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 587.417363][T19917] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 587.417396][T19917] netif_receive_skb_list+0x67/0x480 [ 587.417422][T19917] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 587.417450][T19917] bpf_test_run_xdp_live+0x1875/0x1c20 [ 587.417489][T19917] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 587.417526][T19917] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 587.417553][T19917] ? 0xffffffffa0205540 [ 587.417626][T19917] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 587.417661][T19917] ? _copy_from_user+0x94/0xb0 [ 587.417699][T19917] ? bpf_test_init+0x113/0x150 [ 587.417720][T19917] ? xdp_convert_md_to_buff+0x5b/0x330 [ 587.417747][T19917] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 587.417790][T19917] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 587.417820][T19917] ? __fget_files+0x2a/0x420 [ 587.417852][T19917] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 587.417875][T19917] bpf_prog_test_run+0x2c5/0x340 [ 587.417908][T19917] __sys_bpf+0xa22/0xd90 [ 587.417947][T19917] ? __pfx___sys_bpf+0x10/0x10 [ 587.417985][T19917] ? __fget_files+0x2a/0x420 [ 587.418029][T19917] ? ksys_write+0x242/0x270 [ 587.418063][T19917] ? __pfx_ksys_write+0x10/0x10 [ 587.418098][T19917] __x64_sys_bpf+0xba/0xd0 [ 587.418121][T19917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.418144][T19917] do_syscall_64+0x174/0x580 [ 587.418177][T19917] ? clear_bhb_loop+0x70/0xc0 [ 587.418203][T19917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.418223][T19917] RIP: 0033:0x7f471af9e0d9 [ 587.418264][T19917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.418282][T19917] RSP: 002b:00007f471be51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.418305][T19917] RAX: ffffffffffffffda RBX: 00007f471b225fa0 RCX: 00007f471af9e0d9 [ 587.418320][T19917] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 587.418333][T19917] RBP: 00007f471be51090 R08: 0000000000000000 R09: 0000000000000000 [ 587.418344][T19917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.418356][T19917] R13: 00007f471b226038 R14: 00007f471b225fa0 R15: 00007ffd1b9818a8 [ 587.418390][T19917] [ 588.031887][T19925] xfrm0 speed is unknown, defaulting to 1000 [ 588.220315][T19931] No such timeout policy "syz1" [ 588.404409][T19939] netlink: 'syz.2.3691': attribute type 1 has an invalid length. [ 588.545885][T19939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 588.763081][T19944] bond1: (slave veth3): Enslaving as an active interface with a down link [ 588.804859][T19955] netlink: 'syz.3.3694': attribute type 32 has an invalid length. [ 588.844612][T19946] "syz.4.3693" (19946) uses obsolete ecb(arc4) skcipher [ 588.876137][T19947] bond1 (unregistering): (slave veth3): Releasing active interface [ 588.939063][T19947] bond1 (unregistering): Released all slaves [ 589.033013][T19961] __nla_validate_parse: 7 callbacks suppressed [ 589.033036][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3696'. [ 589.056873][T19959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3695'. [ 589.515809][T19961] bond2: option broadcast_neighbor: invalid value (3) [ 589.552959][T19961] bond2 (unregistering): Released all slaves [ 589.721269][T19974] syzkaller0: entered promiscuous mode [ 589.746893][T19974] syzkaller0: entered allmulticast mode [ 589.901012][T19991] No such timeout policy "syz1" [ 589.935805][T19992] sctp: [Deprecated]: syz.2.3703 (pid 19992) Use of int in maxseg socket option. [ 589.935805][T19992] Use struct sctp_assoc_value instead [ 590.010761][T19989] syzkaller0: entered promiscuous mode [ 590.026830][T19989] syzkaller0: entered allmulticast mode [ 590.105566][T20000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3707'. [ 590.150841][T20003] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3706'. [ 590.455060][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3706'. [ 590.889760][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 590.968161][T20023] bond1: option broadcast_neighbor: invalid value (3) [ 590.986868][T20023] bond1 (unregistering): Released all slaves [ 591.260626][T20036] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3719'. [ 591.287595][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3717'. [ 591.345635][T20029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.424788][T20044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3721'. [ 591.495233][T20044] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 591.629497][T20057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'. [ 591.666235][T20060] FAULT_INJECTION: forcing a failure. [ 591.666235][T20060] name failslab, interval 1, probability 0, space 0, times 0 [ 591.678996][T20060] CPU: 0 UID: 0 PID: 20060 Comm: syz.0.3725 Not tainted syzkaller #0 PREEMPT(full) [ 591.679024][T20060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 591.679036][T20060] Call Trace: [ 591.679044][T20060] [ 591.679052][T20060] dump_stack_lvl+0xe8/0x150 [ 591.679087][T20060] should_fail_ex+0x40c/0x560 [ 591.679124][T20060] should_failslab+0xa8/0x100 [ 591.679153][T20060] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 591.679177][T20060] ? skb_clone+0x212/0x3a0 [ 591.679200][T20060] ? skb_clone+0x212/0x3a0 [ 591.679222][T20060] ? run_filter+0x23/0x270 [ 591.679256][T20060] skb_clone+0x212/0x3a0 [ 591.679277][T20060] ? packet_rcv+0x563/0x16f0 [ 591.679305][T20060] packet_rcv+0x65d/0x16f0 [ 591.679345][T20060] __netif_receive_skb_core+0xb7d/0x30b0 [ 591.679381][T20060] ? kernel_text_address+0xa5/0xe0 [ 591.679413][T20060] ? unwind_get_return_address+0x4d/0x90 [ 591.679442][T20060] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 591.679471][T20060] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 591.679525][T20060] ? kasan_save_track+0x4f/0x80 [ 591.679548][T20060] ? __kasan_slab_alloc+0x6c/0x80 [ 591.679571][T20060] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 591.679595][T20060] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 591.679615][T20060] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 591.679639][T20060] __netif_receive_skb_list_core+0x24d/0x830 [ 591.679678][T20060] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 591.679713][T20060] netif_receive_skb_list_internal+0x995/0xcf0 [ 591.679744][T20060] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 591.679769][T20060] ? eth_type_trans+0x352/0x800 [ 591.679793][T20060] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 591.679829][T20060] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 591.679859][T20060] netif_receive_skb_list+0x67/0x480 [ 591.679883][T20060] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 591.679909][T20060] bpf_test_run_xdp_live+0x1875/0x1c20 [ 591.679946][T20060] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 591.679980][T20060] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 591.680004][T20060] ? 0xffffffffa0205540 [ 591.680075][T20060] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 591.680118][T20060] ? _copy_from_user+0x94/0xb0 [ 591.680143][T20060] ? bpf_test_init+0x113/0x150 [ 591.680163][T20060] ? xdp_convert_md_to_buff+0x5b/0x330 [ 591.680189][T20060] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 591.680228][T20060] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 591.680257][T20060] ? __fget_files+0x2a/0x420 [ 591.680286][T20060] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 591.680310][T20060] bpf_prog_test_run+0x2c5/0x340 [ 591.680340][T20060] __sys_bpf+0xa22/0xd90 [ 591.680374][T20060] ? __pfx___sys_bpf+0x10/0x10 [ 591.680411][T20060] ? __fget_files+0x2a/0x420 [ 591.680454][T20060] ? ksys_write+0x242/0x270 [ 591.680489][T20060] ? __pfx_ksys_write+0x10/0x10 [ 591.680523][T20060] __x64_sys_bpf+0xba/0xd0 [ 591.680546][T20060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.680568][T20060] do_syscall_64+0x174/0x580 [ 591.680598][T20060] ? trace_irq_disable+0x3b/0x140 [ 591.680620][T20060] ? clear_bhb_loop+0x70/0xc0 [ 591.680645][T20060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.680665][T20060] RIP: 0033:0x7eff7199e0d9 [ 591.680684][T20060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.680701][T20060] RSP: 002b:00007eff727ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.680724][T20060] RAX: ffffffffffffffda RBX: 00007eff71c25fa0 RCX: 00007eff7199e0d9 [ 591.680737][T20060] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 591.680749][T20060] RBP: 00007eff727ff090 R08: 0000000000000000 R09: 0000000000000000 [ 591.680762][T20060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.680772][T20060] R13: 00007eff71c26038 R14: 00007eff71c25fa0 R15: 00007fffa4783a68 [ 591.680806][T20060] [ 592.073855][T20057] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 592.364957][T20075] syzkaller0: entered promiscuous mode [ 592.401507][T20075] syzkaller0: entered allmulticast mode [ 592.418938][T20069] lo: entered allmulticast mode [ 592.441472][T20069] lo: left allmulticast mode [ 592.458618][T20086] netlink: 'syz.3.3730': attribute type 2 has an invalid length. [ 592.616833][T20092] netlink: 'syz.1.3731': attribute type 11 has an invalid length. [ 592.798860][T20103] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 592.846205][T20105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.873849][T20112] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 592.895909][T20115] netlink: 'syz.2.3736': attribute type 3 has an invalid length. [ 593.394026][T20125] bond0: left promiscuous mode [ 593.423360][T20125] bond_slave_0: left promiscuous mode [ 593.432981][T20125] bond_slave_1: left promiscuous mode [ 593.613105][T20125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.110760][T20150] __nla_validate_parse: 11 callbacks suppressed [ 594.110782][T20150] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3751'. [ 594.165684][T20152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3751'. [ 594.462913][T20164] syzkaller0: entered promiscuous mode [ 594.476166][T20164] syzkaller0: entered allmulticast mode [ 594.772063][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3761'. [ 594.899041][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 594.919703][T20187] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 595.064661][T20197] veth0_vlan: entered allmulticast mode [ 595.076409][T20179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3760'. [ 595.085661][T20197] pim6reg: entered allmulticast mode [ 595.487840][T20216] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3772'. [ 595.572473][T20219] syzkaller0: entered promiscuous mode [ 595.580993][T20219] syzkaller0: entered allmulticast mode [ 595.608478][T20219] tipc: Enabled bearer , priority 0 [ 595.651621][T20221] bond2: option arp_interval: invalid value (18446744073709551615) [ 595.659941][T20221] bond2: option arp_interval: allowed values 0 - 2147483647 [ 595.671314][T20221] bond2 (unregistering): Released all slaves [ 595.701634][T20218] tipc: Resetting bearer [ 595.731975][T20218] tipc: Disabling bearer [ 595.976147][T20234] netlink: 'syz.3.3776': attribute type 1 has an invalid length. [ 596.064970][T20244] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 596.156022][T20239] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.193811][T20239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.282432][T20257] No such timeout policy "syz1" [ 596.519418][T20239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.570562][T20239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 596.596360][T20239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 596.619691][T20239] veth1_vlan: left promiscuous mode [ 596.627368][T20239] veth0_vlan: left promiscuous mode [ 596.628005][T20268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3787'. [ 596.634703][T20239] veth0_vlan: entered promiscuous mode [ 596.642458][T20268] netlink: 'syz.3.3787': attribute type 20 