last executing test programs: 3m46.347351229s ago: executing program 4 (id=2912): unshare(0x6a040000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000084) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000000c0)=""/71, &(0x7f0000000180)=0x47) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)="0000000035741b", 0x7}], 0x2) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r11, &(0x7f0000001c00), 0x0, 0x20004044) write(r10, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRES8=r9], 0xa0}, 0x1, 0x0, 0x0, 0x24008810}, 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 3m44.664305519s ago: executing program 4 (id=2923): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000009f2000100100000a000000fe0000000000"], 0x18}, 0xfc40) 3m44.538075326s ago: executing program 4 (id=2925): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000000f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3m44.091106425s ago: executing program 4 (id=2928): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r1, 0x0, 0x10000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x4884) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r9], 0x20}}, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r12 = socket(0x11, 0x3, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000003}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r13, 0x0, 0x36, 0x0, &(0x7f0000000040)="cc2742e80f1c335a9797762f86dde980707c774523bf8d5951bac2b0ff10688f62dcc7edb6ce6b000000ad550000000b566f8b5d305a", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f00000000c0)=0x6572, 0x4) sendmmsg(r12, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r12, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x1}], 0x4a, 0x2002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010003704008000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000000214000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0) 3m43.907802759s ago: executing program 4 (id=2930): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = accept4$rose(r0, 0x0, &(0x7f0000000000), 0xc0800) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000080)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r5, 0x6}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x87b2, 0x45c, 0x0, {{0xd, 0x4, 0x0, 0x3d, 0x34, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x14, 0xe2, 0x0, 0x5, [0x8, 0xff, 0x1, 0x3]}, @rr={0x7, 0xb, 0x91, [@remote, @broadcast]}]}}}}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x1, 0x0}, 0x8) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0ef300000000000000000000000000000000000028cfbddbe57dd52dbc517b6d6e6086386632b08741e321dce7a0df762b46de8ab252fc968797ca3ba63c833602", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="03000000050000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xd, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x5, 0x8, 0x3, 0x81, 0x10000}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}], &(0x7f00000001c0)='syzkaller\x00', 0x7fffffff, 0x0, &(0x7f0000000300), 0x40f00, 0x12, '\x00', r8, @fallback, r0, 0x8, &(0x7f0000000400)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x1, 0x80, 0x8}, 0x10, r9, r2, 0x0, &(0x7f0000000580)=[r10], 0x0, 0x10, 0x7fffffff}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 3m43.67569615s ago: executing program 4 (id=2932): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000083e1b6b6b599c28a5903f7dd26acd95b5ea59f193c1bbde76"], 0x140}, 0x1, 0x0, 0x0, 0xf4}, 0x4800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet(0x2, 0x800, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10050}, 0x4) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x84, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x66c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x653}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x840}]}]}, 0x84}}, 0x4041) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m28.581107441s ago: executing program 32 (id=2932): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f0000083e1b6b6b599c28a5903f7dd26acd95b5ea59f193c1bbde76"], 0x140}, 0x1, 0x0, 0x0, 0xf4}, 0x4800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet(0x2, 0x800, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10050}, 0x4) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x20008000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x84, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_FILTER={0x4c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x66c}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x653}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x840}]}]}, 0x84}}, 0x4041) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m32.635200361s ago: executing program 0 (id=3455): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 2m32.031556938s ago: executing program 0 (id=3462): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x2, 0x0, @private}, &(0x7f00000014c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) sendmsg(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)="d9369b6eb4b1a6513edc707b9743cff16f1db036135e93e122b4af624d6c03a483548b9cbe8372f712fb28fbcdf5b9ae87022a7d0bd53c20ec8b34b5785e83e245977b7983c87cb46678eb07a899bd29866804e9f7cffca5f24726f8309fbbdcc6c3d43b407ca53cde9168b3eea32036fd4b435307a1acb9a796944a38d46bb66df95e5e7962caa0bd6051f1550934bd922c3823037ba2a1c1e6183c36", 0x9d}, {&(0x7f00000015c0)="616bb600d1525d4db72b918d8320717cfa4d500ac2af5d6c0ffe486a50375cec12aa10f9266687b2ed559cb9", 0x2c}, {&(0x7f0000001600)="b0134e9d78a464642f72c68b3e132637ccd65654f09d3916feae13bb920332693341239937d88f748617da2b5ed183bd64ccc4d826077ea4f73b9004ea457b138c0a8fef9fdc39f7296ca46ad59663453edaf0c0129d40c547dfabd628d6aa3be012be902eff0239713025d742c30f48e8feb1f3b73681ed5564fde4", 0x7c}, {&(0x7f0000001680)="781f87871a08da30a415a8b7d9941c119b2ce78a7bbcc849dfc7a0871a2d0d7468c964cd61d8cf15080f7e577a3aa14c7b251eac241233053520eb326ed321f1eebe96c181c3b1b974e4", 0x4a}, {&(0x7f0000001700)="09f190adf6e66b9a37bd92e77f42cf8c4df3ddea92bb903cf5ccf1232478601477e7092cee35e797546cf855a585c049cb722cfa51840279dd776e5f1da9082b", 0x40}], 0x5, &(0x7f00000017c0)=[{0x98, 0x1, 0x8, "24ad4cee058fd87fdc447b45e2c1454c8998df19195749375b0db65611732a9588860879259690ec177afff03016e39bea574a55a3dce445befd7941d26b18256ba09b7d78db761e310fde724b881abfb23fe9ad52b52bf557369a363c75c8614c2b51dacee1d50894931e417d73177639e6521de8515523f6ceba8082e2f2183271"}, {0x70, 0x0, 0x8, "2a017b4fe968991019ec1eef691f5b420c1a0aa753472f5afa0228482a30e8702521ac1fe7e632a5d43455113a058c2e6dda5d7315e9a2aeb9335eeb559206b937dac668c7bcedafbab05590cb7d71712e02b6e113021b073f2a3a79"}, {0x98, 0x118, 0x4, "a0dde3674be260f240420f1d7dfafa818f04d433c30a078803883199432dbf5bc0561a66fb8e80ae96d8929aecd6da0cb9519514a499411dbd13c2217272ffd8be64653741a1e53ee186a21e6c7f542991c605b72a82bd6361de704432a4637fc7d34a4f31ca0fce48f470f99bd551b67252e094d9c52d2fc50ebd534ff4c01eae"}], 0x1a0}, 0x20000014) (async) sendmmsg$alg(r3, &(0x7f0000001300)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="72c135f330968771f65e18eb046605e44562ef90db25684a87233a87f7072f0f1ac05291aa6e8dadd37e742f8830a5d21a37f417e16b00249bdc038dd54f05b8f0392f2f827b3c3a60dc47c2533a82da98bbd3b7f9013bedfb12c8c730febe500d521e597a4146cb468b1e15d11d2e5499c4e4a97d0d8b7137de1a7fbf0611ceba7569a0d06b5f4ed962f1b590fcce09a467d18dc713d8cae73601e7bbe3d176f1f441046b5c6ec48284054bcf08e9ea7d855cc24a638fb01791dbfbf98784bfdbcc2e", 0xc3}, {&(0x7f00000001c0)="d6b7af65b79011d15946d945233d17ff2150302700746f597dcc6ad7e86427d0ee443800da414bdaf9cc92165c472b3b4baac336d78a7e5af9190f953dcbe49ae9886caffb7bbf6e8f5d5bfe32dcbaaa9ff0fd1a3d9f63447aa755049e1cac845df102945e57f410ee9d01036d89b0a2bb10fea4bbc34c6a4363a392bd247b4c074ca7bb17ac2870936a7dda68f639762bcd05be53c86c", 0x97}], 0x2, &(0x7f0000000300)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8ed}, @op={0x18, 0x117, 0x3, 0x1}], 0x48}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="08aa12ddcbd45a0abcc9a6f143ec257f87dddf2a2ed5b55353", 0x19}, {&(0x7f0000000480)="3831216b217f1f9a4c76fbc2f8030ade5d0efc5faf17890fc4b2e849a834644e41d5cb4d3532f04cf7b414d80670cb3f6a6fc3f8698ee2e6082b1635a9672e99037c2189d5754d6abdbdb01c381cc1b6eeb96d2d90602ef2587d7f6077ba254fc1e1045f64f1003df4e4e344867c10fe35055b26d053d5b19ba6d4b501a6fec80bf94d245f9574cce4a9d3bf6903093cac3c25b4208a53864a49ea258676b90a211c72d24631", 0xa6}], 0x2, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0x1aeb}, @assoc={0x18, 0x117, 0x4, 0x3d}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x60}, {0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000005c0)="062cb3ce988cc1e7212b1daa582e71cc46c3c7ccf3b21f19caec063621ab5e5cd02df5ce07e8a6dbaa548d383343839eef91ff", 0x33}, {&(0x7f0000000600)="f16787018214b32e30e7c5ee8382eb13e373", 0x12}, {&(0x7f0000000640)="e3d3591d270eb796affd0c194b090e27764788cd14c03a6801aea5940d1c576b4a030d7a4c4ed9bdafeed8cbdba7a112e84de8f7d7e68c9f49379af95156847b8a064a39c76118edc6e4d48eb8a0a42f771b11c4ce6e73a17c2582bd86648864b0c00827de6169a049c7738ee51ded02cb4d5c365b82a1e4ce18959ec2a9b3dcefa645262b8219e2a71b085efc6c4db495faad0316b4c20eeb9e8af8655573ad887c2228e68812c5e41375554f6a460358e1", 0xb2}, {&(0x7f0000000700)="7098c1b1a8789c80d0763467b00cc58b8f055f9088432cb1e43b69bd0d9da919214b62e4787810101c5f4a5e2a3199fb5dd39a7f7faaa3b6d94f1050849d86e6", 0x40}, {&(0x7f0000000740)="244ff7193d0e43182f3d23c29b65a05679bc623eb07850517b4fbb597eff4acf2366cc4fe317b839cca6943e39b7fd98e21adb7d6a2624027e28cfe2d5560aa364a131c4f05a2f7ff2137cbdad2a39", 0x4f}], 0x5, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000840)="c03489591cf8a542e38b184fbbb987e0c4ac1816a706ca675889d499bb55fcb8bd3bb768d96c8931e352de867be4b256884c902b0912681b11c04c7e29295a6302d747bb36a45d09c1cb2afdade388522a82", 0x52}], 0x1, 0x0, 0x0, 0x40040}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="0c2a0e8ed6e2", 0x6}, {&(0x7f0000000940)="763b9ad80a7d95b0f6723ec079b471e9a5300ca83495b5994bf80969cd347f516605c5bc4357e6943fa8c11cee999582e36390938c44279565fabbd4892351b3e2a7b2a532abfe8a6a27452dd6475be076fa34b6656b57c9c7196eef057e495fdc95faaaa9c187a042c617c2d685e619cf1dee5b7705f00e66adcc9fcac0b627bfb35d35c2ab6dd16655de4d7692984cf2dd4432214364839cadbce149d3e45c186f5bd6f34279ceeb20091904bf8dec9a", 0xb1}], 0x2, 0x0, 0x0, 0x40}, {0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a40)="7474e13fe4be6277040c157417c844540d8af4f06fc9cda92d6ed82f7541ac616c6844c8082f74932a64ef35821a79ecc262705975c9f54c2198f519a8a2b6f7e6cf85296a25b6ed4f6875cb585649712d989e7807e73540d81852da4156", 0x5e}, {&(0x7f0000000ac0)="1a9d8120b2ed5ac138b32d9f24712b31ec9e1a9abf6a466e9a574d9360a6e7ffeaf690eb0db5b52aafa72adece49de73bcf9e50093940fec6f232cd8eea572c82c57aa62e5c22bf7e6ce27aaf733312f2e9b4552084753dba9eba5ab903be69602781a7b198d11014de1002c4c4a6e779077d004e1d249", 0x77}, {&(0x7f0000000b40)="b6792d4590d0a78f0a0d8156e3deca24f327794388835cad6aeaaa924dc17919bb446fe653a2a4a5d30b6d967f8dac827f62323128c99a99e3be0d8e444c5b17b8d9b8f9094568b973e383458b5758a8ce6666", 0x53}, {&(0x7f0000000bc0)="28e048622d8234c8b4bd0b2d275d5c77dab22b12fca9b9f93aaf9d1f72090e81ba69407e66dd742906d04f37e1872dc30b1f195db93dbd8d69435beca97267d9c399c6ab7a16f03209f4e9d2fc2e33f75be94bfe231294c9e5c6d381cdc012e4c4a45a3eb27ebcc155be3600c116c58fe9f893bd0a112abfe2e161ec", 0x7c}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="6352977b78c542dfd890772cb2829633600196602de81a52adc19a2ad069796609ad085eb4a766479dd5b66f9b215a372975368dd1d3fdd799e45075a07146a1c4c172edaeada6e392e22cf88ce75ff2a714946c1aed0340307d1af5", 0x5c}], 0x6, &(0x7f0000000d80)=[@iv={0x48, 0x117, 0x2, 0x2e, "8372868df4594e1f2df3e850894ef61880b9fc16b3b1f5064f4b91563746fea604c6aa0ef30665afb03996d49498"}], 0x48, 0x4}, {0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000e00)="792e54509e3de1bac7f3cad17d8362fa4effe1dee2803f7be817", 0x1a}, {&(0x7f0000000e40)="b8b7fc8fe22b636b2c6599b99c990bdecf1d8ba1f61f0d4154213e76044be9f09667b55f14f370342dbfff6e7538c5a6e169ee0e80f49fcd243620168c4a32445d2d61ff7bf24be94212bc22b8416b1a31f9ef7c1640f13cb078707ffc02a35e9f21b0ce206cddcec83f68e50d688129ba5f09511763bd88644f90256c1e94e3581b3f37bd09467940f62aaf8889c33eccc8f004a9", 0x95}, {&(0x7f0000000f00)="957ccd8d8a165e27bb82a444af5be847c3d9a9ebc0b9008bcfe58d3dadbc9573d46ff5869a699b6b78c75952d8ebc94cab696a2a234cdf1c39e5425380fce8a57432e72ddff238bdf282fe82e5b1a430751c6f19360b84898feee526e6c4d4de4bbf601dfa25f39a181c45b95b8e252a3d97f854a010867bfd722bdf1228b6bbc3d533ff1f4f118707af66eece7853d5f6122d6b9e61a760cb4892c85bbeac696edc5c1ee17e4646614baa6d755e69c8d4f58658f71477f6507d47bfb9b9b0d852866da9cc2aa944ddcbbf9af62c302445a461427c2a369aba896caef23200a6b48f12e9b3", 0xe5}, {&(0x7f0000001000)="ee5fba4703951f7fde228691e682e424cc50affd42ce33055c225816012ba01fac282c439b24fc632874545e05b7c8e1beeee3a6da1089d06215866a85ea896a0435ef3a460b703cd91c0cca3c0a05bcc5b0f1ce8966bd9d4a82024e7b99ed5062dbaa03c6", 0x65}, {&(0x7f0000001080)="4b58c5ca59d77f201de429121652cb9233b54ded332bd7f1fb518214a9584b61d2a50e7f4aee0d432366135e3a158a3bdeee8dfea3eca2dcb34470d1e4d9d3c5aeca3be3b059e5e61c9fea85453d755789cbd9529c854bf072e5c1c11cac5dea4a29a450e9b2fcc9a85c99a94e5340ea074fdd9dd42daa2fad4c0c2aea1d24dd3eec3f0a42d8097862696cb6b9046d8546831b668e", 0x95}], 0x5, &(0x7f00000011c0)=[@iv={0x100, 0x117, 0x2, 0xe8, "81a262662d66b3fe882279745ccfdd6d3a3ca36344b6fe3912db19c742522e502af08db87518184411586c45d2199ba442838d61acdc99f35061a81568026ebd0312b8de510fcafb94d3061444c90d87069e0394d48c6a4178e9d1ed5dd805e7afd8cfe0fd9374328ad73ed7b91953df548765533f1119e650e0b7ff3aa3c129d96efe9a8f6bdda10ea634b7a7d7888e2fd03fcb20d1c72ba8e9e65a860b7db9ec4a046136a54819b14a8308dbc2f597f0cecc7e48f896f71ad6e917d8681a21d037e96eeb73f9e5105e210edbdf570ca885f08aa8a9ab469e75dc4d15e6ee16f538747e7d82ffa4"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}], 0x130, 0x5}], 0x7, 0x4084) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2m31.679805988s ago: executing program 0 (id=3466): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfdb5, 0x0, &(0x7f0000000180)="e02742e8680d85ff9782762f86dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 2m31.434683041s ago: executing program 0 (id=3470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x9, 0xff, 0x6, 0x3}, {0x7, 0x3, 0x6, 0x107f}, {0x7f, 0x9}]}, 0x10) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=@tcp6=r3, 0x2}, 0x20) 2m31.215837541s ago: executing program 0 (id=3473): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x674d, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@rand_addr, @multicast2, 0x0}, &(0x7f00000002c0)=0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x79, 0x2}, @float={0x6}, @union={0x5, 0x1, 0x0, 0x5, 0x1, 0x100, [{0x9, 0x5, 0x2000000}]}]}, {0x0, [0x0, 0x30, 0x30]}}, &(0x7f0000000380)=""/4096, 0x51, 0x1000, 0x0, 0x3}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002540)={0xffffffffffffffff, 0x20, &(0x7f0000002500)={&(0x7f0000001400)=""/250, 0xfa, 0x0, &(0x7f0000001500)=""/4096, 0x1000}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000002680)={0xffffffffffffffff, &(0x7f0000002580)='\x00', 0x8002, &(0x7f00000025c0)={@_ha_fsid={[0x4, 0x7ff]}, {0x8, 0x9, 0x30, 0x4}}, 0x7, &(0x7f0000002600)={@_ha_fsid}, &(0x7f0000002640)=0x2}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000026c0)={0x0, 0x9, 0x8}, 0xc) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002780), &(0x7f00000027c0)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000028c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)='%pI4 \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0xc, 0x1d, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeae, 0x0, 0x0, 0x0, 0x39de}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x4fd2, 0x0, 0x0, 0x41000, 0x18, '\x00', r2, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x4, 0x8, 0x8, 0xffffffff}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f0000002900)=[0x1, r5, r6, r7, r8, r9], &(0x7f0000002940)=[{0x2, 0x1, 0xa, 0x1}, {0x4, 0x4, 0xf, 0xa}, {0x0, 0x1, 0xd, 0x5}, {0x2, 0x3, 0x0, 0x1}], 0x10, 0x1}, 0x94) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r11, 0xc038586b, &(0x7f0000002b40)={r6, &(0x7f0000002a40)='GPL\x00', 0x1a000, &(0x7f0000002a80)={@align=0x3, {0x94a, 0x9, 0x400, 0xffffffffffffeccc}}, 0xdb44, &(0x7f0000002ac0), &(0x7f0000002b00)=0x7ff}) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002b80)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000002bc0)={0x0, 0x3, 0x0, [0x5, 0x2, 0x5, 0x9, 0x9], [0xd831, 0x7, 0x101, 0x8, 0x7, 0x8, 0x7f4363e7, 0xfffffffffffffffb, 0x6, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfff, 0xfffffffffffffffd, 0x1, 0x3, 0x6, 0xdcb0, 0x100, 0x2, 0x6, 0x2, 0x9, 0x40000000000000, 0x0, 0x8, 0x2, 0x7, 0x8, 0x710, 0x7, 0x8, 0x6, 0x9, 0x2, 0x9, 0x225, 0x3, 0x6, 0x9, 0x1cd, 0x386dcc8, 0x401, 0xfffffffffffffffb, 0x9, 0x3, 0x8000, 0x4, 0x7000, 0x9, 0x7, 0xfffffffffffffff8, 0x100, 0xfffffffffffffffa, 0x2000, 0x5, 0x2, 0x80000000, 0x40, 0x8001, 0x0, 0x0, 0x1d850e1f, 0xfffffffffffffff6, 0x9, 0xfff, 0x2, 0x7, 0x55, 0x2, 0x8, 0x5c0b, 0x1, 0x100, 0xe08c, 0x3, 0xcc7, 0x1ff, 0x8217, 0xd5f, 0x5, 0x3, 0x868e134, 0x2, 0x1, 0x7, 0x3, 0x9, 0x3, 0x5, 0x2, 0x6, 0xfffffffffffffffe, 0x1a8, 0x0, 0x3, 0x5, 0x0, 0x4, 0x7, 0xf, 0x3, 0x8, 0x9, 0x80000000, 0x7ff, 0x9, 0x8, 0x2, 0x400, 0x4, 0xe, 0x7, 0xb, 0x10, 0x8000000000000001, 0xffffffff, 0x6, 0xa]}) ioctl$BTRFS_IOC_RESIZE(r12, 0x50009403, &(0x7f0000003000)={{r8}, {@val={r13}, @actul_num={@val=0x8b53db78158c8985, 0x2, 0x67}}}) r14 = accept$nfc_llcp(r5, &(0x7f0000003040), &(0x7f00000030c0)=0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r14, 0x118, 0x0, &(0x7f0000003100)=0x1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000031c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0xe8, 0x360, 0x288, 0x288, 0x1b8, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, &(0x7f0000003140), {[{{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4e22}}}, {{@ipv6={@mcast1, @mcast2, [0x0, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'batadv0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x2, 0x7, 0x1, 0x51}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x1, 0x5}, {0x1, 0x4}, 0x81, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x4, 0x3, 0x2, 0x0, 0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private2, @ipv4=@multicast2, 0x8, 0x6, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003780)={r5, r10, 0x4, r5}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r11, 0x82307202, &(0x7f00000037c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000003a00)=0x0, &(0x7f0000003a40)=0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003a80)={r5, r15, 0x25, 0x0, @val=@netfilter={0xa, 0x1, 0x1}}, 0x20) recvfrom(r14, &(0x7f0000003ac0)=""/124, 0x7c, 0x100, &(0x7f0000003b40)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x4e21, @private=0xa010102}, 0x4, 0x0, 0x2, 0x2}}, 0x80) ioctl$FITHAW(r3, 0xc0045878) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000003bc0), &(0x7f0000003c00)=0x4) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000003c40)=@gcm_256={{0x304}, "1634e8b646bb6e49", "d7fd90397fa713465ae4c79e00a88e128ea2134b88892bf14a23f7f8c19f5bc8", "5d7ab4aa", "87334c638815ced9"}, 0x38) openat$cgroup_ro(r12, &(0x7f0000003c80)='cgroup.freeze\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000003cc0)='ns/ipc\x00') 2m31.090668823s ago: executing program 0 (id=3474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='westwood', 0x8) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}, {&(0x7f0000000640)}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18", 0xc7}], 0x1}}], 0x2, 0x2090) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000200c19000000"], 0x58}}, 0x20008000) 2m15.824530404s ago: executing program 33 (id=3474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="60000000020601010000000000000000ac461fed05000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff11000300686173683a6e65742c6e6574"], 0x60}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002440)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x404089d}, 0x0) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000180)=@fragment={0x6, 0x0, 0x7, 0x1, 0x0, 0x1a, 0x68}, 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='westwood', 0x8) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}, {&(0x7f0000000640)}], 0x3}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18", 0xc7}], 0x1}}], 0x2, 0x2090) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000200c19000000"], 0x58}}, 0x20008000) 3.580883112s ago: executing program 3 (id=4224): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async, rerun: 32) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x200, @private0, 0x274}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="0629244ad6cc", 0x6}], 0x1}}], 0x1, 0x4000000) 2.934154192s ago: executing program 2 (id=4231): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x873f}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4d77e170c130205c) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x210, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1a9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffe00}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x120}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x13}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x120}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000800}, 0x200008c0) accept$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000580)=0x1c) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r2, 0x100000000) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r7, 0x7, 0x5, &(0x7f00000005c0)=""/17, &(0x7f0000000600)=0x11) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008}, 0x24000008) getpeername$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'ip6tnl0\x00', r4, 0x4, 0x5, 0x8, 0xffffffff, 0x6f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x0, 0x40, 0x6, 0xff}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2840}, 0xc, &(0x7f0000000c80)={&(0x7f0000000900)={0x370, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x210, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3b}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x60ec}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r12, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2d7f}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa69a}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8000}]}, 0x68}}, 0x40b0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=r0, 0x4) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000000ec0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) bind$alg(r14, &(0x7f0000000f00)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-arm)\x00'}, 