last executing test programs: 3m25.090315132s ago: executing program 0 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x8, 0x0, {{0x25, 0x4, 0x1, 0x4, 0x94, 0x68, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x24}, {[@noop, @timestamp={0x44, 0x8, 0xf3, 0x0, 0x2, [0x0]}, @timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @generic={0x88, 0x11, "78a8d1927f56cf425997ce6ba99805"}, @ssrr={0x89, 0x27, 0xf8, [@broadcast, @rand_addr=0x64010101, @multicast2, @remote, @multicast2, @broadcast, @multicast1, @loopback, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x4, "2da5"}, {0x2, 0x2}, {0x2, 0xc, "566fab4fb137327f6fc6"}, {0x7, 0x6, "ad136b64"}]}, @generic={0x86, 0x10, "7f5744d40d1d36c102451eeafc2b"}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x1, 0x0}, 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x15, &(0x7f0000000280)=""/21, 0x41100, 0x1, '\x00', r4, @sk_reuseport=0x27, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r8, 0x7, &(0x7f00000004c0)=[0x1, 0x1], &(0x7f0000000500)=[{0x3, 0x1, 0x0, 0xc}, {0x1, 0x2, 0x6, 0x7}, {0x2, 0x2, 0xb, 0x3}, {0x4, 0x2, 0xc, 0xa}, {0x1, 0x4, 0x0, 0x5}, {0x5, 0x1, 0x7, 0xc}, {0x4, 0x5, 0x1, 0x4}], 0x10, 0xff}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x8, 0x0, {{0x25, 0x4, 0x1, 0x4, 0x94, 0x68, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x24}, {[@noop, @timestamp={0x44, 0x8, 0xf3, 0x0, 0x2, [0x0]}, @timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @generic={0x88, 0x11, "78a8d1927f56cf425997ce6ba99805"}, @ssrr={0x89, 0x27, 0xf8, [@broadcast, @rand_addr=0x64010101, @multicast2, @remote, @multicast2, @broadcast, @multicast1, @loopback, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x4, "2da5"}, {0x2, 0x2}, {0x2, 0xc, "566fab4fb137327f6fc6"}, {0x7, 0x6, "ad136b64"}]}, @generic={0x86, 0x10, "7f5744d40d1d36c102451eeafc2b"}]}}}}}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x1}, 0x8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xffffffff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x15, &(0x7f0000000280)=""/21, 0x41100, 0x1, '\x00', r4, @sk_reuseport=0x27, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r8, 0x7, &(0x7f00000004c0)=[0x1, 0x1], &(0x7f0000000500)=[{0x3, 0x1, 0x0, 0xc}, {0x1, 0x2, 0x6, 0x7}, {0x2, 0x2, 0xb, 0x3}, {0x4, 0x2, 0xc, 0xa}, {0x1, 0x4, 0x0, 0x5}, {0x5, 0x1, 0x7, 0xc}, {0x4, 0x5, 0x1, 0x4}], 0x10, 0xff}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280080040"], 0x3c}}, 0x0) (async) 3m23.546601023s ago: executing program 0 (id=866): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) sendto$inet(r1, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xfff, 0x0, 0x0, 0xffffffff}, 0x10) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x4a, "7e88b3c3239ced5511272ff0b7e32a1413015615518dd0862fa6b5f2c82693ddaf20cbf07fb8ca8317a8ddc729db1074969c4b352a063bf35ba9bce96dfc1ab27bc8f11c43399ef7a2a4"}, 0x52) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaee}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0xe, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0x24000508) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', r6, 0x80, 0x80, 0x8, 0xfffffff7, {{0x1b, 0x4, 0x3, 0x1c, 0x6c, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @multicast2, {[@end, @timestamp={0x44, 0x8, 0x23, 0x0, 0x3, [0x401]}, @ssrr={0x89, 0x2b, 0x9f, [@rand_addr=0x64010100, @local, @empty, @local, @empty, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010102, @multicast2]}, @end, @timestamp={0x44, 0x20, 0x59, 0x0, 0x1, [0x2, 0x80000000, 0x9954, 0x8, 0x0, 0x7fffffff, 0x2]}]}}}}}) (async) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r8, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe49, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m23.074157549s ago: executing program 0 (id=870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000480)={0x44, r1, 0x11, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffd, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) 3m22.869994516s ago: executing program 0 (id=873): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) close(r0) 3m22.592630473s ago: executing program 0 (id=877): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800001c00ca7f40c483fdae4ec9010429bd7000ffdbd82507000000", @ANYRES32=r1, @ANYBLOB="40004c060a000200aaaaaaaaaa150000"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3m22.441890789s ago: executing program 0 (id=879): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3d5]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x48040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x4, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, 0x40810, 0x40}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4044) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) 3m7.433327614s ago: executing program 32 (id=879): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x2000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x9, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3d5]}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x7}}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x48040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x4, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, 0x40810, 0x40}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4044) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) 2m23.057903663s ago: executing program 2 (id=1522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xe9}}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c004}, 0x8) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c004}, 0x8) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x60, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1001}, 0xe33d34d672427ca5) (async) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x60, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1001}, 0xe33d34d672427ca5) 2m22.689699128s ago: executing program 2 (id=1530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c0157f3", @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf253e000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400050083000000000041fd01006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0x19c}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) close(r0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$netlink(r4, &(0x7f0000000000), &(0x7f0000000040)=0xc) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0x36}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x110}}, 0x20000800) 2m22.461736817s ago: executing program 2 (id=1534): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5a34}}, 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) syz_emit_ethernet(0x1da, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff04004600fcfe86dd6001010001a41100fe8000000000000000000000000000aafe8000000000000000000000000000aa0c02040106704570ff020000000000000000000000000001731f000000000000000100c910fc000000000000000000000000000000c20400000007c2040000000407580000000314a80500060000000000000001000000000000000500000000000000000000000000000008000000000000000900000000000000018000080000000007000000000000000600000000000000ffffff7fffffffff076c394f909b77bd8ba3a347fcfacdc52f162077c72a0c8ee1e8f3b22f687a09729430e2974306723882f0adae3f1381d65a74699c0546a81d7310fc1afe84d62b5681476e86b51682b66a0abf183ad735412d36cce20c9ec99b65fc2397283f878264e5fd91b716b8e62c60b8c9100000000000000000000000000000000000000000002e02000000000000c910000000000000000000000000000000010000000000004e214e2100649078020000000400000003000000f713203d034924cefb3aa4124204a80e3111a8cba78223135637b4140dd4830af215dfded9b7597b3bd7262fd608be74c67e3156519335a6439de2415e73c917ae097b1b51983edc73255f55b35fc41d"], 0x0) 2m22.203735514s ago: executing program 2 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f2075"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wpan1\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x80, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040044) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x140f, 0x60ceaae1ef55e4c3}, 0x10}}, 0x0) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc0000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 2m21.929176226s ago: executing program 2 (id=1539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000010800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000) (async) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="7633341069654b402606cd0744bb310dd5cc3970dee40573d33728a74faf8e7c264a0eba19c2580b5da95066850e5d56b1bd9ddc4723ae133e7730b5c8d0ba9fdeb2233fdf9bf48dc0ccad41991750a98a077c55fadd02d81c7549709309cfeb26c38e8014e3e2e27c9a69a8b5dc0d8269c42fbbf10941d1c01d3680b5f15df79261e395d2025a5125b22a2dccbf89546adfacf36b235c2fa6556de9ec8c41f7bb9413d4214513a166f7", 0xaa}], 0x1}, 0x0) 2m21.781853978s ago: executing program 2 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=@delqdisc={0x48, 0x25, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) syz_emit_ethernet(0x3e, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000f40)=@newchain={0x1c98, 0x64, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x5}, {0x0, 0xffff}, {0xb, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x1c60, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x28}, @TCA_ROUTE4_ACT={0xe4, 0x6, [@m_gact={0xe0, 0xe, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x80, 0x3, 0x800, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x3, 0x0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2374, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2019, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x39}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8c1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x10000000, 0x8, 0x7d11751d}}]}, {0x3b, 0x6, "045a873dd9f9b8b6d84dfd75176f70ef9144341a14eeb619a7448bebeab62ad985bb28640468e3ce0cf8f0788a723c8db22237c3afeb45"}, {0xc}, {0xc, 0x8, {0x6}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x94}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_ACT={0x1b50, 0x6, [@m_mirred={0xb4, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xc, 0x0, 0x2, 0x9}, 0x1}}]}, {0x65, 0x6, "a193803eb4a776286322b3bb786ccc251a8eaf402cbc8506a0f76ba9e5042c2526a448a56848dc676a165762bf5d5d617b7007f062d504393d1b82260136fb177c234568e52e88147fd097f6ad1c42a9a434281710f4410b16bd8d7ae2e4fe9ac1"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x100, 0xe, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7f81, 0x1, 0x0, 0xfffffff7, 0x7fffffff}}]}, {0xb4, 0x6, "b96bb6d14b493db357ea9b231b774aa2abc3f10f9907b42694badf736f16eb9f41525cd74881b2b31dc1a41c751c78565bb076726afd96a645fdad87bd47d5d79f365b1f3e0b8bda73d08125321c090ede0868881e9573f0abbf7f8c5ef603cd764d8b41c7e8bb2cef3abbe85b61d83c78f81dc4a76158c6beeeed5b23f65d0e49727019fe2681ec9c6f63cb9b741ec665a0f64d9a578cdfcb6a71899ada42792f8ceedb9515d740e45b58c95ee0dad2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x108, 0x12, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x10000001, 0x2, 0x1c02}, 0x3}}]}, {0xbd, 0x6, "a7bae92f1507d47aa2b8395fb6dd5873adb59be5ef8925f442ae7d1efebb6e63237fd83b15fbb1b9445678356e3168fb3c1f0b0c6712246afde06de163276895f3a8bd49f6f1bb2298f502983b7b8241e2a72bfd885ab43681355b670f3dc226d5f72f788bee59e1675f0890d074d56538b880283ebaff425211cc19ef5825f0fac302e7faec681e9365cb131c1a19f621a6b451fd49d150acb08073580d20078e7a40b3bf9a886ff88dd50e4c1b667e523cc7bb064c5f4809"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x160, 0x1d, 0x0, 0x0, {{0x9}, {0xcc, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x1, 0xfffffe18, 0x2}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x512}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x8, 0x7fff, 0x4}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x9, 0x2, 0x18f}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2f31, 0x1, 0x20000000, 0xd, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x8, 0x6, 0xffffffff}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x3ff, 0x3, 0x8, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdba}]}, {0x6b, 0x6, "4be3c3e1b2cd72a91725885300a01b36e594418848c80ce2482e08308d7e24310f829519ebf70fa7787c2e49c0fa2c54e7ef8620360877ce14ff3328df160720318a2214593a5fbad522fa2ef200ae1c15ee3838e13a977e77ed7574053ab19a6671ce4214cd5e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x1074, 0x0, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x1ff, 0x20000000, 0xfffffff8, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "70d5eef0f6f5e6cfa81997571f912f23"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x48c, 0x10, 0x0, 0x0, {{0xb}, {0x418, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x8, 0x1, 0x2, 0x244, 0x3ff80, 0x7fffffff, 0x6, 0x0, 0x1, 0x9, 0x7, 0x10000, 0xec, 0x1, 0xbea2, 0x401, 0x1, 0xa95, 0x0, 0x4, 0x2, 0x7, 0x9, 0x0, 0x2c, 0x7, 0x5, 0x1, 0x2, 0x401, 0x8, 0x9, 0x2, 0x0, 0x9, 0x0, 0x0, 0x3, 0x93, 0xf3, 0x7, 0xa25, 0x4, 0x1000, 0x20, 0x9, 0xffffffff, 0x5, 0x3, 0xe2d, 0x9, 0x1, 0x0, 0x5, 0x516, 0x6, 0x1, 0xff00, 0xa58e, 0x1f95, 0x80000001, 0x7ff, 0x1, 0x5, 0x4, 0x4, 0x3, 0x1e, 0xfff, 0x5, 0x80, 0x4, 0x1, 0x6ab, 0x4, 0x1, 0x99000000, 0x16e4f571, 0x1, 0x1000, 0x7, 0x6, 0x8, 0x3, 0x1, 0xc, 0x4, 0x35, 0x1afe, 0xfc, 0x1, 0x1, 0xd, 0x2647, 0xf0e, 0x3, 0x5573, 0x7, 0xfffffffc, 0x691, 0x4000002, 0x3, 0x7, 0x73c1, 0x80000, 0x8, 0x5, 0xffffffff, 0x1, 0x4, 0xb9, 0x8, 0x1, 0x4, 0x5, 0x7fff, 0x6, 0x6, 0xfffffff8, 0x7, 0xe9, 0x9, 0x7fff, 0x3, 0xffff7fff, 0x7, 0x3, 0x6, 0x7ff, 0xa5, 0x4, 0x9, 0x7fff, 0x7fffffff, 0x8, 0x1, 0x5, 0xdd47, 0x3, 0x6c9, 0x2, 0xff, 0x9, 0x3, 0x5, 0xd50, 0xf, 0x5, 0x0, 0x7, 0xe9, 0xfffffffa, 0x7b, 0x13, 0x9, 0x6, 0x8, 0xff, 0xfffffff6, 0x0, 0xfffffff7, 0x2, 0x4, 0x20, 0x9, 0x0, 0x80, 0x7fffffff, 0xb7, 0x10000, 0x3, 0x5, 0x5, 0x1, 0x35da, 0x3, 0xffffffff, 0x8001, 0x5, 0x7b6b, 0xffffffff, 0x8, 0xf15, 0xc8a6, 0xa9cd, 0x7, 0x7, 0x7b5b, 0x8ed, 0x13000, 0x1, 0x0, 0x7ff, 0x0, 0xfffffbc4, 0x4, 0x6, 0xff, 0x3, 0xb, 0x871, 0x4, 0x8, 0x7, 0x7, 0x2, 0x0, 0x8, 0x8, 0x7, 0x3e6, 0x8001, 0x4, 0x6, 0x1, 0x5, 0x3, 0xdc66, 0x200, 0x2, 0xed, 0x80, 0x5, 0x6, 0xd7, 0x5c9, 0xe, 0x0, 0x84, 0x5, 0x6d77, 0x7, 0x2e, 0x4, 0x0, 0x3, 0x6, 0x8, 0x4, 0x4, 0x6, 0x4, 0x0, 0x760, 0x3, 0x4, 0x7, 0x8, 0xba3, 0x4, 0x2, 0x0, 0xff, 0x3, 0x9695]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4c, 0x6, "fb479caf4ce257a352cf7738876b982654b358fd7a9ff0aec336d90d4ffd1e6bb44c09d07155ab60687db3c195f564c850570ef6b769a98bdf220431f215216c535d6c90c05f7e7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x118, 0xe, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '!\xd1+\x00'}, @TCA_DEF_DATA={0x8, 0x3, '\\}\x81\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7, 0x10000000, 0x9, 0x95}}, @TCA_DEF_DATA={0x6, 0x3, '!\x00'}]}, {0xb9, 0x6, "fb688ecffde11f760bc03739c66118f76241d34ea80b31835fdd99939670c24561ab2f670511eedf9b957f09bd4e78c131d87786d60173af90b83e21aff30560660bdf790ec556c24afe129a7c12de8181e5db1fe43b119265ce55ad882c98af08c3c8fcddbc1528fa74a18f71610e112dd5d160dcaacdb9b356e6f9a47cf15b89b8b1cf8872e8759e6814a2c31926ceac7d4ebeba11cba329d3df54fb1aec0113d755f2a4d22f038069fb597b021393978286c201"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x118, 0x17, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8bf1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc0}]}, {0xc2, 0x6, "499359aed0a88a74236222ca6a44c401ea057c1927c0ce930dc599de020db7bf5a38870dde305904c7c955c1168a794550f4e73c0bb622d26ce112c69210634bdb093534d279f72bb0ddaf8e5c3fbf9376fc8485f5b52ef50370e4f389a3875e7c7fecc7e6f06099c8d0950e027eaae5cbed1b16b5faf3964586d495ad5930ea56f40a0eca52c0111d6309d491e2565c0eb830375875ddafc551c54c6a918b16879937f853d778f210e4ac9f73b987b8b41612c66f255d013575abc8d72e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x99}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0x2}}]}}]}, 0x1c98}, 0x1, 0x0, 0x0, 0xc000}, 0x11) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x184}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1bc, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xb}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x160, 0x2, [@TCA_BASIC_ACT={0x15c, 0x3, [@m_sample={0x68, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xf0, 0xc, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa1, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec1896728111b3c61d1de320181a72e0f47ddfe150f87d3d5d6ddc89258e07ea93abbbaa8b9538526f3018c8a1b0e044cee5833db84e522dd97d547504650f4a6186a9bdc8a084ea8dcb9ee2d96d67813c5f9ee6a009727f36b1bb22dc537ebc9f6caf615e577911012f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m6.751222728s ago: executing program 33 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)=@delqdisc={0x48, 0x25, 0x200, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0x1, 0x3}, {0x5, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) syz_emit_ethernet(0x3e, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xba}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000f40)=@newchain={0x1c98, 0x64, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x5}, {0x0, 0xffff}, {0xb, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x1c60, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x28}, @TCA_ROUTE4_ACT={0xe4, 0x6, [@m_gact={0xe0, 0xe, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x80, 0x3, 0x800, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x3, 0x0, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2374, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2019, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x39}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8c1, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x4, 0x10000000, 0x8, 0x7d11751d}}]}, {0x3b, 0x6, "045a873dd9f9b8b6d84dfd75176f70ef9144341a14eeb619a7448bebeab62ad985bb28640468e3ce0cf8f0788a723c8db22237c3afeb45"}, {0xc}, {0xc, 0x8, {0x6}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x94}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}, @TCA_ROUTE4_ACT={0x1b50, 0x6, [@m_mirred={0xb4, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0xc, 0x0, 0x2, 0x9}, 0x1}}]}, {0x65, 0x6, "a193803eb4a776286322b3bb786ccc251a8eaf402cbc8506a0f76ba9e5042c2526a448a56848dc676a165762bf5d5d617b7007f062d504393d1b82260136fb177c234568e52e88147fd097f6ad1c42a9a434281710f4410b16bd8d7ae2e4fe9ac1"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x100, 0xe, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7f81, 0x1, 0x0, 0xfffffff7, 0x7fffffff}}]}, {0xb4, 0x6, "b96bb6d14b493db357ea9b231b774aa2abc3f10f9907b42694badf736f16eb9f41525cd74881b2b31dc1a41c751c78565bb076726afd96a645fdad87bd47d5d79f365b1f3e0b8bda73d08125321c090ede0868881e9573f0abbf7f8c5ef603cd764d8b41c7e8bb2cef3abbe85b61d83c78f81dc4a76158c6beeeed5b23f65d0e49727019fe2681ec9c6f63cb9b741ec665a0f64d9a578cdfcb6a71899ada42792f8ceedb9515d740e45b58c95ee0dad2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x108, 0x12, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x10000001, 0x2, 0x1c02}, 0x3}}]}, {0xbd, 0x6, "a7bae92f1507d47aa2b8395fb6dd5873adb59be5ef8925f442ae7d1efebb6e63237fd83b15fbb1b9445678356e3168fb3c1f0b0c6712246afde06de163276895f3a8bd49f6f1bb2298f502983b7b8241e2a72bfd885ab43681355b670f3dc226d5f72f788bee59e1675f0890d074d56538b880283ebaff425211cc19ef5825f0fac302e7faec681e9365cb131c1a19f621a6b451fd49d150acb08073580d20078e7a40b3bf9a886ff88dd50e4c1b667e523cc7bb064c5f4809"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x160, 0x1d, 0x0, 0x0, {{0x9}, {0xcc, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x1, 0xfffffe18, 0x2}, 0x4}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x512}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x8, 0x7fff, 0x4}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x9, 0x2, 0x18f}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2f31, 0x1, 0x20000000, 0xd, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x8, 0x8, 0x6, 0xffffffff}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x3ff, 0x3, 0x8, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdba}]}, {0x6b, 0x6, "4be3c3e1b2cd72a91725885300a01b36e594418848c80ce2482e08308d7e24310f829519ebf70fa7787c2e49c0fa2c54e7ef8620360877ce14ff3328df160720318a2214593a5fbad522fa2ef200ae1c15ee3838e13a977e77ed7574053ab19a6671ce4214cd5e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x1074, 0x0, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x1ff, 0x20000000, 0xfffffff8, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "70d5eef0f6f5e6cfa81997571f912f23"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_police={0x48c, 0x10, 0x0, 0x0, {{0xb}, {0x418, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x8, 0x1, 0x2, 0x244, 0x3ff80, 0x7fffffff, 0x6, 0x0, 0x1, 0x9, 0x7, 0x10000, 0xec, 0x1, 0xbea2, 0x401, 0x1, 0xa95, 0x0, 0x4, 0x2, 0x7, 0x9, 0x0, 0x2c, 0x7, 0x5, 0x1, 0x2, 0x401, 0x8, 0x9, 0x2, 0x0, 0x9, 0x0, 0x0, 0x3, 0x93, 0xf3, 0x7, 0xa25, 0x4, 0x1000, 0x20, 0x9, 0xffffffff, 0x5, 0x3, 0xe2d, 0x9, 0x1, 0x0, 0x5, 0x516, 0x6, 0x1, 0xff00, 0xa58e, 0x1f95, 0x80000001, 0x7ff, 0x1, 0x5, 0x4, 0x4, 0x3, 0x1e, 0xfff, 0x5, 0x80, 0x4, 0x1, 0x6ab, 0x4, 0x1, 0x99000000, 0x16e4f571, 0x1, 0x1000, 0x7, 0x6, 0x8, 0x3, 0x1, 0xc, 0x4, 0x35, 0x1afe, 0xfc, 0x1, 0x1, 0xd, 0x2647, 0xf0e, 0x3, 0x5573, 0x7, 0xfffffffc, 0x691, 0x4000002, 0x3, 0x7, 0x73c1, 0x80000, 0x8, 0x5, 0xffffffff, 0x1, 0x4, 0xb9, 0x8, 0x1, 0x4, 0x5, 0x7fff, 0x6, 0x6, 0xfffffff8, 0x7, 0xe9, 0x9, 0x7fff, 0x3, 0xffff7fff, 0x7, 0x3, 0x6, 0x7ff, 0xa5, 0x4, 0x9, 0x7fff, 0x7fffffff, 0x8, 0x1, 0x5, 0xdd47, 0x3, 0x6c9, 0x2, 0xff, 0x9, 0x3, 0x5, 0xd50, 0xf, 0x5, 0x0, 0x7, 0xe9, 0xfffffffa, 0x7b, 0x13, 0x9, 0x6, 0x8, 0xff, 0xfffffff6, 0x0, 0xfffffff7, 0x2, 0x4, 0x20, 0x9, 0x0, 0x80, 0x7fffffff, 0xb7, 0x10000, 0x3, 0x5, 0x5, 0x1, 0x35da, 0x3, 0xffffffff, 0x8001, 0x5, 0x7b6b, 0xffffffff, 0x8, 0xf15, 0xc8a6, 0xa9cd, 0x7, 0x7, 0x7b5b, 0x8ed, 0x13000, 0x1, 0x0, 0x7ff, 0x0, 0xfffffbc4, 0x4, 0x6, 0xff, 0x3, 0xb, 0x871, 0x4, 0x8, 0x7, 0x7, 0x2, 0x0, 0x8, 0x8, 0x7, 0x3e6, 0x8001, 0x4, 0x6, 0x1, 0x5, 0x3, 0xdc66, 0x200, 0x2, 0xed, 0x80, 0x5, 0x6, 0xd7, 0x5c9, 0xe, 0x0, 0x84, 0x5, 0x6d77, 0x7, 0x2e, 0x4, 0x0, 0x3, 0x6, 0x8, 0x4, 0x4, 0x6, 0x4, 0x0, 0x760, 0x3, 0x4, 0x7, 0x8, 0xba3, 0x4, 0x2, 0x0, 0xff, 0x3, 0x9695]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4c, 0x6, "fb479caf4ce257a352cf7738876b982654b358fd7a9ff0aec336d90d4ffd1e6bb44c09d07155ab60687db3c195f564c850570ef6b769a98bdf220431f215216c535d6c90c05f7e7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x118, 0xe, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '!\xd1+\x00'}, @TCA_DEF_DATA={0x8, 0x3, '\\}\x81\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x7, 0x10000000, 0x9, 0x95}}, @TCA_DEF_DATA={0x6, 0x3, '!\x00'}]}, {0xb9, 0x6, "fb688ecffde11f760bc03739c66118f76241d34ea80b31835fdd99939670c24561ab2f670511eedf9b957f09bd4e78c131d87786d60173af90b83e21aff30560660bdf790ec556c24afe129a7c12de8181e5db1fe43b119265ce55ad882c98af08c3c8fcddbc1528fa74a18f71610e112dd5d160dcaacdb9b356e6f9a47cf15b89b8b1cf8872e8759e6814a2c31926ceac7d4ebeba11cba329d3df54fb1aec0113d755f2a4d22f038069fb597b021393978286c201"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x118, 0x17, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8bf1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xc0}]}, {0xc2, 0x6, "499359aed0a88a74236222ca6a44c401ea057c1927c0ce930dc599de020db7bf5a38870dde305904c7c955c1168a794550f4e73c0bb622d26ce112c69210634bdb093534d279f72bb0ddaf8e5c3fbf9376fc8485f5b52ef50370e4f389a3875e7c7fecc7e6f06099c8d0950e027eaae5cbed1b16b5faf3964586d495ad5930ea56f40a0eca52c0111d6309d491e2565c0eb830375875ddafc551c54c6a918b16879937f853d778f210e4ac9f73b987b8b41612c66f255d013575abc8d72e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x99}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0x2}}]}}]}, 0x1c98}, 0x1, 0x0, 0x0, 0xc000}, 0x11) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@typed={0xf1, 0x12b, 0x0, 0x0, @binary="8eab44a5159d834f7a577417b5091d0aac85ef225fb8e3c8fdd2f87bc9333944af4d958747a97f5dfa8f3a0df989a8f4cfcc8a0b0c74808d8ddfb58a24ace32cd6545f956216b8471f880e80f1f26bdcc7e4a4205744b9ceb87f7e8ba79cf7a294a9009fb421d24d53c0707e155e078a7839c40f0105a02b9c169f981fa3c96661f8579e1edb7b3b4222e84bfc269b9600d7e7e52d0874b155d588b935b48ae618a36ca423735f466467d01823ab53aff4cffb81a84735653bf5e2656f1c5db992060d7766b7aac5fffd3d2aea3579c8074e0f8681f4f8192dcda190a364823142539c7ad525134d072c0655df"}, @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b"]}]}, 0x184}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1bc, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xb}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x7}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x160, 0x2, [@TCA_BASIC_ACT={0x15c, 0x3, [@m_sample={0x68, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x29, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xf0, 0xc, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0xa1, 0x6, "2dbf268a304e872a0d7f589c8901efee8571a53c4f0062991873d363eeca75f7594e303fa6758fe5d09d4f9ffd072918848212ec1896728111b3c61d1de320181a72e0f47ddfe150f87d3d5d6ddc89258e07ea93abbbaa8b9538526f3018c8a1b0e044cee5833db84e522dd97d547504650f4a6186a9bdc8a084ea8dcb9ee2d96d67813c5f9ee6a009727f36b1bb22dc537ebc9f6caf615e577911012f"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40008c5}, 0x82050) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d146"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m11.989453349s ago: executing program 4 (id=2159): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000003780)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x90) r2 = socket(0x1e, 0x4, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x10, &(0x7f0000000080)=0x2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, 0x0, &(0x7f0000000340)=0x4b) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m11.701944735s ago: executing program 4 (id=2163): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x44}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x44}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x6, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x3}]}}}}}}, 0x46) 1m11.375668685s ago: executing program 4 (id=2167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) readv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f0000000700)=""/212, 0xd4}], 0x8) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) close(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) 1m10.916195459s ago: executing program 4 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="c4000000130a05000000000000000000020000030c000640000000000000000108000340000000050e000800eb5d8a33b06a1cb28d60000041000800e846e32ed56c9026b8bc237dfadc8391a750c9d49eabce6db92a5c6709bc31727f993fd33dd5850b1a61edbb1d37011986d37b06439dbcf9176b08a67d80ab07c41769292623f9402c0521e600000008000340000000090c00064000000000000000050900010073797a30000000000c000640000000000000000410000800fa0e5556d4e6f5d05c"], 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x8010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "299246c8790c329b9b21c709e5bde740667dacbfa315d9435694f397a882b3f08e609ceb866040a2100c9ec9eac4261c62"}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x128}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, 0x0, &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_per_queue_op={0x4b, 0x1, [0x80, 0x6579, 0x9, 0x400, 0xfffffffa, 0x80000000, 0x0, 0x0, 0xa8, 0x9, 0x5, 0x40, 0x4, 0x38, 0x800, 0x10001, 0x3, 0x7, 0x7fff, 0x97, 0x4, 0x8001, 0x4, 0x2, 0x7, 0x2, 0x380000, 0x6, 0xb, 0xb4, 0x6, 0x1, 0x1000, 0x1, 0x1, 0x32146399, 0x6, 0xfff, 0x3, 0xe, 0x3, 0x6, 0x9, 0x800, 0x5, 0xe, 0x9e3, 0xfffeffff, 0x7fffffff, 0x0, 0x1ec0, 0x2c22, 0x9, 0x6, 0x2, 0x6, 0xc20a, 0x5, 0x1, 0x26bd, 0x5, 0xe406, 0x4, 0x4, 0x2, 0x400, 0x7, 0xffffffff, 0x7, 0x3d, 0xfffffffb, 0x1, 0x5, 0x7, 0x2, 0x10, 0xbee, 0xc7, 0x10, 0x5, 0xda, 0x9, 0xf, 0x6, 0xfffffffe, 0xe74a, 0x10, 0xffff8b55, 0x8, 0x893, 0x0, 0x5d, 0x4, 0x4, 0x6, 0x7, 0x4, 0x9, 0xffffffff, 0x5, 0xffff, 0x3, 0x200, 0x7ff, 0x3, 0x2, 0xffff7fff, 0x7, 0xda62, 0x5a0, 0xa9, 0x9, 0x3, 0x3, 0x6, 0x100, 0x1, 0x0, 0x9, 0x4, 0x8, 0x5, 0x7ff, 0x7, 0x9, 0x3, 0x7068, 0xfff]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="ff00be034f31e8af3d361151791033cba4a7000d00000000000000000000000000000000a0a93cc3909aef97933e69f2a1743a4340a02d8f59f5e33e4f1a545583ad94df6bd784bae83274588b8edf95e25ef78ac811da4a6a9d000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000100"/28], 0x50) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x7, 0x0, r7, 0x2, '\x00', r2, r8, 0x1, 0x4, 0x4}, 0x50) 1m7.49191873s ago: executing program 4 (id=2204): socket$nl_crypto(0x10, 0x3, 0x15) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @generic="4fffb619b45f0877ddd00f05b457a65d54acc046575978fa63c84996f91dfab8f854f66770283b1088bfc185ff58091c43079ec6138ced26654e47f46b51bfd31de4c10572ee0d3e151a33e56aa57e2294f686849277bbba3266a2ec4f4679efde8cf247ef4edee54f85ac023655a75cf5aaa9fc7b3e00a70d007ef1437aaabca2e4a82a093dde658a28be78e5e7668201c2dc09bdf4e2eee54fb4ae974dec1d5579c96a7d4612dacf994e7757204be487b87ffca2c4ec54", @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0xe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x7800, 0x1, 0x4c9, 0x4, {{0x13, 0x4, 0x0, 0x1d, 0x4c, 0x67, 0x0, 0x16, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0xbf, [@local, @local, @empty, @multicast1, @broadcast, @private=0xa010100]}, @lsrr={0x83, 0x17, 0xcc, [@multicast1, @local, @rand_addr=0x64010102, @local, @local]}]}}}}}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@bridge_dellink={0x4b0, 0x11, 0x800, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x0, 0x5100}, [@IFLA_VFINFO_LIST={0x480, 0x16, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xd6f, 0xfffffffc}}, @IFLA_VF_RATE={0x10, 0x6, {0x80000001, 0x7f, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x8f22, 0x1, 0xffffffff}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x81}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x28a, 0x5, 0x88a8}}, {0x14, 0x1, {0xa60, 0xce7, 0x93, 0x88a8}}, {0x14, 0x1, {0x4, 0xb5, 0x7f, 0x88a8}}, {0x14, 0x1, {0x3, 0xf3d, 0x5, 0x8100}}, {0x14, 0x1, {0x3, 0x1e8, 0x6, 0x88a8}}, {0x14, 0x1, {0x5, 0x212, 0x0, 0x8100}}, {0x14, 0x1, {0x9, 0x780, 0x1, 0x90270d1861521b77}}, {0x14, 0x1, {0x6, 0x102, 0x0, 0x88a8}}]}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x9}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf5b, 0xfffffffa}}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfff, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x8c3, 0x8}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0xcb8, 0x1, 0x8100}}, {0x14, 0x1, {0xf7, 0x9f3, 0xc37, 0x88a8}}, {0x14, 0x1, {0x75, 0x2c5, 0x3, 0x88a8}}, {0x14, 0x1, {0x0, 0x5c8, 0x4, 0x88a8}}]}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffff, 0x3ff}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x607}}]}, {0xcc, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xff, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5fa, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0xfff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1ad7, 0x1c0, 0x9, 0x8100}}, {0x14, 0x1, {0x81, 0xd9f, 0x6, 0x8100}}, {0x14, 0x1, {0x500, 0x7ba, 0xf1a, 0x88a8}}, {0x14, 0x1, {0x7, 0xde9, 0x101, 0x88a8}}, {0x14, 0x1, {0x9, 0x8b, 0x9, 0x8100}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffff, 0x6bc}}]}, {0x130, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0xd, 0x1, {0x79e, 0xa73, 0x1, 0x8100}}, {0x14, 0x1, {0xfffffff3, 0x9a0, 0x4, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xf75f, 0xea5, 0x9, 0x88a8}}, {0x14, 0x1, {0x3, 0xd10, 0x9, 0x8100}}, {0x14, 0x1, {0x7, 0xd77, 0x5157b2cc, 0x8100}}, {0x14, 0x1, {0x778, 0x9b9, 0x9, 0x88a8}}, {0x14, 0x1, {0x800, 0x187, 0x0, 0x88a8}}, {0x14, 0x1, {0x3, 0xa42, 0x2, 0x88a8}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x237836be, 0x562, 0xf}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3d01, 0x101}}, @IFLA_VF_MAC={0x28, 0x1, {0x9, @link_local}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x9e0, 0x800, 0x88a8}}, {0x14, 0x1, {0x7, 0x1fa, 0x4, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x100, 0x8}}]}, {0xd8, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x5}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xa196, 0x7}}, {0x14, 0x1, {0x9, 0x68d, 0x5, 0x88a8}}, {0x14, 0x1, {0x3, 0xa61, 0x8, 0x88a8}}, {0x14, 0x1, {0x3, 0x1ee, 0xc, 0x8100}}]}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0xa78, 0x88c}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfff, 0x485, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000001}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x101, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffea4, @broadcast}}]}]}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2094}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) 1m7.334184572s ago: executing program 4 (id=2206): sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x3e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x30}}, 0x20040000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100fdff070000100000060000002f00fb1d758e8f776527d1621ccc57cee498d2597e741a92773f4b74a7efc63dc4f9d6c17f77310cb685b24e7d22658d26b28788d5931ef8e1ae5c22fe17346ed1c9572d6d5a6da18e61432fe703a8d0d89838acdf48d006908cc41c9dbb19123e2e190b9d13431bddccd40f6d74eeaee284172e12a8928a529a0f225e2af60f4cabcc2c935859ea3ab68c9d6f"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 51.885698567s ago: executing program 34 (id=2206): sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x3e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x30}}, 0x20040000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100fdff070000100000060000002f00fb1d758e8f776527d1621ccc57cee498d2597e741a92773f4b74a7efc63dc4f9d6c17f77310cb685b24e7d22658d26b28788d5931ef8e1ae5c22fe17346ed1c9572d6d5a6da18e61432fe703a8d0d89838acdf48d006908cc41c9dbb19123e2e190b9d13431bddccd40f6d74eeaee284172e12a8928a529a0f225e2af60f4cabcc2c935859ea3ab68c9d6f"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 5.493314389s ago: executing program 5 (id=2747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, 0x0, &(0x7f0000000100)) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002140)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x5}, &(0x7f00000020c0)=0xb354, 0x0, 0x7fffffffffffffff, 0x1, 0xc555, 0x7, 0x10, 0x6}}], 0x58}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$802154_dgram(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)='\x00', 0x1}}, 0x40805) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) close(0x3) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000280)) r9 = socket(0x10, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r10, 0x0, 0xb, &(0x7f0000000040)=""/202, &(0x7f0000000400)=0xca) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x8, 0x40, @mcast2, @local, 0x7, 0x700, 0x6, 0x5}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x503, 0x200000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r11}]}}}]}, 0x38}}, 0x44) 5.182828903s ago: executing program 3 (id=2753): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ffeb00feffffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000010500160002000000040012000500170040"], 0x60}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0x2, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44014}, 0x40080c0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) 5.180572249s ago: executing program 5 (id=2754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001740)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) recvmmsg$unix(r3, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/203, 0xcb}, {&(0x7f0000000440)=""/212, 0xd4}], 0x2}}], 0x1, 0x40000100, 0x0) sendmmsg$alg(r3, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="746b390b0b39f6f056d44a4f7c12bd4343fc61ccf527062b690cc6dc5ab3addee21bc3f9bacd91866d3312c496d66fd80b0f81044dc3d824b6f61d1d3681b61991867450912ce44654915a88932561a98c760f899b2d10dce39bde799393f068e33de01f19d7de9a3bb6078566d49a73fcbabede44bc42781f4b2f8a4c6c5bdd83c3403d4d3dc83a84e60c8874b49d99a0c3c06d81c50a479fd351bd1a0028bbb470965a7fe6a779f4c546", 0xab}, {&(0x7f00000005c0)="fa969bae43ca5bd366fc20c5d1466391c7e09839a853e2bb6d825e9a519caaf822e23d21199fe4441b6ab796e78b998cf750d3e5ec3bed92ec", 0x39}, {&(0x7f0000000600)="e8ed2732d58a137480e4718f41569cc1344e85905ab24d5770d1b848c2a6", 0x1e}, {&(0x7f0000000640)="fa06cb1d00dea7f46857d966b712a8e44ff85574cdf4483dd4825bbd75c63d489aa6eb2b2d4a7b18483cc6572f98edf361f435c21022363649bf327502154a392b1ee295d251cee82e250eb8bc8258595a053cd28688f351cfccdfb2cbb2f1d776f9387737caee06e524435634aac389d2fa7c9e042a00c609ba5d13ca3a38b328178be6290a8f805899f992f072576f", 0x90}], 0x4, &(0x7f0000000740)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}], 0x48, 0x44}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)="5e44af7155ec01eefac42ad47e39b2d469d9578594f4e70769f98ffced517e819b8c5b9528a63f6b42b1df895e319fb2cfc2d5205c69e8f4488ab5c34615fe1cd455289d4c8db3c2d75a2edfe9d8fe0ab2a216bf72befe13a2a7429b26bd5d97a8946050a76a4cf1be84812fae06b05d56e86b1f0a7ad34c3527002428db1a6233874ee55812bc1457cfd8bd07728070993b92439c51dd00510cf157cd1fc0651af3518e0a3e8adaf4681cff0f90cda7d56dc37f1582eabf47f7d30b1bd778ce3129a6175a528ee8c0b2b6c9c467bc8720a86a54aa", 0xd5}, {&(0x7f00000008c0)="13cc9382", 0x4}, {&(0x7f0000000900)="55eaa9cea477b07edf12847d40e781cddf02fa101e5a3183e433726e317df35607a38d71a38a4de8fc056e7c0a06f0d8993b32de226e10aae032b607a3f3ca683d21d634340857342454a6c2c980d35e07f54f2af436ec", 0x57}, {&(0x7f0000000a80)="08bb272931835dccd0ea90d5cd0043742e312eb80c5bf1c70d4fbe38fad07e1eabc12bffaea9446e4469f757ab6651f55e15c5fac10ff941a1b7428dc883ecd6039febe644ed3bf7e3e0bcf2ef670e39c713c35246c40789655dd9f9cd93a185e6102f5ac8a7cff52a964590f3c2aeb89acf984110afbb6be511516db133f331cdced311b8751d9f2ae290745dc0bf42a2b448d1592012741d54d461d66ad7248709e661b15b1e7c566b7b77e04af4c34642959713fa8374cd3fa1f64698ad05203d39c33fdb28e53fcc97a74e8252b1132439e36fcacd01db05a86e7954ce2148c5b0b5c97aab94b7d1e34c6e", 0xed}, {&(0x7f0000000b80)="90c9d1dd2c7e9055adbc5e3e97d88cbd4e39b33cd74333b66a1ee5689184ac0b41a2139fb7407dde0877fb99b3b896e1e4f96bffcce1ba35767fa5aa3ae9ca42497f4064b283131ec5c9fdeb3fb2d04b845a02177842ab869c36dfe9cd33c69db68cfe1d86f7bcfdcc043d26dbe4af99ef8b5ad85063985cb102a967ad906afcb4c5fa0859d25a710ce908048f076456fb35f6559fa7584fcb35b8", 0x9b}], 0x5, &(0x7f0000000c40), 0x0, 0xc044}], 0x2, 0x40000) ioctl$FICLONE(r1, 0x40049409, r1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e00)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x19, 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="bfb608000402000085100000fba9ffff"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x5b, &(0x7f0000000d40)=""/91, 0x0, 0x4, '\x00', 0x0, @cgroup_sockopt, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x3, 0x7, 0x3, 0x81}, 0x10, r8, r1, 0x6, &(0x7f0000000e40)=[r0, r0], &(0x7f0000000e80)=[{0x4, 0x2, 0x4, 0xe}, {0x0, 0x4, 0xe, 0xc}, {0x2, 0x1, 0x1}, {0x1, 0x5, 0xc, 0x5}, {0x5, 0x2, 0x8, 0x2}, {0x1, 0x5, 0xe, 0x7}], 0x10, 0xffffffff}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004a80)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0xff4, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0xf90, 0x7, 0x0, 0x0, {{0x8}, {0x4}, {0xf65, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r10, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 5.062589486s ago: executing program 5 (id=2757): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', 0x0}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000140)=0x1000000, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032abd7000ffdbdf251400000008001400ff0300000800060003000000080004000100808099f637aa829b4e2a349c4552a5e3798e0d8054b1f942c5879718cf1a184bbd39198382cc60ea9fd82b712a2c82c4d436cb26cb285aa260"], 0x2c}}, 0x4004001) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) write$nci(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="6105077f02000009f108aa3c00000000"], 0x13) 4.670558207s ago: executing program 3 (id=2761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000"], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 1.829290147s ago: executing program 3 (id=2767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1000001}]}}, 0x0, 0x26}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0xb, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x44}}, 0x0) 1.828879817s ago: executing program 7 (id=2768): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x0, r2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.827718786s ago: executing program 6 (id=2769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r1, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'team_slave_0\x00'}}, 0x1e) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 1.758185742s ago: executing program 5 (id=2770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000100)={0x5, 0x1ff, 0x1, 0x400, 0x7f, 0x10, 0x6}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="01fcffffffffffffff00270000004500403400000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8a00000090780018050a07fffff8000000000000"], 0x42) 1.619826815s ago: executing program 6 (id=2772): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x898, 0x100000000, 0x9, 0xfffffffffffffffb, 0x3, 0xa, 0x9, 0x3}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010029bd6000fedbdf380200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r8 = accept(r6, 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x6) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="000000f9ffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r8}, 0x20) recvmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) write$nci(r0, &(0x7f0000000540)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x8, "c409f473908d7ee7"}, 0xb) close(r0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) 1.596128182s ago: executing program 3 (id=2773): r0 = socket$inet6(0xa, 0x1, 0xf) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="07000000000000000000050000000800038004000380180001801400020073797a5f74756e000000000000000000e1eadf53f19c864c83c2d11f5ec3b13829856384e78791aef728ff4ada197a10fa6ef719383bdaabcd4ca6119b367809a95a149d686634511d7747"], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$xdp(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c045}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="f9369254c92970a4", 0x8}], 0x1}}], 0x2, 0x40) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000200)) sendmsg$netlink(r9, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000080)={0x10, 0x3b, 0x1}, 0x10}, {&(0x7f00000000c0)={0x10, 0x0, 0x1}, 0x10}], 0x2}, 0x0) 1.550739671s ago: executing program 1 (id=2774): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x2d0, 0xf0, 0xffffffff, 0x0, 0x2d0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@broadcast, @ipv6=@local, @port=0x4e23, @gre_key=0x833}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0x0, 0xff0000ff], [0x0, 0xffffffff, 0xff, 0xffffffff], 'veth1_to_hsr\x00', 'gre0\x00', {}, {}, 0x2f, 0x6, 0x2, 0x21}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@local, @ipv6=@mcast1, @gre_key=0x4, @port=0x4e20}}}, {{@ipv6={@private0, @mcast2, [0xffffff00, 0x0, 0xff0000ff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xff0000ff], 'xfrm0\x00', 'nr0\x00', {0xff}, {0xff}, 0x0, 0x0, 0xf, 0x54}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, @ipv6=@empty, @gre_key=0x1, @icmp_id=0x65}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, [0xff, 0x0, 0xffffffff, 0xff], [0xff, 0xff, 0xff000000], 'bond_slave_1\x00', 'veth0_to_team\x00', {}, {0xff}, 0x1d, 0x7, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@local, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e20, @port=0x4e21}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4044040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f0000000040)=0x80000001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x50}, 0x1, 0x7}, 0x4002010) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) writev(r3, &(0x7f0000000300)=[{0x0}], 0x1) readv(r3, &(0x7f0000002940)=[{&(0x7f0000000b00)=""/4109, 0x100d}, {0x0}, {0x0}, {&(0x7f0000000a40)=""/147, 0x93}, {0x0}, {0x0}], 0x6) gettid() r6 = socket(0x10, 