has an invalid length. [ 596.651096][T20239] veth1_vlan: entered promiscuous mode [ 596.655600][T20268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3787'. [ 596.667280][T20239] veth1_macvtap: left promiscuous mode [ 596.678446][T20239] veth1_macvtap: entered promiscuous mode [ 596.692134][T20239] 8021q: adding VLAN 0 to HW filter on device eth0 [ 596.700461][T20239] 8021q: adding VLAN 0 to HW filter on device eth1 [ 596.709060][T20239] 8021q: adding VLAN 0 to HW filter on device eth2 [ 596.717408][T20239] 8021q: adding VLAN 0 to HW filter on device eth3 [ 596.728414][T20239] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 597.024443][T19514] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.048528][ T1046] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.098038][ T1046] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.252230][ T1046] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.309665][T20293] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3791'. [ 597.441861][T20274] xfrm0 speed is unknown, defaulting to 1000 [ 597.590233][T20307] netlink: 'syz.4.3794': attribute type 39 has an invalid length. [ 598.414991][T20328] bridge_slave_0: left allmulticast mode [ 598.428398][T20328] bridge_slave_0: left promiscuous mode [ 598.438114][T20328] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.454880][T20331] FAULT_INJECTION: forcing a failure. [ 598.454880][T20331] name failslab, interval 1, probability 0, space 0, times 0 [ 598.467803][T20331] CPU: 1 UID: 0 PID: 20331 Comm: syz.4.3802 Not tainted syzkaller #0 PREEMPT(full) [ 598.467832][T20331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.467844][T20331] Call Trace: [ 598.467852][T20331] [ 598.467861][T20331] dump_stack_lvl+0xe8/0x150 [ 598.467895][T20331] should_fail_ex+0x40c/0x560 [ 598.467922][T20331] should_failslab+0xa8/0x100 [ 598.467952][T20331] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 598.467977][T20331] ? skb_clone+0x212/0x3a0 [ 598.467999][T20331] ? skb_clone+0x212/0x3a0 [ 598.468022][T20331] ? run_filter+0x23/0x270 [ 598.468056][T20331] skb_clone+0x212/0x3a0 [ 598.468076][T20331] ? packet_rcv+0x563/0x16f0 [ 598.468106][T20331] packet_rcv+0x65d/0x16f0 [ 598.468145][T20331] __netif_receive_skb_core+0xb7d/0x30b0 [ 598.468180][T20331] ? kernel_text_address+0xa5/0xe0 [ 598.468210][T20331] ? unwind_get_return_address+0x4d/0x90 [ 598.468238][T20331] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 598.468265][T20331] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 598.468316][T20331] ? kasan_save_track+0x4f/0x80 [ 598.468336][T20331] ? __kasan_slab_alloc+0x6c/0x80 [ 598.468357][T20331] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 598.468380][T20331] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 598.468402][T20331] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 598.468429][T20331] __netif_receive_skb_list_core+0x24d/0x830 [ 598.468482][T20331] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 598.468520][T20331] netif_receive_skb_list_internal+0x995/0xcf0 [ 598.468552][T20331] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 598.468575][T20331] ? eth_type_trans+0x352/0x800 [ 598.468598][T20331] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 598.468633][T20331] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 598.468662][T20331] netif_receive_skb_list+0x67/0x480 [ 598.468687][T20331] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 598.468713][T20331] bpf_test_run_xdp_live+0x1875/0x1c20 [ 598.468750][T20331] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 598.468785][T20331] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 598.468810][T20331] ? 0xffffffffa0205540 [ 598.468880][T20331] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 598.468914][T20331] ? _copy_from_user+0x94/0xb0 [ 598.468939][T20331] ? bpf_test_init+0x113/0x150 [ 598.468960][T20331] ? xdp_convert_md_to_buff+0x5b/0x330 [ 598.468987][T20331] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 598.469026][T20331] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 598.469056][T20331] ? __fget_files+0x2a/0x420 [ 598.469086][T20331] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 598.469110][T20331] bpf_prog_test_run+0x2c5/0x340 [ 598.469142][T20331] __sys_bpf+0xa22/0xd90 [ 598.469175][T20331] ? __pfx___sys_bpf+0x10/0x10 [ 598.469212][T20331] ? __fget_files+0x2a/0x420 [ 598.469260][T20331] ? ksys_write+0x242/0x270 [ 598.469291][T20331] ? __pfx_ksys_write+0x10/0x10 [ 598.469327][T20331] __x64_sys_bpf+0xba/0xd0 [ 598.469350][T20331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.469372][T20331] do_syscall_64+0x174/0x580 [ 598.469401][T20331] ? trace_irq_disable+0x3b/0x140 [ 598.469425][T20331] ? clear_bhb_loop+0x70/0xc0 [ 598.469458][T20331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.469477][T20331] RIP: 0033:0x7f20a139e0d9 [ 598.469497][T20331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.469514][T20331] RSP: 002b:00007f20a21b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.469537][T20331] RAX: ffffffffffffffda RBX: 00007f20a1625fa0 RCX: 00007f20a139e0d9 [ 598.469552][T20331] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 598.469564][T20331] RBP: 00007f20a21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 598.469577][T20331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.469590][T20331] R13: 00007f20a1626038 R14: 00007f20a1625fa0 R15: 00007ffc22f5dbf8 [ 598.469621][T20331] [ 598.995696][T20328] bridge_slave_1: left allmulticast mode [ 599.002694][T20328] bridge_slave_1: left promiscuous mode [ 599.008462][T20328] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.035857][T20328] bond0: (slave bond_slave_0): Releasing backup interface [ 599.044180][T20328] bond_slave_0: left allmulticast mode [ 599.056107][T20328] bond0: (slave bond_slave_1): Releasing backup interface [ 599.066979][T20328] bond_slave_1: left allmulticast mode [ 599.080790][T20328] team0: Port device team_slave_0 removed [ 599.092694][T20328] team0: Port device team_slave_1 removed [ 599.099678][T20328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.107957][T20328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.117398][T20328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.126630][T20328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.136576][T20328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 599.688134][T19514] IPVS: starting estimator thread 0... [ 599.793259][T20350] IPVS: using max 25 ests per chain, 60000 per kthread [ 599.823781][T20354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3811'. [ 599.892302][T20358] FAULT_INJECTION: forcing a failure. [ 599.892302][T20358] name failslab, interval 1, probability 0, space 0, times 0 [ 599.905158][T20358] CPU: 0 UID: 0 PID: 20358 Comm: syz.4.3813 Not tainted syzkaller #0 PREEMPT(full) [ 599.905186][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.905198][T20358] Call Trace: [ 599.905206][T20358] [ 599.905215][T20358] dump_stack_lvl+0xe8/0x150 [ 599.905250][T20358] should_fail_ex+0x40c/0x560 [ 599.905277][T20358] should_failslab+0xa8/0x100 [ 599.905305][T20358] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 599.905328][T20358] ? skb_clone+0x212/0x3a0 [ 599.905347][T20358] ? skb_clone+0x212/0x3a0 [ 599.905370][T20358] ? run_filter+0x23/0x270 [ 599.905404][T20358] skb_clone+0x212/0x3a0 [ 599.905434][T20358] ? packet_rcv+0x563/0x16f0 [ 599.905463][T20358] packet_rcv+0x65d/0x16f0 [ 599.905501][T20358] __netif_receive_skb_core+0xb7d/0x30b0 [ 599.905536][T20358] ? kernel_text_address+0xa5/0xe0 [ 599.905567][T20358] ? unwind_get_return_address+0x4d/0x90 [ 599.905592][T20358] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 599.905620][T20358] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 599.905668][T20358] ? kasan_save_track+0x4f/0x80 [ 599.905690][T20358] ? __kasan_slab_alloc+0x6c/0x80 [ 599.905711][T20358] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 599.905735][T20358] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 599.905756][T20358] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 599.905781][T20358] __netif_receive_skb_list_core+0x24d/0x830 [ 599.905821][T20358] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 599.905857][T20358] netif_receive_skb_list_internal+0x995/0xcf0 [ 599.905888][T20358] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 599.905911][T20358] ? eth_type_trans+0x352/0x800 [ 599.905933][T20358] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 599.905969][T20358] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 599.905999][T20358] netif_receive_skb_list+0x67/0x480 [ 599.906024][T20358] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 599.906049][T20358] bpf_test_run_xdp_live+0x1875/0x1c20 [ 599.906082][T20358] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 599.906115][T20358] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 599.906138][T20358] ? 0xffffffffa0205540 [ 599.906202][T20358] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 599.906235][T20358] ? _copy_from_user+0x94/0xb0 [ 599.906261][T20358] ? bpf_test_init+0x113/0x150 [ 599.906281][T20358] ? xdp_convert_md_to_buff+0x5b/0x330 [ 599.906306][T20358] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 599.906347][T20358] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 599.906373][T20358] ? __fget_files+0x2a/0x420 [ 599.906403][T20358] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 599.906436][T20358] bpf_prog_test_run+0x2c5/0x340 [ 599.906466][T20358] __sys_bpf+0xa22/0xd90 [ 599.906494][T20358] ? __pfx___sys_bpf+0x10/0x10 [ 599.906532][T20358] ? __fget_files+0x2a/0x420 [ 599.906571][T20358] ? ksys_write+0x242/0x270 [ 599.906607][T20358] ? __pfx_ksys_write+0x10/0x10 [ 599.906638][T20358] __x64_sys_bpf+0xba/0xd0 [ 599.906660][T20358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.906681][T20358] do_syscall_64+0x174/0x580 [ 599.906709][T20358] ? trace_irq_disable+0x3b/0x140 [ 599.906731][T20358] ? clear_bhb_loop+0x70/0xc0 [ 599.906754][T20358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.906772][T20358] RIP: 0033:0x7f20a139e0d9 [ 599.906789][T20358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.906805][T20358] RSP: 002b:00007f20a21b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.906826][T20358] RAX: ffffffffffffffda RBX: 00007f20a1625fa0 RCX: 00007f20a139e0d9 [ 599.906840][T20358] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 599.906853][T20358] RBP: 00007f20a21b7090 R08: 0000000000000000 R09: 0000000000000000 [ 599.906866][T20358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.906877][T20358] R13: 00007f20a1626038 R14: 00007f20a1625fa0 R15: 00007ffc22f5dbf8 [ 599.906909][T20358] [ 599.907021][T20359] xt_hashlimit: size too large, truncated to 1048576 [ 600.341958][T20359] xt_hashlimit: max too large, truncated to 1048576 [ 600.418963][T20365] syzkaller0: entered promiscuous mode [ 600.437570][T20365] syzkaller0: entered allmulticast mode [ 600.445615][T20369] netlink: 'syz.3.3816': attribute type 29 has an invalid length. [ 600.457404][T20365] tipc: Started in network mode [ 600.463661][T20365] tipc: Node identity 12a10f7c19c, cluster identity 4711 [ 600.485143][T20365] tipc: Enabled bearer , priority 0 [ 600.507208][T20364] tipc: Resetting bearer [ 600.641064][T20364] tipc: Disabling bearer [ 600.904251][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3822'. [ 600.967346][T20383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3822'. [ 601.090133][T20395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3826'. [ 601.202932][T20395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.253456][T20398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.344445][T20395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.664379][T20413] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3833'. [ 602.047388][T20426] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3840'. [ 