0x58) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x20, 0x3e, 0x300, 0x70bd2c, 0x25dfdbfd, {0x1f}, [@typed={0xc, 0x11a, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x800) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x30, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$cgroup_freezer_state(r2, &(0x7f0000001180), 0x2, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000011c0)) 2.730378904s ago: executing program 6 (id=4232): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000001e2f00200000eb0202575ea03360f132fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002520732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000540)={{r1, &(0x7f0000000240)='$\x0e\xc9\x00', 0x41800, &(0x7f0000000340)={@align=0x2000000000000000, {0x1, 0x101, 0x6, 0x8000000000000001}}, 0xf, &(0x7f0000000380), &(0x7f00000004c0)=0x80}, {[0x3ff80, 0x7a, 0xc, 0x1ff]}, 0xeab7, 0x2d, &(0x7f0000000500)=""/45}) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000001b00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000000640)={0x1470, 0x13, 0x200, 0x70bd28, 0x25dfdbff, {0x1f, 0x2, 0x0, 0x9, {0x4e23, 0x4e22, [0x5, 0x9, 0x9, 0xb], [0x4, 0x0, 0x1, 0x7], 0x0, [0x1, 0x5]}, 0xfffffffb, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "b25e4895d81a13095b9631546ade4e8baca52db49b165e2a35fc8b2844368202a74462eed4b51206699f303e3a0b2a361eca2b3b22a415fea708a66f2480bae783b786deea96ce6f344508b40e404197c50f0d2ad3edb498bebd86c1b63b0a161b8912e849c57e9ad0dd4695a34fb78ea70e6e2007302bfed792c07c3bf663302cd9ca78f51301b95647e1089d2e367d0c034a77aff9bbfe7456161eeab28555564a6a58c371173b76153835c8b71c839e4ecb265fb7dad77d7ad753749a25ec87626eaf052728c58944a4ac170db5ef2b58c6476e016f6b431298"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "ff4f9897345572792fa7b06b7297ef5a99a2529369cad2cac2642344db283b0fb3171d7d722021db1feba22f33c98970e143ba341f307507a9640b18b811aa0c0eec2bea22d42309e99760303a5cd9f2b60ee26114dfb667da1db16ed0b488047f944afec4a605a8053ce7242446fb2ddc7271cb27d3da7b65300bb6669fe1cb25004028e61668b2b8467ffa"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "b9a0dedcc061dd2b029f8f2e733f0b787c9531f9df935c4900129e7e0790806caefda906032ef6c9ca851dd9661666d9667bd352a8c396158a91c58f06bdd7abd333499adb819c02f6651aa8c5a78421b75cb85fb40f40a99a73384c57248440445e4e4ab070f6144d48a593263e22856eead1ffde0972221757dd76579684249612077f0b2f618ff1f637947c0b2520e937f3eeb60206175c33be028651c2850cdda6474cacd6c966c3f2af34c3051ab4cfc7e51bb65a9db97b69a947f4b51b5e203605b175160f81dabb5f8e36e1df1f5b9fa88c00"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x25, 0x1, "4fd24c3fd22e635c626a6fe746b6e5654346841b2bac1f25169359c54360072572"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "2f0f84de1dfdbcfca221d372b1de14ad129000783c51dbd925fab3b227ff849762458837fb26bc17426eb1cd305409eb3f72fbfb790f182cf17e0f5b8cebf8b55fe1d769ed00df2654d3e40ee96f8ed94072ac530c3cd18600eb39d937bf7c158c41a6593c13e22c74347aa9e9d5d962735cd83246173f12ae29bdd82e9d97423f9649bfeb6e1ce2579192b7a646320819ba093e4d3467a2003e33489b6fa504cec2cf8cf5aa800d97ad9fb21c7006e9d3e9998863bf2bb595e34f4a0c9970b3477373fab25aaebb966c0c3ed5553f9b3bc54d4d9112d91eefeccec096d1e1ca72945bf4fa"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "a97c3631bbc7aa9cf9adddc47e59f792f3543b562d34bf92b683602f66e0275cd8931c0f38df1b88abf627b9d0edcd87b996282e38cee3a1b10fc97665ed48b84587e2b9889622d63b1b48094458866b292f4dbba50b4cc1095df65bc7e7d70c5009fea1f0687929d4c75a9f8646c40a322749a7bee930be8004cbbaf3c7c23ead179fd4aa6d028a1909379c24606e419bbd8b489447cd455f23fa942950056803c0a266b1edcdd69d3184b33ccb4d209a27f52de478461df92e09"}]}, 0x1470}, 0x1, 0x0, 0x0, 0xc810}, 0xa4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x204}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4850) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0xd, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8040410}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000001b40)={@empty, @local, 0x1, 0x5, [@rand_addr=0x64010100, @multicast2, @empty, @empty, @multicast2]}, 0x24) 2.729514492s ago: executing program 2 (id=4233): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000240)="23ade41881a1e7ca07379924e2cb53138ec1e2ac415947eb6c7f56119ff98596d7469564e6d7c4", 0x27}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d30327039c072cd147f3b25df80100010000000004706aa85896228ef23136cbc160147a23", 0x34}, {&(0x7f0000000440)="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", 0x170}, {&(0x7f0000000280)="1b1eb47967b88f89e960c59413baaf1384ad9c758abf845c5714a919ca02735c5514fa78f9f084d72227c1d3f6607ce5a2183a169535d0b2bb594ecb92b8df361bca805ac5595a389d39a58a35c0ff662c2c83431c0c2e2ece5ca6a104d1d45c1c15ca4d75cab6b1bb923cac1c51270bf577cf4c79ba54a6c45a345cc13208fa430c1e54548e5a9c5cf45337451511abc0a7d3539ac22191025d5655a5d05c4024b8cb0fb4aabeb6fd575b631eedf691f55e7f6d2c2a8b3e0852", 0xba}], 0x5, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x2, 0x2001, 0x0) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000080)=0x1, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x7}]}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x2, 0x3, 0x8}]}]}, {0x0, [0x0]}}, &(0x7f0000000540)=""/222, 0x47, 0xde, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000200)="201b9d2681a4ce8efb0a7f0d7bf4e56417ec5cf0ad44aee2180a1aa8d561dd6a3a8b10da6bc4c3fc6bd678634f264e97392b6348c1b25bd0f2978da25cda48f81c5c00aaab5128a92556455d2074efd1280bcfaf4cd97a5dd1406f30e186e61b11b4ce385ca11ee681f67dff27556245f2f8024f978606ab6426a2d688d7e62879ae7298add0db1577f3ef1d73", &(0x7f0000000340)=""/212}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}, @TCA_CT_ACTION={0x6, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4008010) 2.696050396s ago: executing program 5 (id=4234): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000007c0)) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @remote, 0x4001, "43045553e8378e722b7c8c306c74eef33a9732c5b10fc016c5803a7e9283cecc", 0x5, 0xfffffe01, 0x8, 0x1}, 0x3c) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001480)={0x40, r7, 0x1, 0xfffffffc, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008800}, 0x80) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000001a00020001000000000000000a1400000003000000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="0600150000000000cbed4b07c11c98c3733a2b959102835d11f60a8d97fe52e0f13a989e0aa73fa20780029afa134c9bfe515a628d4b9e203111069c58218ec810167bf4e730ea0a4a9f10a5677a7435e13217e65c0ee62ab286a101ec002be0c1d86c7892"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20048854) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x540, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0xfffc, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x32}, {0x0, 0x4, 0x5, 0x0, 0x40, 0x7, 0x2}, {0xfffffffffffffffe, 0x0, 0x0, 0xcd17}, 0x9, 0x40000000, 0x0, 0x1, 0x2, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0380c20000000180c1fff500080045000018000000007800000000"], 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) connect$rxrpc(r9, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @broadcast}}, 0x24) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) 2.600145814s ago: executing program 3 (id=4235): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois', 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x3, 0x300000000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) socket$kcm(0x29, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7f, @null, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) socket(0x22, 0x800, 0x5) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}}, 0x40880) write$tun(r6, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x2, 0x0, 0x3}, @mpls={[{0x8}], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x11, 0x3, 0x21, 0x0, @broadcast, @broadcast}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x5}}}, {0x8, 0x6558, 0x4}}}}}, 0x6a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r10 = getpid() r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="03000000", 0x4}], 0x1}, 0x40) 2.538156265s ago: executing program 6 (id=4236): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004005) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xb, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.431777529s ago: executing program 2 (id=4237): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x38) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20328a000206030000000000000090ba4cf3cd34cc58d2000000000900020073797a3000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x64008010}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x440) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0100000000000000080001000000"], 0x14}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYRES64=r5, @ANYRES64], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYRES64=r6], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x80000001}, 0x94) 2.360134258s ago: executing program 5 (id=4238): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="039a90000000aa0474f702e845321ed2322c0004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{&(0x7f00000003c0)={0xa, 0xe21, 0x0, @private0}, 0x1c, &(0x7f00000000c0)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000001040)={&(0x7f0000000fc0)="cd441e731f055433bbd0c8e102565a4372b5310c5308fe1f7a2e2b1c8c1ad52ee87c671d4bd847448f47f60a9c10c5eed2ff6c73319541030a54e16e1b5884cfd1a6f8ce72d51bda7aed4a51f01217dc451b9a5300cfb2139bbd69f8db838b13953e8914612706bec1e422faa04b", 0x6e}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r4, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private0, @in6=@private0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000000280)=0xfffffffffffffe85) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a0601010000000d0000000001000000050100000000000014000880100007800900120073797a32000000000900020073797a32000000000800094000000000"], 0x44}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000550007010300000000000000017c00f800040042800c00018006000600843b0000100002800c0008000010"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$inet(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 2.286965721s ago: executing program 1 (id=4239): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x20, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x31}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@ccm_128={{0x7}, "eee11300a80fe870", "baa2a7ae173e5ce80d837378567fbce0", "a273e6cc", "88d18956a495ef12"}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x4f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2.169579385s ago: executing program 6 (id=4240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="a4000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0004000000200000140003006e657464657673696d30000000000000140014006e657464657673696d300000000000005c0016805800018054000c801400010002000000510a000005000000a1a80000140001"], 0xa4}}, 0x4008040) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x20, r8, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004455}, 0x2404c080) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r10, &(0x7f0000000040)={0x11, 0x9, r12, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x3c0, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x1e4, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x6, 0x6, 0xe0f2}, {0x41, 0x2, 0x1, 0x2}, {0x8, 0x9, 0x8, 0x9a12}, {0x9, 0x96, 0x40, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xe9c, 0x46, 0x5, 0xadfa}, {0x7, 0x6, 0x3, 0xd}, {0xf1, 0x45, 0x6, 0x8000}, {0x0, 0xc, 0xf, 0x6}, {0x5, 0xd3, 0x48, 0xa}, {0xffff, 0x2, 0x5, 0x5}, {0x4, 0x7, 0x0, 0x1}, {0xfff, 0x1, 0x1, 0x5}, {0xfe01, 0xa, 0x7f, 0x38}, {0x9, 0x0, 0x3, 0xc6d5}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x15f2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r12}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000140)=0x8) r14 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r14, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xb}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) 1.991567317s ago: executing program 1 (id=4241): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'ip6gretap0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0xd167, 0xfffffffffffffffe}}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000380)={0x1f, @none, 0xac}, 0xa) socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f00000007c0)={{r0, &(0x7f00000003c0)='(!#\x00', 0x2002, &(0x7f0000000400)={@align=0x5, {0x0, 0x1, 0xa, 0x7}}, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0xe64}, 0x2, &(0x7f0000000780)=[{0x3, 0x1, &(0x7f00000004c0)='\\-\x00', &(0x7f0000000540)="d51af865f0ea579f34efff92dae26d566dd62a047d02a9ac0e1b267dace22c729632f9d46873f4fc9b07816a80bc89dcaaabd0d849355b505fdbceac91f5c1a29958b6f74884a21adbff4ccb5ad547e3a393f9ff193ad24c77e9ecd4bb7d2383cb5585c074ca728bc983", 0x6a, 0x2b}, {0x3, 0x8, &(0x7f0000000600)='+}-\x00', &(0x7f00000006c0)="761a9347fed66cef611c651efe95be06573b7442dd303cab8378f88ff887b14d2cd3769c41cabe623bfbe627106bc578bd6027d26402be2663acb290677562db4089bae2dd8c13b1fb5a127b10191e4b6be9ad1244a586728ab9bbe0a75b82c697450fd63b69736ae579348f346099ac863fc72e0a35fdbd16ef87e97732deb9c46225", 0x83, 0x18}]}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x4}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x8001}, {0x9, 0x0, 0x2}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x100, 0x4, 0x7}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x80) 1.989970754s ago: executing program 5 (id=4242): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xfffffffd}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r6, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r8, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0xe, 0x400eeb4, 0x14}, 0x2c) 1.744191852s ago: executing program 6 (id=4243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB="c5b26997155ef64f8c25bde11d381cb02f1102d2929da17711dbdd8ccd3b6124a4ccc7b7b0864c0de125c0917bf7c1314abbc3e0ce3063eadc76d77c126a8caac40d22f7f9c15f98639d48fd8d301c2032a66edc58b467060e43cba1dd02c1fb81f5f3d66506e5f804a1e2086b5276161ea5342bbaa3bc8b37989c24c5196d3a7f17a5d7203ad6946a48cbf7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x20000000}], 0x5, 0xc0) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}, {{&(0x7f00000005c0)=@sco, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000680)=""/52, 0x34}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f00000007c0)=""/111, 0x6f}, {&(0x7f00000008c0)=""/13, 0xd}, {&(0x7f0000000d80)=""/209, 0xd1}], 0x5, &(0x7f0000000900)=""/3, 0x3}, 0x8}, {{0x0, 0x0, &(0x7f00000012c0), 0x0, &(0x7f0000001340)=""/145, 0xffffffffffffffd2}, 0x9}, {{&(0x7f0000001400)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001480)=""/131, 0x83}, {&(0x7f0000001540)=""/149, 0x95}, {&(0x7f0000001600)=""/142, 0x8e}, {&(0x7f00000016c0)=""/197, 0xc5}, {&(0x7f00000017c0)=""/239, 0xef}, {&(0x7f00000018c0)=""/240, 0xf0}, {&(0x7f00000019c0)=""/250, 0xfa}], 0x7, &(0x7f0000001b40)=""/198, 0xc6}, 0x931a}], 0x5, 0x10000, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x845}, 0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)={0x0, @aes128, 0x0, @desc3}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r2, 0x5421, 0x110e22fff7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="a0000000000101020000000000004000060000070c000280060003400003000014000f80080003400000b6fd0800024000000008200004801c0001800600050005030000060004000e0600000600040000060000080007400000000408000c400000000008000c40000000002800164000000005000080010000ffff0000000a00000004000000030000000100000000000100000c0016400000000600000009d17c6e69886f9216ce31b6151afdaeafe9e7544d2a7b52d1ffac4a8a78cf79de558c1de272d05ebda9c139be713ea5da8f6e376f97c7dfdd1786"], 0xa0}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="001b239c", @ANYRES16=r8, @ANYBLOB="1105000040000000000009000000380003800600040069d7000008000300000000001400020076657468305f746f5f626f6e64000000080001000200000008000500e0000002"], 0x4c}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x0, 0x200, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xb}, {0x0, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x7}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000f00)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b3000000fd608d6dcb991fa1620c3afc3adbef3b8b905691eeef2b01d1531e89973d10289a9cd11e4f3768a5932f4002808ba0f6149ed30d9b7befd6a1bb1a44a00c41c0ed06fda03b9d05c90dbc18d13f45ef1ec84fddaf5e4f7ca7c252c914bf603d2c216189443f17edece639802320bbbb8cd7b15032386ee304d6d9c335e3eb9a5edbe34509fa81c6121085a1e72bc00d9d6bf2704b4e2feec01582a804000079a444d21471867e1d5622dbc667b55dc79912ae04543f459c81270b17f9"], &(0x7f00000002c0)=0xd7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20006000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000006637cf2c00000000", @ANYRES32, @ANYBLOB="0000000000000000001110000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.684788852s ago: executing program 1 (id=4244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="b96242311472b8a89d6411c8e1ad160f2f9c772f7633838c2032491381bc3a30473feab761281bfb484eea45399f996310a262bce389a45fd9d655d05b825ce8e0a722b375d0dc9c8edc604fbe166fd6f8f168742f894349351793a2e330560866a040f77eea43fc0a19814383a5b73e1aa408209e836603b6e62cc73d70c4432322725a0d6396021a16266ed648801e3c312124e5", &(0x7f0000000240)="0651ef510d7369abb19de0de00a163c88259d5e5ec5df8fac40f0a8551aeac8926b97ef83579cc215ed8de07cb865a1424dee25908f741bbbcaf7ae3bad628ae2798ef3b62430a0830096eaf237d32d755842dc30f70c4e66b0cf1d084fb42bc9fe0373b6dea212d9d5f6011830b27d5be50376c0bb62892b7e5296cdc920614792435c1ba78a455ec5c831344c6db2a22afc2bf4de125580c1ebd186bbb9b6da23647c96c54b1922c6309d3729ec05d780eb1a0612cc2e8844b8c408ceb7eaeb62b425904eed8d576e0d5595695059b", 0x7fff, r0, 0x4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/18, &(0x7f0000000140)="2c8b33e6c48392119482fcef4fee8c5fdea627aeba40207a30eb7e278dee7d2b9e526ea738c25ba0023f6cdb8d7b817c43abf3fbe392cf98c6d97a6e34e5e8bf3ee68c0acd4b55b455a565752008c504332869", &(0x7f0000000000), 0x1, r0}, 0x38) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/18, &(0x7f0000000140)="2c8b33e6c48392119482fcef4fee8c5fdea627aeba40207a30eb7e278dee7d2b9e526ea738c25ba0023f6cdb8d7b817c43abf3fbe392cf98c6d97a6e34e5e8bf3ee68c0acd4b55b455a565752008c504332869", &(0x7f0000000000), 0x1, r0}, 0x38) 1.54734036s ago: executing program 5 (id=4245): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0xffffffff, 0x6361, 0x5, 0xfffffffd, 0x40000004}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff7, 0x80000001, 0x9, 0x3, 0x4, 0x8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) (async) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000780)={0x5}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec", 0x20}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) 1.468366239s ago: executing program 2 (id=4246): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0xe24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) shutdown(r0, 0x1) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) 1.252057512s ago: executing program 2 (id=4247): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x4, 0x4, "a58b040d"}, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x2, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.015586261s ago: executing program 1 (id=4248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100400004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x800) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_simple={0x74, 0x1, 0x0, 0x0, {{0xb}, {0xfffffd92, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}, @TCA_DEF_PARMS={0x18}]}, {0xa, 0x6, "cddc3445408c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100400004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800dd8d000000ba7e9698ed1fbfa80e000000000002"], 0x3c}}, 0x800) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_simple={0x74, 0x1, 0x0, 0x0, {{0xb}, {0xfffffd92, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'vlan\x00'}, @TCA_DEF_PARMS={0x18}]}, {0xa, 0x6, "cddc3445408c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r5, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) 992.460068ms ago: executing program 2 (id=4249): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952f"], 0x1d7) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$tun(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952f"], 0x1d7) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) (async) 920.927732ms ago: executing program 5 (id=4250): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c7107ab040000002cbd7040fcdbdf2502000100000000000000070c00000080"], 0x20}, 0x1, 0x7}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200), 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000079c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x12, 0x0, "9978e832ba2fdc4621442ab0a6d18c67c4ed6d919159faa6813df5694360002320c20c7691d913a8b569ede8a9e1cce79640944f27a4fd61f2284a8dc6ba1bfe77f395632675d20162bad0cc1fbccee0"}, 0xd8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x50}}, 0x800) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000100)={0x1, 0x5, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448dd, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000300)=@ax25={{0x3, @bcast, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r2], 0x10b8}, 0x4b710) 841.311927ms ago: executing program 3 (id=4251): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14}, {}, {0x4}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x24}}, [@call={0x85, 0x0, 0x0, 0x6c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xa, 0xffb, &(0x7f0000001b00)=""/4091, 0x40f00, 0x9, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x83, &(0x7f00000001c0)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x49, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, [@hopopts={0x11}], "fafb17c163a3040b7758ba1b5be6d88a91"}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfd9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x2882, 0x10401}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 713.183191ms ago: executing program 1 (id=4252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='V', 0x1}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0600000004000000ff0f00000900000000000000", @ANYRES32, @ANYBLOB="0700ea01208271107e5352500800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) close(0x3) ioctl$XFS_IOC_PATH_TO_HANDLE(r6, 0xc0385869, &(0x7f0000000900)={r5, &(0x7f0000000340)=')-\x00', 