0x803, 0x0) socket$inet(0x2, 0x3, 0x81) mmap(&(0x7f0000ef1000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000009f808574837df875c26680d4000"], 0x44}, 0x1, 0x0, 0x0, 0x20008041}, 0x20000000) 1.379712468s ago: executing program 7 (id=2775): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x4) (async, rerun: 32) r4 = socket(0x10, 0x80002, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) (rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r6 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80000000}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) (async) r9 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r9, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) (async) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70fd29, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) (async) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$nci(r11, &(0x7f0000000340)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x8, 0x1}, 0x4) (async, rerun: 32) r12 = accept4(r10, 0x0, 0x0, 0x800) (rerun: 32) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) (rerun: 32) 1.174648187s ago: executing program 1 (id=2776): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x2, 0x20000000, 0x3) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x2, 0x20000000, 0x3) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) 1.070129933s ago: executing program 7 (id=2777): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2c, 0x5, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000400000000000003100000400001802c0004001400010002000000ac14140f000000000000000014000200df000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 930.997314ms ago: executing program 1 (id=2778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000"], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 838.898641ms ago: executing program 5 (id=2779): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x98400008}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x70, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x20068080) 545.841232ms ago: executing program 5 (id=2780): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB='\x00'/28], 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @local, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r10, 0x0, 0x20000000002) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 543.261819ms ago: executing program 1 (id=2781): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) close(r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) 542.162143ms ago: executing program 7 (id=2782): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140500005a00130000010000000a000000"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x2a, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030026bd7000fcdbdf251500000008000300", @ANYRES32=r5, @ANYBLOB="14002b800800010001000000050002000300000008002a00c9"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20000801) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r7, &(0x7f00000002c0)="08015e2fbc14a1690235dfb3975536fef8274ea662f307dba2c344b7db64d7376cbe8c636caf0c90", 0x28) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 490.826563ms ago: executing program 3 (id=2783): socket$inet(0x10, 0x3, 0x0) (async) socket$inet(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xf5, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0xffffffff) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="100000002ae6aedf259222063c6bc3efb7a4509164673ecd3d9f49c9e91ed405b4b2c7c065f829822f6f71fee5edb8128dea781221b5558e759a8e6f2d9563132ec75e47bad661a0d588ef322342e07fcf5fa6ef0000000000000000000000000000000000000000000000e47f0b2ad3458e94038ed86b8bb291683a8b374c559a11c16f21bd74ac915f67d5ffaf24a88723789c8c6a6fd005f9be9fc55da790f1d5d59607a8a58b7ae61f4d0c082756f0660827b5856a08620bf185eac6bae531d132a29a40981adaa8f434038dc90d06e4c6983e0fd69271007ae67f898e27be4dbc18450f83c7deca93c1ee61f0677680a80857fdf58d"], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) (async) sendmsg$netlink(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="100000002ae6aedf259222063c6bc3efb7a4509164673ecd3d9f49c9e91ed405b4b2c7c065f829822f6f71fee5edb8128dea781221b5558e759a8e6f2d9563132ec75e47bad661a0d588ef322342e07fcf5fa6ef0000000000000000000000000000000000000000000000e47f0b2ad3458e94038ed86b8bb291683a8b374c559a11c16f21bd74ac915f67d5ffaf24a88723789c8c6a6fd005f9be9fc55da790f1d5d59607a8a58b7ae61f4d0c082756f0660827b5856a08620bf185eac6bae531d132a29a40981adaa8f434038dc90d06e4c6983e0fd69271007ae67f898e27be4dbc18450f83c7deca93c1ee61f0677680a80857fdf58d"], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) sendto$inet(r11, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r9, @ANYRES32=r12, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 470.47807ms ago: executing program 6 (id=2784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f00000048c0)={&(0x7f0000004580)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x35, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) 382.351984ms ago: executing program 1 (id=2785): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000340)={0x0, 0x7, 0xa905a55, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000740)={0x0, "14502c27422c1d343525713e0aa4b423"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001740)={0x4, 0x2, {0x747, @struct={0x5, 0x5}, r1, 0x7fffffffffffffff, 0x80, 0x7, 0x1, 0xad, 0x1, @struct, 0x4, 0xf7, [0x1ff, 0x8, 0x5, 0x6, 0x7, 0x7f]}, {0x9e6, @struct={0x9, 0x200}, 0x0, 0x3, 0x6, 0x7fffffff, 0x2, 0x0, 0xd4, @usage=0x7, 0x17a, 0x3, [0x100000001, 0x88b2, 0x5, 0xa, 0x7, 0x4]}, {0x7f, @usage=0xffffffff, r2, 0x8, 0x101, 0x1, 0x9, 0x5, 0x20, @struct={0x5, 0x6}, 0xffffffff, 0x1, [0x4, 0x2, 0x0, 0x95, 0x2, 0x8]}, {0xfffffffffffffffa, 0x8000000000000000, 0x80000001}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 278.101665ms ago: executing program 6 (id=2786): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x4c, r0, 0x1, 0x0, 0x25dfdbff, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}}, 0x0) 269.848858ms ago: executing program 3 (id=2787): socketpair(0x28, 0x2, 0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{}, [@default, @bcast, @bcast, @netrom, @rose, @netrom, @bcast, @bcast]}, &(0x7f0000000240)=0x48, 0xc00) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) listen(r2, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x28, r4, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9cab}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2010}, 0x40090) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000140)={0x2c, 0x0, 0xa, 0x400000b, 0x36, 0x81}) 257.321989ms ago: executing program 6 (id=2788): r0 = socket$igmp(0x2, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001000000300"/20, @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x5, 0x0, @vifc_lcl_ifindex=r4, @multicast1}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0x1}, 0x6) socket$kcm(0x29, 0x5, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 188.859509ms ago: executing program 6 (id=2789): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000004000000080000000600000000000000", @ANYRES32=0x1, @ANYBLOB="000000439f824661d9a0d50000000000730000006b3ba62424f2cbb2e777c58d5ae8ef2a70cd021bc3fdd4aebbb0c656c3e6c2c40101a5a06db80822aa5a5dfc801e21fd589dcce4bbe943c70ca46b60135dab3fc0aec613aca593350a19562827f75d0cccce37668c9fb59fa41ae8c15a60d5155a215ac9083f18b9f7ba68dc9ea4d948a4df4d3f718c4da85964978ebf8b765f2c8bdbb8ea0c45245e8f13cd2137c1d4e61f10b788a9919989d64aa7906e32ecfb4d31493f4f6e82777ceb2d9f62f4ca4a6bba223cc58bea0e1bed1453902d34b73902f9e644425908ba0649", @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC=r0], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8004) close(0x3) shutdown(r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x100000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000100)=ANY=[@ANYBLOB="cee97b8d7a6cdc425eec68eb1d07652b5b94b55bf749ab", @ANYRES16=r6, @ANYBLOB="11002bbd7000fbdbdf250700000008000300", @ANYRES32=r9, @ANYBLOB="0c009900fdffffff2d00000008000500000000001400040070696d72656700"/40], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) 90.069823ms ago: executing program 1 (id=2790): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x98400008}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x70, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x20068080) 89.669683ms ago: executing program 7 (id=2791): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10000, 0x1cb, 0x12d63, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000000000000000000000000000000fd1eb7ed0fdf3c1a40000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="016442200100"], 0x5) 0s ago: executing program 7 (id=2792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300002c00"], 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) kernel console output (not intermixed with test programs): [ 215.230099][T10131] ? __pfx_sock_do_ioctl+0x10/0x10 [ 215.230124][T10131] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 215.230168][T10131] sock_ioctl+0x5c6/0x7f0 [ 215.230198][T10131] ? __pfx_sock_ioctl+0x10/0x10 [ 215.230225][T10131] ? __fget_files+0x2a/0x420 [ 215.230254][T10131] ? __fget_files+0x3a0/0x420 [ 215.230281][T10131] ? __fget_files+0x2a/0x420 [ 215.230314][T10131] ? bpf_lsm_file_ioctl+0x9/0x20 [ 215.230340][T10131] ? __pfx_sock_ioctl+0x10/0x10 [ 215.230367][T10131] __se_sys_ioctl+0xfc/0x170 [ 215.230394][T10131] do_syscall_64+0x14d/0xf80 [ 215.230417][T10131] ? trace_irq_disable+0x3b/0x150 [ 215.230435][T10131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.230455][T10131] ? clear_bhb_loop+0x40/0x90 [ 215.230481][T10131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.230501][T10131] RIP: 0033:0x7f289ad9c819 [ 215.230520][T10131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.230536][T10131] RSP: 002b:00007f289bc92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.230559][T10131] RAX: ffffffffffffffda RBX: 00007f289b015fa0 RCX: 00007f289ad9c819 [ 215.230574][T10131] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 000000000000000b [ 215.230586][T10131] RBP: 00007f289bc92090 R08: 0000000000000000 R09: 0000000000000000 [ 215.230598][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.230610][T10131] R13: 00007f289b016038 R14: 00007f289b015fa0 R15: 00007ffc802b8798 [ 215.230643][T10131] [ 215.703690][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 216.078279][T10182] netlink: 'syz.4.1036': attribute type 1 has an invalid length. [ 216.156098][T10187] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 216.179362][T10189] FAULT_INJECTION: forcing a failure. [ 216.179362][T10189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.199623][T10187] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 216.210431][T10189] CPU: 0 UID: 0 PID: 10189 Comm: syz.3.1038 Not tainted syzkaller #0 PREEMPT(full) [ 216.210458][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.210469][T10189] Call Trace: [ 216.210478][T10189] [ 216.210486][T10189] dump_stack_lvl+0xe8/0x150 [ 216.210521][T10189] should_fail_ex+0x412/0x560 [ 216.210555][T10189] _copy_to_user+0x31/0xb0 [ 216.210580][T10189] simple_read_from_buffer+0xe1/0x170 [ 216.210615][T10189] proc_fail_nth_read+0x1bb/0x230 [ 216.210658][T10189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.210689][T10189] ? rw_verify_area+0x2a6/0x4d0 [ 216.210711][T10189] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.210741][T10189] vfs_read+0x20c/0xa70 [ 216.210761][T10189] ? fdget_pos+0x246/0x320 [ 216.210784][T10189] ? __pfx___mutex_lock+0x10/0x10 [ 216.210809][T10189] ? __pfx_vfs_read+0x10/0x10 [ 216.210834][T10189] ? __fget_files+0x2a/0x420 [ 216.210868][T10189] ? __fget_files+0x3a0/0x420 [ 216.210895][T10189] ? __fget_files+0x2a/0x420 [ 216.210935][T10189] ksys_read+0x150/0x270 [ 216.210960][T10189] ? __pfx_ksys_read+0x10/0x10 [ 216.210982][T10189] ? __pfx_sock_ioctl+0x10/0x10 [ 216.211020][T10189] do_syscall_64+0x14d/0xf80 [ 216.211043][T10189] ? trace_irq_disable+0x3b/0x150 [ 216.211062][T10189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.211082][T10189] ? clear_bhb_loop+0x40/0x90 [ 216.211106][T10189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.211125][T10189] RIP: 0033:0x7f276ad5d04e [ 216.211144][T10189] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.211159][T10189] RSP: 002b:00007f276bc45fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.211181][T10189] RAX: ffffffffffffffda RBX: 00007f276bc466c0 RCX: 00007f276ad5d04e [ 216.211195][T10189] RDX: 000000000000000f RSI: 00007f276bc460a0 RDI: 000000000000000c [ 216.211206][T10189] RBP: 00007f276bc46090 R08: 0000000000000000 R09: 0000000000000000 [ 216.211219][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.211229][T10189] R13: 00007f276b016038 R14: 00007f276b015fa0 R15: 00007ffff52d0c68 [ 216.211263][T10189] [ 216.911439][T10196] bond5: ARP target 1.0.0.0 is already present [ 216.938135][T10196] bond5: option arp_ip_target: invalid value (1) [ 216.949090][T10196] bond5 (unregistering): Released all slaves [ 216.992454][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.001888][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.007441][T10210] h: entered promiscuous mode [ 217.010946][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.056501][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.067488][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.465077][T10239] netlink: 'syz.4.1050': attribute type 5 has an invalid length. [ 217.822169][T10253] syzkaller0: entered promiscuous mode [ 217.832198][T10253] syzkaller0: entered allmulticast mode [ 217.863922][T10220] chnl_net:caif_netlink_parms(): no params data found [ 217.981773][T10259] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 218.174909][T10267] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 218.201320][T10269] netlink: 'syz.4.1058': attribute type 3 has an invalid length. [ 218.239869][T10267] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 218.257244][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.273743][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.281249][T10220] bridge_slave_0: entered allmulticast mode [ 218.321264][T10220] bridge_slave_0: entered promiscuous mode [ 218.346398][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.353821][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.361326][T10220] bridge_slave_1: entered allmulticast mode [ 218.369846][T10220] bridge_slave_1: entered promiscuous mode [ 218.461341][T10280] sctp: [Deprecated]: syz.1.1060 (pid 10280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.461341][T10280] Use struct sctp_sack_info instead [ 218.487965][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.519212][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.594381][T10255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.611151][T10255] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 218.637891][T10220] team0: Port device team_slave_0 added [ 218.671046][T10220] team0: Port device team_slave_1 added [ 218.681529][T10255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.688999][T10255] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 218.719462][T10255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.726965][T10255] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 218.759784][T10255] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.782489][T10255] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 218.799267][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.811126][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.838262][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.854974][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.864084][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.890819][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.911813][T10255] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 218.940712][T10255] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 219.052480][T10220] hsr_slave_0: entered promiscuous mode [ 219.075850][T10220] hsr_slave_1: entered promiscuous mode [ 219.212568][T10309] __nla_validate_parse: 10 callbacks suppressed [ 219.212589][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 219.915236][T10356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 219.937401][T10356] block nbd0: reconnected socket [ 219.937759][ T5836] block nbd0: Receive control failed (result -107) [ 219.971341][T10220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.999246][T10220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.017339][T10220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.034192][T10220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.385161][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.439744][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.478141][ T6642] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.485371][ T6642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.518291][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.525520][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.601722][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'. [ 220.652503][T10378] netlink: 'syz.1.1083': attribute type 10 has an invalid length. [ 220.662554][T10380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1084'. [ 220.684008][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.691940][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.707273][T10378] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.714748][T10378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.722318][T10378] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.729587][T10378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.748379][T10378] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.750183][T10391] ip6t_srh: unknown srh match flags 5F28 [ 220.764773][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1084'. [ 220.764812][T10382] netlink: 'syz.4.1084': attribute type 7 has an invalid length. [ 220.764837][T10382] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1084'. [ 221.146341][T10410] netlink: 'syz.4.1091': attribute type 23 has an invalid length. [ 221.161734][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.192978][T10409] netlink: 'syz.4.1091': attribute type 23 has an invalid length. [ 221.270378][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1092'. [ 221.563363][T10424] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1095'. [ 221.572519][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1095'. [ 221.582619][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1095'. [ 221.668448][T10431] lo: left allmulticast mode [ 221.737380][T10431] tunl0: left allmulticast mode [ 221.742551][T10431] gre0: left allmulticast mode [ 221.775223][T10431] gretap0: left allmulticast mode [ 221.780455][T10431] erspan0: left allmulticast mode [ 221.788317][T10431] ip_vti0: left allmulticast mode [ 221.793807][T10431] ip6_vti0: left allmulticast mode [ 221.806158][T10431] sit0: left allmulticast mode [ 221.811133][T10431] ip6tnl0: left allmulticast mode [ 221.821593][T10431] ip6gre0: left allmulticast mode [ 221.828133][T10431] syz_tun: left allmulticast mode [ 221.838296][T10431] ip6gretap0: left allmulticast mode [ 221.846619][T10431] bond0: left allmulticast mode [ 221.852217][T10431] dummy0: left allmulticast mode [ 221.859020][T10431] nlmon0: left allmulticast mode [ 221.871322][T10431] caif0: left allmulticast mode [ 221.878118][T10431] vxcan0: left allmulticast mode [ 221.884782][T10431] vxcan1: left allmulticast mode [ 221.890121][T10431] veth0: left allmulticast mode [ 221.895602][T10431] veth1: left allmulticast mode [ 221.900697][T10431] wg0: left allmulticast mode [ 221.905955][T10431] wg1: left allmulticast mode [ 221.910862][T10431] wg2: left allmulticast mode [ 221.916018][T10431] veth0_to_bridge: left allmulticast mode [ 221.922021][T10431] bridge_slave_0: left allmulticast mode [ 221.928281][T10431] veth1_to_bridge: left allmulticast mode [ 221.934604][T10431] bridge_slave_1: left allmulticast mode [ 221.940615][T10431] veth0_to_bond: left allmulticast mode [ 221.947653][T10431] bond_slave_0: left allmulticast mode [ 221.954385][T10431] veth1_to_bond: left allmulticast mode [ 221.960231][T10431] bond_slave_1: left allmulticast mode [ 221.965960][T10431] veth0_to_team: left allmulticast mode [ 221.971723][T10431] team_slave_0: left allmulticast mode [ 221.977874][T10431] veth1_to_team: left allmulticast mode [ 221.983766][T10431] team_slave_1: left allmulticast mode [ 221.989410][T10431] veth0_to_batadv: left allmulticast mode [ 221.995619][T10431] batadv_slave_0: left allmulticast mode [ 222.001508][T10431] veth1_to_batadv: left allmulticast mode [ 222.007505][T10431] batadv_slave_1: left allmulticast mode [ 222.013347][T10431] xfrm0: left allmulticast mode [ 222.018388][T10431] veth0_to_hsr: left allmulticast mode [ 222.024564][T10431] veth1_to_hsr: left allmulticast mode [ 222.030245][T10431] hsr0: left allmulticast mode [ 222.035132][T10431] hsr_slave_0: left allmulticast mode [ 222.040599][T10431] hsr_slave_1: left allmulticast mode [ 222.046184][T10431] veth1_virt_wifi: left allmulticast mode [ 222.052041][T10431] veth0_virt_wifi: left allmulticast mode [ 222.058182][T10431] virt_wifi0: left allmulticast mode [ 222.064102][T10431] veth1_vlan: left allmulticast mode [ 222.069741][T10431] vlan0: left allmulticast mode [ 222.074905][T10431] vlan1: left allmulticast mode [ 222.079965][T10431] macvlan0: left allmulticast mode [ 222.085448][T10431] macvlan1: left allmulticast mode [ 222.090709][T10431] ipvlan0: left allmulticast mode [ 222.095992][T10431] ipvlan1: left allmulticast mode [ 222.101035][T10431] veth0_vlan: left allmulticast mode [ 222.106607][T10431] veth1_macvtap: left allmulticast mode [ 222.112278][T10431] veth0_macvtap: left allmulticast mode [ 222.118065][T10431] macvtap0: left allmulticast mode [ 222.123386][T10431] macsec0: left allmulticast mode [ 222.128508][T10431] geneve0: left allmulticast mode [ 222.133754][T10431] geneve1: left allmulticast mode [ 222.138988][T10431] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 222.146177][T10431] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 222.153051][T10431] syztnl2: left allmulticast mode [ 222.158264][T10431] bond1: left allmulticast mode [ 222.163689][T10431] xfrm1: left allmulticast mode [ 222.168747][T10431] ip6_vti1: left allmulticast mode [ 222.174211][T10431] mac80211_hwsim hwsim16 wlan2: left allmulticast mode [ 222.181353][T10431] bridge1: left allmulticast mode [ 222.186726][T10431] bond2: left allmulticast mode [ 222.192169][T10431] vlan2: left allmulticast mode [ 222.197154][T10431] bridge0: left allmulticast mode [ 222.205364][T10431] h: left promiscuous mode [ 222.329331][T10220] veth0_vlan: entered promiscuous mode [ 222.377496][T10220] veth1_vlan: entered promiscuous mode [ 222.651938][T10220] veth0_macvtap: entered promiscuous mode [ 222.687054][T10220] veth1_macvtap: entered promiscuous mode [ 222.834330][T10478] lo: entered promiscuous mode [ 222.847089][T10478] netlink: 'syz.2.1109': attribute type 2 has an invalid length. [ 222.858682][T10478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.887224][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.946702][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.005281][ T6639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.028163][ T6637] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.046183][ T6637] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.078176][ T6637] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.424643][ T6637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.466180][ T6637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.601723][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.619946][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.665747][T10518] TC_ACT_REPEAT abuse ? [ 223.771290][T10526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.778639][T10526] IPv6: NLM_F_CREATE should be set when creating new route [ 223.785952][T10526] IPv6: NLM_F_CREATE should be set when creating new route [ 223.915705][T10530] tipc: Started in network mode [ 223.921710][T10530] tipc: Node identity ac14140f, cluster identity 4711 [ 223.931128][T10530] tipc: New replicast peer: 255.255.255.255 [ 223.938413][T10530] tipc: Enabled bearer , priority 10 [ 224.128100][T10543] vlan2: entered promiscuous mode [ 224.194879][T10543] geneve1: entered promiscuous mode [ 224.200360][T10543] vlan2: entered allmulticast mode [ 224.216811][T10557] __nla_validate_parse: 3 callbacks suppressed [ 224.216830][T10557] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1130'. [ 224.241502][T10543] geneve1: entered allmulticast mode [ 224.288745][T10551] vlan3: entered allmulticast mode [ 224.304493][T10551] bond0: entered allmulticast mode [ 224.323839][T10551] bond_slave_0: entered allmulticast mode [ 224.329754][T10551] bond_slave_1: entered allmulticast mode [ 224.462686][T10557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.514638][T10557] bond_slave_0: left allmulticast mode [ 224.556076][T10557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.582373][T10557] bond_slave_1: left allmulticast mode [ 224.602651][T10557] bond0 (unregistering): Released all slaves [ 224.817779][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 224.839153][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 224.917606][T10591] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1138'. [ 225.055282][ T10] tipc: Node number set to 2886997007 [ 225.317013][T10609] xt_policy: too many policy elements [ 225.415882][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 225.519169][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 225.791968][T10643] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 226.236562][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1163'. [ 226.300402][T10670] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1165'. [ 226.615255][T10684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1169'. [ 226.656214][T10688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1172'. [ 226.776297][T10693] netlink: 'syz.1.1173': attribute type 2 has an invalid length. [ 226.949180][T10704] netlink: 'syz.3.1175': attribute type 3 has an invalid length. [ 227.134380][T10718] syzkaller0: entered promiscuous mode [ 227.140763][T10718] syzkaller0: entered allmulticast mode [ 227.326359][T10724] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 227.601541][T10739] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 227.717889][T10744] netem: change failed [ 227.732546][T10735] syzkaller1: entered promiscuous mode [ 227.744416][T10735] syzkaller1: entered allmulticast mode [ 227.884310][T10755] nbd: must specify at least one socket [ 228.524559][T10792] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.554747][T10792] team0: Device macvlan2 is already an upper device of the team interface [ 229.171038][T10823] hsr_slave_0 (unregistering): left promiscuous mode [ 230.164460][T10878] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 230.245900][T10886] __nla_validate_parse: 10 callbacks suppressed [ 230.245923][T10886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1214'. [ 230.310187][T10886] netlink: 'syz.1.1214': attribute type 7 has an invalid length. [ 230.337494][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1214'. [ 230.502969][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1216'. [ 230.784643][T10906] syz_tun: entered allmulticast mode [ 230.796621][T10904] syz_tun: left allmulticast mode [ 230.934629][T10913] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 230.957897][T10913] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.965377][T10913] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.207238][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 231.273692][T10931] netlink: 'syz.3.1223': attribute type 5 has an invalid length. [ 231.355780][T10932] netlink: 'syz.3.1223': attribute type 5 has an invalid length. [ 231.462531][T10935] netlink: 'syz.1.1224': attribute type 3 has an invalid length. [ 231.501341][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'. [ 231.949282][T10957] syzkaller1: entered promiscuous mode [ 231.954977][T10957] syzkaller1: entered allmulticast mode [ 232.096301][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'. [ 232.123384][T10970] macvtap0: entered allmulticast mode [ 232.139138][T10970] veth0_macvtap: entered allmulticast mode [ 232.445565][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 232.495683][T10989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1236'. [ 232.511099][T10972] syzkaller0: entered promiscuous mode [ 232.538704][T10972] syzkaller0: entered allmulticast mode [ 232.834334][T11008] sctp: [Deprecated]: syz.4.1239 (pid 11008) Use of int in max_burst socket option. [ 232.834334][T11008] Use struct sctp_assoc_value instead [ 232.877061][T11007] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 232.946409][T11016] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.1238'. [ 233.413191][T11031] syzkaller0: entered promiscuous mode [ 233.423123][T11031] syzkaller0: entered allmulticast mode [ 233.467044][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'. [ 233.878431][T11053] netlink: 'syz.5.1252': attribute type 2 has an invalid length. [ 234.059393][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.662463][T11093] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 234.882344][T11102] openvswitch: netlink: IP tunnel dst address not specified [ 234.900707][T11104] openvswitch: netlink: IP tunnel dst address not specified [ 235.115934][T11109] bridge0: port 3(team0) entered blocking state [ 235.125909][T11109] bridge0: port 3(team0) entered disabled state [ 235.207486][T11109] team0: entered allmulticast mode [ 235.212670][T11109] team_slave_0: entered allmulticast mode [ 235.228398][T11121] netlink: 'syz.2.1270': attribute type 27 has an invalid length. [ 235.237151][T11109] team_slave_1: entered allmulticast mode [ 235.246792][T11109] team0: entered promiscuous mode [ 235.283543][T11109] team_slave_0: entered promiscuous mode [ 235.289530][T11109] team_slave_1: entered promiscuous mode [ 235.302860][T11109] bridge0: port 3(team0) entered blocking state [ 235.309395][T11109] bridge0: port 3(team0) entered forwarding state [ 235.781031][T11140] __nla_validate_parse: 8 callbacks suppressed [ 235.781051][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 235.810223][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 236.442193][T11172] tipc: Failed to remove unknown binding: 66,1,1/0:2431830525/2431830527 [ 236.465442][T11172] tipc: Failed to remove unknown binding: 66,1,1/0:2431830525/2431830527 [ 236.996259][T11199] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1286'. [ 237.085110][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 237.267639][T11206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.306998][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1288'. [ 237.323762][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1287'. [ 237.332684][T11201] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1287'. [ 237.400801][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1287'. [ 237.436019][T11215] syzkaller0: entered promiscuous mode [ 237.454062][T11215] syzkaller0: entered allmulticast mode [ 237.645684][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 238.016986][T11234] netlink: 'syz.2.1293': attribute type 1 has an invalid length. [ 238.744937][T11258] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1295'. [ 239.095301][T10986] Set syz1 is full, maxelem 65536 reached [ 239.488228][T11276] sctp: [Deprecated]: syz.3.1296 (pid 11276) Use of int in maxseg socket option. [ 239.488228][T11276] Use struct sctp_assoc_value instead [ 240.150000][T11234] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 240.377668][T11290] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 240.543474][T11297] sock: sock_set_timeout: `syz.2.1302' (pid 11297) tries to set negative timeout [ 240.593813][T11297] sock: sock_set_timeout: `syz.2.1302' (pid 11297) tries to set negative timeout [ 240.825606][T11323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.909439][T11323] __nla_validate_parse: 3 callbacks suppressed [ 240.909464][T11323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1305'. [ 241.007908][T11335] mac80211_hwsim hwsim10 wlan0: Caught tx_queue_len zero misconfig [ 241.016461][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1309'. [ 241.016490][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1309'. [ 241.119978][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 241.211256][T11346] netlink: 'syz.2.1311': attribute type 23 has an invalid length. [ 241.542959][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1315'. [ 242.578123][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 242.664999][T11397] bond5: entered promiscuous mode [ 242.672218][T11397] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.713660][T11404] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1325'. [ 242.784827][T11407] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1325'. [ 242.842815][T11397] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.868317][T11397] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 242.895719][T11397] bond5: (slave sit2): Error -95 calling set_mac_address [ 243.026648][T11413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1326'. [ 243.058612][T11413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1326'. [ 243.091814][T11419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.099123][T11419] IPv6: NLM_F_CREATE should be set when creating new route [ 243.128089][T11419] lo: entered allmulticast mode [ 243.146921][T11419] tunl0: entered allmulticast mode [ 243.161625][T11419] gre0: entered allmulticast mode [ 243.178668][T11419] gretap0: entered allmulticast mode [ 243.189452][T11419] erspan0: entered allmulticast mode [ 243.206598][T11419] ip_vti0: entered allmulticast mode [ 243.221386][T11419] ip6_vti0: entered allmulticast mode [ 243.233840][T11419] sit0: entered allmulticast mode [ 243.244353][T11419] ip6tnl0: entered allmulticast mode [ 243.253040][T11419] ip6gre0: entered allmulticast mode [ 243.265506][T11419] syz_tun: entered allmulticast mode [ 243.277117][T11419] ip6gretap0: entered allmulticast mode [ 243.289191][T11419] bridge0: port 3(team0) entered disabled state [ 243.295878][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.303647][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.314408][T11419] bridge0: entered allmulticast mode [ 243.324272][T11419] vcan0: entered allmulticast mode [ 243.330958][T11419] bond0: entered allmulticast mode [ 243.338101][T11419] bond_slave_0: entered allmulticast mode [ 243.344613][T11419] bond_slave_1: entered allmulticast mode [ 243.361473][T11419] dummy0: entered allmulticast mode [ 243.371057][T11419] nlmon0: entered allmulticast mode [ 243.384734][T11419] caif0: entered allmulticast mode [ 243.398252][T11419] batadv0: entered allmulticast mode [ 243.420794][T11419] vxcan0: entered allmulticast mode [ 243.429341][T11419] vxcan1: entered allmulticast mode [ 243.437760][T11419] veth0: entered allmulticast mode [ 243.447693][T11419] veth1: entered allmulticast mode [ 243.460407][T11419] wg0: entered allmulticast mode [ 243.468726][T11419] wg1: entered allmulticast mode [ 243.478465][T11419] wg2: entered allmulticast mode [ 243.489200][T11419] veth0_to_bridge: entered allmulticast mode [ 243.502900][T11419] veth1_to_bridge: entered allmulticast mode [ 243.517065][T11419] veth0_to_bond: entered allmulticast mode [ 243.529757][T11419] veth1_to_bond: entered allmulticast mode [ 243.542054][T11419] veth0_to_team: entered allmulticast mode [ 243.564846][T11419] veth1_to_team: entered allmulticast mode [ 243.578875][T11419] veth0_to_batadv: entered allmulticast mode [ 243.589967][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.602957][T11419] batadv_slave_0: entered allmulticast mode [ 243.640957][T11419] veth1_to_batadv: entered allmulticast mode [ 243.672807][T11419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.696986][T11419] batadv_slave_1: entered allmulticast mode [ 243.716848][T11419] xfrm0: entered allmulticast mode [ 243.740928][T11419] veth1_to_hsr: entered allmulticast mode [ 243.761211][T11419] hsr_slave_1: entered allmulticast mode [ 243.790768][T11419] hsr0: entered allmulticast mode [ 243.816932][T11419] veth1_virt_wifi: entered allmulticast mode [ 243.835876][T11419] veth0_virt_wifi: entered allmulticast mode [ 243.847747][T11419] virt_wifi0: entered allmulticast mode [ 243.855530][T11419] veth1_vlan: entered allmulticast mode [ 243.864554][T11419] veth0_vlan: entered allmulticast mode [ 243.884865][T11419] vlan0: entered allmulticast mode [ 243.891006][T11419] vlan1: entered allmulticast mode [ 243.897259][T11419] macvlan0: entered allmulticast mode [ 243.906439][T11419] macvlan1: entered allmulticast mode [ 243.929074][T11419] ipvlan0: entered allmulticast mode [ 243.936725][T11419] ipvlan1: entered allmulticast mode [ 243.942981][T11419] veth1_macvtap: entered allmulticast mode [ 243.954701][T11419] veth0_macvtap: entered allmulticast mode [ 243.976438][T11419] macvtap0: entered allmulticast mode [ 243.987169][T11419] macsec0: entered allmulticast mode [ 244.004755][T11419] geneve0: entered allmulticast mode [ 244.028011][T11419] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 244.043073][T11419] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 244.058939][T11419] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 244.071187][T11419] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 244.091698][T11419] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 244.106213][T11419] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 244.117428][T11419] vlan2: left promiscuous mode [ 244.122668][T11419] geneve1: left promiscuous mode [ 244.142703][T11425] netlink: 'syz.4.1330': attribute type 15 has an invalid length. [ 244.150689][ T1112] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.173364][ T1112] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.186308][T11430] netlink: 'syz.4.1330': attribute type 15 has an invalid length. [ 244.203444][ T1112] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.212399][ T1112] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.334047][T11425] netlink: 'syz.4.1330': attribute type 15 has an invalid length. [ 244.342559][ T1112] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.351758][T11430] netlink: 'syz.4.1330': attribute type 15 has an invalid length. [ 244.367850][ T1112] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.435037][ T1112] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.455116][ T1112] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 244.633465][T11511] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 244.815025][T11526] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20002 [ 245.388408][T11558] netlink: 'syz.4.1354': attribute type 1 has an invalid length. [ 245.433895][T11558] 8021q: adding VLAN 0 to HW filter on device bond3 [ 245.492020][T11558] bond3: (slave bridge3): making interface the new active one [ 245.506722][T11558] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 246.050801][T11596] __nla_validate_parse: 7 callbacks suppressed [ 246.050824][T11596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1364'. [ 246.083387][T11598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1363'. [ 246.285003][T11605] x_tables: duplicate underflow at hook 2 [ 246.517270][T11627] netlink: 'syz.2.1374': attribute type 1 has an invalid length. [ 246.526841][T11628] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 246.553017][T11627] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1374'. [ 246.657737][T11633] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 246.688564][T11628] bond4: entered promiscuous mode [ 246.737318][T11628] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.806854][T11631] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.857727][T11631] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 246.882368][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 246.891821][T11631] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 246.921952][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 246.931389][T11649] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 246.972507][T11650] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 246.986934][T11654] netlink: 'syz.1.1380': attribute type 12 has an invalid length. [ 247.012624][T11654] netlink: 'syz.1.1380': attribute type 29 has an invalid length. [ 247.036962][T11654] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1380'. [ 247.064497][T11654] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1380'. [ 247.141253][T11654] v: renamed from ip6gretap0 (while UP) [ 247.165458][T11662] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1381'. [ 247.179837][T11656] syzkaller0: entered promiscuous mode [ 247.185528][T11656] syzkaller0: entered allmulticast mode [ 247.210380][T11665] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 247.832221][T11691] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 248.055921][T11702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.085754][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1393'. [ 248.093097][T11707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.146930][T11724] netlink: 'syz.5.1393': attribute type 83 has an invalid length. [ 248.185546][T11716] netlink: 424 bytes leftover after parsing attributes in process `syz.5.1393'. [ 248.317475][T11726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.410717][T11737] syzkaller0: entered promiscuous mode [ 248.418165][T11737] syzkaller0: entered allmulticast mode [ 248.427252][T11737] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 248.813615][T11754] syzkaller0: entered promiscuous mode [ 248.830152][T11754] syzkaller0: entered allmulticast mode [ 250.311967][T11792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.769689][T11827] netlink: 'syz.3.1420': attribute type 1 has an invalid length. [ 250.883418][T11827] bond0: entered promiscuous mode [ 250.889676][T11827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.942582][T11843] xt_cgroup: xt_cgroup: no path or classid specified [ 251.466721][T11868] __nla_validate_parse: 9 callbacks suppressed [ 251.466744][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 251.759257][T11878] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 252.368724][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.408991][T11903] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 252.465317][T11903] bond0: (slave gre0): Error -95 calling set_mac_address [ 253.076007][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 253.527123][T11954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1449'. [ 253.536386][T11954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1449'. [ 254.025446][T11983] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 254.061636][T11983] netlink: 'syz.3.1455': attribute type 21 has an invalid length. [ 254.223663][T11988] xt_NFQUEUE: number of total queues is 0 [ 254.500028][T12004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1458'. [ 254.515638][T12004] netlink: 'syz.3.1458': attribute type 7 has an invalid length. [ 254.557903][T12004] netlink: 'syz.3.1458': attribute type 8 has an invalid length. [ 254.638453][T12004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 254.943147][T12026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1462'. [ 255.223608][T12039] netlink: zone id is out of range [ 255.228794][T12039] netlink: zone id is out of range [ 255.274978][T12039] netlink: zone id is out of range [ 255.280160][T12039] netlink: zone id is out of range [ 255.293615][T12039] netlink: zone id is out of