602.110442][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3842'. [ 602.428428][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'. [ 602.587658][T20460] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 602.678466][T20460] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3848'. [ 602.697689][T20470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3853'. [ 602.848157][T20465] FAULT_INJECTION: forcing a failure. [ 602.848157][T20465] name failslab, interval 1, probability 0, space 0, times 0 [ 602.860920][T20465] CPU: 1 UID: 0 PID: 20465 Comm: syz.1.3852 Not tainted syzkaller #0 PREEMPT(full) [ 602.860948][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 602.860960][T20465] Call Trace: [ 602.860968][T20465] [ 602.860977][T20465] dump_stack_lvl+0xe8/0x150 [ 602.861012][T20465] should_fail_ex+0x40c/0x560 [ 602.861040][T20465] should_failslab+0xa8/0x100 [ 602.861071][T20465] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 602.861095][T20465] ? skb_clone+0x212/0x3a0 [ 602.861118][T20465] ? skb_clone+0x212/0x3a0 [ 602.861141][T20465] ? run_filter+0x23/0x270 [ 602.861173][T20465] skb_clone+0x212/0x3a0 [ 602.861194][T20465] ? packet_rcv+0x563/0x16f0 [ 602.861225][T20465] packet_rcv+0x65d/0x16f0 [ 602.861265][T20465] __netif_receive_skb_core+0xb7d/0x30b0 [ 602.861300][T20465] ? kernel_text_address+0xa5/0xe0 [ 602.861332][T20465] ? unwind_get_return_address+0x4d/0x90 [ 602.861362][T20465] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 602.861390][T20465] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 602.861451][T20465] ? kasan_save_track+0x4f/0x80 [ 602.861475][T20465] ? __kasan_slab_alloc+0x6c/0x80 [ 602.861498][T20465] ? kmem_cache_alloc_bulk_noprof+0x4a0/0x7b0 [ 602.861523][T20465] ? bpf_test_run_xdp_live+0x16e9/0x1c20 [ 602.861545][T20465] ? bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 602.861572][T20465] __netif_receive_skb_list_core+0x24d/0x830 [ 602.861611][T20465] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 602.861648][T20465] netif_receive_skb_list_internal+0x995/0xcf0 [ 602.861683][T20465] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 602.861707][T20465] ? eth_type_trans+0x352/0x800 [ 602.861731][T20465] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 602.861763][T20465] ? __xdp_build_skb_from_frame+0x324/0x6a0 [ 602.861787][T20465] netif_receive_skb_list+0x67/0x480 [ 602.861806][T20465] ? bpf_test_run_xdp_live+0x185a/0x1c20 [ 602.861827][T20465] bpf_test_run_xdp_live+0x1875/0x1c20 [ 602.861855][T20465] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 602.861882][T20465] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 602.861900][T20465] ? 0xffffffffa0205540 [ 602.861956][T20465] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 602.861981][T20465] ? _copy_from_user+0x94/0xb0 [ 602.862002][T20465] ? bpf_test_init+0x113/0x150 [ 602.862017][T20465] ? xdp_convert_md_to_buff+0x5b/0x330 [ 602.862038][T20465] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 602.862068][T20465] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 602.862100][T20465] ? __fget_files+0x2a/0x420 [ 602.862127][T20465] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 602.862146][T20465] bpf_prog_test_run+0x2c5/0x340 [ 602.862178][T20465] __sys_bpf+0xa22/0xd90 [ 602.862204][T20465] ? __pfx___sys_bpf+0x10/0x10 [ 602.862232][T20465] ? __fget_files+0x2a/0x420 [ 602.862265][T20465] ? ksys_write+0x242/0x270 [ 602.862290][T20465] ? __pfx_ksys_write+0x10/0x10 [ 602.862316][T20465] __x64_sys_bpf+0xba/0xd0 [ 602.862334][T20465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.862351][T20465] do_syscall_64+0x174/0x580 [ 602.862373][T20465] ? trace_irq_disable+0x3b/0x140 [ 602.862391][T20465] ? clear_bhb_loop+0x70/0xc0 [ 602.862410][T20465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.862425][T20465] RIP: 0033:0x7f471af9e0d9 [ 602.862448][T20465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.862462][T20465] RSP: 002b:00007f471be51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 602.862479][T20465] RAX: ffffffffffffffda RBX: 00007f471b225fa0 RCX: 00007f471af9e0d9 [ 602.862491][T20465] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 602.862502][T20465] RBP: 00007f471be51090 R08: 0000000000000000 R09: 0000000000000000 [ 602.862512][T20465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 602.862521][T20465] R13: 00007f471b226038 R14: 00007f471b225fa0 R15: 00007ffd1b9818a8 [ 602.862547][T20465] [ 603.935526][T20496] xt_hashlimit: size too large, truncated to 1048576 [ 603.943320][T20496] xt_hashlimit: overflow, try lower: 3/0 [ 604.148749][T20511] FAULT_INJECTION: forcing a failure. [ 604.148749][T20511] name failslab, interval 1, probability 0, space 0, times 0 [ 604.181969][T20511] CPU: 1 UID: 0 PID: 20511 Comm: syz.3.3864 Not tainted syzkaller #0 PREEMPT(full) [ 604.181999][T20511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.182010][T20511] Call Trace: [ 604.182018][T20511] [ 604.182027][T20511] dump_stack_lvl+0xe8/0x150 [ 604.182062][T20511] should_fail_ex+0x40c/0x560 [ 604.182092][T20511] should_failslab+0xa8/0x100 [ 604.182119][T20511] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 604.182140][T20511] ? local_lock_release+0x9c/0x160 [ 604.182176][T20511] ? __alloc_skb+0x1d7/0x7a0 [ 604.182191][T20511] ? __alloc_skb+0x1d7/0x7a0 [ 604.182214][T20511] __alloc_skb+0x1d7/0x7a0 [ 604.182237][T20511] netlink_sendmsg+0x5d4/0xb40 [ 604.182268][T20511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.182293][T20511] ? aa_sock_msg_perm+0xf1/0x1b0 [ 604.182325][T20511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.182344][T20511] sock_sendmsg_nosec+0x13a/0x180 [ 604.182372][T20511] ____sys_sendmsg+0x54e/0x850 [ 604.182398][T20511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.182428][T20511] ? import_iovec+0x73/0xa0 [ 604.182454][T20511] ___sys_sendmsg+0x2a5/0x360 [ 604.182472][T20511] ? __lock_acquire+0x683/0x2cf0 [ 604.182501][T20511] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.182526][T20511] ? kstrtouint+0x6e/0xe0 [ 604.182572][T20511] ? __fget_files+0x2a/0x420 [ 604.182592][T20511] ? __fget_files+0x3a2/0x420 [ 604.182624][T20511] __sys_sendmmsg+0x273/0x4d0 [ 604.182650][T20511] ? __pfx___sys_sendmmsg+0x10/0x10 [ 604.182680][T20511] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 604.182795][T20511] ? ksys_write+0x242/0x270 [ 604.182822][T20511] ? __pfx_ksys_write+0x10/0x10 [ 604.182855][T20511] __x64_sys_sendmmsg+0xa0/0xc0 [ 604.182875][T20511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.182894][T20511] do_syscall_64+0x174/0x580 [ 604.182918][T20511] ? trace_irq_disable+0x3b/0x140 [ 604.182939][T20511] ? clear_bhb_loop+0x70/0xc0 [ 604.182962][T20511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.182980][T20511] RIP: 0033:0x7fc52d79e0d9 [ 604.182999][T20511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.183015][T20511] RSP: 002b:00007fc52e6ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 604.183037][T20511] RAX: ffffffffffffffda RBX: 00007fc52da25fa0 RCX: 00007fc52d79e0d9 [ 604.183050][T20511] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 604.183064][T20511] RBP: 00007fc52e6ee090 R08: 0000000000000000 R09: 0000000000000000 [ 604.183075][T20511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.183085][T20511] R13: 00007fc52da26038 R14: 00007fc52da25fa0 R15: 00007ffcdf8a5f48 [ 604.183117][T20511] [ 604.921358][T20532] xfrm0 speed is unknown, defaulting to 1000 [ 605.000067][T20538] __nla_validate_parse: 3 callbacks suppressed [ 605.000092][T20538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3875'. [ 605.201050][T20543] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3876'. [ 605.258587][T20541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3875'. [ 605.270563][T20541] nbd: nbd64 already in use [ 605.640774][T19541] IPVS: starting estimator thread 0... [ 605.931446][T20560] IPVS: using max 25 ests per chain, 60000 per kthread [ 606.280005][T20590] syzkaller0: entered promiscuous mode [ 606.285545][T20590] syzkaller0: entered allmulticast mode [ 606.297154][T20590] tipc: Enabled bearer , priority 0 [ 606.390443][T20589] tipc: Resetting bearer [ 606.462546][T20589] tipc: Disabling bearer [ 607.084739][T20602] netlink: zone id is out of range [ 607.090604][T20602] netlink: set zone limit has 4 unknown bytes [ 607.129037][T20604] FAULT_INJECTION: forcing a failure. [ 607.129037][T20604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.146425][T20604] CPU: 0 UID: 0 PID: 20604 Comm: syz.1.3893 Not tainted syzkaller #0 PREEMPT(full) [ 607.146455][T20604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.146467][T20604] Call Trace: [ 607.146476][T20604] [ 607.146485][T20604] dump_stack_lvl+0xe8/0x150 [ 607.146520][T20604] should_fail_ex+0x40c/0x560 [ 607.146548][T20604] _copy_from_iter+0x1d3/0x1660 [ 607.146570][T20604] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 607.146596][T20604] ? rcu_is_watching+0x15/0xb0 [ 607.146625][T20604] ? trace_kmem_cache_alloc+0x29/0xe0 [ 607.146650][T20604] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 607.146673][T20604] ? __pfx__copy_from_iter+0x10/0x10 [ 607.146695][T20604] ? __alloc_skb+0x276/0x7a0 [ 607.146712][T20604] ? __alloc_skb+0x276/0x7a0 [ 607.146738][T20604] ? netlink_sendmsg+0x650/0xb40 [ 607.146760][T20604] ? skb_put+0x112/0x210 [ 607.146784][T20604] netlink_sendmsg+0x6c0/0xb40 [ 607.146816][T20604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.146844][T20604] ? aa_sock_msg_perm+0xf1/0x1b0 [ 607.146877][T20604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.146899][T20604] sock_sendmsg_nosec+0x13a/0x180 [ 607.146929][T20604] ____sys_sendmsg+0x54e/0x850 [ 607.146958][T20604] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.146990][T20604] ? import_iovec+0x73/0xa0 [ 607.147019][T20604] ___sys_sendmsg+0x2a5/0x360 [ 607.147040][T20604] ? __lock_acquire+0x683/0x2cf0 [ 607.147071][T20604] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.147099][T20604] ? kstrtouint+0x6e/0xe0 [ 607.147148][T20604] ? __fget_files+0x2a/0x420 [ 607.147173][T20604] ? __fget_files+0x3a2/0x420 [ 607.147208][T20604] __sys_sendmmsg+0x273/0x4d0 [ 607.147237][T20604] ? __pfx___sys_sendmmsg+0x10/0x10 [ 607.147268][T20604] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 607.147313][T20604] ? ksys_write+0x242/0x270 [ 607.147343][T20604] ? __pfx_ksys_write+0x10/0x10 [ 607.147388][T20604] __x64_sys_sendmmsg+0xa0/0xc0 [ 607.147410][T20604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.147432][T20604] do_syscall_64+0x174/0x580 [ 607.147461][T20604] ? clear_bhb_loop+0x70/0xc0 [ 607.147482][T20604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.147500][T20604] RIP: 0033:0x7f471af9e0d9 [ 607.147521][T20604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.147535][T20604] RSP: 002b:00007f471be51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 607.147555][T20604] RAX: ffffffffffffffda RBX: 00007f471b225fa0 RCX: 00007f471af9e0d9 [ 607.147569][T20604] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 607.147583][T20604] RBP: 00007f471be51090 R08: 0000000000000000 R09: 0000000000000000 [ 607.147595][T20604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.147606][T20604] R13: 00007f471b226038 R14: 00007f471b225fa0 R15: 00007ffd1b9818a8 [ 607.147638][T20604] [ 607.522411][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'. [ 608.150911][T20634] veth0_vlan: entered allmulticast mode [ 608.302133][T20636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3905'. [ 608.368177][T20636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3905'. [ 608.854330][T20659] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 609.328291][T20672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 609.337337][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3917'. [ 609.527535][T20686] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.572597][T20686] bridge0: entered allmulticast mode [ 609.620129][T20694] bridge_slave_1: left promiscuous mode [ 609.626225][T20694] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.719977][T20698] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3926'. [ 609.730531][T20694] bridge_slave_0: left allmulticast mode [ 609.737241][T20694] bridge_slave_0: left promiscuous mode [ 609.753223][T20694] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.129637][T20718] netlink: 580 bytes leftover after parsing attributes in process `syz.0.3932'. [ 610.396606][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 610.406052][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 610.625903][T20737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3936'. [ 610.653749][T20737] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 610.894691][T20728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 610.940068][T20745] xt_hashlimit: size too large, truncated to 1048576 [ 610.946839][T20745] xt_hashlimit: invalid interval [ 610.952236][T20745] xt_hashlimit: size too large, truncated to 1048576 [ 610.958955][T20745] xt_hashlimit: invalid interval [ 611.115358][T20753] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3942'. [ 611.127379][T20751] syzkaller0: entered promiscuous mode [ 611.133009][T20751] syzkaller0: entered allmulticast mode [ 611.171871][T20751] tipc: Enabled bearer , priority 0 [ 611.194642][T20750] tipc: Resetting bearer [ 611.216806][T20750] tipc: Disabling bearer [ 611.327698][T20671] Bluetooth: hci5: command 0x0406 tx timeout [ 611.335069][T20671] Bluetooth: hci0: command 0x0406 tx timeout [ 611.738740][T20773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3950'. [ 611.921955][T20770] bond1: entered allmulticast mode [ 612.228318][T20788] tipc: Enabled bearer , priority 0 [ 612.247787][T20788] syzkaller0: entered promiscuous mode [ 612.263116][T20788] syzkaller0: entered allmulticast mode [ 612.324748][T20790] batman_adv: batadv0: Adding interface: ip6gretap1 [ 612.344858][T20790] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.374794][T20776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3952'. [ 612.395473][T20790] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 612.396921][T20788] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 612.419209][T20793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3952'. [ 612.471427][T20798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3956'. [ 612.534222][T20794] tipc: Resetting bearer [ 612.635262][T20787] tipc: Resetting bearer [ 612.719635][T20787] tipc: Disabling bearer [ 613.010194][T18660] udevd[18660]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 614.035459][T20853] tipc: Enabled bearer , priority 0 [ 614.060440][T20853] syzkaller0: entered promiscuous mode [ 614.073065][T20853] syzkaller0: entered allmulticast mode [ 614.128036][T20853] tipc: Resetting bearer [ 614.161205][T20853] tipc: Resetting bearer [ 614.247601][T20853] tipc: Disabling bearer [ 614.272038][T20858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.286106][T20858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.354268][T20858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.047529][T20877] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004 [ 615.868147][T20916] No such timeout policy "syz1" [ 615.932474][T20918] __nla_validate_parse: 81 callbacks suppressed [ 615.932497][T20918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3993'. [ 616.014098][T20918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.027645][T20918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.057167][T20929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3995'. [ 616.128791][T20918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.192995][T20934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3998'. [ 616.362954][T20938] IPVS: set_ctl: invalid protocol: 41 172.30.0.3:20004 [ 616.797848][T19538] IPVS: starting estimator thread 0... [ 616.906368][T20950] IPVS: using max 28 ests per chain, 67200 per kthread [ 617.011732][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4004'. [ 617.496748][T20967] No such timeout policy "syz1" [ 617.627449][T20969] netlink: 'syz.1.4010': attribute type 1 has an invalid length. [ 617.727763][T20969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 617.891294][T20987] xt_hashlimit: size too large, truncated to 1048576 [ 617.909610][T20989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4015'. [ 617.960426][T20969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4010'. [ 617.999213][T20993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4016'. [ 618.075864][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.088619][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.162860][T21003] x_tables: duplicate underflow at hook 3 [ 618.265465][T20989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.415289][T21016] syzkaller0: entered promiscuous mode [ 618.420799][T21016] syzkaller0: entered allmulticast mode [ 618.429909][T21016] tipc: Enabled bearer , priority 0 [ 618.437976][T21014] tipc: Resetting bearer [ 618.490921][T21014] tipc: Disabling bearer [ 618.509621][T21019] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 618.554814][T21021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4024'. [ 618.567603][T21021] netlink: 'syz.1.4024': attribute type 49 has an invalid length. [ 618.570561][T21023] netlink: 'syz.2.4025': attribute type 3 has an invalid length. [ 618.613378][T21024] netlink: 'syz.2.4025': attribute type 3 has an invalid length. [ 618.738291][T21030] No such timeout policy "syz1" [ 619.047864][T21053] netlink: 'syz.2.4032': attribute type 16 has an invalid length. [ 619.056104][T21053] netlink: 'syz.2.4032': attribute type 17 has an invalid length. [ 619.151556][T21056] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 619.337702][T21053] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 619.430939][T21068] sctp: [Deprecated]: syz.0.4037 (pid 21068) Use of int in max_burst socket option deprecated. [ 619.430939][T21068] Use struct sctp_assoc_value instead [ 619.679152][T21056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.692271][T21071] syzkaller0: entered promiscuous mode [ 619.713215][T21071] syzkaller0: entered allmulticast mode [ 619.758767][T21071] tipc: Enabled bearer , priority 0 [ 619.937193][T21069] tipc: Resetting bearer [ 620.006762][T21069] tipc: Disabling bearer [ 620.162918][T21089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4043'. [ 620.193394][T21089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.233255][T21089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.247676][T21091] No such timeout policy "syz1" [ 620.377863][T21089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.563785][T21111] xt_hashlimit: size too large, truncated to 1048576 [ 620.584797][T21117] netlink: 'syz.2.4052': attribute type 58 has an invalid length. [ 620.595887][T21117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4052'. [ 620.667862][T21120] netlink: 'syz.2.4052': attribute type 58 has an invalid length. [ 621.117941][T21142] __nla_validate_parse: 2 callbacks suppressed [ 621.117964][T21142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4060'. [ 621.169619][T21142] xt_hashlimit: size too large, truncated to 1048576 [ 621.229446][T21149] No such timeout policy "syz1" [ 621.529299][T21162] syzkaller0: entered promiscuous mode [ 621.535267][T21162] syzkaller0: entered allmulticast mode [ 621.549200][T21162] tipc: Enabled bearer , priority 0 [ 621.566151][T21162] tipc: Resetting bearer [ 621.574486][T21161] tipc: Resetting bearer [ 621.579224][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4066'. [ 621.622194][T21161] tipc: Disabling bearer [ 621.675760][T21164] bond1: option broadcast_neighbor: invalid value (3) [ 621.686018][T21164] bond1 (unregistering): Released all slaves [ 621.795168][T21171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4068'. [ 621.818603][T21171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.833999][T21171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.952870][T21171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.359617][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4074'. [ 622.396618][T21184] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 622.427283][T21184] Dropped outbound packet type=f5 [ 622.507445][T21187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4074'. [ 622.625057][T21194] No such timeout policy "syz1" [ 623.035541][T21204] xfrm0 speed is unknown, defaulting to 1000 [ 623.145488][T21218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'. [ 623.373331][T21230] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4088'. [ 623.449721][T21230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.487153][T21230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 623.654979][T21230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.025634][T21259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4096'. [ 624.058936][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4096'. [ 624.082539][T21260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4096'. [ 624.608335][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.806678][T21289] syzkaller0: entered promiscuous mode [ 624.812216][T21289] syzkaller0: entered allmulticast mode [ 625.050061][T21293] openvswitch: netlink: Missing key (keys=40, expected=100) [ 625.674972][T21314] netlink: 'syz.0.4112': attribute type 6 has an invalid length. [ 625.839392][T21319] gre0: entered promiscuous mode [ 625.861788][T21319] gre0: entered allmulticast mode [ 626.127268][T21319] smc: adding net device wg2 with user defined pnetid SYZ0 [ 626.344087][T21332] dvmrp0: entered allmulticast mode [ 626.353392][T21335] netlink: 'syz.4.4117': attribute type 12 has an invalid length. [ 626.409133][T21339] __nla_validate_parse: 2 callbacks suppressed [ 626.409154][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4120'. [ 626.682465][T18232] Bluetooth: hci2: command 0x0405 tx timeout [ 626.727627][T21351] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4122'. [ 626.734587][T18232] Bluetooth: hci1: command 0x0406 tx timeout [ 627.190330][T17406] page_pool_release_retry() stalled pool shutdown: id 188, 1 inflight 60 sec [ 627.254304][T21363] netlink: 'syz.3.4125': attribute type 1 has an invalid length. [ 627.262163][T21363] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4125'. [ 627.393643][T21371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4129'. [ 627.428905][T21367] netlink: 'syz.0.4128': attribute type 12 has an invalid length. [ 627.502624][T21371] bond2: option broadcast_neighbor: invalid value (3) [ 627.538018][T21371] bond2 (unregistering): Released all slaves [ 627.654662][T21380] ieee802154 phy0 wpan0: encryption failed: -126 [ 627.824311][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'. [ 628.047186][T21407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4139'. [ 628.205789][T21413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4140'. [ 628.220560][T21414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4141'. [ 628.552302][T21430] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 628.561218][T21430] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 628.667396][T21438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4147'. [ 628.710484][T21438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4147'. [ 629.049537][T21448] bond1: option broadcast_neighbor: invalid value (3) [ 629.063369][T21448] bond1 (unregistering): Released all slaves [ 629.465176][T21455] bond0: (slave team0): Releasing backup interface [ 629.480431][T21455] bridge_slave_0: left allmulticast mode [ 629.486150][T21455] bridge_slave_0: left promiscuous mode [ 629.491967][T21455] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.546516][T21455] bridge_slave_1: left