0x410400, &(0x7f0000000380)={@_ha_fsid={[0x0, 0x1]}, {0x4, 0x7, 0x7, 0x44a5}}, 0x8, &(0x7f00000003c0), &(0x7f00000008c0)=0xfffffdf1}) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xa, 0x4, 0x3e, 0xa, 0x40}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r7, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900010000009356f70f00000a0000000000000000000000140005"], 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r9, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, [0x0, 0x4, 0x0, 0x3], [], 0x0, [0x0, 0xfffffffd]}, 0x400}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r10, 0x1, 0x2b, &(0x7f0000000200)=0x2, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r8], 0x20}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r10, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="faff18110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185800000d0000000000000000000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc4, &(0x7f00000005c0)=""/196, 0x41000, 0x1a, '\x00', r12, 0x25, r11, 0x8, &(0x7f0000000700)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000009c0)=[{0x3, 0x5, 0x0, 0x2}, {0x3, 0x5, 0x5, 0x5}, {0x1, 0x5, 0xc, 0xa}, {0x5, 0x1, 0xd, 0xb}, {0x1, 0x2000003, 0xf, 0x5}, {0x5, 0x2, 0x9, 0x3}], 0x10, 0x2}, 0x94) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000006800000125bd7000fddbdf250a000000060000000400040008000500", @ANYRES32=r3, @ANYBLOB="11000b0008000500", @ANYRES32=r12, @ANYBLOB="04000b0008000500", @ANYRES32=r13, @ANYBLOB="04000c8004000400"], 0x44}}, 0x4000000) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) 567.312386ms ago: executing program 5 (id=4253): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000240)={@local, @random="be9689ce9f88", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x8, 0x4, 0x1, 0x1, 0x64, 0x66, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@ssrr={0x89, 0x7, 0x3d, [@multicast1]}, @generic={0x86, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0x7, 0x2, 0x1, 0x0, 0x2, 0xc}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x6, {{0x9, 0x2, 0x6, 0x1, 0x1, 0x1, 0x1}, 0x2, {0x1, 0x100, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0x10}, {0x8, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000040) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xffff8000, 0x4, 0xfffffffd}}}}, 0x30}}, 0x2c040090) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x82, &(0x7f0000000180)={r12, 0x8000}, 0x8) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r13) sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)=[{0x0, 0x18}, {&(0x7f0000001100)="b35ba3", 0x3}], 0x2}}], 0x4, 0x0) 331.498831ms ago: executing program 3 (id=4254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 301.234839ms ago: executing program 6 (id=4255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480741306806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480741306806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007f427bd700000000000017c00000400fc800c00018008000600", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x4040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x100, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8801}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1100, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x71}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_MATCH={0x15, 0x5b, "6cddaa0d085736f058ecdecf369f87cfd8"}, @NL80211_ATTR_FRAME_MATCH={0xb3, 0x5b, "d8f8821f42bf3f2b58df46ef9f568027528203d29ced607998f9793141b45248e4a810b1d641daa371f49b0aedda0996de65994575a779281abd0e3db1341845136627c385f95870833546a36a9e8e1813fccdcf504f490904bce1d9d155507d1faa6529b9aad25d8f5f956b48c9fdb8d9b6117c805eefcc889ad9a779c55d8388fbc73b86a035064d5759d55172d96184469d61733f0a48f57631550ba58018c39c71ff60a6ff3093b666d4c50e82"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x1100}, 0x1, 0x0, 0x0, 0x4008014}, 0xc000) 208.001079ms ago: executing program 3 (id=4256): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000002280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x466}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x2dae}, &(0x7f0000000280)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r1}, &(0x7f0000000040), &(0x7f0000000980)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8097, 0x2021}, [@IFLA_LINKINFO={0x1a, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f00000002c0)={0xe4, 0x2, 0x3, 0x0, 0x9}) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) 97.923102ms ago: executing program 1 (id=4257): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x11, 0x200c8814, &(0x7f0000000280)={0xa, 0xe20, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @func_proto, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x3}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf256800000008000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x2804) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000fc0)={@map, 0xffffffffffffffff, 0x31, 0x2c}, 0x20) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r9}, &(0x7f00000004c0), &(0x7f0000000500)=r8}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_INUMBERS(r10, 0x80405880, &(0x7f0000000800)={{0x3, 0x1, 0xa, 0x7, 0x3}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x44, r7, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44081}, 0x81) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r11, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl(r0, 0x9, &(0x7f00000001c0)="c1e7d110cf55c3531d4493a1f9885024bb69e6d2a1e8988138cd85c5700db802e97263afc81a960a3174904f50a3db98e12933eebdd1fd9c913463e42d06951495974245e5c3215a751386e48b42e55f3ce3f723371c389cd2a56ce54556c091d97e771871202ed7ab75c8fb8dc6f2c6a7ce902081f277980641b38fd8910ff1b81e49c8a4378f6e9bdb86ed4a6c7d1f1f0971") r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x78, r12, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc36}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004081}, 0x840) 87.19915ms ago: executing program 6 (id=4258): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006a0001002abd7000fbdbdf250217"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x7, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x200000000}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x3}, {0xe, 0xfff1}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x3, 0x6361, 0x7, 0xffffffff, 0x40000003}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x8, 0xda3, 0x7fffffff, 0x7, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40000880) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x8, 0x7d40, {{0x2d, 0x4, 0x1, 0xa, 0xb4, 0x65, 0x0, 0xb, 0x4, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x7c, 0x3, 0x4, [{@multicast2, 0x9}, {@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0xb9, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x4}, {@local, 0x2}, {@empty, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x2}, {@multicast1, 0x8}, {@empty, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}, {@broadcast, 0x3}]}, @cipso={0x86, 0x25, 0x3, [{0x6, 0x11, "653e5a8bf9e0c864d7b2cf72594c77"}, {0x1, 0x4, "3abc"}, {0x6, 0x6, "8416137c"}, {0x0, 0x4, "c3a5"}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x9b, 0x3, 0x7, [{@remote, 0x6}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x6, 0x5]}]}}}}}) r16 = socket$unix(0x1, 0x1, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x1, 0x1, 0x1, 0x6, {{0x19, 0x4, 0x1, 0x1, 0x64, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xdf, 0x1, 0x6, [{@multicast2, 0x7ff}, {@rand_addr=0x64010102, 0x3}, {@private=0xa010101, 0x5}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x200}]}, @generic={0x89, 0xa, "32cf08e0d28983ce"}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0xa, "6af1f4a8d81a5f77"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="df0100dca3ff2563b62300", @ANYRES16=r1, @ANYBLOB="180f2abd7000fcdbdf2506000000300001801400020076657468315f766972745f776966690008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="28000180080003000300000008000100", @ANYRES32=r11, @ANYBLOB="14000200766c616e3100000000000000000000004c0001800800030001000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="14000200697036746e6c3000000000000000000014000200626f6e645f736c6176655f300000000058000180140002006d6163766c616e310000000000000000140002007866726d30000000000000000000000014000200726f736530000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000300010000005800018008000100", @ANYRES32=r18, @ANYBLOB="1400020069703665727370616e3000000000000008000300020000001400020076657468305f766c616e00000000000008000100", @ANYRES32=r19, @ANYBLOB="14000200000000000000000000000000000000003c00018008000100", @ANYRES32=r20, @ANYBLOB="14000200697036746e6c3000000000000000000008000300000000001400020076657468315f746f5f68737200000000200001801400020070696d3672656731000000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4004881) 0s ago: executing program 3 (id=4259): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a3000000000050001000700000008000940000000011400088010"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$IMGETCOUNT(r0, 0x400261f2, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf2521000000180001801400020069703667726574617030"], 0x2c}, 0x1, 0x0, 0x0, 0x2000a000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', r4, 0x29, 0x7, 0x33, 0x3, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x10, 0x86, 0x0, 0x9f4}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r6, 0x4, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x41e297f5cba7ec66}, 0x40) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.0.3209'. [ 492.119730][T20560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3213'. [ 493.466043][T20632] netlink: 'syz.1.3225': attribute type 7 has an invalid length. [ 493.488889][T20632] netlink: 'syz.1.3225': attribute type 5 has an invalid length. [ 494.764873][T20674] macsec1: entered promiscuous mode [ 494.832134][T20674] macsec1: entered allmulticast mode [ 494.903353][T20679] ip6erspan0: entered allmulticast mode [ 494.955497][T20679] __nla_validate_parse: 6 callbacks suppressed [ 494.955515][T20679] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3237'. [ 495.112578][T20688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3240'. [ 495.195946][T20691] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.221193][T20693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 495.237145][T20691] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.306830][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 495.395744][T20710] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3243'. [ 495.480759][T20715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.558600][T20702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.605281][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'. [ 495.655374][T20718] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3247'. [ 495.682031][T20702] bridge0: port 3(ip6gretap0) entered disabled state [ 495.688979][T20702] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.696677][T20702] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.733076][T20711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3244'. [ 495.745644][T20702] bridge0: entered promiscuous mode [ 495.765696][T20724] netlink: 'syz.0.3249': attribute type 1 has an invalid length. [ 495.836878][T20718] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 495.853894][T20722] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3250'. [ 495.861853][T20718] bond1 (unregistering): Released all slaves [ 495.863539][T20722] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 495.890960][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3251'. [ 496.001934][T20724] bond1: entered promiscuous mode [ 496.054930][T20724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.093169][T20740] FAULT_INJECTION: forcing a failure. [ 496.093169][T20740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.114160][T20744] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.3253'. [ 496.123751][T20744] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 496.139452][T20740] CPU: 1 UID: 0 PID: 20740 Comm: syz.2.3252 Not tainted syzkaller #0 PREEMPT(full) [ 496.139482][T20740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.139507][T20740] Call Trace: [ 496.139515][T20740] [ 496.139524][T20740] dump_stack_lvl+0xe8/0x150 [ 496.139572][T20740] should_fail_ex+0x412/0x560 [ 496.139607][T20740] _copy_from_user+0x2d/0xb0 [ 496.139628][T20740] ___sys_sendmsg+0x1c6/0x360 [ 496.139655][T20740] ? __lock_acquire+0x6b5/0x2cf0 [ 496.139681][T20740] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.139744][T20740] ? __fget_files+0x2a/0x420 [ 496.139762][T20740] ? __fget_files+0x3a0/0x420 [ 496.139792][T20740] __x64_sys_sendmsg+0x1bd/0x2a0 [ 496.139820][T20740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.139854][T20740] ? __pfx_ksys_write+0x10/0x10 [ 496.139898][T20740] do_syscall_64+0x14d/0xf80 [ 496.139924][T20740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.139943][T20740] ? trace_irq_disable+0x37/0x100 [ 496.139964][T20740] ? clear_bhb_loop+0x40/0x90 [ 496.139987][T20740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.140010][T20740] RIP: 0033:0x7fb61619c629 [ 496.140029][T20740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.140046][T20740] RSP: 002b:00007fb6170d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.140066][T20740] RAX: ffffffffffffffda RBX: 00007fb616415fa0 RCX: 00007fb61619c629 [ 496.140081][T20740] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000007 [ 496.140093][T20740] RBP: 00007fb6170d3090 R08: 0000000000000000 R09: 0000000000000000 [ 496.140105][T20740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.140117][T20740] R13: 00007fb616416038 R14: 00007fb616415fa0 R15: 00007ffdd52333e8 [ 496.140150][T20740] [ 496.383449][T20728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.394912][T20728] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 496.408656][T20728] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 496.429062][T20728] bond1: (slave wireguard0): making interface the new active one [ 496.436979][T20728] wireguard0: entered promiscuous mode [ 496.481459][T20728] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 496.834164][T20767] netlink: 'syz.2.3258': attribute type 13 has an invalid length. [ 497.030411][T20787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 497.050980][T20782] netlink: 'syz.3.3260': attribute type 3 has an invalid length. [ 497.075735][T20786] lo speed is unknown, defaulting to 1000 [ 497.099681][T20782] lo: entered allmulticast mode [ 497.124109][T20786] virt_wifi0 speed is unknown, defaulting to 1000 [ 497.182328][T20786] wlan1 speed is unknown, defaulting to 1000 [ 497.196292][T20792] tipc: Enabled bearer , priority 0 [ 497.236033][T20797] bridge0: port 3(ip6gretap0) entered blocking state [ 497.243036][T20797] bridge0: port 3(ip6gretap0) entered forwarding state [ 497.250446][T20797] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.257647][T20797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.265333][T20797] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.272600][T20797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.293405][T20797] bridge0: left promiscuous mode [ 497.313446][T20797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.330678][T20786] wg1 speed is unknown, defaulting to 1000 [ 497.334154][T20799] syzkaller0: entered promiscuous mode [ 497.344475][T20799] syzkaller0: entered allmulticast mode [ 497.353520][T20782] siw: device registration error -23 [ 497.361490][T20792] netlink: 'syz.1.3262': attribute type 3 has an invalid length. [ 497.422482][T20792] syzkaller0: mtu less than device minimum [ 497.473601][T20779] lo: left allmulticast mode [ 497.478920][T20792] tipc: Resetting bearer [ 497.508344][T20792] tipc: Disabling bearer [ 497.650418][T20806] FAULT_INJECTION: forcing a failure. [ 497.650418][T20806] name failslab, interval 1, probability 0, space 0, times 0 [ 497.702145][T20806] CPU: 0 UID: 0 PID: 20806 Comm: syz.1.3264 Not tainted syzkaller #0 PREEMPT(full) [ 497.702176][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.702190][T20806] Call Trace: [ 497.702199][T20806] [ 497.702207][T20806] dump_stack_lvl+0xe8/0x150 [ 497.702242][T20806] should_fail_ex+0x412/0x560 [ 497.702279][T20806] should_failslab+0xa8/0x100 [ 497.702312][T20806] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 497.702338][T20806] ? __alloc_skb+0x186/0x7d0 [ 497.702361][T20806] ? __alloc_skb+0x1d0/0x7d0 [ 497.702381][T20806] ? __local_bh_enable_ip+0xd0/0x130 [ 497.702411][T20806] __alloc_skb+0x1d0/0x7d0 [ 497.702439][T20806] netlink_sendmsg+0x5d4/0xb40 [ 497.702482][T20806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.702507][T20806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 497.702539][T20806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.702570][T20806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.702591][T20806] ____sys_sendmsg+0xa68/0xad0 [ 497.702618][T20806] ? __might_fault+0xaf/0x130 [ 497.702647][T20806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.702682][T20806] ? import_iovec+0x73/0xa0 [ 497.702709][T20806] ___sys_sendmsg+0x2a5/0x360 [ 497.702734][T20806] ? __lock_acquire+0x6b5/0x2cf0 [ 497.702761][T20806] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.702826][T20806] ? __fget_files+0x2a/0x420 [ 497.702846][T20806] ? __fget_files+0x3a0/0x420 [ 497.702877][T20806] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.702907][T20806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.702945][T20806] ? __pfx_ksys_write+0x10/0x10 [ 497.702984][T20806] do_syscall_64+0x14d/0xf80 [ 497.703011][T20806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.703031][T20806] ? trace_irq_disable+0x37/0x100 [ 497.703055][T20806] ? clear_bhb_loop+0x40/0x90 [ 497.703080][T20806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.703100][T20806] RIP: 0033:0x7f99f7d9c629 [ 497.703118][T20806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.703135][T20806] RSP: 002b:00007f99f8c71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.703156][T20806] RAX: ffffffffffffffda RBX: 00007f99f8015fa0 RCX: 00007f99f7d9c629 [ 497.703169][T20806] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000007 [ 497.703182][T20806] RBP: 00007f99f8c71090 R08: 0000000000000000 R09: 0000000000000000 [ 497.703195][T20806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.703207][T20806] R13: 00007f99f8016038 R14: 00007f99f8015fa0 R15: 00007ffd34dad638 [ 497.703239][T20806] [ 498.090477][T20816] openvswitch: netlink: Flow actions attr not present in new flow. [ 499.799012][T20908] FAULT_INJECTION: forcing a failure. [ 499.799012][T20908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.820665][T20908] CPU: 1 UID: 0 PID: 20908 Comm: syz.2.3288 Not tainted syzkaller #0 PREEMPT(full) [ 499.820693][T20908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.820706][T20908] Call Trace: [ 499.820713][T20908] [ 499.820722][T20908] dump_stack_lvl+0xe8/0x150 [ 499.820755][T20908] should_fail_ex+0x412/0x560 [ 499.820790][T20908] _copy_from_iter+0x1d3/0x1670 [ 499.820829][T20908] ? rcu_is_watching+0x15/0xb0 [ 499.820855][T20908] ? __pfx__copy_from_iter+0x10/0x10 [ 499.820893][T20908] ? netlink_sendmsg+0x650/0xb40 [ 499.820913][T20908] ? skb_put+0x11b/0x210 [ 499.820940][T20908] netlink_sendmsg+0x6c0/0xb40 [ 499.820971][T20908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.820996][T20908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 499.821027][T20908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.821056][T20908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.821076][T20908] ____sys_sendmsg+0xa68/0xad0 [ 499.821101][T20908] ? __might_fault+0xaf/0x130 [ 499.821133][T20908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.821169][T20908] ? import_iovec+0x73/0xa0 [ 499.821194][T20908] ___sys_sendmsg+0x2a5/0x360 [ 499.821220][T20908] ? __lock_acquire+0x6b5/0x2cf0 [ 499.821247][T20908] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.821310][T20908] ? __fget_files+0x2a/0x420 [ 499.821331][T20908] ? __fget_files+0x3a0/0x420 [ 499.821362][T20908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 499.821393][T20908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.821430][T20908] ? __pfx_ksys_write+0x10/0x10 [ 499.821469][T20908] do_syscall_64+0x14d/0xf80 [ 499.821496][T20908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.821516][T20908] ? trace_irq_disable+0x37/0x100 [ 499.821539][T20908] ? clear_bhb_loop+0x40/0x90 [ 499.821571][T20908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.821591][T20908] RIP: 0033:0x7fb61619c629 [ 499.821611][T20908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.821628][T20908] RSP: 002b:00007fb6170d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.821651][T20908] RAX: ffffffffffffffda RBX: 00007fb616415fa0 RCX: 00007fb61619c629 [ 499.821666][T20908] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000007 [ 499.821680][T20908] RBP: 00007fb6170d3090 R08: 0000000000000000 R09: 0000000000000000 [ 499.821693][T20908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.821705][T20908] R13: 00007fb616416038 R14: 00007fb616415fa0 R15: 00007ffdd52333e8 [ 499.821740][T20908] [ 499.828663][T20912] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 500.212488][T20922] __nla_validate_parse: 9 callbacks suppressed [ 500.212507][T20922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3290'. [ 500.243932][T20921] netlink: 'syz.2.3293': attribute type 33 has an invalid length. [ 500.254999][T20922] bridge0: port 3(batadv1) entered blocking state [ 500.278532][T20921] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3293'. [ 500.300401][T20922] bridge0: port 3(batadv1) entered disabled state [ 500.310044][T20922] batadv1: entered allmulticast mode [ 500.317487][T20922] batadv1: entered promiscuous mode [ 500.352310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 500.617690][T20939] bridge0: port 3(ip6gretap0) entered disabled state [ 500.650518][T20939] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.662513][T20939] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.740061][T11330] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 500.750475][T11330] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 502.736458][T20905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.748722][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 502.789813][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3290'. [ 