range [ 255.333389][T12039] netlink: zone id is out of range [ 255.373542][T12039] netlink: zone id is out of range [ 255.378731][T12039] netlink: zone id is out of range [ 255.431079][T12039] netlink: zone id is out of range [ 255.453983][T12039] netlink: zone id is out of range [ 255.677245][T12056] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1473'. [ 255.737495][T12056] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1473'. [ 256.167186][T12085] sctp: [Deprecated]: syz.4.1478 (pid 12085) Use of int in maxseg socket option. [ 256.167186][T12085] Use struct sctp_assoc_value instead [ 256.212245][T12087] syzkaller0: entered promiscuous mode [ 256.221439][T12087] syzkaller0: entered allmulticast mode [ 256.305101][T12090] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1480'. [ 256.658597][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 256.739159][T12116] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1485'. [ 256.766104][T12119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1486'. [ 257.045924][T12131] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1487'. [ 257.105855][T12124] syzkaller0: entered promiscuous mode [ 257.125715][T12124] syzkaller0: entered allmulticast mode [ 257.162118][T12139] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1491'. [ 257.174364][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 257.192273][T12128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1488'. [ 257.210210][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1488'. [ 257.220016][T12128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1488'. [ 257.231969][T12128] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1488'. [ 257.387482][T12146] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 258.839483][T12159] syzkaller0: entered promiscuous mode [ 258.864973][T12159] syzkaller0: entered allmulticast mode [ 258.882248][T12163] wireguard: wg2: Could not create IPv4 socket [ 258.890174][T12172] --map-set only usable from mangle table [ 258.918397][T12173] netlink: 'syz.1.1500': attribute type 10 has an invalid length. [ 259.119968][T12184] xt_nat: multiple ranges no longer supported [ 259.912005][T12189] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 260.707409][T12201] net_ratelimit: 187 callbacks suppressed [ 260.707432][T12201] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 260.739266][T12208] Unsupported ieee802154 address type: 0 [ 261.038264][T12227] netlink: 'syz.5.1518': attribute type 1 has an invalid length. [ 261.062405][T12227] netlink: 'syz.5.1518': attribute type 83 has an invalid length. [ 261.112319][T12227] netlink: 'syz.5.1518': attribute type 12 has an invalid length. [ 261.518000][T12252] netlink: 'syz.3.1526': attribute type 1 has an invalid length. [ 261.557235][T12256] netlink: 'syz.4.1528': attribute type 3 has an invalid length. [ 261.572522][T12256] netlink: 'syz.4.1528': attribute type 3 has an invalid length. [ 261.626463][T12252] 8021q: adding VLAN 0 to HW filter on device bond5 [ 261.672400][T12261] macvtap1: entered allmulticast mode [ 261.691185][T12261] veth0_macvtap: entered allmulticast mode [ 261.857305][T12273] netlink: 'syz.5.1532': attribute type 1 has an invalid length. [ 261.927100][T12260] syzkaller0: entered promiscuous mode [ 261.932788][T12260] syzkaller0: entered allmulticast mode [ 261.996471][T12273] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.004325][T12277] veth0_to_bond: left allmulticast mode [ 262.016675][T12277] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 262.044482][T12282] __nla_validate_parse: 11 callbacks suppressed [ 262.044505][T12282] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1533'. [ 262.281351][T12289] netlink: 'syz.4.1536': attribute type 63 has an invalid length. [ 262.331142][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'. [ 262.340512][T12293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'. [ 262.367714][T12295] netlink: 'syz.4.1536': attribute type 63 has an invalid length. [ 262.392199][T12297] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1539'. [ 263.608294][T12291] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 263.615677][T12291] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 263.769383][T12311] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20004 [ 263.961239][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1547'. [ 263.989717][T12324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1547'. [ 264.051316][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1548'. [ 264.264241][T12342] syzkaller0: entered promiscuous mode [ 264.275045][T12342] syzkaller0: entered allmulticast mode [ 265.335301][T12401] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1572'. [ 265.440537][T12404] pim6reg1: entered promiscuous mode [ 265.446833][T12404] pim6reg1: entered allmulticast mode [ 265.694374][T12415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1576'. [ 265.918203][T12431] validate_nla: 1 callbacks suppressed [ 265.918225][T12431] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 265.941868][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1578'. [ 265.964020][T12431] netlink: 'syz.4.1578': attribute type 1 has an invalid length. [ 265.966300][T12433] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.991266][T12431] netlink: 'syz.4.1578': attribute type 3 has an invalid length. [ 266.187531][T12442] syzkaller0: entered promiscuous mode [ 266.193661][T12442] syzkaller0: entered allmulticast mode [ 266.376166][T12449] ip6tnl0: Caught tx_queue_len zero misconfig [ 266.558325][T12465] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 266.795145][T12479] syzkaller0: entered promiscuous mode [ 266.811073][T12479] syzkaller0: entered allmulticast mode [ 266.917216][T12484] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 266.953976][T12484] syzkaller1: entered promiscuous mode [ 266.959511][T12484] syzkaller1: entered allmulticast mode [ 267.185801][T12501] __nla_validate_parse: 13 callbacks suppressed [ 267.185825][T12501] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1602'. [ 267.258864][T12501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.388550][T12510] netlink: 'syz.5.1605': attribute type 2 has an invalid length. [ 267.407499][T12510] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1605'. [ 267.867059][T12542] syzkaller1: entered promiscuous mode [ 267.880137][T12542] syzkaller1: entered allmulticast mode [ 267.884141][T12545] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1616'. [ 267.898944][T12545] xt_l2tp: v2 sid > 0xffff: 1114112 [ 268.016098][T12547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.027967][T12547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.091470][T12547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.102017][T12547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.224153][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1618'. [ 268.492034][T12554] team_slave_0 (unregistering): left promiscuous mode [ 268.527822][T12554] team0: Port device team_slave_0 removed [ 268.567159][T12557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1619'. [ 268.619295][T12556] netlink: 'syz.1.1619': attribute type 10 has an invalid length. [ 268.766914][T12568] openvswitch: netlink: Key type 346 is out of range max 32 [ 268.848960][T12570] erspan0: entered allmulticast mode [ 268.912700][T12576] netlink: 'syz.3.1624': attribute type 4 has an invalid length. [ 268.928039][T12576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'. [ 268.967992][T12576] bond6: entered promiscuous mode [ 268.973907][T12576] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.018634][T12576] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.033827][T12576] bond6: (slave sit2): The slave device specified does not support setting the MAC address [ 269.049807][T12576] bond6: (slave sit2): Error -95 calling set_mac_address [ 269.184774][T12586] syzkaller1: entered promiscuous mode [ 269.233647][T12586] syzkaller1: entered allmulticast mode [ 269.300679][T12595] xt_TCPMSS: Only works on TCP SYN packets [ 269.774329][T12617] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1634'. [ 270.004851][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.044539][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.068197][T12626] netlink: 'syz.3.1636': attribute type 12 has an invalid length. [ 270.207141][T12645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1640'. [ 270.254247][T12645] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1640'. [ 270.264857][T12647] GUP no longer grows the stack in syz.1.1641 (12647): 200000003000-200000005000 (200000001000) [ 270.284138][T12645] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1640'. [ 270.295698][T12647] CPU: 0 UID: 0 PID: 12647 Comm: syz.1.1641 Not tainted syzkaller #0 PREEMPT(full) [ 270.295731][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.295744][T12647] Call Trace: [ 270.295753][T12647] [ 270.295762][T12647] dump_stack_lvl+0xe8/0x150 [ 270.295799][T12647] __get_user_pages+0x2453/0x29d0 [ 270.295834][T12647] ? __lock_acquire+0x6b5/0x2cf0 [ 270.295882][T12647] ? __gup_longterm_locked+0xc4e/0x1630 [ 270.295915][T12647] ? down_read_killable+0x1bb/0x340 [ 270.295952][T12647] __gup_longterm_locked+0xdcf/0x1630 [ 270.296014][T12647] gup_fast_fallback+0x1d82/0x22e0 [ 270.296150][T12647] ? __pfx_gup_fast_fallback+0x10/0x10 [ 270.296186][T12647] ? is_valid_gup_args+0x11f/0x200 [ 270.296220][T12647] ? get_user_pages_fast+0x4d/0xb0 [ 270.296255][T12647] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 270.296288][T12647] ? stack_depot_save_flags+0x33/0x810 [ 270.296326][T12647] iov_iter_get_pages2+0x5e/0xa0 [ 270.296353][T12647] zerocopy_fill_skb_from_iter+0x2d1/0xf50 [ 270.296382][T12647] ? virtio_transport_send_pkt_info+0x570/0xff0 [ 270.296413][T12647] ? virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 270.296443][T12647] ? ____sys_sendmsg+0x972/0x9f0 [ 270.296466][T12647] ? ___sys_sendmsg+0x2a5/0x360 [ 270.296490][T12647] ? do_syscall_64+0x14d/0xf80 [ 270.296513][T12647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.296550][T12647] ? __pfx_zerocopy_fill_skb_from_iter+0x10/0x10 [ 270.296606][T12647] ? rcu_is_watching+0x15/0xb0 [ 270.296636][T12647] ? trace_kmem_cache_alloc+0x29/0xf0 [ 270.296664][T12647] __zerocopy_sg_from_iter+0x551/0x950 [ 270.296701][T12647] ? __alloc_skb+0x4e5/0x7d0 [ 270.296729][T12647] ? __pfx___zerocopy_sg_from_iter+0x10/0x10 [ 270.296772][T12647] ? skb_set_owner_w+0x26c/0x3e0 [ 270.296802][T12647] virtio_transport_alloc_skb+0x67c/0x1180 [ 270.296839][T12647] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 270.296868][T12647] ? __local_bh_enable_ip+0xd0/0x130 [ 270.296901][T12647] virtio_transport_send_pkt_info+0x570/0xff0 [ 270.296960][T12647] virtio_transport_seqpacket_enqueue+0x1b4/0x250 [ 270.296996][T12647] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 270.297047][T12647] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 270.297077][T12647] vsock_connectible_sendmsg+0xad6/0x1070 [ 270.297125][T12647] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 270.297150][T12647] ? __pfx_aa_sk_perm+0x10/0x10 [ 270.297180][T12647] ? __pfx_woken_wake_function+0x10/0x10 [ 270.297211][T12647] ? aa_sock_msg_perm+0xf1/0x1b0 [ 270.297244][T12647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.297272][T12647] ____sys_sendmsg+0x972/0x9f0 [ 270.297303][T12647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.297339][T12647] ? import_iovec+0x73/0xa0 [ 270.297365][T12647] ___sys_sendmsg+0x2a5/0x360 [ 270.297396][T12647] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.297428][T12647] ? preempt_schedule_common+0x82/0xd0 [ 270.297454][T12647] ? preempt_schedule_thunk+0x16/0x30 [ 270.297511][T12647] ? __fget_files+0x2a/0x420 [ 270.297541][T12647] ? __fget_files+0x3a0/0x420 [ 270.297580][T12647] __sys_sendmmsg+0x27c/0x4e0 [ 270.297611][T12647] ? __pfx___sys_sendmmsg+0x10/0x10 [ 270.297631][T12647] ? do_futex+0x395/0x420 [ 270.297692][T12647] ? rcu_is_watching+0x15/0xb0 [ 270.297731][T12647] __x64_sys_sendmmsg+0xa0/0xc0 [ 270.297759][T12647] do_syscall_64+0x14d/0xf80 [ 270.297784][T12647] ? trace_irq_disable+0x3b/0x150 [ 270.297801][T12647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.297823][T12647] ? clear_bhb_loop+0x40/0x90 [ 270.297849][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.297869][T12647] RIP: 0033:0x7fa2e339c819 [ 270.297890][T12647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.297909][T12647] RSP: 002b:00007fa2e41e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.297932][T12647] RAX: ffffffffffffffda RBX: 00007fa2e3615fa0 RCX: 00007fa2e339c819 [ 270.297948][T12647] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000007 [ 270.297960][T12647] RBP: 00007fa2e3432c91 R08: 0000000000000000 R09: 0000000000000000 [ 270.297973][T12647] R10: 0000000024008094 R11: 0000000000000246 R12: 0000000000000000 [ 270.297987][T12647] R13: 00007fa2e3616038 R14: 00007fa2e3615fa0 R15: 00007ffd3d952918 [ 270.298022][T12647] [ 271.408751][T12686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.008886][T12707] syzkaller1: entered promiscuous mode [ 272.023250][T12707] syzkaller1: entered allmulticast mode [ 272.548659][T12729] __nla_validate_parse: 127 callbacks suppressed [ 272.548682][T12729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1660'. [ 273.042249][T12745] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 273.668033][T12762] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 273.848585][T12754] netlink: 'syz.5.1668': attribute type 15 has an invalid length. [ 274.083800][T12777] syzkaller1: entered promiscuous mode [ 274.093655][T12777] syzkaller1: entered allmulticast mode [ 274.298819][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1677'. [ 274.365842][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 274.562847][T12793] netlink: 'syz.4.1679': attribute type 5 has an invalid length. [ 274.593851][T12797] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1681'. [ 275.190256][T12818] netlink: zone id is out of range [ 275.206058][T12818] netlink: zone id is out of range [ 275.212054][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'. [ 275.241517][T12818] netlink: zone id is out of range [ 275.263560][T12818] netlink: zone id is out of range [ 275.268776][T12818] netlink: zone id is out of range [ 275.322984][T12818] netlink: zone id is out of range [ 275.330155][T12826] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 275.349409][T12826] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1690'. [ 275.363609][T12818] netlink: zone id is out of range [ 275.379870][T12818] netlink: zone id is out of range [ 275.390087][T12826] NCSI netlink: No device for ifindex 0 [ 275.403435][T12827] netlink: 'syz.3.1690': attribute type 1 has an invalid length. [ 275.413538][T12818] netlink: zone id is out of range [ 275.418742][T12818] netlink: zone id is out of range [ 275.433473][T12827] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1690'. [ 275.454249][T12827] NCSI netlink: No device for ifindex 0 [ 276.294406][T12851] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1696'. [ 276.328823][T12851] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1696'. [ 276.670349][T12865] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1701'. [ 277.307789][T12890] netlink: 'syz.4.1710': attribute type 3 has an invalid length. [ 277.615850][T12911] IPVS: set_ctl: invalid protocol: 115 172.20.20.0:256 [ 278.036649][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.048179][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.059942][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.068538][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.078788][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.114017][T12928] ip6t_srh: unknown srh invflags 4000 [ 278.418607][T12938] netlink: 'syz.1.1721': attribute type 10 has an invalid length. [ 278.622785][T12948] __nla_validate_parse: 3 callbacks suppressed [ 278.622808][T12948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1725'. [ 278.736148][ T30] audit: type=1107 audit(1774887914.409:3): pid=12949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='À;°"J6‘g÷ºvxìµÅ9ܬ½ [ 278.736148][ T30] CÊtowñ#Mñº7Ç [ 278.736148][ T30] 7K mÛʘÿàñ=fÚÝn'‡§€‡·V{¡ˆíÀ›æ [ 278.736148][ T30] [ 278.736148][ T30] :{Ãk6~èáèô²øq+q‚äÜ«Fž<(ô8áÒ– ' [ 279.129202][T12925] chnl_net:caif_netlink_parms(): no params data found [ 279.154984][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1734'. [ 279.193717][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1732'. [ 279.200797][T12972] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1734'. [ 279.231776][T12976] netlink: 'syz.3.1732': attribute type 7 has an invalid length. [ 279.246294][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1734'. [ 279.262591][T12976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1732'. [ 279.348605][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 279.515056][T12987] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1735'. [ 279.632407][T12925] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.639804][T12925] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.647563][T12925] bridge_slave_0: entered allmulticast mode [ 279.657512][T12925] bridge_slave_0: entered promiscuous mode [ 279.669831][T12925] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.677473][T12925] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.684791][T12925] bridge_slave_1: entered allmulticast mode [ 279.733469][T12925] bridge_slave_1: entered promiscuous mode [ 279.897008][T12925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.905625][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 279.921292][T12925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.086587][T12925] team0: Port device team_slave_0 added [ 280.102925][T12925] team0: Port device team_slave_1 added [ 280.109024][ T5836] Bluetooth: hci6: command tx timeout [ 280.169091][T12925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.176779][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.203814][T12925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.217173][T12925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.235150][T12925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.262907][T12925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.503187][T12925] hsr_slave_0: entered promiscuous mode [ 280.511414][T12925] hsr_slave_1: entered promiscuous mode [ 280.545270][T12925] debugfs: 'hsr0' already exists in 'hsr' [ 280.551067][T12925] Cannot create hsr debugfs directory [ 280.895273][T13031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1748'. [ 280.945133][T13011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 282.183499][ T5836] Bluetooth: hci6: command tx timeout [ 283.453550][T13018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.522452][T12925] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.566647][T12925] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 283.616018][T12925] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 283.658093][T12925] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 283.664020][T13037] __nla_validate_parse: 1 callbacks suppressed [ 283.664039][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1749'. [ 283.726487][T13037] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1749'. [ 283.746783][T13040] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1751'. [ 283.778170][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'. [ 283.874203][T13047] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1750'. [ 283.877815][T13051] net_ratelimit: 45 callbacks suppressed [ 283.877834][T13051] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 284.021414][T12925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.057158][T13055] syzkaller0: entered promiscuous mode [ 284.062718][T13055] syzkaller0: entered allmulticast mode [ 284.116020][T12925] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.137213][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.144450][T11479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.175586][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.182834][T11479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.212020][T13062] netlink: 'syz.3.1756': attribute type 4 has an invalid length. [ 284.241420][T13062] netlink: 'syz.3.1756': attribute type 3 has an invalid length. [ 284.274462][ T5836] Bluetooth: hci6: command tx timeout [ 284.283387][T13062] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1756'. [ 284.329796][T13066] tipc: Enabling of bearer rejected, failed to enable media [ 284.601544][T12925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.861566][T12925] veth0_vlan: entered promiscuous mode [ 284.876180][T12925] veth1_vlan: entered promiscuous mode [ 284.908657][T12925] veth0_macvtap: entered promiscuous mode [ 284.923071][T12925] veth1_macvtap: entered promiscuous mode [ 284.954228][T12925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.970259][T12925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.996806][T11475] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.008829][T11475] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.023924][T11475] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.034674][T11475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.343907][ T5836] Bluetooth: hci6: command tx timeout [ 287.320707][T13068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.483344][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.491219][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.509582][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1765'. [ 287.663654][T13107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1766'. [ 287.683880][T13112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.693545][T11475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.733629][T11475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.758801][T13114] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1769'. [ 