allmulticast mode [ 629.573104][T21455] bridge_slave_1: left promiscuous mode [ 629.589460][T21455] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.653010][T21455] bond0: (slave bond_slave_0): Releasing backup interface [ 629.704576][T21455] bond0: (slave bond_slave_1): Releasing backup interface [ 629.758926][T21455] team0: Port device team_slave_0 removed [ 629.791287][T21455] team0: Port device team_slave_1 removed [ 629.811468][T21455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.819753][T21455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.829189][T21455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.845457][T21455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.859465][T21455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 629.877343][T21466] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 629.989519][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 630.000212][T21464] xfrm0 speed is unknown, defaulting to 1000 [ 630.368363][T21472] netlink: 'syz.1.4155': attribute type 11 has an invalid length. [ 630.805740][T21480] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 630.886272][T21482] bridge1: entered allmulticast mode [ 631.597038][T21516] tipc: Enabling of bearer rejected, failed to enable media [ 632.170175][T21532] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 632.191452][T21531] __nla_validate_parse: 7 callbacks suppressed [ 632.191475][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4173'. [ 632.218182][T21532] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 632.228845][T21532] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 632.230212][T21529] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4172'. [ 632.725306][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'. [ 632.734682][T21561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'. [ 632.821325][T21560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'. [ 632.967793][T21568] syz_tun: entered allmulticast mode [ 633.245472][T21572] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 633.287936][T21572] bond1 (unregistering): Released all slaves [ 633.604517][T21583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4190'. [ 633.613494][T21584] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4189'. [ 633.663504][T21583] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 633.882909][T21597] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4193'. [ 633.900606][T21597] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4193'. [ 633.910239][T21597] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4193'. [ 634.107647][T17034] cgroup: fork rejected by pids controller in /syz3 [ 634.154517][T21601] veth5: entered allmulticast mode [ 634.180872][T21601] bond2: (slave veth5): Enslaving as an active interface with an up link [ 634.472191][T21618] netlink: 'syz.2.4202': attribute type 10 has an invalid length. [ 634.477432][T21620] syzkaller0: entered promiscuous mode [ 634.485680][T21620] syzkaller0: entered allmulticast mode [ 634.502503][T21620] tipc: Enabling of bearer rejected, failed to enable media [ 634.535877][T21620] syzkaller0: mtu less than device minimum [ 634.651257][T21630] xfrm0 speed is unknown, defaulting to 1000 [ 634.761105][T21636] netlink: 'syz.2.4207': attribute type 1 has an invalid length. [ 634.916482][T21636] bond1: entered promiscuous mode [ 634.922177][T21636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.736919][T18232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 635.768378][T18232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 635.780291][T18232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 635.790381][T18232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 635.798419][T18232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 636.019731][T21669] syzkaller0: entered promiscuous mode [ 636.039025][T21669] syzkaller0: entered allmulticast mode [ 636.248588][T19538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.280178][T21669] tipc: Enabled bearer , priority 0 [ 636.331213][T21668] tipc: Resetting bearer [ 636.383634][T21668] tipc: Disabling bearer [ 636.495673][T19538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.526013][T21689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.616188][T21689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.648050][T21664] xfrm0 speed is unknown, defaulting to 1000 [ 636.729901][T19538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.797205][T21689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.211373][T19538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.333030][T21711] bond3: entered promiscuous mode [ 637.351008][T21711] 8021q: adding VLAN 0 to HW filter on device bond3 [ 637.529906][T21664] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.537102][T21664] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.544233][T21664] bridge_slave_0: entered allmulticast mode [ 637.551304][T21664] bridge_slave_0: entered promiscuous mode [ 637.561098][T21664] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.581946][T21664] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.592174][T21664] bridge_slave_1: entered allmulticast mode [ 637.600623][T21664] bridge_slave_1: entered promiscuous mode [ 637.649692][T21664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.662965][T21664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.723365][T21726] gretap1: entered promiscuous mode [ 637.731600][T21664] team0: Port device team_slave_0 added [ 637.740631][T21664] team0: Port device team_slave_1 added [ 637.756393][T21726] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 637.790821][T21664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.847865][T21664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.888704][T21664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.928027][T18232] Bluetooth: hci0: command tx timeout [ 637.941297][T21664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.972293][T21664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.003224][T21664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.090055][T21664] hsr_slave_0: entered promiscuous mode [ 638.097096][T21664] hsr_slave_1: entered promiscuous mode [ 638.115530][T21664] debugfs: 'hsr0' already exists in 'hsr' [ 638.121556][T21664] Cannot create hsr debugfs directory [ 638.551499][T19538] veth0_vlan: left allmulticast mode [ 638.752548][ T1046] smc: removing ib device syz0 [ 638.790347][ T1046] smbdirect: ib_dev[syz0] removed [ 639.108902][T21762] __nla_validate_parse: 94 callbacks suppressed [ 639.108925][T21762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'. [ 639.141317][T19538] bond1 (unregistering): (slave geneve2): Releasing active interface [ 639.543558][T19538] bond0 (unregistering): Released all slaves [ 639.571244][T19538] bond1 (unregistering): Released all slaves [ 640.012472][T17406] xfrm0 speed is unknown, defaulting to 1000 [ 640.018507][T17406] syz0: Port: 1 Link DOWN [ 640.019420][T18232] Bluetooth: hci0: command tx timeout [ 640.190530][T21753] bond0: (slave bond_slave_0): Releasing backup interface [ 640.244620][T21790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4233'. [ 640.254941][T21753] bond0: (slave bond_slave_1): Releasing backup interface [ 640.306617][T21790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 640.430356][T21753] team0: Port device team_slave_0 removed [ 640.439202][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 640.465187][T21753] team0: Port device team_slave_1 removed [ 640.473775][T21753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 640.612450][T21756] team0: Port device xfrm0 added [ 640.744401][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 640.933174][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4237'. [ 641.472316][T19522] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.672022][T21805] bond3 (unregistering): Released all slaves [ 641.723245][T21664] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.886859][T21816] netlink: 'syz.0.4240': attribute type 4 has an invalid length. [ 641.901635][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4239'. [ 641.921940][T21816] netlink: 'syz.0.4240': attribute type 4 has an invalid length. [ 641.938055][T21819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4239'. [ 641.982504][T19522] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.995571][T19522] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.042684][T18232] Bluetooth: hci0: command tx timeout [ 642.340613][T21664] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.712920][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4246'. [ 642.793236][T21850] veth7: entered allmulticast mode [ 642.816205][T19538] tipc: Left network mode [ 642.841142][T21840] block nbd2: server does not support multiple connections per device. [ 642.850870][T21840] block nbd2: shutting down sockets [ 643.282620][T21664] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.318650][T21868] syz_tun: entered allmulticast mode [ 643.336982][T21867] syz_tun: left allmulticast mode [ 643.869270][T21896] netlink: 'syz.2.4256': attribute type 1 has an invalid length. [ 643.878170][T21896] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4256'. [ 643.899259][T21664] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 643.907842][T21896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4256'. [ 643.941254][T21664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.949331][T21664] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 643.977182][T21664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.039445][T21909] bond0: left allmulticast mode [ 644.152446][T18232] Bluetooth: hci0: command tx timeout [ 644.173712][T21664] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 644.286908][T21921] __nla_validate_parse: 1 callbacks suppressed [ 644.286931][T21921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4257'. [ 644.409383][T21664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.434688][T21664] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 644.483782][T21664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.877666][T21942] netlink: 'syz.1.4264': attribute type 1 has an invalid length. [ 645.200640][T21942] bond4: entered promiscuous mode [ 645.207731][T21942] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.435038][T21942] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.457715][T21942] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 645.499268][T21942] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 645.548984][T21942] bond4: (slave ipip0): making interface the new active one [ 645.591452][T21942] ipip0: entered promiscuous mode [ 645.633708][T21942] bond4: (slave ipip0): Enslaving as an active interface with an up link [ 645.705697][T21664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.806068][T21974] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4269'. [ 645.884528][T21974] bridge_slave_1 (unregistering): left allmulticast mode [ 645.891645][T21974] bridge_slave_1 (unregistering): left promiscuous mode [ 645.939234][T21974] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.054611][T21664] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.113996][T19523] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.121378][T19523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.141642][T19523] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.149154][T19523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.192644][T21989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4274'. [ 646.227113][T21989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 646.346204][T21989] 8021q: adding VLAN 0 to HW filter on device bond2 [ 646.355065][T21989] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.363871][T21989] bond2: (slave team0): Enslaving as an active interface