502.919640][T20962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3302'. [ 503.032374][T20964] FAULT_INJECTION: forcing a failure. [ 503.032374][T20964] name failslab, interval 1, probability 0, space 0, times 0 [ 503.065572][T20964] CPU: 0 UID: 0 PID: 20964 Comm: syz.5.3303 Not tainted syzkaller #0 PREEMPT(full) [ 503.065602][T20964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.065615][T20964] Call Trace: [ 503.065623][T20964] [ 503.065632][T20964] dump_stack_lvl+0xe8/0x150 [ 503.065665][T20964] should_fail_ex+0x412/0x560 [ 503.065701][T20964] should_failslab+0xa8/0x100 [ 503.065730][T20964] ? skb_clone+0x212/0x3a0 [ 503.065758][T20964] kmem_cache_alloc_noprof+0x87/0x650 [ 503.065782][T20964] ? __netlink_lookup+0xc6/0x8b0 [ 503.065820][T20964] skb_clone+0x212/0x3a0 [ 503.065852][T20964] __netlink_deliver_tap+0x404/0x850 [ 503.065887][T20964] ? netlink_deliver_tap+0x2e/0x1b0 [ 503.065909][T20964] netlink_deliver_tap+0x19c/0x1b0 [ 503.065931][T20964] netlink_unicast+0x7e3/0x9b0 [ 503.065970][T20964] ? __pfx_netlink_unicast+0x10/0x10 [ 503.066003][T20964] ? netlink_sendmsg+0x650/0xb40 [ 503.066022][T20964] ? skb_put+0x11b/0x210 [ 503.066050][T20964] netlink_sendmsg+0x813/0xb40 [ 503.066082][T20964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.066108][T20964] ? aa_sock_msg_perm+0xf1/0x1b0 [ 503.066138][T20964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.066169][T20964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 503.066189][T20964] ____sys_sendmsg+0xa68/0xad0 [ 503.066212][T20964] ? __might_fault+0xaf/0x130 [ 503.066243][T20964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.066278][T20964] ? import_iovec+0x73/0xa0 [ 503.066313][T20964] ___sys_sendmsg+0x2a5/0x360 [ 503.066337][T20964] ? __lock_acquire+0x6b5/0x2cf0 [ 503.066364][T20964] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.066428][T20964] ? __fget_files+0x2a/0x420 [ 503.066448][T20964] ? __fget_files+0x3a0/0x420 [ 503.066480][T20964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 503.066511][T20964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 503.066548][T20964] ? __pfx_ksys_write+0x10/0x10 [ 503.066588][T20964] do_syscall_64+0x14d/0xf80 [ 503.066615][T20964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.066635][T20964] ? trace_irq_disable+0x37/0x100 [ 503.066659][T20964] ? clear_bhb_loop+0x40/0x90 [ 503.066684][T20964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.066704][T20964] RIP: 0033:0x7f689c79c629 [ 503.066723][T20964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.066740][T20964] RSP: 002b:00007f689d5c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 503.066762][T20964] RAX: ffffffffffffffda RBX: 00007f689ca15fa0 RCX: 00007f689c79c629 [ 503.066778][T20964] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000007 [ 503.066792][T20964] RBP: 00007f689d5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 503.066805][T20964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.066836][T20964] R13: 00007f689ca16038 R14: 00007f689ca15fa0 R15: 00007fffcfabaf98 [ 503.066872][T20964] [ 503.442047][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 503.499000][T20977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3308'. [ 503.525271][T20971] bridge0: port 4(syz_tun) entered blocking state [ 503.532749][T20971] bridge0: port 4(syz_tun) entered disabled state [ 503.532753][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3308'. [ 503.532780][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3308'. [ 503.539554][T20971] syz_tun: entered allmulticast mode [ 503.544814][T20971] syz_tun: entered promiscuous mode [ 503.682988][T20968] netlink: 'syz.0.3304': attribute type 7 has an invalid length. [ 503.717787][T20981] netlink: 'syz.2.3309': attribute type 8 has an invalid length. [ 503.821063][T20984] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 503.833904][T20984] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 503.908260][T20971] macvlan2: entered promiscuous mode [ 503.964830][T20971] macvlan2: entered allmulticast mode [ 503.998090][T20971] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 504.073654][T21003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3311'. [ 505.057358][T21027] netlink: 'syz.5.3316': attribute type 10 has an invalid length. [ 505.141847][T21033] FAULT_INJECTION: forcing a failure. [ 505.141847][T21033] name failslab, interval 1, probability 0, space 0, times 0 [ 505.155097][T21033] CPU: 0 UID: 0 PID: 21033 Comm: syz.2.3317 Not tainted syzkaller #0 PREEMPT(full) [ 505.155126][T21033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.155147][T21033] Call Trace: [ 505.155155][T21033] [ 505.155164][T21033] dump_stack_lvl+0xe8/0x150 [ 505.155196][T21033] should_fail_ex+0x412/0x560 [ 505.155231][T21033] should_failslab+0xa8/0x100 [ 505.155261][T21033] ? skb_clone+0x212/0x3a0 [ 505.155287][T21033] kmem_cache_alloc_noprof+0x87/0x650 [ 505.155311][T21033] ? dev_queue_xmit_nit+0x2d/0xad0 [ 505.155344][T21033] skb_clone+0x212/0x3a0 [ 505.155368][T21033] ? dev_queue_xmit_nit+0x268/0xad0 [ 505.155393][T21033] dev_queue_xmit_nit+0x29a/0xad0 [ 505.155419][T21033] ? dev_queue_xmit_nit+0x2d/0xad0 [ 505.155452][T21033] dev_hard_start_xmit+0x1c1/0x7f0 [ 505.155504][T21033] __dev_queue_xmit+0x168f/0x3850 [ 505.155531][T21033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.155564][T21033] ? __dev_queue_xmit+0x274/0x3850 [ 505.155603][T21033] ? __pfx___dev_queue_xmit+0x10/0x10 [ 505.155639][T21033] ? __copy_skb_header+0xa3/0x4a0 [ 505.155665][T21033] ? __asan_memcpy+0x40/0x70 [ 505.155702][T21033] ? skb_clone+0x246/0x3a0 [ 505.155734][T21033] __netlink_deliver_tap+0x5ad/0x850 [ 505.155766][T21033] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.155782][T21033] netlink_deliver_tap+0x19c/0x1b0 [ 505.155799][T21033] netlink_unicast+0x7e3/0x9b0 [ 505.155832][T21033] ? __pfx_netlink_unicast+0x10/0x10 [ 505.155855][T21033] ? netlink_sendmsg+0x650/0xb40 [ 505.155869][T21033] ? skb_put+0x11b/0x210 [ 505.155888][T21033] netlink_sendmsg+0x813/0xb40 [ 505.155911][T21033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.155929][T21033] ? aa_sock_msg_perm+0xf1/0x1b0 [ 505.155953][T21033] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 505.155976][T21033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.155990][T21033] ____sys_sendmsg+0xa68/0xad0 [ 505.156010][T21033] ? __might_fault+0xaf/0x130 [ 505.156033][T21033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 505.156060][T21033] ? import_iovec+0x73/0xa0 [ 505.156078][T21033] ___sys_sendmsg+0x2a5/0x360 [ 505.156096][T21033] ? __lock_acquire+0x6b5/0x2cf0 [ 505.156116][T21033] ? __pfx____sys_sendmsg+0x10/0x10 [ 505.156170][T21033] ? __fget_files+0x2a/0x420 [ 505.156184][T21033] ? __fget_files+0x3a0/0x420 [ 505.156207][T21033] __x64_sys_sendmsg+0x1bd/0x2a0 [ 505.156228][T21033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 505.156255][T21033] ? __pfx_ksys_write+0x10/0x10 [ 505.156283][T21033] do_syscall_64+0x14d/0xf80 [ 505.156303][T21033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.156316][T21033] ? trace_irq_disable+0x37/0x100 [ 505.156334][T21033] ? clear_bhb_loop+0x40/0x90 [ 505.156352][T21033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.156366][T21033] RIP: 0033:0x7fb61619c629 [ 505.156381][T21033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.156394][T21033] RSP: 002b:00007fb6170d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 505.156409][T21033] RAX: ffffffffffffffda RBX: 00007fb616415fa0 RCX: 00007fb61619c629 [ 505.156421][T21033] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000007 [ 505.156430][T21033] RBP: 00007fb6170d3090 R08: 0000000000000000 R09: 0000000000000000 [ 505.156440][T21033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.156448][T21033] R13: 00007fb616416038 R14: 00007fb616415fa0 R15: 00007ffdd52333e8 [ 505.156473][T21033] [ 505.541068][T21035] __nla_validate_parse: 3 callbacks suppressed [ 505.541089][T21035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3319'. [ 505.621354][T21039] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3321'. [ 505.645657][ T7822] IPVS: starting estimator thread 0... [ 505.658502][T21039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.681275][T21043] netlink: 'syz.3.3318': attribute type 4 has an invalid length. [ 505.730780][T21043] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3318'. [ 505.745316][T21040] IPVS: using max 29 ests per chain, 69600 per kthread [ 505.995813][T21054] bond3: option ad_select: invalid value (34) [ 506.009120][T21054] bond3 (unregistering): Released all slaves [ 506.426807][T21084] : entered promiscuous mode [ 506.492988][T21091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3331'. [ 506.552381][T21091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3331'. [ 506.631686][T21100] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 506.643878][T21097] syzkaller0: entered promiscuous mode [ 506.671160][T21100] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3333'. [ 506.674334][T21097] syzkaller0: entered allmulticast mode [ 506.765865][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.810043][T21110] FAULT_INJECTION: forcing a failure. [ 506.810043][T21110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.879576][T21110] CPU: 1 UID: 0 PID: 21110 Comm: syz.5.3334 Not tainted syzkaller #0 PREEMPT(full) [ 506.879607][T21110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.879621][T21110] Call Trace: [ 506.879630][T21110] [ 506.879640][T21110] dump_stack_lvl+0xe8/0x150 [ 506.879682][T21110] should_fail_ex+0x412/0x560 [ 506.879719][T21110] _copy_to_user+0x31/0xb0 [ 506.879744][T21110] simple_read_from_buffer+0xe1/0x170 [ 506.879780][T21110] proc_fail_nth_read+0x1bb/0x230 [ 506.879812][T21110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.879842][T21110] ? rw_verify_area+0x2a6/0x4d0 [ 506.879866][T21110] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.879892][T21110] vfs_read+0x20c/0xa70 [ 506.879914][T21110] ? fdget_pos+0x246/0x320 [ 506.879939][T21110] ? __pfx___mutex_lock+0x10/0x10 [ 506.879968][T21110] ? __pfx_vfs_read+0x10/0x10 [ 506.879992][T21110] ? __fget_files+0x2a/0x420 [ 506.880017][T21110] ? __fget_files+0x3a0/0x420 [ 506.880035][T21110] ? __fget_files+0x2a/0x420 [ 506.880064][T21110] ksys_read+0x150/0x270 [ 506.880092][T21110] ? __pfx_ksys_read+0x10/0x10 [ 506.880130][T21110] do_syscall_64+0x14d/0xf80 [ 506.880157][T21110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.880178][T21110] ? trace_irq_disable+0x37/0x100 [ 506.880202][T21110] ? clear_bhb_loop+0x40/0x90 [ 506.880228][T21110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.880248][T21110] RIP: 0033:0x7f689c75cece [ 506.880266][T21110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 506.880284][T21110] RSP: 002b:00007f689d5c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.880306][T21110] RAX: ffffffffffffffda RBX: 00007f689d5c76c0 RCX: 00007f689c75cece [ 506.880321][T21110] RDX: 000000000000000f RSI: 00007f689d5c70a0 RDI: 0000000000000008 [ 506.880334][T21110] RBP: 00007f689d5c7090 R08: 0000000000000000 R09: 0000000000000000 [ 506.880347][T21110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.880359][T21110] R13: 00007f689ca16038 R14: 00007f689ca15fa0 R15: 00007fffcfabaf98 [ 506.880395][T21110] [ 507.725964][T21114] tipc: Enabled bearer , priority 0 [ 507.777038][T21117] syzkaller0: entered promiscuous mode [ 507.802468][T21117] syzkaller0: entered allmulticast mode [ 507.936316][T21108] lo speed is unknown, defaulting to 1000 [ 507.962331][T21134] tipc: Resetting bearer [ 508.038437][T21134] tipc: Disabling bearer [ 508.056132][T21108] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.090296][T21108] wlan1 speed is unknown, defaulting to 1000 [ 508.098165][T21108] wg1 speed is unknown, defaulting to 1000 [ 508.575364][T21171] lo speed is unknown, defaulting to 1000 [ 508.596011][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'. [ 508.610155][T21171] virt_wifi0 speed is unknown, defaulting to 1000 [ 508.654504][T21171] wlan1 speed is unknown, defaulting to 1000 [ 508.666571][T21171] wg1 speed is unknown, defaulting to 1000 [ 509.135505][T21202] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3349'. [ 509.148792][T21195] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.156450][T21195] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.312719][T21195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.342125][T21195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.525521][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 509.635764][T21215] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3350'. [ 509.667172][ T1333] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.677716][ T1333] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.690126][ T1333] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.703927][T21216] Cannot find set identified by id 0 to match [ 509.720370][ T1333] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.901219][T21226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.651459][T21179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.990252][T21248] __nla_validate_parse: 2 callbacks suppressed [ 511.990276][T21248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3356'. [ 512.058738][T21238] lo speed is unknown, defaulting to 1000 [ 512.070115][T21238] virt_wifi0 speed is unknown, defaulting to 1000 [ 512.103983][T21238] wlan1 speed is unknown, defaulting to 1000 [ 512.114216][T21251] syzkaller0: entered promiscuous mode [ 512.123552][T21251] syzkaller0: entered allmulticast mode [ 512.147819][T21238] wg1 speed is unknown, defaulting to 1000 [ 512.518168][T21280] netlink: 'syz.2.3363': attribute type 4 has an invalid length. [ 512.526600][T21280] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3363'. [ 512.650723][T21287] netlink: 'syz.1.3365': attribute type 1 has an invalid length. [ 512.686696][T21290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3363'. [ 512.771749][T21280] .`: renamed from bond0 (while UP) [ 512.946458][T21287] bond3: entered promiscuous mode [ 512.983185][T21287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.036940][T21314] IPVS: length: 164 != 24 [ 513.056463][T21308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3366'. [ 513.175038][T21299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.187556][T21299] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 513.200804][T21299] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 513.215805][T21299] bond3: (slave vti0): making interface the new active one [ 513.225621][T21299] vti0: entered promiscuous mode [ 513.233423][T21299] bond3: (slave vti0): Enslaving as an active interface with an up link [ 513.638749][T21327] netlink: 'syz.5.3370': attribute type 1 has an invalid length. [ 513.761822][T21327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 513.846609][T21341] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 513.906515][T21327] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 513.989392][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 514.053030][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 514.104101][T21362] x_tables: duplicate underflow at hook 1 [ 514.121149][T21359] xfrm1: entered promiscuous mode [ 514.126285][T21359] xfrm1: entered allmulticast mode [ 514.135402][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.146788][T21362] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3379'. [ 514.177246][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 514.187471][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.213591][ T30] audit: type=1804 audit(1771411780.401:12): pid=21366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3381" name="/newroot/42/memory.events" dev="tmpfs" ino=236 res=1 errno=0 [ 514.250278][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.270594][ T3570] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.278624][ T3570] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 514.410065][ T3570] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.432524][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.459985][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.489883][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 515.041299][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3387'. [ 515.365625][T21409] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3388'. [ 515.465905][T21409] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.518620][T21409] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.566416][T21409] .` (unregistering): Released all slaves [ 516.213490][T21439] xt_CT: No such helper "snmp" [ 516.616410][T21469] lo speed is unknown, defaulting to 1000 [ 516.642329][T21469] virt_wifi0 speed is unknown, defaulting to 1000 [ 516.653743][T21469] wlan1 speed is unknown, defaulting to 1000 [ 516.668822][T21469] wg1 speed is unknown, defaulting to 1000 [ 516.852638][T21490] netlink: 'syz.1.3407': attribute type 10 has an invalid length. [ 516.870523][T21490] team0: Device ipvlan1 failed to register rx_handler [ 516.939189][T21490] smc: net device wlan0 applied user defined pnetid SYZ0 [ 517.914717][T21540] IPVS: set_ctl: invalid protocol: 43 172.20.20.21:20004 [ 518.114092][T21552] netlink: 'syz.1.3421': attribute type 33 has an invalid length. [ 518.154572][T21552] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3421'. [ 518.190865][T21552] `: renamed from team0 (while UP) [ 518.376829][T21563] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3424'. [ 518.413160][T21563] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3424'. [ 519.039880][ T1333] net_ratelimit: 129 callbacks suppressed [ 519.039902][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.079956][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.100465][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.124311][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.164553][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3435'. [ 519.172246][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.201098][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.245312][ T7493] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.255131][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.272416][ T7493] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.296015][ T7493] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.311605][T11333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.333932][T21616] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3437'. [ 519.344418][ T7493] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.355007][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.390046][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.404807][T21618] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3438'. [ 519.596647][T21629] syzkaller0: entered promiscuous mode [ 519.618051][T21629] syzkaller0: entered allmulticast mode [ 519.955325][T11330] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.009475][T11330] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.046902][T11330] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.107043][T11330] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 520.378522][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3450'. [ 520.396577][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3447'. [ 520.446919][T21661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3450'. [ 520.459968][T21661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3450'. [ 520.577095][T21674] bond0: (slave sit0): Error: Device type is different from other slaves [ 520.681799][T21683] netlink: 'syz.0.3455': attribute type 10 has an invalid length. [ 520.727155][T21683] team0: Failed to send options change via netlink (err -105) [ 520.761550][T21689] netlink: 'syz.0.3455': attribute type 10 has an invalid length. [ 520.776570][T21683] team0: Port device dummy0 added [ 520.821920][T21689] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 520.873446][T21689] team0: Failed to send options change via netlink (err -105) [ 520.889609][T21689] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 520.914996][T21689] team0: Port device dummy0 removed [ 520.962222][T21689] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 521.058719][T21705] lo speed is unknown, defaulting to 1000 [ 521.100555][T21713] gre0: entered allmulticast mode [ 521.136806][T21705] virt_wifi0 speed is unknown, defaulting to 1000 [ 521.187181][T21705] wlan1 speed is unknown, defaulting to 1000 [ 521.289150][T21705] wg1 speed is unknown, defaulting to 1000 [ 521.620636][T21736] Bluetooth: MGMT ver 1.23 [ 521.871629][T21747] lo speed is unknown, defaulting to 1000 [ 521.899746][T21747] virt_wifi0 speed is unknown, defaulting to 1000 [ 521.924577][T21747] wlan1 speed is unknown, defaulting to 1000 [ 521.951511][T21747] wg1 speed is unknown, defaulting to 1000 [ 522.092828][T21761] netlink: 'syz.5.3472': attribute type 4 has an invalid length. [ 522.226238][T21761] .`: renamed from bond0 (while UP) [ 522.273596][T21770] netlink: 'syz.0.3474': attribute type 11 has an invalid length. [ 522.541201][T21777] netlink: 'syz.5.3476': attribute type 10 has an invalid length. [ 522.595843][T21781] netlink: 'syz.5.3476': attribute type 10 has an invalid length. [ 522.617856][T21777] team0: Failed to send options change via netlink (err -105) [ 522.626559][T21777] team0: Port device dummy0 added [ 522.770886][T21781] team0: Failed to send options change via netlink (err -105) [ 522.789028][T21781] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 522.800239][T21781] team0: Port device dummy0 removed [ 522.813513][T21781] .