287.782875][T13114] nbd: illegal input index -8454144 [ 287.808424][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1770'. [ 287.894901][T13114] syzkaller0: entered promiscuous mode [ 287.900445][T13114] syzkaller0: entered allmulticast mode [ 288.079298][T13132] openvswitch: netlink: EtherType 50a is less than min 600 [ 288.339559][T13138] netlink: 'syz.1.1774': attribute type 16 has an invalid length. [ 288.401551][T13138] netlink: 'syz.1.1774': attribute type 17 has an invalid length. [ 288.490129][T13138] eql: refused to change device tx_queue_len [ 288.509514][T13138] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 288.589513][T13147] bridge0: left allmulticast mode [ 288.837615][T13164] netlink: 'syz.6.1781': attribute type 1 has an invalid length. [ 288.846959][T13162] macvlan0: entered promiscuous mode [ 288.852515][T13162] macvlan0: left allmulticast mode [ 289.228761][T13177] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 289.236631][T13177] netlink: 'syz.4.1783': attribute type 2 has an invalid length. [ 289.778715][T13194] __nla_validate_parse: 4 callbacks suppressed [ 289.778738][T13194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1787'. [ 289.925890][T13199] openvswitch: netlink: Duplicate or invalid key (type 0). [ 289.944693][T13199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.280033][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1791'. [ 290.300619][T13210] sock: sock_timestamping_bind_phc: sock not bind to device [ 290.325568][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 290.352908][T13210] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.1791'. [ 290.538124][T13213] team1: entered promiscuous mode [ 290.566878][T13213] team1: entered allmulticast mode [ 290.775162][T13230] syzkaller0: entered promiscuous mode [ 290.780889][T13230] syzkaller0: entered allmulticast mode [ 290.848125][T13234] macvtap1: entered promiscuous mode [ 290.866200][T13234] macvtap1: entered allmulticast mode [ 290.884284][T13219] pim6reg1: entered promiscuous mode [ 290.896231][T13219] pim6reg1: entered allmulticast mode [ 290.911117][T13242] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 290.960977][T13240] macvtap2: entered promiscuous mode [ 290.977307][T13240] macvtap2: entered allmulticast mode [ 291.056923][T13249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 291.107515][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.132322][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.272769][T13254] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1802'. [ 291.341852][T13254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'. [ 291.375560][T13257] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1803'. [ 291.675252][T13275] netlink: 'syz.5.1806': attribute type 1 has an invalid length. [ 291.774840][T13278] bond3: (slave bridge2): making interface the new active one [ 291.789834][T13275] netlink: 'syz.5.1806': attribute type 1 has an invalid length. [ 291.790740][T13278] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 291.844909][T13284] can: request_module (can-proto-0) failed. [ 292.378563][T13312] netlink: zone id is out of range [ 292.413539][T13312] netlink: zone id is out of range [ 292.418905][T13312] netlink: zone id is out of range [ 292.425620][T13312] netlink: zone id is out of range [ 292.431283][T13312] netlink: zone id is out of range [ 292.437582][T13312] netlink: zone id is out of range [ 292.443776][T13312] netlink: zone id is out of range [ 292.450146][T13312] netlink: zone id is out of range [ 292.456405][ T10] IPVS: starting estimator thread 0... [ 292.496181][T13327] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:0 [ 292.526527][T13280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 292.574084][T13323] IPVS: using max 31 ests per chain, 74400 per kthread [ 292.620753][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1821'. [ 292.650129][T13328] netlink: 'syz.1.1807': attribute type 13 has an invalid length. [ 292.861958][T13344] can: request_module (can-proto-0) failed. [ 292.921538][T13344] syzkaller0: entered promiscuous mode [ 292.927628][T13344] syzkaller0: entered allmulticast mode [ 294.323659][T13349] lo: Caught tx_queue_len zero misconfig [ 294.527739][T13362] netlink: 'syz.3.1826': attribute type 32 has an invalid length. [ 294.698173][T13362] netlink: 'syz.3.1826': attribute type 32 has an invalid length. [ 294.706578][T13362] netlink: 'syz.3.1826': attribute type 32 has an invalid length. [ 294.716023][T13362] netlink: 'syz.3.1826': attribute type 32 has an invalid length. [ 294.724735][T13362] netlink: 'syz.3.1826': attribute type 32 has an invalid length. [ 294.732849][T13362] netlink: 'syz.3.1826': attribute type 32 has an invalid length. [ 295.386966][T13313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.659036][T13378] geneve3: entered promiscuous mode [ 295.724606][ T1074] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 38167 - 0 [ 295.736958][ T1074] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 38167 - 0 [ 295.819970][ T1074] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 38167 - 0 [ 295.833423][ T6637] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 38167 - 0 [ 295.953828][T13393] bond7: entered promiscuous mode [ 295.959333][T13393] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.022294][T13404] net_ratelimit: 186 callbacks suppressed [ 296.022316][T13404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.040779][T13393] __nla_validate_parse: 1 callbacks suppressed [ 296.040799][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 296.073404][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1834'. [ 296.119813][T13410] ipvlan3: entered allmulticast mode [ 296.148647][T13410] bond7: entered allmulticast mode [ 296.285356][T13410] bond7: (slave bridge8): making interface the new active one [ 296.292981][T13410] bridge8: entered promiscuous mode [ 296.317484][T13410] bridge8: entered allmulticast mode [ 296.326134][T13410] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 296.520030][T13430] syzkaller0: entered promiscuous mode [ 296.525878][T13430] syzkaller0: entered allmulticast mode [ 298.255492][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1846'. [ 298.267282][T13456] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1846'. [ 299.077151][T13412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.481727][T13472] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 299.493595][T13472] bond8 (unregistering): Released all slaves [ 300.079040][T13536] validate_nla: 28 callbacks suppressed [ 300.079057][T13536] netlink: 'syz.6.1864': attribute type 2 has an invalid length. [ 300.155599][T13536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1864'. [ 300.276866][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1868'. [ 300.286336][T13545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1868'. [ 300.296636][T13545] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1868'. [ 300.324468][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 300.476237][T13550] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1870'. [ 300.729091][T13561] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 301.445990][T13580] syzkaller1: entered promiscuous mode [ 301.451595][T13580] syzkaller1: entered allmulticast mode [ 302.313667][T13587] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 302.946571][T13529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.240453][T13608] netlink: 'syz.4.1880': attribute type 1 has an invalid length. [ 303.298717][T13608] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.346275][T13608] bond5: (slave veth3): Enslaving as an active interface with a down link [ 303.434836][T13608] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 303.523684][T13628] xt_hashlimit: size too large, truncated to 1048576 [ 303.578542][T13608] bond5: (slave veth5): Enslaving as an active interface with a down link [ 303.593636][T13608] netlink: 'syz.4.1880': attribute type 1 has an invalid length. [ 303.618292][T13608] netlink: 'syz.4.1880': attribute type 2 has an invalid length. [ 303.632655][T13635] –: renamed from vxcan1 (while UP) [ 303.667751][T13640] veth0_to_team: entered allmulticast mode [ 303.689969][T13642] __nla_validate_parse: 1 callbacks suppressed [ 303.690002][T13642] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1888'. [ 303.846907][T13633] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.966415][T13633] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.020183][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 304.036279][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'. [ 304.048443][T13650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 304.076140][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'. [ 304.177006][T13633] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.330168][T13633] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.464848][T13669] sctp: [Deprecated]: syz.5.1897 (pid 13669) Use of int in max_burst socket option. [ 304.464848][T13669] Use struct sctp_assoc_value instead [ 304.585248][T13678] netlink: 'syz.5.1898': attribute type 21 has an invalid length. [ 304.602323][T13678] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1898'. [ 304.612112][T13678] netlink: 'syz.5.1898': attribute type 5 has an invalid length. [ 304.621340][T13678] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1898'. [ 304.735664][T13515] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.796748][T13517] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.833387][T13515] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.908405][T13517] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.165840][T13700] vlan2: entered allmulticast mode [ 305.171466][T13700] bond0: entered allmulticast mode [ 305.184135][T13700] bond_slave_0: entered allmulticast mode [ 305.201550][T13700] bond_slave_1: entered allmulticast mode [ 305.209959][T13705] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1904'. [ 305.321421][T13705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.355702][T13705] bond_slave_0: left allmulticast mode [ 305.382409][T13705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.405673][T13705] bond_slave_1: left allmulticast mode [ 305.426336][T13705] bond0 (unregistering): Released all slaves [ 305.434646][T13715] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1908'. [ 305.458679][T13715] netlink: 'syz.3.1908': attribute type 2 has an invalid length. [ 305.591271][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 305.851529][T13735] ip6t_srh: unknown srh invflags 4000 [ 306.578093][T13776] netlink: 'syz.4.1920': attribute type 12 has an invalid length. [ 307.064195][T13800] netlink: 'syz.3.1930': attribute type 10 has an invalid length. [ 307.110776][T13800] team0: Device – is of different type [ 307.965491][T13854] netlink: 'syz.3.1947': attribute type 10 has an invalid length. [ 308.115032][T13864] syzkaller0: entered promiscuous mode [ 308.142039][T13864] 0: reclassify loop, rule prio 0, protocol 800 [ 308.219950][T13868] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.255951][T13868] netlink: 'syz.3.1950': attribute type 8 has an invalid length. [ 308.530082][T13882] xt_policy: output policy not valid in PREROUTING and INPUT [ 308.552382][T13882] xt_hashlimit: size too large, truncated to 1048576 [ 308.788761][T13890] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 308.822805][T13890] __nla_validate_parse: 6 callbacks suppressed [ 308.822825][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'. [ 309.085509][T13902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.102252][T13906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.316756][T13910] Cannot find del_set index 4 as target [ 309.416094][T13919] netlink: 'syz.5.1968': attribute type 1 has an invalid length. [ 309.551712][T13919] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.564128][T13919] bond4: (slave bond5): making interface the new active one [ 309.572524][T13919] bond4: (slave bond5): Enslaving as an active interface with an up link [ 309.587452][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1968'. [ 309.598541][T13916] bond0: (slave vlan0): Enslaving as a backup interface with an up link [ 309.629299][T13923] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 309.640283][T13917] netlink: 'syz.6.1967': attribute type 1 has an invalid length. [ 309.648779][T13917] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.659270][T13919] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.792508][T13930] geneve2: entered promiscuous mode [ 309.807522][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'. [ 309.825962][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1970'. [ 310.574608][T13963] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1979'. [ 310.600342][T13963] bond0: entered promiscuous mode [ 310.608306][T13963] bond_slave_0: entered promiscuous mode [ 310.653759][T13963] bond_slave_1: entered promiscuous mode [ 310.665621][T13963] batadv0: entered promiscuous mode [ 310.691881][T13963] debugfs: 'hsr1' already exists in 'hsr' [ 310.708130][T13963] Cannot create hsr debugfs directory [ 310.715110][T13963] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 310.737488][T13968] netlink: 'syz.1.1982': attribute type 30 has an invalid length. [ 310.743452][T13963] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 310.762468][T13963] hsr1: entered promiscuous mode [ 310.768037][T13963] hsr1: entered allmulticast mode [ 310.774361][T13963] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 310.783641][T13963] bond0: left promiscuous mode [ 310.788818][T13963] bond_slave_0: left promiscuous mode [ 310.798226][T13963] bond_slave_1: left promiscuous mode [ 310.821581][T13963] batadv0: left promiscuous mode [ 310.873941][T13977] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 310.895008][T13968] bond6: option arp_missed_max: invalid value (0) [ 310.901710][T13968] bond6: option arp_missed_max: allowed values 1 - 255 [ 310.914849][T13968] bond6 (unregistering): Released all slaves [ 311.016717][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 311.042991][T13980] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1986'. [ 311.105180][T13980] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1986'. [ 311.125535][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 311.135886][T13980] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1986'. [ 311.206576][T13990] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 311.417729][T14001] sctp: [Deprecated]: syz.6.1991 (pid 14001) Use of int in max_burst socket option. [ 311.417729][T14001] Use struct sctp_assoc_value instead [ 311.772236][T13986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.796212][T13986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.961145][T13986] veth1_macvtap: left promiscuous mode [ 312.257544][T13986] vlan2: left promiscuous mode [ 312.262476][T13986] bond2: left promiscuous mode [ 312.274824][T13986] vlan2: left allmulticast mode [ 312.280155][T13986] bond2: left allmulticast mode [ 312.281328][T14004] netlink: 'syz.6.1993': attribute type 1 has an invalid length. [ 312.305284][T13986] sit1: left promiscuous mode [ 312.310525][T13986] sit1: left allmulticast mode [ 312.323866][T13986] bond0: left promiscuous mode [ 312.356535][T13986] veth0_macvtap: left allmulticast mode [ 312.362404][T13986] macvtap1: left allmulticast mode [ 312.408643][T13986] bond7: left promiscuous mode [ 312.414018][T13986] bridge8: left promiscuous mode [ 312.424023][T13986] ipvlan3: left allmulticast mode [ 312.434328][T13986] bond7: left allmulticast mode [ 312.439212][T13986] bridge8: left allmulticast mode [ 312.528187][T13991] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 312.537545][T13999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.624132][T11477] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.661410][T11477] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.691233][T11477] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.720808][T11477] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.748768][T14004] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 312.773714][T14021] xt_hashlimit: overflow, rate too high: 0 [ 312.813392][T11477] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.843500][T11477] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.871795][T14017] erspan0: left promiscuous mode [ 312.934598][T14018] ip6erspan0: entered promiscuous mode [ 313.079280][T14034] ip6tnl0: Caught tx_queue_len zero misconfig [ 313.087546][T14037] netlink: 'syz.5.1999': attribute type 1 has an invalid length. [ 313.208728][T14043] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 313.298920][T14039] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 313.348505][T14039] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 313.413877][T14039] bond6: (slave ip6gre1): making interface the new active one [ 313.430663][T14039] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 313.445552][T14056] tc_dump_action: action bad kind [ 313.469966][T14062] netlink: 'syz.1.2006': attribute type 10 has an invalid length. [ 313.503975][T14060] syzkaller1: entered promiscuous mode [ 313.509598][T14060] syzkaller1: entered allmulticast mode [ 313.527263][T14062] team0: Device vxcan1 is of different type [ 313.847057][T14081] netlink: 'syz.6.2010': attribute type 1 has an invalid length. [ 313.881928][T14081] __nla_validate_parse: 11 callbacks suppressed [ 313.881949][T14081] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2010'. [ 313.967897][T14087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2011'. [ 314.353893][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 314.448966][T14117] tipc: Started in network mode [ 314.461506][T14117] tipc: Node identity ac14140f, cluster identity 4711 [ 314.476610][T14117] tipc: New replicast peer: 255.255.255.255 [ 314.494891][T14117] tipc: Enabled bearer , priority 10 [ 314.853569][T14139] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 314.895708][T14139] syzkaller0: entered promiscuous mode [ 314.901245][T14139] syzkaller0: entered allmulticast mode [ 314.947890][T14139] tipc: Started in network mode [ 314.952812][T14139] tipc: Node identity , cluster identity 4711 [ 315.033388][T14139] tipc: Failed to obtain node identity [ 315.065294][T14139] tipc: Enabling of bearer rejected, failed to enable media [ 315.124231][T14156] netlink: 'syz.3.2026': attribute type 20 has an invalid length. [ 315.146960][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 315.307603][T14168] netlink: 'syz.1.2031': attribute type 32 has an invalid length. [ 315.359191][T14156] netlink: 'syz.3.2026': attribute type 20 has an invalid length. [ 315.376203][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 315.389929][T14171] syzkaller0: entered promiscuous mode [ 315.405985][T14171] syzkaller0: entered allmulticast mode [ 315.421013][T13511] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.448381][T13511] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.493931][T13511] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.719766][T14177] ±ÿ: renamed from team_slave_1 [ 315.736134][ T9370] tipc: Node number set to 2886997007 [ 315.752686][T14187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2034'. [ 316.177231][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2042'. [ 316.396217][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2044'. [ 316.675298][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2046'. [ 316.961833][T14248] syzkaller1: entered promiscuous mode [ 316.986301][T14248] syzkaller1: entered allmulticast mode [ 317.009743][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2050'. [ 317.091139][T14256] bridge0: Caught tx_queue_len zero misconfig [ 317.679956][T14282] syzkaller0: entered promiscuous mode [ 317.689414][T14282] syzkaller0: entered allmulticast mode [ 317.712863][T13512] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.752377][T13512] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.761057][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.794529][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 318.123570][T14310] netlink: 'syz.1.2068': attribute type 2 has an invalid length. [ 318.187078][T14310] caif0: entered allmulticast mode [ 318.594972][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 318.910337][T14355] __nla_validate_parse: 9 callbacks suppressed [ 318.910352][T14355] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2084'. [ 319.062783][T14363] delete_channel: no stack [ 319.201079][T14370] netlink: 'syz.6.2088': attribute type 2 has an invalid length. [ 319.282172][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2090'. [ 319.366670][T13515] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.376013][T13515] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.385578][T13515] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.511999][T14381] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 321.465969][T14325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.703840][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.086695][T14419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2104'. [ 323.863662][ T5836] Bluetooth: hci6: command tx timeout [ 325.136617][T14422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.309177][T14450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2116'. [ 325.318935][T14450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2116'. [ 325.337936][T14450] netlink: 'syz.1.2116': attribute type 10 has an invalid length. [ 325.435713][T14450] veth0_vlan: left promiscuous mode [ 325.475872][T14450] veth0_vlan: entered promiscuous mode [ 325.497067][T14450] team0: Device veth0_vlan failed to register rx_handler [ 