with an up link [ 646.480415][T19538] hsr_slave_0: left promiscuous mode [ 646.487105][T19538] hsr_slave_1: left promiscuous mode [ 646.551715][T19538] veth1_macvtap: left promiscuous mode [ 646.574132][T19538] veth1_vlan: left promiscuous mode [ 647.210259][T18232] Bluetooth: hci4: command 0x0406 tx timeout [ 647.561109][T22031] bond5 (unregistering): Released all slaves [ 648.021858][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4287'. [ 650.903384][T22053] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 650.962746][T22061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'. [ 651.148759][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4288'. [ 651.162883][T22063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.239658][T22072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.253529][T22072] bond3: (slave bond4): Enslaving as an active interface with an up link [ 651.354628][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4290'. [ 651.373866][T22073] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 651.450589][T22069] netlink: 'syz.1.4290': attribute type 13 has an invalid length. [ 651.460612][T22069] netlink: 'syz.1.4290': attribute type 5 has an invalid length. [ 651.849834][T21664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.993034][T21664] veth0_vlan: entered promiscuous mode [ 652.143929][T21664] veth1_vlan: entered promiscuous mode [ 652.262526][T21664] veth0_macvtap: entered promiscuous mode [ 652.274684][T21664] veth1_macvtap: entered promiscuous mode [ 652.289752][T19538] IPVS: stop unused estimator thread 0... [ 652.306341][T21664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.325751][T21664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.478100][T19522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.537809][T19522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.567126][T22119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 652.644651][T19541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.678478][T19541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.686400][T22119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4301'. [ 652.773779][T22125] syzkaller0: entered promiscuous mode [ 652.779336][T22125] syzkaller0: entered allmulticast mode [ 652.834830][T19521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.865258][T19521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.969007][T22129] netlink: 'syz.1.4304': attribute type 13 has an invalid length. [ 652.983305][T19521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.991258][T19521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.002213][T22131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4304'. [ 653.017187][T22129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4304'. [ 653.294118][T22131] bond_slave_0: entered promiscuous mode [ 653.299816][T22131] bond_slave_0: entered allmulticast mode [ 653.343273][T22145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4308'. [ 653.696851][T22168] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4315'. [ 653.748485][T22170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'. [ 654.169358][T22200] Bluetooth: MGMT ver 1.23 [ 654.507067][T22217] syzkaller0: entered promiscuous mode [ 654.521329][T22217] syzkaller0: entered allmulticast mode [ 654.530974][T22217] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 654.565872][T22217] netlink: 'syz.0.4324': attribute type 10 has an invalid length. [ 654.584789][T22217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.594633][T22217] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 655.054883][T22221] netlink: 'syz.4.4325': attribute type 39 has an invalid length. [ 656.550565][T22171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.796053][T22230] netlink: 'syz.3.4328': attribute type 1 has an invalid length. [ 656.803854][T22230] __nla_validate_parse: 6 callbacks suppressed [ 656.803873][T22230] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4328'. [ 656.867707][T22226] netlink: 'syz.2.4327': attribute type 1 has an invalid length. [ 656.889970][T22226] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4327'. [ 657.338255][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4336'. [ 657.358917][T22259] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 657.482881][T22270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4337'. [ 657.690415][T22286] ieee802154 phy0 wpan0: encryption failed: -126 [ 657.910695][T22295] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4344'. [ 657.920397][T22295] netlink: 'syz.3.4344': attribute type 9 has an invalid length. [ 657.945906][T22295] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.4344'. [ 658.956778][T22343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4354'. [ 659.421935][T22363] IPv6: addrconf: prefix option has invalid lifetime [ 659.431389][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4365'. [ 660.232528][T19518] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.244529][T22397] No such timeout policy "syz1" [ 660.260485][T19518] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.297718][T19518] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.315793][T19541] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.525278][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4375'. [ 660.534944][T22377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.883595][T22416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4377'. [ 661.534484][T22444] syzkaller0: entered promiscuous mode [ 661.539983][T22444] syzkaller0: entered allmulticast mode [ 661.549949][T22444] tipc: Enabled bearer , priority 0 [ 661.561464][T22443] tipc: Resetting bearer [ 661.590165][T22443] tipc: Disabling bearer [ 661.600608][T22442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 661.923744][T22456] __nla_validate_parse: 5 callbacks suppressed [ 661.923766][T22456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4389'. [ 661.951098][T22456] batadv_slave_1: entered promiscuous mode [ 662.205625][T22472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4390'. [ 662.207346][T22468] netlink: 'syz.2.4392': attribute type 16 has an invalid length. [ 662.214640][T22472] netlink: 'syz.1.4390': attribute type 7 has an invalid length. [ 662.214661][T22472] netlink: 'syz.1.4390': attribute type 8 has an invalid length. [ 662.214675][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4390'. [ 662.247354][T22468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4392'. [ 664.928391][T22458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.189809][T22493] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4396'. [ 665.284180][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4401'. [ 665.756919][T22540] xt_hashlimit: size too large, truncated to 1048576 [ 665.990183][T22554] tipc: New replicast peer: 255.255.255.255 [ 665.997435][T22554] tipc: Enabled bearer , priority 10 [ 666.026634][T22553] set match dimension is over the limit! [ 666.495622][T22566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4416'. [ 666.516959][T22566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4416'. [ 666.635861][T22568] netlink: 'syz.1.4417': attribute type 1 has an invalid length. [ 666.703835][T22568] 8021q: adding VLAN 0 to HW filter on device bond5 [ 666.735001][T22568] bond5: (slave veth3): Enslaving as an active interface with a down link [ 666.749472][T22568] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4417'. [ 666.793933][T22568] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4417'. [ 666.935669][T22580] bond5: (slave veth5): Enslaving as an active interface with a down link [ 666.984495][ T24] tipc: Node number set to 3458843265 [ 667.156670][T22603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4424'. [ 667.257697][T22607] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4426'. [ 667.371739][T22605] netlink: 'syz.3.4425': attribute type 3 has an invalid length. [ 667.382902][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4425'. [ 667.970619][T22625] xt_CT: No such helper "pptp" [ 668.452569][T22643] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 668.468999][T22640] pimreg9: entered allmulticast mode [ 668.557062][T22648] PKCS7: Unknown OID: [4] (bad) [ 668.562252][T22648] PKCS7: Only support pkcs7_signedData type [ 668.812416][T22639] netlink: 292 bytes leftover after parsing attributes in process `syz.2.4437'. [ 669.136332][T19535] tipc: Subscription rejected, illegal request [ 669.235753][T22672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4444'. [ 669.326643][T22674] 8021q: VLANs not supported on ip6_vti0 [ 669.341597][T22672] ip6gre1: entered promiscuous mode [ 669.346888][T22672] ip6gre1: entered allmulticast mode [ 669.784540][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4447'. [ 669.871233][T22707] netlink: 'syz.3.4452': attribute type 4 has an invalid length. [ 669.938787][T22709] sctp: [Deprecated]: syz.1.4451 (pid 22709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 669.938787][T22709] Use struct sctp_sack_info instead [ 669.994443][ T5736] page_pool_release_retry() stalled pool shutdown: id 214, 1 inflight 60 sec [ 670.242680][T22716] IPv6: Can't replace route, no match found [ 670.312214][T22719] dvmrp0: entered allmulticast mode [ 670.487394][T19522] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.495208][T19522] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.586999][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.674802][ T5707] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.985897][T22750] ip_tables: iptables: counters copy to user failed while replacing table [ 671.014521][ T985] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.178825][T22755] bond1: (slave veth1_virt_wifi): Device is not bonding slave [ 671.186822][T22755] bond1: option active_slave: invalid value (veth1_virt_wifi) [ 671.198718][T22755] bond1 (unregistering): Released all slaves [ 671.555737][T22778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4465'. [ 671.737084][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4465'. [ 671.850784][T22781] syzkaller0: entered promiscuous mode [ 671.856333][T22781] syzkaller0: entered allmulticast mode [ 671.889946][T22781] tipc: Enabled bearer , priority 0 [ 671.984444][T22780] tipc: Resetting bearer [ 672.130188][T22780] tipc: Disabling bearer [ 672.900769][T22818] syzkaller0: entered promiscuous mode [ 672.906311][T22818] syzkaller0: entered allmulticast mode [ 672.969259][T22824] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 672.984662][T22824] bond6 (unregistering): Released all slaves [ 673.509322][T22852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 673.678511][T22868] lo: entered allmulticast mode [ 673.870772][T22874] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4491'. [ 673.925027][T22874] syzkaller0: entered promiscuous mode [ 673.946946][T22877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4494'. [ 673.953343][T22874] syzkaller0: entered allmulticast mode [ 674.028102][T22883] can: request_module (can-proto-4) failed. [ 674.036528][T22886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4495'. [ 674.076226][T22881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4492'. [ 674.098878][T22882] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4492'. [ 674.110118][T22882] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR [ 674.145929][T22895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4498'. [ 674.185290][T22881] hsr_slave_0: left promiscuous mode [ 674.191640][T22881] hsr_slave_1: left promiscuous mode [ 674.264980][T22895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4498'. [ 674.374312][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4499'. [ 674.448184][T22903] xt_hashlimit: size too large, truncated to 1048576 [ 674.710919][T22917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4504'. [ 