`: (slave dummy0): Enslaving as an active interface with an up link [ 523.093645][T21800] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 523.162279][T21805] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 523.164258][T21802] gre0: left allmulticast mode [ 523.987984][T21838] __nla_validate_parse: 11 callbacks suppressed [ 523.988066][T21838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3491'. [ 524.040377][T21838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3491'. [ 524.070394][T11333] net_ratelimit: 129 callbacks suppressed [ 524.070416][T11333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.130033][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.160006][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.179936][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 524.311321][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.329965][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 524.449969][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.457955][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 524.589891][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.621106][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 524.710694][T21872] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3498'. [ 524.733559][T21872] ..0ªî{X¹¦: renamed from gretap0 [ 524.767049][T21872] ..0ªî{X¹¦: entered allmulticast mode [ 524.787710][T21872] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3498'. [ 524.936162][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3500'. [ 524.990858][T21883] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.029152][T21883] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 525.041760][T21883] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 525.380577][T21903] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3504'. [ 525.607118][T21918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 525.700664][T21924] ip6t_srh: unknown srh match flags 4000 [ 525.715085][T21924] netlink: 'syz.5.3508': attribute type 2 has an invalid length. [ 525.748140][T21924] !©9: entered promiscuous mode [ 525.792099][T21924] netlink: 'syz.5.3508': attribute type 2 has an invalid length. [ 525.810588][T21924] !©9: left promiscuous mode [ 525.864384][T21934] netlink: 'syz.1.3510': attribute type 3 has an invalid length. [ 525.947508][T21939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3511'. [ 526.063432][T21952] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 526.162641][T21944] syzkaller0: entered promiscuous mode [ 526.168188][T21944] syzkaller0: entered allmulticast mode [ 527.186730][T22006] netlink: 'syz.5.3523': attribute type 1 has an invalid length. [ 527.375379][T22013] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3525'. [ 527.584729][T22019] netlink: 'syz.5.3526': attribute type 11 has an invalid length. [ 527.803628][T22032] netlink: 'syz.5.3529': attribute type 23 has an invalid length. [ 528.140228][T22044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3532'. [ 528.271395][T22047] lo speed is unknown, defaulting to 1000 [ 528.277799][T22049] tipc: Enabled bearer , priority 0 [ 528.286303][T22050] syzkaller0: entered promiscuous mode [ 528.293534][T22050] syzkaller0: entered allmulticast mode [ 528.333585][T22047] virt_wifi0 speed is unknown, defaulting to 1000 [ 528.344050][T22050] tipc: Resetting bearer [ 528.372110][T22050] tipc: Disabling bearer [ 528.386699][T22047] wlan1 speed is unknown, defaulting to 1000 [ 528.420236][T22047] wg1 speed is unknown, defaulting to 1000 [ 528.552859][T11330] bond0: (slave bond_slave_0): interface is now down [ 528.597448][T11330] bond0: (slave bond_slave_1): interface is now down [ 528.697599][T22072] x_tables: duplicate entry at hook 2 [ 528.771230][T11333] bond0: (slave bond_slave_0): interface is now down [ 528.778015][T11333] bond0: (slave bond_slave_1): interface is now down [ 528.939912][T11333] bond0: (slave bond_slave_0): interface is now down [ 528.946699][T11333] bond0: (slave bond_slave_1): interface is now down [ 528.968996][T22082] netlink: 'syz.5.3541': attribute type 4 has an invalid length. [ 529.130220][ T7493] bond0: (slave bond_slave_0): interface is now down [ 529.144992][ T7493] bond0: (slave bond_slave_1): interface is now down [ 529.192301][ T2973] net_ratelimit: 107 callbacks suppressed [ 529.192324][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.240346][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.264945][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.309896][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.349975][ T61] bond0: (slave bond_slave_0): interface is now down [ 529.359944][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 529.370199][ T61] bond0: (slave bond_slave_1): interface is now down [ 529.396042][ T61] bond0: now running without any active interface! [ 529.485167][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.527653][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.540952][T11330] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 529.660211][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 529.675273][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 529.732915][T22123] syzkaller1: entered promiscuous mode [ 529.741883][T22123] syzkaller1: entered allmulticast mode [ 529.814357][T22131] netlink: 'syz.3.3553': attribute type 1 has an invalid length. [ 529.852897][T22131] __nla_validate_parse: 1 callbacks suppressed [ 529.852915][T22131] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3553'. [ 529.881383][T22129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3552'. [ 529.938442][T22131] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3553'. [ 529.951132][T22131] netlink: 'syz.3.3553': attribute type 2 has an invalid length. [ 530.291939][T22159] netlink: 'syz.3.3555': attribute type 1 has an invalid length. [ 530.736466][T22191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3563'. [ 530.927538][T22204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3566'. [ 531.200645][T22218] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 531.228016][T22218] bond3 (unregistering): Released all slaves [ 531.433202][T22234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3572'. [ 531.463196][T22229] veth3: entered promiscuous mode [ 531.584890][T22241] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3574'. [ 534.210214][ T3570] net_ratelimit: 88 callbacks suppressed [ 534.210238][ T3570] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.224066][ T3570] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 534.246648][T22236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.339568][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.347380][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 534.499808][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.519575][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 534.545644][T22264] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3580'. [ 534.629484][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.638585][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 534.769581][ T3570] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 534.790260][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 535.492384][T22302] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3588'. [ 535.593891][T22302] IPv6: sit3: Disabled Multicast RS [ 535.601438][T22302] sit3: entered allmulticast mode [ 535.704269][T22305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3589'. [ 535.898305][T22310] xt_hashlimit: size too large, truncated to 1048576 [ 535.974833][T22313] netlink: 'syz.2.3591': attribute type 1 has an invalid length. [ 536.130845][T22313] bond0: entered promiscuous mode [ 536.149865][T22313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.163518][T22316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3593'. [ 536.187293][T22316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 536.219905][T22324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.227197][T22324] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 536.239597][T22324] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 536.256223][T22324] bond0: (slave wireguard0): making interface the new active one [ 536.267816][T22324] wireguard0: entered promiscuous mode [ 536.275520][T22324] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 536.318022][T22325] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 536.336164][T22325] bond0: (slave wireguard1): Enslaving as a backup interface with an up link [ 536.402415][T22316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3593'. [ 536.427647][T22316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 536.541825][T22345] netlink: 'syz.2.3596': attribute type 3 has an invalid length. [ 536.702601][T22355] delete_channel: no stack [ 536.883013][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 536.987832][T22370] x_tables: duplicate underflow at hook 1 [ 536.998587][T22367] lo speed is unknown, defaulting to 1000 [ 537.021702][T22367] virt_wifi0 speed is unknown, defaulting to 1000 [ 537.064356][T22367] wlan1 speed is unknown, defaulting to 1000 [ 537.085127][T22367] wg1 speed is unknown, defaulting to 1000 [ 537.503141][T22392] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3606'. [ 537.529779][T22392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3606'. [ 537.590595][T22392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3606'. [ 537.845662][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 537.858897][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 537.879992][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 537.911330][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 537.924503][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.102274][T22407] lo speed is unknown, defaulting to 1000 [ 538.117755][T22424] netlink: 'syz.1.3610': attribute type 1 has an invalid length. [ 538.160389][T22407] virt_wifi0 speed is unknown, defaulting to 1000 [ 538.198216][T22407] wlan1 speed is unknown, defaulting to 1000 [ 538.220628][T22407] wg1 speed is unknown, defaulting to 1000 [ 538.718036][T22407] chnl_net:caif_netlink_parms(): no params data found [ 538.785453][T22446] pim6reg: entered allmulticast mode [ 538.821649][T22452] bridge0: entered allmulticast mode [ 538.865151][T22446] pim6reg: left allmulticast mode [ 538.880557][T22446] bridge0: left allmulticast mode [ 538.963622][T22450] lo speed is unknown, defaulting to 1000 [ 539.006408][T22450] virt_wifi0 speed is unknown, defaulting to 1000 [ 539.047733][T22407] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.055170][T22407] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.088890][T22407] bridge_slave_0: entered allmulticast mode [ 539.104404][T22407] bridge_slave_0: entered promiscuous mode [ 539.122288][T22450] wlan1 speed is unknown, defaulting to 1000 [ 539.127513][T22407] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.142787][T22407] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.152985][T22407] bridge_slave_1: entered allmulticast mode [ 539.161925][T22407] bridge_slave_1: entered promiscuous mode [ 539.170222][T22450] wg1 speed is unknown, defaulting to 1000 [ 539.219697][ T49] net_ratelimit: 132 callbacks suppressed [ 539.219720][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.259834][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.311658][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.360824][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.379921][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.408326][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.429820][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.444798][T22407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.473610][T22469] syzkaller1: entered promiscuous mode [ 539.479154][T22469] syzkaller1: entered allmulticast mode [ 539.494338][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.520393][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.547378][T22407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.558198][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 539.705807][T22407] team0: Port device team_slave_0 added [ 539.762213][T22490] netlink: 'syz.2.3623': attribute type 1 has an invalid length. [ 539.826302][T22407] team0: Port device team_slave_1 added [ 540.004989][T22407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.034935][ T5839] Bluetooth: hci1: command tx timeout [ 540.043589][T22407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.073754][T22407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.088495][T22407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.095831][T22407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.135053][T22407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.342305][T22407] hsr_slave_0: entered promiscuous mode [ 540.358197][T22407] hsr_slave_1: entered promiscuous mode [ 540.373898][T22407] debugfs: 'hsr0' already exists in 'hsr' [ 540.380932][T22407] Cannot create hsr debugfs directory [ 540.593813][T22529] __nla_validate_parse: 10 callbacks suppressed [ 540.593836][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3631'. [ 540.859725][T22542] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3634'. [ 540.917983][T22542] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.928754][T22542] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.185739][T22542] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.200630][T22542] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.374792][T22542] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.409452][T22542] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.446585][T22407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 541.504348][T22407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 541.549008][T22542] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.581929][T22542] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.602293][T22407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 541.659135][T22407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 541.996461][T22571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.110469][ T5839] Bluetooth: hci1: command tx timeout [ 542.248660][T22595] xt_cgroup: invalid path, errno=-2 [ 542.318986][T22571] bond0: left promiscuous mode [ 542.324358][T22571] wireguard0: left promiscuous mode [ 542.369163][ T7493] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.378456][ T7493] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.415508][ T7493] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.521420][ T7493] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.573231][ T7493] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.598093][ T7493] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.629363][ T7493] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.647956][ T7493] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.700269][ T7493] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.708599][ T7493] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.740579][ T7493] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 542.748825][ T7493] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.852000][T22627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3649'. [ 543.014988][T22639] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 543.157828][T22407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.217367][T22407] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.245575][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.252944][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.266390][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3653'. [ 543.307988][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.315273][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.680494][T22664] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3655'. [ 543.829129][T22680] netlink: 'syz.2.3659': attribute type 3 has an invalid length. [ 544.191205][ T5839] Bluetooth: hci1: command tx timeout [ 544.231776][T22407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.240555][ T61] net_ratelimit: 176 callbacks suppressed [ 544.240574][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.256097][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 544.368863][T22701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3662'. [ 544.389983][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.411433][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 544.554491][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.588933][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 544.740028][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.763583][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.809384][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.840080][ T3570] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 544.871660][T22722] netlink: 'syz.3.3668': attribute type 39 has an invalid length. [ 545.055320][T22724] netlink: 'syz.1.3667': attribute type 1 has an invalid length. [ 545.076084][T22724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 545.481799][T22734] lo speed is unknown, defaulting to 1000 [ 545.491562][T22734] virt_wifi0 speed is unknown, defaulting to 1000 [ 545.504487][T22734] wlan1 speed is unknown, defaulting to 1000 [ 545.515188][T22734] wg1 speed is unknown, defaulting to 1000 [ 545.743523][T22407] veth0_vlan: entered promiscuous mode [ 545.770695][T22407] veth1_vlan: entered promiscuous mode [ 545.969750][T22407] veth0_macvtap: entered promiscuous mode [ 546.013807][T22407] veth1_macvtap: entered promiscuous mode [ 546.056739][T22407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.068738][T22758] lo speed is unknown, defaulting to 1000 [ 546.083140][T22407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.098218][T22758] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.141114][T11333] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.156355][T11333] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.176445][T22758] wlan1 speed is unknown, defaulting to 1000 [ 546.194568][T11333] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.220487][T11333] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.242680][T22758] wg1 speed is unknown, defaulting to 1000 [ 546.270616][ T5839] Bluetooth: hci1: command tx timeout [ 546.365705][T22774] m1Ie5nè‹Ò: entered promiscuous mode [ 546.493129][T22772] lo speed is unknown, defaulting to 1000 [ 546.519398][T11330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.551863][T11330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.691049][T22772] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.780946][ T7493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.805030][T22772] wlan1 speed is unknown, defaulting to 1000 [ 546.810659][ T7493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.896643][T22772] wg1 speed is unknown, defaulting to 1000 [ 547.168825][T22801] syzkaller0: entered promiscuous mode [ 547.188614][T22801] syzkaller0: entered allmulticast mode [ 547.329296][T22777] netlink: 'syz.3.3674': attribute type 1 has an invalid length. [ 547.650878][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3681'. [ 547.695224][T22822] netlink: 'syz.6.3682': attribute type 10 has an invalid length. [ 547.703581][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3681'. [ 547.717607][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3681'. [ 547.741893][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3681'. [ 547.759898][T22822] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3682'. [ 547.994315][T22831] netlink: 'syz.2.3684': attribute type 2 has an invalid length. [ 548.020996][T22822] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 548.062856][T22822] team0: Failed to send options change via netlink (err -105) [ 548.083508][T22822] team0: Port device geneve0 added [ 548.487464][T22844] lo speed is unknown, defaulting to 1000 [ 548.501580][T22844] virt_wifi0 speed is unknown, defaulting to 1000 [ 548.532112][T22844] wlan1 speed is unknown, defaulting to 1000 [ 548.556715][T22844] wg1 speed is unknown, defaulting to 1000 [ 548.587021][T22854] netlink: 'syz.2.3690': attribute type 61 has an invalid length. [ 548.652537][T22854] netlink: 'syz.2.3690': attribute type 62 has an invalid length. [ 548.953929][T22873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3694'. [ 549.232490][T22887] netlink: 'syz.1.3696': attribute type 1 has an invalid length. [ 549.249822][T11330] net_ratelimit: 146 callbacks suppressed [ 549.249842][T11330] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.279634][T22887] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3696'. [ 549.293519][T22887] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3696'. [ 549.307133][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.336961][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 549.472482][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.570704][ T1087] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.669849][T22914] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.750088][T22912] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.779002][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.830152][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 549.954903][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 550.080632][T22927] netlink: 'syz.3.3701': attribute type 10 has an invalid length. [ 550.186355][T22927] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 550.274418][T22927] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 550.312314][T22927] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.425209][T22937] syzkaller1: entered promiscuous mode [ 550.451937][T22937] syzkaller1: entered allmulticast mode [ 550.540197][T22950] netlink: 'syz.6.3705': attribute type 10 has an invalid length. [ 550.681709][T22950] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 550.713036][T22950] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 550.736147][T22950] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.793298][T22964] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3708'. [ 550.806387][T22964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3708'. [ 550.816450][T22954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.841206][T22954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.236297][T22979] nbd: must specify a size in bytes for the device [ 551.744396][T23002] netlink: 'syz.3.3717': attribute type 1 has an invalid length. [ 551.832147][T23004] vlan2: entered allmulticast mode [ 551.851089][T23004] veth0_to_bond: entered allmulticast mode [ 552.051938][T23021] x_tables: unsorted underflow at hook 4 [ 552.577893][T23044] ip6gretap1: entered promiscuous mode [ 552.694820][T23055] __nla_validate_parse: 3 callbacks suppressed [ 552.694841][T23055] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3729'. [ 552.761786][T23059] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3729'. [ 552.874142][T23050] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3725'. [ 553.272917][T23075] syzkaller0: entered promiscuous mode [ 553.315778][T23075] syzkaller0: entered allmulticast mode [ 553.612048][T23092] bond3: option ad_select: invalid value (34) [ 553.686333][T23092] bond3 (unregistering): Released all slaves [ 554.061471][T23113] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3741'. [ 554.101051][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3741'. [ 554.165176][T23119] sctp: [Deprecated]: syz.3.3741 (pid 23119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.165176][T23119] Use struct sctp_sack_info instead [ 554.360540][ T7493] net_ratelimit: 135 callbacks suppressed [ 554.360563][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.402273][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.549554][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.583345][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.672048][T23141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3746'. [ 554.681344][T23142] netlink: 'syz.6.3748': attribute type 17 has an invalid length. [ 554.695052][T23137] No such timeout policy "syz0" [ 554.719406][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.736695][T23142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.756229][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.790258][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 554.800530][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 554.939532][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 555.294934][T23167] lo speed is unknown, defaulting to 1000 [ 555.373801][T23167] virt_wifi0 speed is unknown, defaulting to 1000 [ 555.377543][T23160] lo speed is unknown, defaulting to 1000 [ 555.420603][T23167] wlan1 speed is unknown, defaulting to 1000 [ 555.477625][T23167] wg1 speed is unknown, defaulting to 1000 [ 555.501599][T23160] virt_wifi0 speed is unknown, defaulting to 1000 [ 555.557042][ T7831] IPVS: starting estimator thread 0... [ 555.618388][T23160] wlan1 speed is unknown, defaulting to 1000 [ 555.669485][T23193] IPVS: using max 28 ests per chain, 67200 per kthread [ 555.794698][T23160] wg1 speed is unknown, defaulting to 1000 [ 555.814516][T23201] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3761'. [ 555.849516][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3761'. [ 556.939892][T23240] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3768'. [ 557.886559][T23280] netlink: 'syz.3.3777': attribute type 2 has an invalid length. [ 559.392918][ T7493] net_ratelimit: 111 callbacks suppressed [ 559.392941][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.450572][T23318] xt_CT: No such helper "snmp_trap" [ 559.457669][T23325] lo speed is unknown, defaulting to 1000 [ 559.461575][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.500594][T23325] virt_wifi0 speed is unknown, defaulting to 1000 [ 559.508825][T23325] wlan1 speed is unknown, defaulting to 1000 [ 559.580595][T23325] wg1 speed is unknown, defaulting to 1000 [ 559.601833][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.669956][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.689753][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.704403][T23322] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3787'. [ 559.730404][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.751482][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.779914][T23318] ip6erspan0: entered allmulticast mode [ 559.790748][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.810104][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 559.829504][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 560.228911][T23354] tipc: Started in network mode [ 560.250278][T23354] tipc: Node identity f6e5382c430e, cluster identity 4711 [ 560.257618][T23354] tipc: Enabled bearer , priority 0 [ 560.375101][T23364] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3795'. [ 560.387223][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3793'. [ 560.482823][T23359] syzkaller0: entered promiscuous mode [ 560.521203][T23359] syzkaller0: entered allmulticast mode [ 560.527593][T23359] tipc: Resetting bearer [ 560.790003][T23375] netlink: 'syz.1.3796': attribute type 1 has an invalid length. [ 560.945958][T23375] bond6: entered promiscuous mode [ 560.957069][T23383] netlink: 'syz.2.3798': attribute type 10 has an invalid length. [ 560.982796][T23375] bond6: entered allmulticast mode [ 561.009738][T23375] 8021q: adding VLAN 0 to HW filter on device bond6 [ 561.139035][T23352] tipc: Resetting bearer [ 561.258335][T23398] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3800'. [ 563.311737][T23352] tipc: Disabling bearer [ 563.326225][T16227] tipc: Node number set to 3052091436 [ 563.565549][T23421] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3807'. [ 563.766671][T23433] x_tables: duplicate entry at hook 2 [ 563.944589][T23446] netlink: 'syz.2.3817': attribute type 8 has an invalid length. [ 563.967987][T23447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3816'. [ 563.982692][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3817'. [ 564.022924][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3818'. [ 564.074587][T23458] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3816'. [ 564.114998][T23453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 564.171051][T23453] netlink: 'syz.3.3818': attribute type 11 has an invalid length. [ 564.387371][T23465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.399957][ T7493] net_ratelimit: 182 callbacks suppressed [ 564.399980][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.420884][T23465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.442827][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.479429][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.500913][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.512618][T23470] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 564.520112][T23470] bond0: option active_slave: invalid value (veth0_to_hsr) [ 564.540584][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.569887][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.612945][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.663830][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.699836][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.729916][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 564.765410][T23465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.791398][T23489] __nla_validate_parse: 1 callbacks suppressed [ 564.791417][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 564.836061][T23465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.145735][T23505] netlink: 'syz.6.3824': attribute type 2 has an invalid length. [ 565.218152][T23465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.248292][T23465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.483604][T23518] netlink: 'syz.2.3827': attribute type 10 has an invalid length. [ 565.648427][T23465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 565.660519][T23465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.702615][T23518] veth1_macvtap: left promiscuous mode [ 565.713051][T23518] team0: Device veth1_macvtap failed to register rx_handler [ 565.734995][T23527] netlink: 'syz.5.3829': attribute type 1 has an invalid length. [ 565.773912][T23527] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3829'. [ 565.954010][ T61] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.974840][ T61] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.021528][T23538] netlink: 'syz.3.3832': attribute type 1 has an invalid length. [ 566.063652][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3831'. [ 566.115535][T23538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 566.129061][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.159052][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.197037][ T2973] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.216956][ T2973] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.245470][T23542] bond3: (slave gretap1): making interface the new active one [ 566.256781][T23542] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 566.300434][ T1333] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.340409][ T1333] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.612323][T23562] lo speed is unknown, defaulting to 1000 [ 566.666799][T23562] virt_wifi0 speed is unknown, defaulting to 1000 [ 566.751171][T23568] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 566.843437][T23562] wlan1 speed is unknown, defaulting to 1000 [ 566.871864][T23562] wg1 speed is unknown, defaulting to 1000 [ 566.916038][T23576] lo speed is unknown, defaulting to 1000 [ 567.055023][T23576] virt_wifi0 speed is unknown, defaulting to 1000 [ 567.140361][T23575] lo speed is unknown, defaulting to 1000 [ 567.145872][T23576] wlan1 speed is unknown, defaulting to 1000 [ 567.319614][T23576] wg1 speed is unknown, defaulting to 1000 [ 567.329345][T23575] virt_wifi0 speed is unknown, defaulting to 1000 [ 567.366088][T23575] wlan1 speed is unknown, defaulting to 1000 [ 567.401373][T23575] wg1 speed is unknown, defaulting to 1000 [ 568.193792][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.718798][T23619] batman_adv: batadv0: Adding interface: wlan0 [ 568.749768][T23619] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.809992][T23619] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 568.876325][T23619] syzkaller0: entered promiscuous mode [ 568.901063][T23619] syzkaller0: entered allmulticast mode [ 569.429689][ T1333] net_ratelimit: 146 callbacks suppressed [ 569.429715][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.500230][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.529633][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.556360][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.579597][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.620331][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.730686][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.770121][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.822916][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.869155][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 569.988998][T23658] C: renamed from team_slave_0 (while UP) [ 570.036817][T23658] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3853'. [ 570.068551][T23662] netlink: 'syz.1.3854': attribute type 1 has an invalid length. [ 570.123872][T23663] netlink: 'syz.1.3854': attribute type 1 has an invalid length. [ 570.277811][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 570.413982][T23673] bond7: (slave veth3): Enslaving as an active interface with a down link [ 570.487965][T23662] bond7: (slave veth5): Enslaving as an active interface with a down link [ 571.671715][T23729] bond0: option min_links: invalid value (18446744071562067968) [ 571.712590][T23729] bond0: option min_links: allowed values 0 - 2147483647 [ 571.773252][T23729] bond0 (unregistering): Released all slaves [ 571.876167][T23739] vlan2: entered promiscuous mode [ 572.001526][T23739] geneve1: entered promiscuous mode [ 572.009807][T23739] vlan2: entered allmulticast mode [ 572.021497][T23739] geneve1: entered allmulticast mode [ 572.193782][T23749] dvmrp0: entered allmulticast mode [ 572.337412][T23755] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3873'. [ 572.705770][T23768] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 572.752349][T23768] netlink: 360 bytes leftover after parsing attributes in process `syz.6.3876'. [ 572.772898][T23770] syzkaller0: entered allmulticast mode [ 572.787413][T23770] syzkaller0: entered promiscuous mode [ 572.836282][T23770] syzkaller0 (unregistering): left allmulticast mode [ 572.844952][T23770] syzkaller0 (unregistering): left promiscuous mode [ 573.769884][T23799] netlink: 'syz.2.3884': attribute type 2 has an invalid length. [ 573.798141][T23799] netlink: 'syz.2.3884': attribute type 5 has an invalid length. [ 574.196279][T23818] netlink: 'syz.2.3885': attribute type 10 has an invalid length. [ 574.319179][T23818] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 574.346930][T23818] team0: Failed to send options change via netlink (err -105) [ 574.398779][T23818] team0: Port device netdevsim0 added [ 574.452946][ T7493] net_ratelimit: 139 callbacks suppressed [ 574.452968][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.522663][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.579957][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.605862][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.650609][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.681353][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.710931][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.757848][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.779117][T23836] syzkaller0: entered promiscuous mode [ 574.784817][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.801242][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 574.828909][T23836] syzkaller0: entered allmulticast mode [ 574.943166][T23810] team0: Failed to send options change via netlink (err -105) [ 574.958595][T23810] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 574.971261][T23810] team0: Port device netdevsim0 removed [ 575.394386][ T5839] Bluetooth: hci2: command 0x0419 tx timeout [ 575.682645][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3894'. [ 575.700059][T23863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3894'. [ 576.410879][T23900] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3896'. [ 576.602807][T23908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3902'. [ 577.343242][T23932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3907'. [ 577.353346][T23932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3907'. [ 577.399351][T23932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3907'. [ 577.426507][T23935] netlink: 'syz.6.3906': attribute type 2 has an invalid length. [ 577.453166][T23935] netlink: 119 bytes leftover after parsing attributes in process `syz.6.3906'. [ 577.493165][T23929] 8021q: VLANs not supported on nr25 [ 577.500354][T23929] 8021q: VLANs not supported on nr25 [ 577.624957][T23933] lo speed is unknown, defaulting to 1000 [ 577.641776][T23933] virt_wifi0 speed is unknown, defaulting to 1000 [ 577.661837][T23933] wlan1 speed is unknown, defaulting to 1000 [ 577.683681][T23933] wg1 speed is unknown, defaulting to 1000 [ 578.149075][T23963] lo speed is unknown, defaulting to 1000 [ 578.176925][T23963] virt_wifi0 speed is unknown, defaulting to 1000 [ 578.190311][T23963] wlan1 speed is unknown, defaulting to 1000 [ 578.232332][T23963] wg1 speed is unknown, defaulting to 1000 [ 578.436218][T23983] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3917'. [ 578.575720][T23988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3918'. [ 578.707642][T23990] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 578.773636][T23990] batman_adv: batadv0: Adding interface: gretap1 [ 578.788959][T23990] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.845902][T23990] batman_adv: batadv0: Interface activated: gretap1 [ 578.981512][T23999] lo speed is unknown, defaulting to 1000 [ 578.989168][T23999] virt_wifi0 speed is unknown, defaulting to 1000 [ 579.234995][T23999] wlan1 speed is unknown, defaulting to 1000 [ 579.267347][T24012] macsec1: entered promiscuous mode [ 579.277465][T24012] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 579.311528][T23999] wg1 speed is unknown, defaulting to 1000 [ 579.490089][ T12] net_ratelimit: 145 callbacks suppressed [ 579.490110][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.571668][T24027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.582592][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.629991][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.660430][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.680825][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.708346][T24024] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 579.724625][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.770264][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.783776][T24024] team0 (unregistering): Port device team_slave_0 removed [ 579.820118][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.843277][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.858098][T24024] team0 (unregistering): Failed to send options change via netlink (err -105) [ 579.887744][T24024] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 579.902970][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 579.930541][T24024] team0 (unregistering): Port device team_slave_1 removed [ 580.008315][T24047] netlink: 'syz.5.3930': attribute type 1 has an invalid length. [ 580.105571][T24047] bond0: entered promiscuous mode [ 580.137467][T24047] bond0: entered allmulticast mode [ 580.143862][T24047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.152949][T24056] xt_NFQUEUE: number of total queues is 0 [ 580.914931][T24092] __nla_validate_parse: 1 callbacks suppressed [ 580.914953][T24092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3942'. [ 580.943777][T24092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3942'. [ 580.975940][T24096] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3941'. [ 581.536099][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3949'. [ 581.680181][T24134] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 581.692175][T24134] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 581.723433][T24134] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 581.809842][T24137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.096583][T24159] netlink: 'syz.2.3954': attribute type 3 has an invalid length. [ 582.104598][T24159] netlink: 'syz.2.3954': attribute type 1 has an invalid length. [ 582.120242][T24159] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3954'. [ 582.128137][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3955'. [ 582.152033][T24159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3954'. [ 582.165066][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3955'. [ 582.196254][T24164] ip6tnl1: entered allmulticast mode [ 582.236286][T24173] syzkaller0: entered promiscuous mode [ 582.269334][T24173] syzkaller0: entered allmulticast mode [ 582.476701][T24182] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.3961'. [ 582.506747][T24182] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 582.563029][T24182] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3961'. [ 582.653312][T24187] lo speed is unknown, defaulting to 1000 [ 582.876512][T24187] virt_wifi0 speed is unknown, defaulting to 1000 [ 582.900374][T24187] wlan1 speed is unknown, defaulting to 1000 [ 582.908178][T24187] wg1 speed is unknown, defaulting to 1000 [ 583.110646][T24220] netlink: 'syz.2.3966': attribute type 9 has an invalid length. [ 583.118532][T24220] netlink: 'syz.2.3966': attribute type 6 has an invalid length. [ 583.445156][T24236] lo speed is unknown, defaulting to 1000 [ 583.456508][T24236] virt_wifi0 speed is unknown, defaulting to 1000 [ 583.477160][T24236] wlan1 speed is unknown, defaulting to 1000 [ 583.531214][T24236] wg1 speed is unknown, defaulting to 1000 [ 583.606214][T24242] geneve3: entered promiscuous mode [ 584.047408][T24263] netlink: 'syz.3.3974': attribute type 10 has an invalid length. [ 584.161423][T24269] netlink: 'syz.1.3976': attribute type 1 has an invalid length. [ 584.510035][T11326] net_ratelimit: 127 callbacks suppressed [ 584.510056][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.560705][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.580788][T24277] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 584.600335][T24277] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 584.608146][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.660761][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.720818][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.746869][T24276] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 584.760774][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.789312][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.809872][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.824281][T24280] bond8: (slave bridge2): Enslaving as an active interface with a down link [ 584.841402][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.872374][T24284] 8021q: adding VLAN 0 to HW filter on device bond8 [ 584.879653][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 584.927302][T24288] macvlan2: entered promiscuous mode [ 584.934578][T24288] macvlan2: entered allmulticast mode [ 584.943901][T24288] bond8: entered promiscuous mode [ 584.963881][T24288] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 584.997439][T24288] bond8: left promiscuous mode [ 585.653704][T24325] bond2: entered promiscuous mode [ 585.661348][T24325] bond2: entered allmulticast mode [ 585.666966][T24325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.816101][T24332] pimreg3: entered allmulticast mode [ 585.844715][T24321] lo speed is unknown, defaulting to 1000 [ 585.857784][T24337] xt_addrtype: ipv6 does not support BROADCAST matching [ 585.890399][T24325] pimreg3: left allmulticast mode [ 585.965580][T24321] virt_wifi0 speed is unknown, defaulting to 1000 [ 586.104516][T24321] wlan1 speed is unknown, defaulting to 1000 [ 586.164811][T24321] wg1 speed is unknown, defaulting to 1000 [ 586.231370][T24361] Cannot find del_set index 4 as target [ 586.628221][T24379] netlink: 'syz.1.3996': attribute type 1 has an invalid length. [ 586.757397][T24391] __nla_validate_parse: 8 callbacks suppressed [ 586.757418][T24391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3996'. [ 586.882896][T24386] bond9: entered allmulticast mode [ 586.891106][T24386] 8021q: adding VLAN 0 to HW filter on device bond9 [ 586.908201][T24383] pimreg3: entered allmulticast mode [ 587.183619][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.259139][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.326062][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.374695][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.417676][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.428460][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.438130][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.447818][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.457285][T24403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4001'. [ 587.881943][T24445] Cannot find del_set index 4 as target [ 587.910074][T24445] netlink: 'syz.5.4013': attribute type 8 has an invalid length. [ 587.966403][T24450] nbd: nbd1 already in use [ 589.559891][T11329] net_ratelimit: 124 callbacks suppressed [ 589.559916][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.574132][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.690046][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.697846][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.821158][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.828961][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.939853][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 589.947731][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.059725][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 590.067559][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.750674][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 594.660599][T11326] net_ratelimit: 80 callbacks suppressed [ 594.660624][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.677709][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.789946][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.797748][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 594.911414][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.939588][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 594.947386][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.061719][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 595.076155][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.190051][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.769944][ T49] net_ratelimit: 81 callbacks suppressed [ 599.769965][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.784016][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 599.899838][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 599.907681][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.019568][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.027373][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.139583][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.147495][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.270374][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 600.278223][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.850580][ T2973] net_ratelimit: 80 callbacks suppressed [ 604.850601][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.867153][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 604.990065][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 604.997960][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.109446][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 605.117261][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.231141][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 605.238982][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.359601][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 605.369425][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 609.950043][ T7493] net_ratelimit: 80 callbacks suppressed [ 609.950063][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 609.967178][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.092072][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 610.103852][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.239780][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 610.247925][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.364636][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 610.373337][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.489969][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 610.497776][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.059819][ T7493] net_ratelimit: 80 callbacks suppressed [ 615.059840][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 615.075977][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.193332][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 615.202751][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.319977][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 615.327871][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.440034][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 615.447819][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.571338][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 615.579144][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.070114][ T7493] net_ratelimit: 78 callbacks suppressed [ 620.070141][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 620.089035][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.199498][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 620.207316][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.321649][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 620.330194][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.440012][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 620.447920][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.562023][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 620.570006][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.123661][T11326] net_ratelimit: 81 callbacks suppressed [ 625.123685][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 625.138022][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.260094][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 625.267986][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.379757][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 625.387590][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.510181][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 625.518109][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.630436][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 625.638253][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 629.634063][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.190426][ T7493] net_ratelimit: 80 callbacks suppressed [ 630.190449][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 630.208904][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.332336][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 630.349396][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.460169][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 630.468068][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.580013][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 630.587843][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.699817][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 630.708741][ T49] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 634.756886][T19096] NFSD: Failed to start, no listeners configured. [ 635.243405][T11329] net_ratelimit: 80 callbacks suppressed [ 635.243438][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 635.261723][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.390757][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 635.398561][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.509894][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 635.517780][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.640012][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 635.647814][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.770056][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 635.777876][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 639.870318][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 640.331785][ T2973] net_ratelimit: 80 callbacks suppressed [ 640.331806][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.345986][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.459565][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.467408][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.579533][T11329] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.587349][T11329] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.711215][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.719121][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.832687][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 640.841638][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.419761][ T1333] net_ratelimit: 81 callbacks suppressed [ 645.419783][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.434146][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.550018][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.557822][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.676711][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.687876][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.799942][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.807741][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.919978][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 645.927866][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 647.070025][ T5144] Bluetooth: hci6: command 0x0406 tx timeout [ 649.205257][T26564] netlink: 'syz.1.4024': attribute type 6 has an invalid length. [ 649.344036][T26563] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 649.422515][T26572] sctp: [Deprecated]: syz.5.4027 (pid 26572) Use of int in max_burst socket option. [ 649.422515][T26572] Use struct sctp_assoc_value instead [ 650.125174][T26610] nbd: couldn't find a device at index 6 [ 650.167394][T26611] syzkaller0: entered promiscuous mode [ 650.199114][T26611] syzkaller0: entered allmulticast mode [ 650.219498][T26611] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 650.257904][T26615] __nla_validate_parse: 28 callbacks suppressed [ 650.257925][T26615] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4038'. [ 650.439868][T11326] net_ratelimit: 85 callbacks suppressed [ 650.439887][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.484045][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.627496][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.661444][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.697677][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.819792][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.833365][T26645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4042'. [ 650.870429][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.899914][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.949325][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 650.990253][ T49] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 651.182493][T26659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4046'. [ 651.215672][T26659] bond2: entered promiscuous mode [ 651.222899][T26659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.234987][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 651.244230][T26659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'. [ 651.253731][T26659] netlink: 'syz.2.4046': attribute type 18 has an invalid length. [ 651.317610][T26659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.335482][T26659] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 651.360972][T26659] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 651.927809][T26689] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4054'. [ 651.964792][T26686] lo speed is unknown, defaulting to 1000 [ 651.973600][T26686] virt_wifi0 speed is unknown, defaulting to 1000 [ 651.986863][T26686] wlan1 speed is unknown, defaulting to 1000 [ 651.998619][T26686] wg1 speed is unknown, defaulting to 1000 [ 652.341556][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4056'. [ 652.352440][T26697] netlink: 261 bytes leftover after parsing attributes in process `syz.3.4056'. [ 652.380089][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4056'. [ 652.418823][T26698] netlink: 261 bytes leftover after parsing attributes in process `syz.3.4056'. [ 653.138354][T26728] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 653.737128][T26752] lo speed is unknown, defaulting to 1000 [ 653.782740][T26752] virt_wifi0 speed is unknown, defaulting to 1000 [ 653.813633][T26752] wlan1 speed is unknown, defaulting to 1000 [ 653.823480][T26752] wg1 speed is unknown, defaulting to 1000 [ 654.483610][T26793] lo speed is unknown, defaulting to 1000 [ 654.945905][T26793] virt_wifi0 speed is unknown, defaulting to 1000 [ 654.972101][T26793] wlan1 speed is unknown, defaulting to 1000 [ 654.983783][T26793] wg1 speed is unknown, defaulting to 1000 [ 655.456125][T26835] veth7: entered promiscuous mode [ 655.463647][T26835] veth7: entered allmulticast mode [ 655.490048][ T61] net_ratelimit: 129 callbacks suppressed [ 655.490071][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.519947][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.540720][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.560946][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.682587][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.698439][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.830075][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.843995][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.959843][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 655.967651][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.033204][T26873] netlink: 'syz.1.4091': attribute type 10 has an invalid length. [ 656.046340][T26873] __nla_validate_parse: 3 callbacks suppressed [ 656.046359][T26873] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4091'. [ 656.068435][T26873] hsr0: entered promiscuous mode [ 656.075018][T26873] bridge0: port 3(hsr0) entered blocking state [ 656.085021][T26873] bridge0: port 3(hsr0) entered disabled state [ 656.092486][T26873] hsr0: entered allmulticast mode [ 656.098078][T26873] hsr_slave_0: entered allmulticast mode [ 656.105152][T26873] hsr_slave_1: entered allmulticast mode [ 656.115433][T26873] bridge0: port 3(hsr0) entered blocking state [ 656.121934][T26873] bridge0: port 3(hsr0) entered forwarding state [ 656.564214][T26890] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4092'. [ 656.578755][T26896] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4092'. [ 656.982238][T26913] lo speed is unknown, defaulting to 1000 [ 656.995268][T26913] virt_wifi0 speed is unknown, defaulting to 1000 [ 657.006089][T26913] wlan1 speed is unknown, defaulting to 1000 [ 657.015354][T26913] wg1 speed is unknown, defaulting to 1000 [ 657.695747][T26949] netlink: 'syz.5.4100': attribute type 27 has an invalid length. [ 657.713175][T26949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4100'. [ 657.737514][T26949] sctp: [Deprecated]: syz.5.4100 (pid 26949) Use of int in max_burst socket option. [ 657.737514][T26949] Use struct sctp_assoc_value instead [ 657.855086][T26956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4102'. [ 657.866511][T26956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4102'. [ 658.613948][T26860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 658.821827][T26978] netlink: 'syz.2.4107': attribute type 4 has an invalid length. [ 659.052326][T26988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4109'. [ 659.248467][T26988] bond0: entered promiscuous mode [ 659.257135][T26988] bond_slave_0: entered promiscuous mode [ 659.284644][T26988] bond_slave_1: entered promiscuous mode [ 659.408683][T26988] bond0: left promiscuous mode [ 659.420339][T26988] bond_slave_0: left promiscuous mode [ 659.445818][T26988] bond_slave_1: left promiscuous mode [ 659.761337][T27008] netlink: 'syz.5.4114': attribute type 1 has an invalid length. [ 659.771624][T27008] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4114'. [ 659.898735][T27016] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4117'. [ 659.998267][T27016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4117'. [ 660.103192][T27029] syzkaller1: entered promiscuous mode [ 660.108732][T27029] syzkaller1: entered allmulticast mode [ 660.357352][T27041] syzkaller0: entered promiscuous mode [ 660.366907][T27041] syzkaller0: entered allmulticast mode [ 660.500202][T11326] net_ratelimit: 100 callbacks suppressed [ 660.500222][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.529977][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.552048][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.575768][T27056] batman_adv: batadv0: Adding interface: geneve0 [ 660.583701][T27056] batman_adv: batadv0: The MTU of interface geneve0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.611042][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.622253][T27056] batman_adv: batadv0: Interface activated: geneve0 [ 660.629920][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.650376][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.665576][T27059] netlink: 'syz.6.4127': attribute type 89 has an invalid length. [ 660.686943][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.729874][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.850906][ T7493] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 660.864920][T27066] netlink: 'syz.1.4129': attribute type 2 has an invalid length. [ 660.865991][ T7493] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 660.913052][T27066] netlink: 'syz.1.4129': attribute type 2 has an invalid length. [ 660.938652][T27067] lo speed is unknown, defaulting to 1000 [ 660.946611][T27067] virt_wifi0 speed is unknown, defaulting to 1000 [ 660.959366][T27066] netlink: 'syz.1.4129': attribute type 1 has an invalid length. [ 661.007064][T27067] wlan1 speed is unknown, defaulting to 1000 [ 661.017791][T27066] netlink: 'syz.1.4129': attribute type 1 has an invalid length. [ 661.027097][T27075] x_tables: duplicate underflow at hook 2 [ 661.036392][T27066] netlink: 'syz.1.4129': attribute type 1 has an invalid length. [ 661.048956][T27067] wg1 speed is unknown, defaulting to 1000 [ 661.158631][T27077] __nla_validate_parse: 2 callbacks suppressed [ 661.158651][T27077] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4128'. [ 661.808474][T27107] IPVS: length: 115 != 8 [ 661.847562][T27108] syzkaller0: entered promiscuous mode [ 661.886937][T27108] syzkaller0: entered allmulticast mode [ 662.185208][T27128] netlink: 'syz.5.4142': attribute type 1 has an invalid length. [ 662.206109][T27124] lo speed is unknown, defaulting to 1000 [ 662.219478][T27128] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4142'. [ 662.301497][T27124] virt_wifi0 speed is unknown, defaulting to 1000 [ 662.401881][T27124] wlan1 speed is unknown, defaulting to 1000 [ 662.429496][ T5144] Bluetooth: hci1: command 0x0405 tx timeout [ 662.452056][T27124] wg1 speed is unknown, defaulting to 1000 [ 662.485040][T27141] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4145'. [ 662.589050][T27150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4145'. [ 662.728823][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4149'. [ 662.748633][T27155] netlink: 'syz.5.4149': attribute type 5 has an invalid length. [ 662.778837][T27155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4149'. [ 662.806963][T27155] geneve3: entered promiscuous mode [ 662.812468][T27155] geneve3: entered allmulticast mode [ 662.843868][ T7493] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 40514 - 0 [ 662.880343][ T7493] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 40514 - 0 [ 662.944000][ T7493] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 40514 - 0 [ 662.962222][ T7493] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 40514 - 0 [ 662.982250][T27158] tipc: Started in network mode [ 662.987310][T27158] tipc: Node identity 66454f3dce9a, cluster identity 4711 [ 663.002827][T27164] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4151'. [ 663.012131][T27158] tipc: Enabled bearer , priority 0 [ 663.019457][T27163] syzkaller0: entered promiscuous mode [ 663.025060][T27163] syzkaller0: entered allmulticast mode [ 663.059523][T27164] 0ªX¹¦À: renamed from caif0 [ 663.075360][T27164] 0ªX¹¦À: entered allmulticast mode [ 663.192738][T27158] tipc: Resetting bearer [ 663.205421][T27156] tipc: Resetting bearer [ 663.212136][T27172] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4154'. [ 663.260456][T27156] tipc: Disabling bearer [ 663.332721][T27176] netlink: 'syz.1.4155': attribute type 2 has an invalid length. [ 663.515260][T27183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4157'. [ 663.543223][ T30] audit: type=1804 audit(1771411929.731:13): pid=27185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4158" name="memory.events" dev="tmpfs" ino=1505 res=1 errno=0 [ 663.644673][ T30] audit: type=1800 audit(1771411929.761:14): pid=27185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4158" name="memory.events" dev="tmpfs" ino=1505 res=0 errno=0 [ 663.794907][T27193] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4160'. [ 663.845924][T27197] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.864063][T27200] netlink: 'syz.5.4162': attribute type 6 has an invalid length. [ 663.908448][ T7822] IPVS: starting estimator thread 0... [ 663.976937][T27200] netlink: 'syz.5.4162': attribute type 6 has an invalid length. [ 664.011954][T27203] IPVS: using max 26 ests per chain, 62400 per kthread [ 664.302584][T27223] lo speed is unknown, defaulting to 1000 [ 664.357629][T27223] virt_wifi0 speed is unknown, defaulting to 1000 [ 664.373188][T27232] netlink: 'syz.1.4170': attribute type 8 has an invalid length. [ 664.410495][T27232] bond0: entered promiscuous mode [ 664.415597][T27232] bond_slave_0: entered promiscuous mode [ 664.439711][T27232] bond_slave_1: entered promiscuous mode [ 664.456076][T27235] netlink: 'syz.1.4170': attribute type 1 has an invalid length. [ 664.488300][T27232] gretap0: entered promiscuous mode [ 664.506580][T27232] bond0: left promiscuous mode [ 664.516568][T27232] bond_slave_0: left promiscuous mode [ 664.526099][T27232] bond_slave_1: left promiscuous mode [ 664.535988][T27232] gretap0: left promiscuous mode [ 664.571741][T27223] wlan1 speed is unknown, defaulting to 1000 [ 664.640341][T27242] bond1: option ad_user_port_key: invalid value (65535) [ 664.668337][T27242] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 664.692300][T27242] bond1 (unregistering): Released all slaves [ 664.763506][T27223] wg1 speed is unknown, defaulting to 1000 [ 664.983672][T27259] syzkaller0: entered promiscuous mode [ 665.000306][T27259] syzkaller0: entered allmulticast mode [ 665.085822][T27264] netlink: 'syz.5.4177': attribute type 1 has an invalid length. [ 665.416461][T27275] nbd: socks must be embedded in a SOCK_ITEM attr [ 665.509313][ T2973] net_ratelimit: 514 callbacks suppressed [ 665.509337][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 665.542237][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.674751][T27287] xt_hashlimit: max too large, truncated to 1048576 [ 665.700440][ T1333] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 665.732249][ T1333] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.743357][T27289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.856440][T27292] lo speed is unknown, defaulting to 1000 [ 665.871076][T11326] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 665.878976][T11326] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 665.983035][T27292] virt_wifi0 speed is unknown, defaulting to 1000 [ 666.063699][T27301] sctp: [Deprecated]: syz.6.4187 (pid 27301) Use of int in maxseg socket option. [ 666.063699][T27301] Use struct sctp_assoc_value instead [ 666.090051][ T61] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 666.139617][T27297] netlink: 'syz.1.4185': attribute type 5 has an invalid length. [ 666.147977][T27292] wlan1 speed is unknown, defaulting to 1000 [ 666.168032][T27297] __nla_validate_parse: 11 callbacks suppressed [ 666.168053][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4185'. [ 666.209785][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 666.391518][ T3012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 666.441663][T27297] geneve2: entered promiscuous mode [ 666.451022][T27297] geneve2: entered allmulticast mode [ 666.469094][T27292] wg1 speed is unknown, defaulting to 1000 [ 666.475749][T22912] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 39473 - 0 [ 666.490051][T22912] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 39473 - 0 [ 666.534623][T22912] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 39473 - 0 [ 666.570254][T22912] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 39473 - 0 [ 666.997648][T27340] lo speed is unknown, defaulting to 1000 [ 667.028744][T27340] virt_wifi0 speed is unknown, defaulting to 1000 [ 667.087245][T27340] wlan1 speed is unknown, defaulting to 1000 [ 667.114115][T27340] wg1 speed is unknown, defaulting to 1000 [ 667.132850][T27362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4200'. [ 667.616593][T27379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4204'. [ 668.188311][T11330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.222436][T11330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.236053][T27406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4210'. [ 668.310594][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4210'. [ 668.573183][T27406] bond4: entered promiscuous mode [ 668.599430][T27406] bond4: entered allmulticast mode [ 668.608527][T27406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 668.684344][T27423] syzkaller0: entered promiscuous mode [ 668.692601][T27423] syzkaller0: entered allmulticast mode [ 668.733402][T27428] tipc: Enabled bearer , priority 0 [ 668.785876][T27432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4215'. [ 668.797990][T27420] tipc: Resetting bearer [ 668.870913][T27420] tipc: Disabling bearer [ 669.173991][T27449] syzkaller0: entered promiscuous mode [ 669.183934][T27449] syzkaller0: entered allmulticast mode [ 669.480332][T27461] netlink: 'syz.6.4222': attribute type 1 has an invalid length. [ 669.539841][T27461] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4222'. [ 669.761350][T27471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4223'. [ 669.922334][T27484] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4226'. [ 669.935629][T27485] netlink: 'syz.6.4227': attribute type 9 has an invalid length. [ 669.965341][T27485] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4227'. [ 670.310543][T27496] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 670.342080][T27496] bond3 (unregistering): Released all slaves [ 670.379375][T27502] netlink: 'syz.5.4230': attribute type 13 has an invalid length. [ 670.588345][T27510] netlink: 'syz.5.4234': attribute type 4 has an invalid length. [ 670.611137][ T2973] net_ratelimit: 120 callbacks suppressed [ 670.611158][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.643793][ T2973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 670.655620][T27510] netlink: 'syz.5.4234': attribute type 4 has an invalid length. [ 670.709068][T27510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.809882][ T3012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.837158][ T3012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.880016][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.916565][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.938639][T27521] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.951730][ T2973] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 670.977673][T27528] ieee802154 phy0 wpan0: encryption failed: -22 [ 670.978660][T27521] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.002427][ T3012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 671.049995][ T3012] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 671.103266][T27528] ieee802154 phy0 wpan0: encryption failed: -22 [ 671.192100][T27521] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.209537][T27521] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.248820][T27539] sctp: [Deprecated]: syz.6.4240 (pid 27539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.248820][T27539] Use struct sctp_sack_info instead [ 671.266105][T27539] sctp: [Deprecated]: syz.6.4240 (pid 27539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.266105][T27539] Use struct sctp_sack_info instead [ 671.306000][T27536] __nla_validate_parse: 7 callbacks suppressed [ 671.306021][T27536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4240'. [ 671.383542][T27521] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.406330][T27521] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.427064][T27543] sch_fq: defrate 4294967293 ignored. [ 671.556513][T27521] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.573285][T27521] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.800302][T27558] tipc: Enabled bearer , priority 0 [ 671.934009][ T3012] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.942659][ T3012] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.970276][T27558] syzkaller0: entered promiscuous mode [ 671.985482][T27558] syzkaller0: entered allmulticast mode [ 672.069712][ T3012] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.082020][ T3012] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.101893][T27558] tipc: Resetting bearer [ 672.125706][ T3012] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.137747][ T3012] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.170228][T27556] tipc: Resetting bearer [ 672.222359][T27556] tipc: Disabling bearer [ 672.250877][T11329] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.270000][T11329] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.343525][T27571] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4248'. [ 672.377366][T27571] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4248'. [ 672.786863][T27594] netlink: 'syz.5.4253': attribute type 13 has an invalid length. [ 672.987644][T27604] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4255'. [ 673.126253][T27606] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 673.164368][T27606] syzkaller0: entered promiscuous mode [ 673.184854][T27606] syzkaller0: entered allmulticast mode [ 673.197693][T27610] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4256'. [ 673.243089][T27619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4257'. [ 673.273025][T27597] tipc: Enabled bearer , priority 0 [ 673.313229][T27619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4257'. [ 673.730272][T27593] tipc: Resetting bearer [ 673.796166][T27593] tipc: Disabling bearer [ 673.821998][ T31] INFO: task syz.0.3474:21774 blocked for more than 143 seconds. [ 673.842277][ T31] Not tainted syzkaller #0 [ 673.864268][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.878304][ T31] task:syz.0.3474 state:D stack:25056 pid:21774 tgid:21769 ppid:19559 task_flags:0x400040 flags:0x00080002 [ 673.898736][ T31] Call Trace: [ 673.904551][ T31] [ 673.907857][ T31] __schedule+0x1568/0x5290 [ 673.913113][ T31] ? __pfx___schedule+0x10/0x10 [ 673.918132][ T31] ? schedule+0x90/0x360 [ 673.922891][ T31] schedule+0x164/0x360 [ 673.927228][ T31] schedule_preempt_disabled+0x13/0x30 [ 673.933475][ T31] __mutex_lock+0x7fe/0x1300 [ 673.938252][ T31] ? __mutex_lock+0x5ac/0x1300 [ 673.943409][ T31] ? nfsd_nl_threads_get_doit+0x1ba/0x700 [ 673.950569][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 673.955763][ T31] ? __nlmsg_put+0xef/0x1b0 [ 673.961656][ T31] ? genlmsg_put+0x137/0x2e0 [ 673.966309][ T31] nfsd_nl_threads_get_doit+0x1ba/0x700 [ 673.972319][ T31] ? unwind_next_frame+0xa5/0x23c0 [ 673.977467][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 673.983439][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 673.989661][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 673.995683][ T31] ? __asan_memcpy+0x40/0x70 [ 674.001185][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 674.007453][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.013790][ T31] genl_rcv_msg+0x61c/0x7a0 [ 674.018403][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.024027][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 674.031469][ T31] netlink_rcv_skb+0x232/0x4b0 [ 674.036361][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.041678][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.047101][ T31] ? genl_rcv+0x19/0x40 [ 674.051400][ T31] ? down_read+0x272/0x2e0 [ 674.055877][ T31] ? genl_rcv+0xd/0x40 [ 674.060355][ T31] genl_rcv+0x28/0x40 [ 674.064429][ T31] netlink_unicast+0x80f/0x9b0 [ 674.069400][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 674.074738][ T31] ? netlink_sendmsg+0x650/0xb40 [ 674.080017][ T31] ? skb_put+0x11b/0x210 [ 674.084321][ T31] netlink_sendmsg+0x813/0xb40 [ 674.091027][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.096753][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 674.102269][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.107712][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.114254][ T31] ____sys_sendmsg+0xa68/0xad0 [ 674.119082][ T31] ? __might_fault+0xaf/0x130 [ 674.124623][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.130052][ T31] ? import_iovec+0x73/0xa0 [ 674.134642][ T31] ___sys_sendmsg+0x2a5/0x360 [ 674.139648][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.144637][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.150183][ T31] ? futex_wait+0x29a/0x380 [ 674.154777][ T31] ? __fget_files+0x2a/0x420 [ 674.159821][ T31] ? __fget_files+0x3a0/0x420 [ 674.164551][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.169824][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.175345][ T31] ? rcu_is_watching+0x15/0xb0 [ 674.180619][ T31] do_syscall_64+0x14d/0xf80 [ 674.185277][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.192487][ T31] ? trace_irq_disable+0x37/0x100 [ 674.197569][ T31] ? clear_bhb_loop+0x40/0x90 [ 674.202725][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.208668][ T31] RIP: 0033:0x7f926099c629 [ 674.213437][ T31] RSP: 002b:00007f9261873028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.222591][ T31] RAX: ffffffffffffffda RBX: 00007f9260c16090 RCX: 00007f926099c629 [ 674.232199][ T31] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 674.240956][ T31] RBP: 00007f9260a32b39 R08: 0000000000000000 R09: 0000000000000000 [ 674.249676][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.257691][ T31] R13: 00007f9260c16128 R14: 00007f9260c16090 R15: 00007fffec3d7c08 [ 674.265907][ T31] [ 674.269111][ T31] [ 674.269111][ T31] Showing all locks held in the system: [ 674.278528][ T31] 1 lock held by khungtaskd/31: [ 674.283630][ T31] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 674.299660][ T31] 3 locks held by kworker/u8:4/61: [ 674.304800][ T31] #0: ffff888030e49948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 674.316668][ T31] #1: ffffc9000211fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 674.331089][ T31] #2: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 674.340937][ T31] 2 locks held by dhcpcd/5488: [ 674.346541][ T31] #0: ffff88803051d6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 674.358010][ T31] #1: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 674.367032][ T31] 2 locks held by getty/5584: [ 674.371896][ T31] #0: ffff8880316be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 674.382464][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 674.392919][ T31] 3 locks held by kworker/0:14/7822: [ 674.398250][ T31] #0: ffff88813fe03548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 674.409576][ T31] #1: ffffc9000b6cfc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 674.422373][ T31] #2: ffff8880226ed240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 674.433011][ T31] 3 locks held by kworker/u8:20/11329: [ 674.438537][ T31] #0: ffff88813fe44148 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 674.452129][ T31] #1: ffffc9000e96fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 674.463388][ T31] #2: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 674.472665][ T31] 2 locks held by syz.4.2932/19096: [ 674.477903][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.486558][ T31] #1: ffffffff8ea7eb88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 674.496874][ T31] 2 locks held by syz.0.3474/21774: [ 674.502218][ T31] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.510935][ T31] #1: ffffffff8ea7eb88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1ba/0x700 [ 674.521128][ T31] 1 lock held by syz.2.4249/27574: [ 674.526404][ T31] #0: ffff888011e09348 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 674.537221][ T31] 2 locks held by syz.5.4253/27593: [ 674.542531][ T31] #0: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 674.551799][ T31] #1: ffffffff8e764338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 674.563052][ T31] 5 locks held by syz.3.4259/27631: [ 674.568299][ T31] #0: ffffffff8fbaffb0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 674.578101][ T31] #1: ffffffff8f9175d0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 674.587908][ T31] #2: ffffffff8f917790 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 674.598189][ T31] #3: ffff88807d1e0f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 674.609614][ T31] #4: ffffffff8fbbe808 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 674.619141][ T31] [ 674.621662][ T31] ============================================= [ 674.621662][ T31] [ 674.630375][ T31] NMI backtrace for cpu 1 [ 674.630398][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 674.630420][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.630432][ T31] Call Trace: [ 674.630440][ T31] [ 674.630448][ T31] dump_stack_lvl+0xe8/0x150 [ 674.630480][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 674.630501][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 674.630532][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 674.630556][ T31] sys_info+0x135/0x170 [ 674.630583][ T31] watchdog+0xf90/0xfe0 [ 674.630615][ T31] ? watchdog+0x209/0xfe0 [ 674.630649][ T31] kthread+0x388/0x470 [ 674.630679][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.630702][ T31] ? __pfx_kthread+0x10/0x10 [ 674.630733][ T31] ret_from_fork+0x51e/0xb90 [ 674.630760][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 674.630780][ T31] ? __switch_to+0xc7d/0x1400 [ 674.630800][ T31] ? __pfx_kthread+0x10/0x10 [ 674.630827][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.630870][ T31] [ 674.630878][ T31] Sending NMI from CPU 1 to CPUs 0: [ 674.635294][T27631] lo speed is unknown, defaulting to 1000 [ 674.644550][ C0] NMI backtrace for cpu 0 [ 674.644568][ C0] CPU: 0 UID: 0 PID: 27631 Comm: syz.3.4259 Not tainted syzkaller #0 PREEMPT(full) [ 674.644588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.644599][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2e/0x90 [ 674.644628][ C0] Code: 48 8b 04 24 65 48 8b 15 e8 c0 52 11 65 8b 0d 09 c1 52 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 44 16 00 00 00 <74> 52 8b 8a 20 16 00 00 83 f9 03 75 47 48 8b 8a 28 16 00 00 44 8b [ 674.644643][ C0] RSP: 0018:ffffc90000007b80 EFLAGS: 00000246 [ 674.644660][ C0] RAX: ffffffff89a7d044 RBX: 0000000000000000 RCX: 0000000000000100 [ 674.644673][ C0] RDX: ffff88802f903c80 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.644684][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 674.644694][ C0] R10: dffffc0000000000 R11: fffff52000000f74 R12: ffffc9000d8ae438 [ 674.644707][ C0] R13: ffffc9000d8ae430 R14: dffffc0000000000 R15: ffff888088c1cada [ 674.644720][ C0] FS: 00007f8d6a3736c0(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 674.644735][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.644747][ C0] CR2: 0000001b32104ff8 CR3: 000000006b75e000 CR4: 00000000003526f0 [ 674.644762][ C0] Call Trace: [ 674.644769][ C0] [ 674.644775][ C0] pie_calculate_probability+0x134/0x7e0 [ 674.644812][ C0] fq_pie_timer+0x288/0x5b0 [ 674.644839][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 674.644866][ C0] call_timer_fn+0x192/0x5a0 [ 674.644885][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 674.644908][ C0] ? call_timer_fn+0xd4/0x5a0 [ 674.644925][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 674.644950][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.644969][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 674.644995][ C0] __run_timer_base+0x652/0x8b0 [ 674.645011][ C0] ? ktime_get+0x45/0x200 [ 674.645041][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 674.645061][ C0] ? sched_clock_cpu+0x74/0x440 [ 674.645084][ C0] run_timer_softirq+0xb7/0x170 [ 674.645101][ C0] handle_softirqs+0x22a/0x7c0 [ 674.645122][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 674.645146][ C0] __irq_exit_rcu+0x5f/0x150 [ 674.645165][ C0] irq_exit_rcu+0x9/0x30 [ 674.645182][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 674.645204][ C0] [ 674.645210][ C0] [ 674.645217][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 674.645236][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 674.645264][ C0] Code: 0f 84 44 ff ff ff e8 52 fb 20 00 fb eb 44 e8 4a fb 20 00 e8 05 03 fb 09 4d 85 f6 74 94 e8 3b fb 20 00 fb 48 c7 c7 c0 04 75 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 3b 1b [ 674.645286][ C0] RSP: 0018:ffffc900102cf4a0 EFLAGS: 00000287 [ 674.645300][ C0] RAX: ffffffff81a33f95 RBX: ffffffff81a33e0f RCX: 0000000000080000 [ 674.645313][ C0] RDX: ffffc9001dd62000 RSI: 0000000000023387 RDI: ffffffff8e7504c0 [ 674.645326][ C0] RBP: ffffc900102cf550 R08: ffffffff90109077 R09: 1ffffffff202120e [ 674.645338][ C0] R10: dffffc0000000000 R11: fffffbfff202120f R12: 0000000000000000 [ 674.645351][ C0] R13: 0000000000000027 R14: 0000000000000200 R15: 1ffff92002059e98 [ 674.645365][ C0] ? vprintk_emit+0x2cf/0x560 [ 674.645387][ C0] ? vprintk_emit+0x455/0x560 [ 674.645415][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 674.645443][ C0] _printk+0xdd/0x130 [ 674.645472][ C0] ? __pfx__printk+0x10/0x10 [ 674.645501][ C0] ? mutex_is_locked+0x17/0x50 [ 674.645522][ C0] ? rtnl_is_locked+0x15/0x20 [ 674.645545][ C0] ? __ethtool_get_link_ksettings+0xd7/0x170 [ 674.645569][ C0] ib_get_eth_speed+0x468/0x7f0 [ 674.645590][ C0] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 674.645618][ C0] ? ib_query_port+0x384/0x830 [ 674.645642][ C0] siw_query_port+0x3c/0x4a0 [ 674.645668][ C0] ib_setup_port_attrs+0x26e/0x2140 [ 674.645697][ C0] ? rcu_is_watching+0x15/0xb0 [ 674.645718][ C0] ? trace_contention_end+0x39/0x100 [ 674.645751][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 674.645778][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 674.645802][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 674.645836][ C0] ? device_add+0x70b/0xb70 [ 674.645857][ C0] add_one_compat_dev+0x448/0x650 [ 674.645880][ C0] ? down_read+0x272/0x2e0 [ 674.645912][ C0] rdma_dev_init_net+0x243/0x2f0 [ 674.645935][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 674.645957][ C0] ? __kmalloc_noprof+0x37d/0x760 [ 674.645984][ C0] ops_init+0x35c/0x5c0 [ 674.646008][ C0] setup_net+0x118/0x340 [ 674.646027][ C0] ? __pfx_setup_net+0x10/0x10 [ 674.646046][ C0] ? preinit_net+0x47d/0x780 [ 674.646063][ C0] copy_net_ns+0x50e/0x730 [ 674.646083][ C0] create_new_namespaces+0x3e7/0x6a0 [ 674.646104][ C0] ? security_capable+0x7e/0x2c0 [ 674.646131][ C0] unshare_nsproxy_namespaces+0x11a/0x160 [ 674.646152][ C0] ksys_unshare+0x4f4/0x900 [ 674.646181][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 674.646204][ C0] ? rcu_is_watching+0x15/0xb0 [ 674.646230][ C0] __x64_sys_unshare+0x38/0x50 [ 674.646252][ C0] do_syscall_64+0x14d/0xf80 [ 674.646281][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.646298][ C0] ? trace_irq_disable+0x37/0x100 [ 674.646318][ C0] ? clear_bhb_loop+0x40/0x90 [ 674.646337][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.646354][ C0] RIP: 0033:0x7f8d6959c629 [ 674.646369][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.646383][ C0] RSP: 002b:00007f8d6a373028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 674.646400][ C0] RAX: ffffffffffffffda RBX: 00007f8d69816090 RCX: 00007f8d6959c629 [ 674.646412][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 674.646423][ C0] RBP: 00007f8d69632b39 R08: 0000000000000000 R09: 0000000000000000 [ 674.646434][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.646444][ C0] R13: 00007f8d69816128 R14: 00007f8d69816090 R15: 00007ffeec8d2578 [ 674.646467][ C0] [ 674.646630][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 674.646646][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 674.646670][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.646684][ T31] Call Trace: [ 674.646694][ T31] [ 674.646704][ T31] vpanic+0x1e0/0x670 [ 674.646737][ T31] panic+0xc5/0xd0 [ 674.646764][ T31] ? __pfx_panic+0x10/0x10 [ 674.646794][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 674.646823][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 674.646850][ T31] watchdog+0xfda/0xfe0 [ 674.646882][ T31] ? watchdog+0x209/0xfe0 [ 674.646916][ T31] kthread+0x388/0x470 [ 674.646944][ T31] ? __pfx_watchdog+0x10/0x10 [ 674.646967][ T31] ? __pfx_kthread+0x10/0x10 [ 674.646996][ T31] ret_from_fork+0x51e/0xb90 [ 674.647023][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 674.647044][ T31] ? __switch_to+0xc7d/0x1400 [ 674.647068][ T31] ? __pfx_kthread+0x10/0x10 [ 674.647098][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.647192][ T31] [ 674.657802][ T31] Kernel Offset: disabled