325.605230][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2113'. [ 325.726850][T14468] syzkaller0: entered promiscuous mode [ 325.732582][T14468] syzkaller0: entered allmulticast mode [ 325.857728][T14473] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2121'. [ 325.880717][T14473] nbd: must specify at least one socket [ 326.385012][T14491] netlink: 'syz.6.2123': attribute type 1 has an invalid length. [ 326.475929][T14497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.104568][T14508] netlink: 'syz.1.2126': attribute type 1 has an invalid length. [ 327.160606][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2126'. [ 327.172372][T14509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2126'. [ 327.812457][T14491] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 327.855714][T14508] bond6: entered promiscuous mode [ 327.874664][T14508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 327.929415][T14510] bond6: (slave bridge6): making interface the new active one [ 327.940587][T14510] bridge6: entered promiscuous mode [ 327.948957][T14510] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 328.074788][T14516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.345641][T14539] unsupported nlmsg_type 40 [ 328.479379][T14544] smc: net device team0 applied user defined pnetid SYZ2 [ 328.571391][T14546] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2138'. [ 328.630549][T14546] vlan4: entered allmulticast mode [ 328.651109][T14546] syz_tun: entered allmulticast mode [ 328.953477][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2144'. [ 329.383386][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 329.757875][T14608] Cannot find add_set index 65532 as target [ 331.880585][T14568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.107491][T14623] bond7: entered promiscuous mode [ 332.220587][T14633] syzkaller1: entered allmulticast mode [ 332.490087][T14653] netlink: 'syz.1.2160': attribute type 83 has an invalid length. [ 332.511783][T14658] netlink: 'syz.3.2161': attribute type 15 has an invalid length. [ 332.540002][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 332.634094][T14658] netlink: 'syz.3.2161': attribute type 15 has an invalid length. [ 332.717896][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 333.071195][T14680] netlink: 'syz.4.2167': attribute type 29 has an invalid length. [ 333.102015][T14680] netlink: 'syz.4.2167': attribute type 29 has an invalid length. [ 333.124739][T14680] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2167'. [ 333.145315][T14680] unsupported nla_type 58 [ 333.204895][T14680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2167'. [ 333.462186][T14701] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2175'. [ 333.498139][T14698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.534476][T14701] bridge0: port 1(ipvlan2) entered blocking state [ 333.541309][T14701] bridge0: port 1(ipvlan2) entered disabled state [ 333.573722][T14701] ipvlan2: entered allmulticast mode [ 333.596449][T14701] bridge0: entered allmulticast mode [ 333.622160][T14701] ipvlan2: left allmulticast mode [ 333.637762][T14701] bridge0: left allmulticast mode [ 333.660011][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2176'. [ 335.682288][T14757] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2188'. [ 336.036746][T14776] siw: device registration error -23 [ 336.180637][T14788] netlink: 'syz.5.2195': attribute type 1 has an invalid length. [ 336.213660][T14788] netlink: 'syz.5.2195': attribute type 2 has an invalid length. [ 336.318884][T14793] openvswitch: netlink: IP tunnel dst address not specified [ 336.320584][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'. [ 336.368592][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'. [ 336.382139][T14793] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2198'. [ 336.456398][T14793] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.463748][T14793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.522810][T14797] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 336.554320][T14797] netlink: 'syz.3.2199': attribute type 3 has an invalid length. [ 336.691029][T14804] bridge_slave_0: left allmulticast mode [ 336.704711][T14804] bridge_slave_0: left promiscuous mode [ 336.711925][T14804] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.736448][T14804] bridge_slave_1: left allmulticast mode [ 336.742342][T14804] bridge_slave_1: left promiscuous mode [ 336.758049][T14804] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.817826][T14804] team0: Port device team_slave_0 removed [ 336.866650][T14804] team0: Port device team_slave_1 removed [ 336.880830][T14804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.890223][T14804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.902206][T14804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.910529][T14804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.920707][T14804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 336.952643][T14809] netlink: 'syz.3.2203': attribute type 2 has an invalid length. [ 336.981021][T14810] team0: Mode changed to "random" [ 337.173897][T14823] 8021q: adding VLAN 0 to HW filter on device bond8 [ 337.513609][T14829] bond8: (slave veth3): Enslaving as an active interface with a down link [ 337.529641][T14823] bond8: (slave veth0_to_bond): making interface the new active one [ 337.618212][T14823] veth0_to_bond: entered promiscuous mode [ 337.647510][T14823] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 338.131429][T14886] __nla_validate_parse: 80 callbacks suppressed [ 338.131450][T14886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2216'. [ 338.228586][T14886] validate_nla: 3 callbacks suppressed [ 338.228609][T14886] netlink: 'syz.1.2216': attribute type 2 has an invalid length. [ 338.312912][T14893] ±ÿ=–a²š«: renamed from lo [ 338.543446][T14905] tipc: Trying to set illegal importance in message [ 338.573823][T14898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 338.593610][T14909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.603026][T14910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.669015][T14898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2219'. [ 338.718430][T14916] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2225'. [ 338.744043][T14916] A link change request failed with some changes committed already. Interface 26±ÿ=–a²š« may have been left with an inconsistent configuration, please check. [ 338.822998][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2226'. [ 338.984959][T14922] bond8: entered promiscuous mode [ 338.990553][T14922] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.065562][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 339.400015][T14945] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 339.416762][T14945] bond7 (unregistering): Released all slaves [ 339.447804][T14955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 339.646095][T14957] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2234'. [ 340.525893][T15008] netlink: 54 bytes leftover after parsing attributes in process `syz.3.2250'. [ 340.539236][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 340.748811][T15016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2253'. [ 340.797595][T15016] bond9: Unable to set up delay as MII monitoring is disabled [ 340.809360][T15016] bond9 (unregistering): Released all slaves [ 341.210952][T15040] ip6tnl1: entered promiscuous mode [ 341.218725][T15040] netlink: 'syz.5.2259': attribute type 3 has an invalid length. [ 341.323785][T15044] syzkaller0: entered promiscuous mode [ 341.329405][T15044] syzkaller0: entered allmulticast mode [ 341.685656][T15056] netlink: 'syz.5.2264': attribute type 64 has an invalid length. [ 341.911724][T15068] tipc: Started in network mode [ 341.920103][T15068] tipc: Node identity de59cb92f4c9, cluster identity 4711 [ 341.929149][T15068] tipc: Enabled bearer , priority 0 [ 341.946836][T15068] +: renamed from syzkaller0 [ 341.959509][T15068] tipc: Disabling bearer [ 342.492992][ T5836] Bluetooth: hci6: link tx timeout [ 342.499505][ T5836] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.709741][T15100] IPv6: sit4: Disabled Multicast RS [ 342.735963][T15100] sit4: entered allmulticast mode [ 342.821614][T15103] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 342.833108][T15103] bond9 (unregistering): Released all slaves [ 342.869230][ T5830] Bluetooth: hci6: link tx timeout [ 342.875152][ T5830] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.896133][ T5830] Bluetooth: hci6: link tx timeout [ 342.901385][ T5830] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.923645][ T5830] Bluetooth: hci6: link tx timeout [ 342.928873][ T5830] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 343.168909][T15115] __nla_validate_parse: 11 callbacks suppressed [ 343.168933][T15115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2282'. [ 343.202662][T15115] macvtap2: entered allmulticast mode [ 343.207330][T15117] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 343.208564][T15115] veth0_macvtap: entered allmulticast mode [ 343.239419][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2284'. [ 343.331541][T15120] vxcan0: entered allmulticast mode [ 343.551678][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2286'. [ 343.708228][ T5830] Bluetooth: hci6: link tx timeout [ 343.713996][ T5830] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 343.760220][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2289'. [ 344.177081][T15167] x_tables: unsorted underflow at hook 1 [ 344.199320][T15167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2294'. [ 344.236177][T15167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2294'. [ 344.265110][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2294'. [ 344.272120][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2295'. [ 344.303458][T15169] netlink: 'syz.3.2295': attribute type 7 has an invalid length. [ 344.344583][T15175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2295'. [ 344.374684][T15169] netlink: 'syz.3.2295': attribute type 8 has an invalid length. [ 344.392850][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'. [ 344.432071][T15180] raw_sendmsg: syz.1.2297 forgot to set AF_INET. Fix it! [ 344.563694][ T5830] Bluetooth: hci6: link tx timeout [ 344.567778][T15188] netlink: 'syz.6.2299': attribute type 1 has an invalid length. [ 344.568953][ T5830] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 344.586248][ T5830] Bluetooth: hci6: command 0x0406 tx timeout [ 344.732752][T15188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.807387][T15192] bond1: (slave veth3): Enslaving as an active interface with a down link [ 344.865874][T10503] udevd[10503]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 344.895542][T15196] syzkaller0: entered promiscuous mode [ 344.906030][T15196] syzkaller0: entered allmulticast mode [ 344.943968][T15188] bond1: (slave gretap1): making interface the new active one [ 344.963104][T15188] gretap1: entered promiscuous mode [ 344.992465][T15188] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 345.012525][T15200] macvlan2: entered promiscuous mode [ 345.018657][T15200] macvlan2: entered allmulticast mode [ 345.028198][T15200] bond1: entered promiscuous mode [ 345.060465][T15200] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 345.076005][T15200] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 345.093764][T15200] bond1: left promiscuous mode [ 345.114767][T15206] tipc: Started in network mode [ 345.119710][T15206] tipc: Node identity , cluster identity 4711 [ 345.126561][T15206] tipc: Failed to obtain node identity [ 345.132165][T15206] tipc: Enabling of bearer rejected, failed to enable media [ 345.383701][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 345.465241][T15228] nbd: must specify a size in bytes for the device [ 345.472197][T15229] netlink: 'syz.6.2311': attribute type 2 has an invalid length. [ 346.221461][T15267] IPv6: addrconf: prefix option has invalid lifetime [ 346.510821][T15278] netlink: 'syz.1.2327': attribute type 1 has an invalid length. [ 346.540919][T15278] netlink: 'syz.1.2327': attribute type 1 has an invalid length. [ 346.597922][T15286] netlink: 'syz.5.2329': attribute type 11 has an invalid length. [ 346.655813][T15286] xt_l2tp: unknown flags: 10 [ 346.835975][T15299] netlink: 'syz.5.2334': attribute type 3 has an invalid length. [ 346.894631][T15297] sit0: Caught tx_queue_len zero misconfig [ 346.919358][T15305] syzkaller0: entered promiscuous mode [ 346.925189][T15305] syzkaller0: entered allmulticast mode [ 347.034910][T15312] netlink: 'syz.3.2339': attribute type 1 has an invalid length. [ 347.059939][T15312] ip6t_srh: unknown srh match flags 5F28 [ 347.322444][T15329] gretap0: entered promiscuous mode [ 347.344085][T15329] vlan2: entered promiscuous mode [ 347.568831][T15343] bond0: entered promiscuous mode [ 347.598777][T15343] bond_slave_0: entered promiscuous mode [ 347.613802][T15343] bond_slave_1: entered promiscuous mode [ 347.621366][T15343] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 347.629982][T15343] bridge0: entered promiscuous mode [ 347.818246][T15362] syz.5.2353 uses old SIOCAX25GETINFO [ 347.825236][T15360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.952858][T15369] syzkaller0: entered promiscuous mode [ 347.959142][T15369] syzkaller0: entered allmulticast mode [ 348.260219][T15385] __nla_validate_parse: 14 callbacks suppressed [ 348.260245][T15385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2360'. [ 348.290053][T15385] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2360'. [ 348.370904][T15391] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2361'. [ 348.370904][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2361'. [ 348.370946][T15391] netlink: 'syz.5.2361': attribute type 7 has an invalid length. [ 348.380662][T15390] netlink: 'syz.5.2361': attribute type 7 has an invalid length. [ 348.406349][T15390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2361'. [ 348.410021][T15391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2361'. [ 348.529961][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2363'. [ 348.588712][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 348.667700][T15406] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2367'. [ 348.747082][T13515] veth0_to_bond: left promiscuous mode [ 348.759240][T15411] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2369'. [ 349.575901][T15454] team0: Cannot enslave team device to itself [ 349.996360][T15477] delete_channel: no stack [ 350.366599][T15490] syzkaller1: entered promiscuous mode [ 350.372337][T15490] syzkaller1: entered allmulticast mode [ 350.452312][T15498] xt_ipcomp: unknown flags 1D [ 352.479685][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 352.488188][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 352.496183][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 352.505564][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.513926][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 352.657618][T15519] chnl_net:caif_netlink_parms(): no params data found [ 352.726275][T15519] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.733535][T15519] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.740706][T15519] bridge_slave_0: entered allmulticast mode [ 352.748890][T15519] bridge_slave_0: entered promiscuous mode [ 352.756961][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.765503][T15519] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.772850][T15519] bridge_slave_1: entered allmulticast mode [ 352.780528][T15519] bridge_slave_1: entered promiscuous mode [ 352.808947][T15519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.820766][T15519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.850919][T15519] team0: Port device team_slave_0 added [ 352.858870][T15519] team0: Port device team_slave_1 added [ 352.885470][T15519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.892449][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.918999][T15519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.931140][T15519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.938106][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.964743][T15519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.008400][T15519] hsr_slave_0: entered promiscuous mode [ 353.015048][T15519] hsr_slave_1: entered promiscuous mode [ 353.021102][T15519] debugfs: 'hsr0' already exists in 'hsr' [ 353.027089][T15519] Cannot create hsr debugfs directory [ 353.348262][T15493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.359051][T15510] validate_nla: 1 callbacks suppressed [ 353.359073][T15510] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 353.384020][T15510] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 353.401944][T15519] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 353.452510][T15519] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 353.527504][T15519] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 353.557760][T15519] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 353.566628][T15533] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 353.585191][T15533] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 353.861741][T15558] __nla_validate_parse: 80 callbacks suppressed [ 353.861857][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2410'. [ 353.880487][T15558] netlink: 'syz.3.2410': attribute type 8 has an invalid length. [ 353.894676][T15559] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 353.935512][T15519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.967111][T15519] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.981587][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.988821][T13511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.028937][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.036137][T13511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.490397][T15519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.585430][ T5836] Bluetooth: hci7: command tx timeout [ 354.977258][T15609] netlink: 'syz.5.2421': attribute type 75 has an invalid length. [ 355.047573][T15601] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 355.059562][T15601] bond9 (unregistering): Released all slaves [ 355.148991][T15609] syzkaller0: entered promiscuous mode [ 355.155528][T15609] syzkaller0: entered allmulticast mode [ 355.191807][T15519] veth0_vlan: entered promiscuous mode [ 355.226725][T15519] veth1_vlan: entered promiscuous mode [ 355.339831][T15519] veth0_macvtap: entered promiscuous mode [ 355.359922][T15519] veth1_macvtap: entered promiscuous mode [ 355.395927][T15622] netlink: 'syz.1.2422': attribute type 11 has an invalid length. [ 355.399969][T15519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.420741][T15519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.425664][T15622] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2422'. [ 355.456468][T11469] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.466634][T11469] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.479246][T11469] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.488673][T11469] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.114159][T11469] gretap1: left promiscuous mode [ 356.663447][ T5836] Bluetooth: hci7: command tx timeout [ 357.276798][T15572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.502502][T13511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.512260][T15633] x_tables: duplicate underflow at hook 1 [ 357.538368][T13511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.623031][T15635] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2425'. [ 357.675365][T13516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.705943][T13516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.967051][T15658] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2429'. [ 357.971122][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2428'. [ 358.334795][T15676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2431'. [ 358.367754][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 358.392332][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 358.441684][T15681] xt_bpf: check failed: parse error [ 358.459471][T15681] bond0: (slave rose0): Enslaving as an active interface with an up link [ 358.547718][T15681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.743340][ T5836] Bluetooth: hci7: command tx timeout [ 359.039054][T15714] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 359.341907][T15744] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2442'. [ 360.823697][ T5836] Bluetooth: hci7: command tx timeout [ 361.670373][T15692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.858818][T15764] netlink: 'syz.7.2446': attribute type 1 has an invalid length. [ 361.952503][T15776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 361.967048][T15777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 362.118096][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 362.775264][T15811] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2459'. [ 362.842879][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 362.926639][T15819] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2461'. [ 363.165010][T15830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2462'. [ 363.204630][T15830] syzkaller1: entered promiscuous mode [ 363.210358][T15830] syzkaller1: entered allmulticast mode [ 363.582909][T15844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2467'. [ 363.741303][T15851] »»»»»»: renamed from bridge_slave_0 (while UP) [ 363.835518][T15853] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2470'. [ 363.845842][T15853] netlink: 'syz.1.2470': attribute type 2 has an invalid length. [ 365.619891][T15807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.839134][T15874] __nla_validate_parse: 1 callbacks suppressed [ 