674.843629][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.695243][T22948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.183215][T22972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4510'. [ 680.899020][T19527] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.911333][T19527] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.919792][T19527] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.928182][T19527] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.972956][T22955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.520013][T22969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 682.017046][T23000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.180139][T23000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.319637][T23016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.662102][ C1] sched: DL replenish lagged too much [ 683.512410][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 684.246164][T19535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.254459][T19535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.331869][T23043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4523'. [ 684.341138][T23043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4523'. [ 684.394699][T23043] netlink: 'syz.3.4523': attribute type 18 has an invalid length. [ 684.440577][T23047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4523'. [ 684.450383][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4523'. [ 684.459435][T23047] netlink: 'syz.3.4523': attribute type 18 has an invalid length. [ 684.532720][T19535] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 684.545247][T19522] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 684.554577][T19522] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 684.563428][T19522] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 685.019373][T23056] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 685.027512][T23056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4532'. [ 685.035893][T23058] netlink: 'syz.3.4533': attribute type 3 has an invalid length. [ 685.045141][T23058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4533'. [ 685.123790][T23058] syzkaller1: entered promiscuous mode [ 685.129352][T23058] syzkaller1: entered allmulticast mode [ 685.665060][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4538'. [ 685.859622][T23078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.960325][T23092] batman_adv: batadv0: Adding interface: veth0 [ 685.966772][T23092] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 685.994397][T23092] batman_adv: batadv0: Interface activated: veth0 [ 686.001984][T23094] netlink: 'syz.0.4543': attribute type 1 has an invalid length. [ 686.006340][T23092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.030588][T23092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.045724][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.114302][T23097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.170811][T23097] batman_adv: batadv0: Interface deactivated: veth0 [ 686.178797][T23097] batman_adv: batadv0: Removing interface: veth0 [ 686.228245][T23099] netlink: 'syz.3.4546': attribute type 1 has an invalid length. [ 686.285597][T23107] netlink: 'syz.1.4549': attribute type 1 has an invalid length. [ 686.306694][T23111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.322608][T23099] bond1: entered promiscuous mode [ 686.328001][T23099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 686.336475][T23107] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 686.338949][T23106] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4545'. [ 686.382729][T23099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4546'. [ 686.391755][T23099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4546'. [ 686.493575][T23099] bond1: (slave bridge2): making interface the new active one [ 686.501228][T23099] bridge2: entered promiscuous mode [ 686.508444][T23099] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 686.549481][T23118] bridge_slave_0: entered promiscuous mode [ 686.556267][T23118] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 686.655860][T23124] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4552'. [ 686.664940][T23124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4552'. [ 686.673939][T23124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4552'. [ 686.875043][T23133] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4555'. [ 686.899809][T23133] vlan3: entered promiscuous mode [ 686.904879][T23133] erspan0: entered promiscuous mode [ 686.914123][T23133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4555'. [ 686.920473][T23126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 686.963328][T23136] netlink: 'syz.1.4550': attribute type 1 has an invalid length. [ 687.138417][T23145] No such timeout policy "syz1" [ 687.303798][T23155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'. [ 687.551016][T23162] netdevsim netdevsim3: Direct firmware load for .® failed with error -2 [ 687.564101][T23162] netdevsim netdevsim3: Falling back to sysfs fallback for: .® [ 688.290726][T19524] IPVS: starting estimator thread 0... [ 688.611539][T23177] IPVS: using max 24 ests per chain, 57600 per kthread [ 691.503716][T23223] __nla_validate_parse: 6 callbacks suppressed [ 691.503739][T23223] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4582'. [ 691.522777][T23223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4582'. [ 691.605761][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4582'. [ 692.534039][T23238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4586'. [ 693.277886][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4587'. [ 694.016136][T23249] netlink: 'syz.3.4590': attribute type 4 has an invalid length. [ 694.231884][T23253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4591'. [ 694.242688][T23254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4591'. [ 695.226361][T23276] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4597'. [ 695.241067][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4597'. [ 695.346590][T23276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4597'. [ 695.550878][T23281] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 696.459676][T23294] tipc: Enabled bearer , priority 0 [ 696.830314][T23300] bridge0: entered allmulticast mode [ 696.901276][T23301] IPVS: Error connecting to the multicast addr [ 697.544997][T17406] tipc: Node number set to 190910332 [ 698.007872][T23323] tc_dump_action: action bad kind [ 698.121507][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4611'. [ 698.539568][T23330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4613'. [ 698.967597][T23330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4613'. [ 699.168991][T23342] Bluetooth: MGMT ver 1.23 [ 699.176658][T23342] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4616'. [ 699.209865][T23342] ip6tnl1: entered allmulticast mode [ 699.227191][T19535] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 699.523341][T23348] netlink: 'syz.0.4617': attribute type 25 has an invalid length. [ 699.531240][T23348] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4617'. [ 699.725433][T23352] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 699.739656][T23354] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 700.163626][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.022602][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 711.039732][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 726.431937][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 732.818135][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 758.145297][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 758.430201][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 803.914078][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.369219][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 838.706008][ T4925] Bluetooth: hci2: command 0x0405 tx timeout [ 870.602891][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 882.876510][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.838039][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.835567][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 957.489301][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1001.016953][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1001.023972][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23097/1:b..l [ 1001.032631][ C0] rcu: (detected by 0, t=10505 jiffies, g=111097, q=1275973 ncpus=2) [ 1001.040817][ C0] task:syz.2.4542 state:R running task stack:24104 pid:23097 tgid:23091 ppid:16375 task_flags:0x40054c flags:0x00080001 [ 1001.055813][ C0] Call Trace: [ 1001.059138][ C0] [ 1001.062107][ C0] __schedule+0x17d9/0x56c0 [ 1001.066677][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1001.071924][ C0] ? __pfx___schedule+0x10/0x10 [ 1001.076809][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1001.082190][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1001.087359][ C0] irqentry_exit+0x14f/0x8f0 [ 1001.092007][ C0] ? trace_irq_disable+0x3b/0x140 [ 1001.097111][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.103141][ C0] RIP: 0010:kasan_check_range+0x1c7/0x2c0 [ 1001.108996][ C0] Code: f4 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 4a d2 9f 09 cc 45 84 ff 0f 85 a1 [ 1001.128812][ C0] RSP: 0018:ffffc9000620f4c8 EFLAGS: 00000256 [ 1001.134944][ C0] RAX: ffffc9000620f701 RBX: 0000000000000000 RCX: ffffffff81778ef4 [ 1001.143030][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc9000620f618 [ 1001.151202][ C0] RBP: 0000000000000000 R08: ffffc9000620f627 R09: 1ffff92000c41ec4 [ 1001.159380][ C0] R10: dffffc0000000000 R11: fffff52000c41ec5 R12: 0000000000000002 [ 1001.167381][ C0] R13: ffffffff90f2c8d8 R14: fffff52000c41ec5 R15: 1ffff92000c41ec3 [ 1001.175396][ C0] ? unwind_next_frame+0xd04/0x2550 [ 1001.180974][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1001.186594][ C0] __asan_memset+0x22/0x50 [ 1001.191087][ C0] unwind_next_frame+0xd04/0x2550 [ 1001.196180][ C0] ? stack_trace_save+0xa9/0x100 [ 1001.201183][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1001.206346][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1001.212556][ C0] arch_stack_walk+0x11b/0x150 [ 1001.217486][ C0] ? save_stack+0x122/0x230 [ 1001.222049][ C0] stack_trace_save+0xa9/0x100 [ 1001.226855][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.232268][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1001.237829][ C0] save_stack+0x122/0x230 [ 1001.242212][ C0] ? __pfx_save_stack+0x10/0x10 [ 1001.247107][ C0] ? page_ext_get+0x22/0x2e0 [ 1001.251746][ C0] ? page_ext_put+0x97/0xc0 [ 1001.256299][ C0] __reset_page_owner+0x71/0x1f0 [ 1001.261366][ C0] free_pages_prepare+0x960/0xa60 [ 1001.266452][ C0] __free_contig_range_common+0x174/0x340 [ 1001.272333][ C0] free_pages_bulk+0x48/0x120 [ 1001.277080][ C0] vfree+0x224/0x4a0 [ 1001.281053][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1001.286055][ C0] kcov_close+0x28/0x50 [ 1001.290261][ C0] __fput+0x418/0xa50 [ 1001.294565][ C0] task_work_run+0x1d9/0x270 [ 1001.299214][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1001.304454][ C0] ? do_exit+0x735/0x2360 [ 1001.308818][ C0] ? kmem_cache_free+0x182/0x650 [ 1001.313799][ C0] ? put_net+0x191/0x260 [ 1001.318084][ C0] do_exit+0x73a/0x2360 [ 1001.322283][ C0] ? __pfx_do_exit+0x10/0x10 [ 1001.327015][ C0] ? cgroup1_freezing+0x20/0x350 [ 1001.332060][ C0] ? cgroup1_freezing+0x20/0x350 [ 1001.337056][ C0] do_group_exit+0x22d/0x2f0 [ 1001.341682][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1001.347009][ C0] get_signal+0x121b/0x12c0 [ 1001.351570][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1001.357159][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1001.363366][ C0] ? __x64_sys_sendmsg+0x25d/0x290 [ 1001.368719][ C0] exit_to_user_mode_loop+0x104/0x730 [ 1001.374158][ C0] ? rcu_is_watching+0x15/0xb0 [ 1001.378973][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.385139][ C0] do_syscall_64+0x353/0x580 [ 1001.389795][ C0] ? trace_irq_disable+0x3b/0x140 [ 1001.394898][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1001.399630][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.405733][ C0] RIP: 0033:0x7f919039e0d9 [ 1001.410189][ C0] RSP: 002b:00007f9191265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.418642][ C0] RAX: 0000000000000034 RBX: 00007f9190626090 RCX: 00007f919039e0d9 [ 1001.426991][ C0] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 1001.435098][ C0] RBP: 00007f9190435024 R08: 0000000000000000 R09: 0000000000000000 [ 1001.443300][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.451403][ C0] R13: 00007f9190626128 R14: 00007f9190626090 R15: 00007fff89a79e38 [ 1001.459531][ C0] [ 1001.462580][ C0] rcu: rcu_preempt kthread starved for 3822 jiffies! g111097 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1001.473894][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1001.483903][ C0] rcu: RCU grace-period kthread stack dump: [ 1001.489998][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1001.503529][ C0] Call Trace: [ 1001.506848][ C0] [ 1001.509898][ C0] __schedule+0x17d9/0x56c0 [ 1001.514529][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1001.519550][ C0] ? __pfx___schedule+0x10/0x10 [ 1001.524458][ C0] ? schedule+0x90/0x2b0 [ 1001.528756][ C0] schedule+0x164/0x2b0 [ 1001.532973][ C0] schedule_timeout+0x152/0x2c0 [ 1001.537863][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1001.543269][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1001.548611][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1001.554472][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1001.560069][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1001.564978][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1001.571199][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1001.576556][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1001.581833][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1001.586567][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1001.591828][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1001.597084][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1001.602184][ C0] kthread+0x388/0x470 [ 1001.606295][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1001.611531][ C0] ? __pfx_kthread+0x10/0x10 [ 1001.616158][ C0] ret_from_fork+0x514/0xb70 [ 1001.620991][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1001.626489][ C0] ? __switch_to+0xc89/0x1420 [ 1001.631202][ C0] ? __pfx_kthread+0x10/0x10 [ 1001.635834][ C0] ret_from_fork_asm+0x1a/0x30 [ 1001.640686][ C0] [ 1001.643728][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1001.650066][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1001.655307][ C1] NMI backtrace for cpu 1 [ 1001.655323][ C1] CPU: 1 UID: 0 PID: 476 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1001.655341][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.655352][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 1001.655482][ C1] RIP: 0010:lock_release+0x137/0x3c0 [ 1001.655504][ C1] Code: 89 64 24 14 45 89 e5 85 c0 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d 24 00 0f 85 d6 01 00 00 8b 45 20 3d 00 00 20 00 <48> 8b 5c 24 08 8b 54 24 14 72 25 89 c1 81 e1 00 00 e0 ff 25 ff ff [ 1001.655517][ C1] RSP: 0018:ffffc90000a077f8 EFLAGS: 00000083 [ 1001.655531][ C1] RAX: 0000000000022007 RBX: 0000000000000019 RCX: 0000000080000101 [ 1001.655543][ C1] RDX: ffffc90000a07901 RSI: ffffffff8eb59c60 RDI: ffff888021f04a68 [ 1001.655555][ C1] RBP: ffff888021f04a68 R08: ffffc900034e7e70 R09: 0000000000000000 [ 1001.655566][ C1] R10: ffffc90000a07958 R11: fffff52000140f2d R12: 0000000000000005 [ 1001.655576][ C1] R13: 0000000000000005 R14: ffffffff8eb59c60 R15: ffff888021f03e00 [ 1001.655587][ C1] FS: 0000000000000000(0000) GS:ffff888125057000(0000) knlGS:0000000000000000 [ 1001.655600][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1001.655611][ C1] CR2: 00007f5e00600218 CR3: 000000003354c000 CR4: 00000000003526f0 [ 1001.655627][ C1] Call Trace: [ 1001.655633][ C1] [ 1001.655641][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1001.655665][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1001.655685][ C1] unwind_next_frame+0x1baa/0x2550 [ 1001.655708][ C1] ? kthread+0x388/0x470 [ 1001.655727][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1001.655749][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1001.655767][ C1] arch_stack_walk+0x11b/0x150 [ 1001.655791][ C1] ? ret_from_fork+0x514/0xb70 [ 1001.655811][ C1] stack_trace_save+0xa9/0x100 [ 1001.655828][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1001.655844][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1001.655867][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1001.655887][ C1] kasan_save_track+0x3e/0x80 [ 1001.655905][ C1] ? kasan_save_track+0x3e/0x80 [ 1001.655922][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1001.655939][ C1] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1001.655957][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 1001.655997][ C1] ? dst_init+0xbe/0x470 [ 1001.656020][ C1] ? dst_alloc+0x12a/0x170 [ 1001.656037][ C1] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1001.656099][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 1001.656116][ C1] ? ip_route_output_flow+0x2a/0x150 [ 1001.656130][ C1] ? ip_route_me_harder+0x762/0xfe0 [ 1001.656170][ C1] ? synproxy_send_tcp+0x347/0x670 [ 1001.656232][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 1001.656251][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 1001.656318][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 1001.656337][ C1] ? nft_do_chain+0x48d/0x1b10 [ 1001.656351][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1001.656413][ C1] ? nf_hook_slow+0xc5/0x220 [ 1001.656453][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1001.656534][ C1] ? NF_HOOK+0x336/0x3c0 [ 1001.656552][ C1] ? process_backlog+0xa34/0x1860 [ 1001.656573][ C1] ? __napi_poll+0xaa/0x330 [ 1001.656591][ C1] ? net_rx_action+0x61d/0xf50 [ 1001.656610][ C1] ? handle_softirqs+0x225/0x840 [ 1001.656626][ C1] ? do_softirq+0x76/0xd0 [ 1001.656640][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 1001.656655][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 1001.656676][ C1] ? wg_packet_handshake_send_worker+0x204/0x370 [ 1001.656695][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 1001.656710][ C1] ? worker_thread+0xa47/0xfb0 [ 1001.656725][ C1] ? kthread+0x388/0x470 [ 1001.656753][ C1] __kasan_kmalloc+0x93/0xb0 [ 1001.656772][ C1] __kmalloc_cache_noprof+0x32d/0x660 [ 1001.656789][ C1] ? ret_from_fork+0x514/0xb70 [ 1001.656807][ C1] ? __kmalloc_cache_noprof+0x150/0x660 [ 1001.656824][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 1001.656840][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 1001.656858][ C1] ref_tracker_alloc+0x15b/0x4b0 [ 1001.656874][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1001.656893][ C1] ? rcu_is_watching+0x15/0xb0 [ 1001.656914][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1001.656931][ C1] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 1001.656949][ C1] dst_init+0xbe/0x470 [ 1001.656965][ C1] ? dst_alloc+0x112/0x170 [ 1001.656984][ C1] dst_alloc+0x12a/0x170 [ 1001.657003][ C1] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1001.657024][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1001.657042][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 1001.657060][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1001.657079][ C1] ? lock_acquire+0x106/0x350 [ 1001.657100][ C1] ip_route_output_flow+0x2a/0x150 [ 1001.657115][ C1] ? ip_route_me_harder+0x74b/0xfe0 [ 1001.657132][ C1] ip_route_me_harder+0x762/0xfe0 [ 1001.657153][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1001.657170][ C1] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 1001.657190][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 1001.657230][ C1] ? local_lock_release+0x9c/0x160 [ 1001.657256][ C1] synproxy_send_tcp+0x347/0x670 [ 1001.657277][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 1001.657303][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1001.657323][ C1] ? nft_synproxy_eval_v4+0x168/0x4e0 [ 1001.657344][ C1] ? synproxy_pernet+0x45/0x270 [ 1001.657366][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 1001.657389][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1001.657418][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1001.657460][ C1] nft_synproxy_do_eval+0x335/0x550 [ 1001.657482][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1001.657503][ C1] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 1001.657556][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 1001.657575][ C1] nft_do_chain+0x48d/0x1b10 [ 1001.657595][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1001.657611][ C1] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 1001.657643][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1001.657665][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1001.657689][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1001.657708][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1001.657729][ C1] nf_hook_slow+0xc5/0x220 [ 1001.657749][ C1] NF_HOOK+0x21f/0x3c0 [ 1001.657770][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1001.657790][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1001.657808][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1001.657829][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1001.657851][ C1] ? ip_local_deliver+0x113/0x190 [ 1001.657873][ C1] NF_HOOK+0x336/0x3c0 [ 1001.657892][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1001.657912][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1001.657931][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1001.657951][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1001.657971][ C1] ? ip_rcv_core+0x88d/0xd50 [ 1001.657992][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1001.658011][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1001.658031][ C1] process_backlog+0xa34/0x1860 [ 1001.658054][ C1] ? process_backlog+0x3c3/0x1860 [ 1001.658079][ C1] __napi_poll+0xaa/0x330 [ 1001.658099][ C1] net_rx_action+0x61d/0xf50 [ 1001.658123][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1001.658147][ C1] ? sched_balance_domains+0x770/0x880 [ 1001.658169][ C1] handle_softirqs+0x225/0x840 [ 1001.658186][ C1] ? do_softirq+0x76/0xd0 [ 1001.658203][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 1001.658224][ C1] do_softirq+0x76/0xd0 [ 1001.658239][ C1] [ 1001.658245][ C1] [ 1001.658251][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1001.658266][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 1001.658289][ C1] wg_packet_handshake_send_worker+0x204/0x370 [ 1001.658311][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1001.658339][ C1] ? rcu_is_watching+0x15/0xb0 [ 1001.658360][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1001.658375][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1001.658407][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1001.658425][ C1] ? assign_work+0x3cf/0x5d0 [ 1001.658442][ C1] worker_thread+0xa47/0xfb0 [ 1001.658467][ C1] kthread+0x388/0x470 [ 1001.658485][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1001.658500][ C1] ? __pfx_kthread+0x10/0x10 [ 1001.658519][ C1] ret_from_fork+0x514/0xb70 [ 1001.658539][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1001.658557][ C1] ? __switch_to+0xc89/0x1420 [ 1001.658576][ C1] ? __pfx_kthread+0x10/0x10 [ 1001.658594][ C1] ret_from_fork_asm+0x1a/0x30 [ 1001.658620][ C1]