365.839156][T15874] netlink: 536 bytes leftover after parsing attributes in process `syz.1.2477'. [ 366.114897][T15882] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 366.130248][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.248733][T15903] pimreg: entered allmulticast mode [ 366.311000][T15911] veth0: entered promiscuous mode [ 366.335125][T15909] veth0: left promiscuous mode [ 366.498301][T15921] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2486'. [ 366.541159][T15921] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2486'. [ 366.786450][T15938] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 367.864065][ T5830] Bluetooth: hci7: command 0x0405 tx timeout [ 369.261962][T15906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.303906][T15977] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2495'. [ 369.519462][T15986] pimreg: entered allmulticast mode [ 369.633479][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2501'. [ 369.720969][T15998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.021963][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2507'. [ 370.048612][T16020] xfrm0: entered promiscuous mode [ 370.071952][T16020] xfrm0: entered allmulticast mode [ 370.641242][T16054] netlink: 'syz.1.2515': attribute type 1 has an invalid length. [ 370.803871][T16066] pimreg: entered allmulticast mode [ 370.910041][T16062] syzkaller1: entered promiscuous mode [ 370.920237][T16062] syzkaller1: entered allmulticast mode [ 371.609213][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2527'. [ 372.626041][T16121] tc_dump_action: action bad kind [ 372.671668][T16123] Cannot find add_set index 65532 as target [ 372.682701][T16123] netlink: 13 bytes leftover after parsing attributes in process `syz.5.2534'. [ 373.071900][T16137] netlink: 'syz.5.2536': attribute type 4 has an invalid length. [ 373.080329][T16137] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2536'. [ 374.417895][T16091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.651668][T16142] bond0: Caught tx_queue_len zero misconfig [ 374.677764][T16147] sch_fq: defrate 0 ignored. [ 374.727168][T16146] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2541'. [ 374.753295][T16146] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.762418][T16146] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.971706][T16160] syzkaller0: entered allmulticast mode [ 375.136418][T16172] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2549'. [ 375.645756][T16195] bond7: Removing last arp target with arp_interval on [ 375.715473][T16205] bond9: (slave gre0): Device is not bonding slave [ 375.723982][T16205] bond9: option active_slave: invalid value (gre0) [ 375.743799][T16205] bond9 (unregistering): Released all slaves [ 376.538789][T16255] tipc: Started in network mode [ 376.545409][T16255] tipc: Node identity 4, cluster identity 4711 [ 376.552130][T16255] tipc: Node number set to 4 [ 376.608129][T16255] netlink: 'syz.1.2571': attribute type 2 has an invalid length. [ 376.632749][T16258] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 376.848537][T16273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2576'. [ 377.146891][T16292] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 377.183375][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 377.183742][T16292] netlink: 'syz.7.2579': attribute type 1 has an invalid length. [ 377.209784][T16292] netlink: 30 bytes leftover after parsing attributes in process `syz.7.2579'. [ 377.441535][T16304] netlink: 'syz.3.2586': attribute type 21 has an invalid length. [ 377.455796][T16300] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2584'. [ 377.496157][T16300] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2584'. [ 377.669916][T16320] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2588'. [ 377.859327][T16327] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 377.929241][T16327] netlink: 'syz.3.2591': attribute type 16 has an invalid length. [ 377.947038][T16331] bridge7: entered promiscuous mode [ 377.952400][T16331] bridge7: entered allmulticast mode [ 377.971774][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 377.983863][T16338] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2591'. [ 378.033417][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.047530][T16343] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2596'. [ 378.082243][T16343] PKCS7: Unknown OID: [4] (bad) [ 378.093529][T16343] PKCS7: Only support pkcs7_signedData type [ 378.516434][T16365] bond0: entered promiscuous mode [ 378.526372][T16365] bond_slave_0: entered promiscuous mode [ 378.536994][T16365] bond_slave_1: entered promiscuous mode [ 378.546744][T16369] netlink: 'syz.3.2604': attribute type 1 has an invalid length. [ 379.018361][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2613'. [ 379.102502][T16400] pimreg: entered allmulticast mode [ 379.132173][T16402] netlink: 'syz.6.2617': attribute type 1 has an invalid length. [ 379.259884][T16412] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 379.310050][T16412] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 379.338273][T16412] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 381.218982][T16521] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 381.400761][T16544] netlink: 'syz.6.2648': attribute type 1 has an invalid length. [ 381.418124][T16544] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3692587449/3692587451 [ 381.811395][T16553] veth1_macvtap: left promiscuous mode [ 381.817197][T16553] macsec0: entered promiscuous mode [ 381.822440][T16553] macsec0: entered allmulticast mode [ 382.478214][T16564] pimreg: left allmulticast mode [ 382.515590][T16564] __nla_validate_parse: 7 callbacks suppressed [ 382.515610][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2652'. [ 382.625459][T16569] erspan0: entered promiscuous mode [ 382.641503][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2653'. [ 382.660206][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2653'. [ 383.274054][T16475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.553810][T16592] netlink: 'syz.1.2658': attribute type 39 has an invalid length. [ 383.618745][T16594] netlink: 'syz.6.2661': attribute type 21 has an invalid length. [ 383.644829][T16594] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2661'. [ 383.843892][T16605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2663'. [ 383.915105][T16606] netlink: 'syz.7.2665': attribute type 4 has an invalid length. [ 383.918604][T16610] pimreg: entered allmulticast mode [ 383.929942][T16606] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2665'. [ 384.098191][T16617] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 384.172375][T16625] netlink: 'syz.7.2670': attribute type 1 has an invalid length. [ 384.211472][T16625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.226317][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2670'. [ 384.236311][T16633] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 384.316003][T16633] bond2: entered allmulticast mode [ 386.343707][ T5836] Bluetooth: hci7: command 0x0405 tx timeout [ 387.120139][T16619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.361776][T16673] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2684'. [ 387.390122][T16675] IPVS: set_ctl: invalid protocol: 94 127.0.0.1:20001 [ 387.762261][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2690'. [ 387.856296][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2691'. [ 387.925406][T16691] syzkaller0: entered promiscuous mode [ 387.944965][T16691] syzkaller0: entered allmulticast mode [ 388.096081][T16691] netlink: 'syz.5.2691': attribute type 9 has an invalid length. [ 391.087153][T16713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.502975][T16771] bond9: (slave bond_slave_1): Device is not our slave [ 391.546115][T16771] bond9: option active_slave: invalid value (bond_slave_1) [ 391.564991][T16771] bond9 (unregistering): Released all slaves [ 391.590053][T16784] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2712'. [ 391.632811][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2712'. [ 394.965112][T16800] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.376153][T16842] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2734'. [ 395.961937][T16874] lo speed is unknown, defaulting to 1000 [ 396.029008][T16876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.047087][T16874] lo speed is unknown, defaulting to 1000 [ 396.076799][T16874] lo speed is unknown, defaulting to 1000 [ 396.164730][T16874] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 396.209485][T16874] lo speed is unknown, defaulting to 1000 [ 396.221878][T16874] lo speed is unknown, defaulting to 1000 [ 396.231137][T16874] lo speed is unknown, defaulting to 1000 [ 396.242094][T16874] lo speed is unknown, defaulting to 1000 [ 396.252484][T16874] lo speed is unknown, defaulting to 1000 [ 396.262432][T16874] lo speed is unknown, defaulting to 1000 [ 396.271948][T16874] lo speed is unknown, defaulting to 1000 [ 396.281173][T16874] lo speed is unknown, defaulting to 1000 [ 396.321418][T16854] lo speed is unknown, defaulting to 1000 [ 398.680082][T16863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.885923][T16891] atomic_op ffff888095b00198 conn xmit_atomic 0000000000000000 [ 398.916704][T16897] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2749'. [ 399.164282][T16908] netlink: 'syz.3.2753': attribute type 5 has an invalid length. [ 399.292552][T16915] netlink: 'syz.7.2756': attribute type 2 has an invalid length. [ 399.318605][T16915] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2756'. [ 399.372666][T16919] ipvlan1: left allmulticast mode [ 399.770948][T16944] netlink: 'syz.6.2763': attribute type 29 has an invalid length. [ 399.789079][T16944] syzkaller0: entered promiscuous mode [ 399.796874][T16944] syzkaller0: entered allmulticast mode [ 399.805593][T16944] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2763'. [ 399.817411][T16944] netlink: 'syz.6.2763': attribute type 29 has an invalid length. [ 402.325976][T16919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.405854][T16951] xt_cgroup: invalid path, errno=-2 [ 402.586534][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2768'. [ 402.634222][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2768'. [ 402.706318][T15733] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.717170][T16956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2768'. [ 402.736666][T15733] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.753926][T15733] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.762774][T16956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2768'. [ 402.822895][T15733] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.028152][T15736] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 403.615542][T16966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 403.856099][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2780'. [ 404.241943][ T9368] IPVS: starting estimator thread 0... [ 404.334523][T17045] IPVS: using max 26 ests per chain, 62400 per kthread [ 406.183912][ T31] INFO: task syz.2.1540:12301 blocked for more than 143 seconds. [ 406.194302][ T31] Not tainted syzkaller #0 [ 406.199785][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 406.208776][ T31] task:syz.2.1540 state:D stack:25816 pid:12301 tgid:12300 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 406.221164][ T31] Call Trace: [ 406.224588][ T31] [ 406.227539][ T31] __schedule+0x15dd/0x52d0 [ 406.232205][ T31] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 406.238352][ T31] ? __pfx___schedule+0x10/0x10 [ 406.243670][ T31] ? schedule+0x90/0x360 [ 406.247945][ T31] schedule+0x164/0x360 [ 406.252098][ T31] schedule_preempt_disabled+0x13/0x30 [ 406.257664][ T31] __mutex_lock+0x7fe/0x1300 [ 406.262280][ T31] ? __mutex_lock+0x5ac/0x1300 [ 406.267172][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 406.274214][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 406.279278][ T31] ? stack_trace_save+0xa9/0x100 [ 406.284449][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 406.289846][ T31] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 406.296389][ T31] ? kasan_save_track+0x4f/0x80 [ 406.301645][ T31] ? kasan_save_track+0x3e/0x80 [ 406.306902][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 406.311701][ T31] ? __alloc_skb+0x2c1/0x7d0 [ 406.316400][ T31] ? netlink_dump+0x1ef/0xe80 [ 406.321116][ T31] ? __netlink_dump_start+0x5cb/0x7e0 [ 406.326840][ T31] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 406.332786][ T31] ? genl_rcv_msg+0x5e8/0x7a0 [ 406.337947][ T31] ? netlink_rcv_skb+0x232/0x4b0 [ 406.342917][ T31] ? genl_rcv+0x28/0x40 [ 406.347226][ T31] ? netlink_unicast+0x80f/0x9b0 [ 406.352266][ T31] ? netlink_sendmsg+0x813/0xb40 [ 406.357258][ T31] ? ____sys_sendmsg+0x972/0x9f0 [ 406.362223][ T31] ? ___sys_sendmsg+0x2a5/0x360 [ 406.367400][ T31] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 406.372709][ T31] ? do_syscall_64+0x14d/0xf80 [ 406.377541][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.383960][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 406.390594][ T31] ? rcu_is_watching+0x15/0xb0 [ 406.395746][ T31] ? trace_kmalloc+0x2a/0x110 [ 406.400452][ T31] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 406.407596][ T31] genl_dumpit+0x10b/0x1b0 [ 406.412055][ T31] netlink_dump+0x722/0xe80 [ 406.416627][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 406.421687][ T31] ? genl_start+0x499/0x6c0 [ 406.426511][ T31] __netlink_dump_start+0x5cb/0x7e0 [ 406.431759][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 406.437600][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 406.443930][ T31] ? genl_get_cmd+0x4a8/0x930 [ 406.448650][ T31] ? __pfx_genl_start+0x10/0x10 [ 406.453825][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 406.458797][ T31] ? __pfx_genl_done+0x10/0x10 [ 406.463660][ T31] genl_rcv_msg+0x5e8/0x7a0 [ 406.468198][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.473370][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 406.479991][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 406.485237][ T31] netlink_rcv_skb+0x232/0x4b0 [ 406.490014][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 406.495095][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.500420][ T31] ? down_read+0x272/0x2e0 [ 406.505785][ T31] ? genl_rcv+0xd/0x40 [ 406.509893][ T31] genl_rcv+0x28/0x40 [ 406.514173][ T31] netlink_unicast+0x80f/0x9b0 [ 406.518976][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 406.524343][ T31] ? netlink_sendmsg+0x650/0xb40 [ 406.529300][ T31] ? skb_put+0x11b/0x210 [ 406.533628][ T31] netlink_sendmsg+0x813/0xb40 [ 406.538507][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.544111][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 406.549069][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 406.554400][ T31] ____sys_sendmsg+0x972/0x9f0 [ 406.559183][ T31] ? futex_unqueue+0x211/0x240 [ 406.564002][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.569314][ T31] ? import_iovec+0x73/0xa0 [ 406.574132][ T31] ___sys_sendmsg+0x2a5/0x360 [ 406.578870][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.584506][ T31] ? futex_wait+0x29a/0x380 [ 406.589176][ T31] ? __fget_files+0x2a/0x420 [ 406.593831][ T31] ? __fget_files+0x3a0/0x420 [ 406.598542][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 406.603860][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.609909][ T31] ? rcu_is_watching+0x15/0xb0 [ 406.614853][ T31] do_syscall_64+0x14d/0xf80 [ 406.619468][ T31] ? trace_irq_disable+0x3b/0x150 [ 406.624595][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.630684][ T31] ? clear_bhb_loop+0x40/0x90 [ 406.635657][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.641561][ T31] RIP: 0033:0x7fb40e39c819 [ 406.646067][ T31] RSP: 002b:00007fb40f186028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.654704][ T31] RAX: ffffffffffffffda RBX: 00007fb40e615fa0 RCX: 00007fb40e39c819 [ 406.662671][ T31] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000006 [ 406.671045][ T31] RBP: 00007fb40e432c91 R08: 0000000000000000 R09: 0000000000000000 [ 406.679095][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.687145][ T31] R13: 00007fb40e616038 R14: 00007fb40e615fa0 R15: 00007fffeefe7008 [ 406.695544][ T31] [ 406.698638][ T31] [ 406.698638][ T31] Showing all locks held in the system: [ 406.706495][ T31] 1 lock held by khungtaskd/31: [ 406.711921][ T31] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 406.721961][ T31] 2 locks held by getty/5583: [ 406.726937][ T31] #0: ffff8880364090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 406.736771][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 406.746967][ T31] 2 locks held by syz.0.879/9482: [ 406.752077][ T31] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.760585][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 406.770912][ T31] 3 locks held by syz.2.1540/12301: [ 406.776208][ T31] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.784740][ T31] #1: ffff8880576e36f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 406.795293][ T31] #2: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 406.805840][ T31] 2 locks held by syz.4.2206/14832: [ 406.811782][ T31] #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 406.820559][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 406.831166][T17017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.836439][ T31] 1 lock held by syz.5.2780/17016: [ 406.858892][ T31] 2 locks held by syz.3.2787/17035: [ 406.871385][ T31] 2 locks held by syz.6.2789/17040: [ 406.882860][ T31] 1 lock held by syz.1.2790/17042: [ 406.894472][ T31] 3 locks held by syz.7.2792/17050: [ 406.905914][ T31] 2 locks held by dhcpcd/17053: [ 406.918720][ T31] #0: ffff88807c3cc260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 406.929119][ T31] #1: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 406.941922][ T31] [ 406.944638][ T31] ============================================= [ 406.944638][ T31] [ 406.962665][ T31] NMI backtrace for cpu 0 [ 406.962685][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 406.962707][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 406.962717][ T31] Call Trace: [ 406.962725][ T31] [ 406.962734][ T31] dump_stack_lvl+0xe8/0x150 [ 406.962777][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 406.962807][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 406.962837][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 406.962870][ T31] sys_info+0x135/0x170 [ 406.962896][ T31] watchdog+0xfd9/0x1030 [ 406.962922][ T31] ? watchdog+0x21a/0x1030 [ 406.962950][ T31] kthread+0x388/0x470 [ 406.962971][ T31] ? __pfx_watchdog+0x10/0x10 [ 406.962986][ T31] ? __pfx_kthread+0x10/0x10 [ 406.963008][ T31] ret_from_fork+0x51e/0xb90 [ 406.963042][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 406.963067][ T31] ? __switch_to+0xc7d/0x1450 [ 406.963093][ T31] ? __pfx_kthread+0x10/0x10 [ 406.963113][ T31] ret_from_fork_asm+0x1a/0x30 [ 406.963157][ T31] [ 407.007657][ T5836] Bluetooth: hci6: link tx timeout [ 407.009522][ T31] Sending NMI from CPU 0 to CPUs 1: [ 407.014722][ T5836] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 407.090303][ C1] NMI backtrace for cpu 1 [ 407.090324][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 407.090342][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.090351][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 407.090376][ C1] Code: 1e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 52 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 407.090390][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 407.090406][ C1] RAX: 0000000000184ecf RBX: ffffffff819a913a RCX: 0000000080000001 [ 407.090418][ C1] RDX: 0000000000000001 RSI: ffffffff8def989e RDI: ffffffff8c27cb00 [ 407.090429][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 407.090441][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 407.090452][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 1ffff11003ad9000 [ 407.090463][ C1] FS: 0000000000000000(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 407.090476][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.090487][ C1] CR2: 00007f53bf7e92f8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 407.090504][ C1] Call Trace: [ 407.090511][ C1] [ 407.090517][ C1] default_idle+0x9/0x20 [ 407.090536][ C1] default_idle_call+0x72/0xb0 [ 407.090557][ C1] do_idle+0x36a/0x5f0 [ 407.090582][ C1] ? __pfx_do_idle+0x10/0x10 [ 407.090607][ C1] cpu_startup_entry+0x43/0x60 [ 407.090628][ C1] start_secondary+0x101/0x110 [ 407.090647][ C1] common_startup_64+0x13e/0x147 [ 407.090671][ C1] [ 407.284628][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 407.291539][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 407.300693][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.310771][ T31] Call Trace: [ 407.314072][ T31] [ 407.317023][ T31] vpanic+0x56c/0xa60 [ 407.321124][ T31] ? __pfx___schedule+0x10/0x10 [ 407.326006][ T31] ? __pfx_vpanic+0x10/0x10 [ 407.330537][ T31] ? __pfx_console_unlock+0x10/0x10 [ 407.335774][ T31] panic+0xc5/0xd0 [ 407.339537][ T31] ? __pfx_panic+0x10/0x10 [ 407.344004][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 407.349423][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 407.355620][ T31] watchdog+0x1023/0x1030 [ 407.359982][ T31] ? watchdog+0x21a/0x1030 [ 407.364433][ T31] kthread+0x388/0x470 [ 407.368526][ T31] ? __pfx_watchdog+0x10/0x10 [ 407.373224][ T31] ? __pfx_kthread+0x10/0x10 [ 407.377838][ T31] ret_from_fork+0x51e/0xb90 [ 407.382458][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 407.387596][ T31] ? __switch_to+0xc7d/0x1450 [ 407.392308][ T31] ? __pfx_kthread+0x10/0x10 [ 407.396924][ T31] ret_from_fork_asm+0x1a/0x30 [ 407.401734][ T31] [ 407.405159][ T31] Kernel Offset: disabled [ 407.409588][ T31] Rebooting in 86400 seconds..